![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.mft
File: gMb0xctwlXxS5KuLQX50bCkveyM.mft (raw, json)
Hash identifier: eYPN4IMB13nrAbsuQMwcHpJ1vlzVH7itdq9Nilyl1lI=
Subject key identifier: 96:BF:2A:00:FC:CF:5F:19:27:33:FD:E6:59:30:DB:3E:3E:73:6D:97
Authority key identifier: 80:C6:F4:C5:CB:70:95:7C:52:E4:AB:8B:41:7E:74:6C:29:2F:7B:23
Certificate issuer: /CN=80c6f4c5cb70957c52e4ab8b417e746c292f7b23
Certificate serial: 01890C7542CF588166C69DBEAEB650B344B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gMb0xctwlXxS5KuLQX50bCkveyM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.mft
Manifest number: 038B
Signing time: Fri 30 Jun 2023 13:19:18 +0000
Manifest this update: Fri 30 Jun 2023 13:19:18 +0000
Manifest next update: Sat 01 Jul 2023 13:19:18 +0000
Files and hashes: 1: gMb0xctwlXxS5KuLQX50bCkveyM.crl (hash: Bvkg0sM6ePkOs/EEZOxIFuWSC7+GVcBU6NVE7uoHNds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:0c:75:42:cf:58:81:66:c6:9d:be:ae:b6:50:b3:44:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80c6f4c5cb70957c52e4ab8b417e746c292f7b23
Validity
Not Before: Jun 30 13:19:18 2023 GMT
Not After : Jul 1 13:19:18 2023 GMT
Subject: CN=96bf2a00fccf5f192733fde65930db3e3e736d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:29:ca:70:f5:f5:4e:c2:e3:36:d8:79:51:b2:
1d:6e:74:3f:45:16:85:9b:d9:95:8b:c8:1e:29:ce:
d7:97:1f:b0:c0:49:50:d3:ba:45:63:53:4c:f6:01:
42:4f:5d:8b:9a:7c:e9:60:57:fb:60:3c:3b:87:8e:
bb:6f:62:a2:53:76:f6:40:f2:9b:bd:0f:87:68:c7:
89:2b:e6:06:83:70:5c:60:43:7b:2c:24:c0:2d:56:
43:59:b6:75:a5:e6:70:91:9c:b7:47:8c:cf:8b:a2:
70:72:77:fa:d2:da:cf:e4:20:48:b6:a3:30:19:b9:
ad:4b:08:fe:d4:b7:d4:66:32:03:7d:9b:d7:e7:7f:
e4:50:20:28:5d:04:aa:9f:cd:d7:47:7b:58:51:ca:
69:46:b7:75:98:70:28:32:48:c1:d2:cb:37:e6:9a:
66:72:37:17:5a:f8:25:7b:d4:78:88:a3:e3:a6:b4:
03:c3:f3:6b:07:be:38:fd:e0:39:c7:90:fe:bb:05:
20:a8:48:7b:2a:a1:77:a1:b6:03:89:80:b0:77:fa:
a3:0b:2f:8b:c5:db:10:2f:e6:2c:ec:27:3d:b3:ef:
1c:70:a4:60:cd:e7:a1:3e:09:ba:7c:fb:a7:3f:a3:
f1:42:a4:ea:b2:cb:fd:9e:64:4e:13:0c:46:4b:3f:
36:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:BF:2A:00:FC:CF:5F:19:27:33:FD:E6:59:30:DB:3E:3E:73:6D:97
X509v3 Authority Key Identifier:
keyid:80:C6:F4:C5:CB:70:95:7C:52:E4:AB:8B:41:7E:74:6C:29:2F:7B:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gMb0xctwlXxS5KuLQX50bCkveyM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/6986f9-ba0a-46a2-a78f-0f0778f8e7cc/1/gMb0xctwlXxS5KuLQX50bCkveyM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:9b:e4:83:ce:ba:d6:03:81:b5:06:10:a4:87:c9:8a:b0:4f:
5d:59:12:3c:61:78:3c:2c:c9:67:f5:c1:ae:ea:06:90:d9:64:
76:5b:22:d5:71:79:6b:e7:aa:e3:bf:cb:f5:97:cd:a7:ba:9f:
6e:99:a2:b2:a6:fb:14:6e:85:af:f9:8c:92:58:3f:07:42:c5:
c6:a6:77:ba:b9:a3:e4:58:d5:96:b1:68:1e:cc:6d:f3:0f:93:
86:20:94:04:a1:d8:9a:b0:f7:1f:f1:b7:ff:01:2a:a4:2d:ca:
ff:73:c7:a0:e2:ac:24:51:f1:a4:85:67:cf:8a:c2:95:45:bf:
73:a9:ca:10:53:91:24:63:31:74:28:d4:3b:1e:7b:7c:53:1c:
cf:e3:e3:c6:67:08:74:90:86:3f:fa:c6:6a:da:27:60:04:ca:
26:a3:ca:27:82:eb:68:f3:9e:c0:f5:c1:a9:26:7c:57:ce:7d:
58:b0:6b:c6:cb:d5:60:3e:40:25:b9:68:7c:a6:68:dd:df:40:
59:00:2f:db:82:c4:1f:14:59:ed:b4:56:b0:d3:ad:57:b8:de:
86:31:73:3a:5f:59:4b:17:46:63:13:55:7e:a6:fa:8b:df:08:
0c:9c:57:ca:4c:dd:65:0b:14:e1:1b:2a:df:00:76:45:27:67:
4b:63:3f:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYkMdULPWIFmxp2+rrZQs0S3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgwYzZmNGM1Y2I3MDk1N2M1MmU0YWI4YjQxN2U3NDZjMjky
ZjdiMjMwHhcNMjMwNjMwMTMxOTE4WhcNMjMwNzAxMTMxOTE4WjAzMTEwLwYDVQQD
Eyg5NmJmMmEwMGZjY2Y1ZjE5MjczM2ZkZTY1OTMwZGIzZTNlNzM2ZDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvCnKcPX1TsLjNth5UbIdbnQ/RRaF
m9mVi8geKc7Xlx+wwElQ07pFY1NM9gFCT12LmnzpYFf7YDw7h467b2KiU3b2QPKb
vQ+HaMeJK+YGg3BcYEN7LCTALVZDWbZ1peZwkZy3R4zPi6Jwcnf60trP5CBItqMw
GbmtSwj+1LfUZjIDfZvX53/kUCAoXQSqn83XR3tYUcppRrd1mHAoMkjB0ss35ppm
cjcXWvgle9R4iKPjprQDw/NrB744/eA5x5D+uwUgqEh7KqF3obYDiYCwd/qjCy+L
xdsQL+Ys7Cc9s+8ccKRgzeehPgm6fPunP6PxQqTqssv9nmROEwxGSz82VQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJa/KgD8z18ZJzP95lkw2z4+c22XMB8GA1UdIwQY
MBaAFIDG9MXLcJV8UuSri0F+dGwpL3sjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ01iMHhjdHdsWHhTNUt1TFFYNTBiQ2t2ZXlNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS82OTg2ZjktYmEwYS00NmEyLWE3OGYt
MGYwNzc4ZjhlN2NjLzEvZ01iMHhjdHdsWHhTNUt1TFFYNTBiQ2t2ZXlNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS82OTg2ZjktYmEwYS00NmEyLWE3OGYtMGYwNzc4ZjhlN2Nj
LzEvZ01iMHhjdHdsWHhTNUt1TFFYNTBiQ2t2ZXlNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD5vkg866
1gOBtQYQpIfJirBPXVkSPGF4PCzJZ/XBruoGkNlkdlsi1XF5a+eq47/L9ZfNp7qf
bpmisqb7FG6Fr/mMklg/B0LFxqZ3urmj5FjVlrFoHsxt8w+ThiCUBKHYmrD3H/G3
/wEqpC3K/3PHoOKsJFHxpIVnz4rClUW/c6nKEFORJGMxdCjUOx57fFMcz+PjxmcI
dJCGP/rGatonYATKJqPKJ4LraPOewPXBqSZ8V859WLBrxsvVYD5AJblofKZo3d9A
WQAv24LEHxRZ7bRWsNOtV7jehjFzOl9ZSxdGYxNVfqb6i98IDJxXykzdZQsU4Rsq
3wB2RSdnS2M/pQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 19:40:46 2024 by rpki-client on console-ams.rpki-client.org