![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
File: dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft (raw, json)
Hash identifier: tbSPSsZA1/dxJdJHnSqtluM/QK8rFnXS+VsRaDSVu3g=
Subject key identifier: F0:7F:A4:57:7E:4F:A5:46:97:A9:2B:CD:60:FD:1E:7D:D7:38:F3:56
Authority key identifier: 74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
Certificate issuer: /CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Certificate serial: 01931AB863A2885883F5AA4C95A12F7E201A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
Manifest number: 0856
Signing time: Mon 11 Nov 2024 10:15:11 +0000
Manifest this update: Mon 11 Nov 2024 10:15:11 +0000
Manifest next update: Tue 12 Nov 2024 10:15:11 +0000
Files and hashes: 1: Z89K2JO1WJVCdM6katDbE5ar0CY.roa (hash: iuz/TK/9oL0R5JJGqafe35EW3PGygqQfI8P8wD5et5s=)
2: aHVJ8Uam0mRlP7K0rCkm3Dcm6_k.roa (hash: vKfh9q3YB2jfqfXA+smPDKG9YgSjzzmFeD7L+bwm1XA=)
3: dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl (hash: +8ZwNNDHk3kGnMlP70djeoZs+39X30XTmxexhfalkgc=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:1a:b8:63:a2:88:58:83:f5:aa:4c:95:a1:2f:7e:20:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=747c2e3a51489f1b01b4371758099bc85dd90f07
Validity
Not Before: Nov 11 10:15:11 2024 GMT
Not After : Nov 12 10:15:11 2024 GMT
Subject: CN=f07fa4577e4fa54697a92bcd60fd1e7dd738f356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:9e:88:32:48:e4:75:13:cb:76:73:41:e2:8c:
90:26:5a:17:24:c7:5b:84:02:41:f0:92:80:89:df:
3f:96:e6:42:a3:08:64:fb:d8:97:4e:ba:b7:49:3f:
01:a8:b5:32:36:ae:d8:f5:89:b7:d3:7a:55:3f:11:
a5:b3:71:52:82:b5:7c:3b:f0:57:d5:6a:fd:49:87:
4e:cf:f9:18:bc:7f:7d:4b:3c:60:d0:c5:a0:8e:2f:
97:be:32:bc:b8:42:9b:2a:aa:c3:14:9e:32:7d:c6:
bc:33:f5:7a:02:86:cd:ee:a3:bc:08:d1:d8:5d:ea:
1a:62:8e:00:04:55:2a:43:ef:cd:b0:a9:7a:29:dc:
22:7c:2a:02:4f:65:8c:23:07:5c:44:1f:fb:28:f9:
49:d4:8e:1b:37:2e:1c:14:10:d9:ca:1d:9e:32:14:
f8:16:49:71:1d:ca:aa:48:65:c1:49:d5:4b:07:5d:
a6:db:22:37:d4:52:92:cc:bb:c3:8e:69:48:27:e1:
23:80:29:2d:f6:dd:f5:b4:98:20:aa:26:67:c7:66:
d6:b0:c9:ae:ba:ee:3c:5e:b9:5b:98:b5:55:f4:dc:
1d:17:3f:21:e1:56:ea:36:8e:1b:08:db:c7:2d:5a:
fe:c9:2a:b0:da:d6:0d:b4:b7:fb:55:4f:5f:f8:33:
30:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:7F:A4:57:7E:4F:A5:46:97:A9:2B:CD:60:FD:1E:7D:D7:38:F3:56
X509v3 Authority Key Identifier:
keyid:74:7C:2E:3A:51:48:9F:1B:01:B4:37:17:58:09:9B:C8:5D:D9:0F:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dHwuOlFInxsBtDcXWAmbyF3ZDwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/9b240c-0d28-4690-89b4-1a8a4a38a805/1/dHwuOlFInxsBtDcXWAmbyF3ZDwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:0c:9e:ee:8c:2b:7a:0e:34:be:7d:eb:d7:43:e4:99:a1:2e:
b0:bb:b2:63:84:17:1f:f8:76:41:aa:4d:e2:cf:c6:3a:31:ca:
3d:e7:69:8b:43:39:c4:11:b9:71:f5:7b:e8:eb:d6:db:ad:1f:
29:22:26:a1:93:4f:1b:72:c5:63:ab:fe:b0:2c:da:79:84:6e:
af:29:5f:06:24:92:1e:14:04:f8:74:45:27:32:f4:e3:0c:b3:
dc:cb:72:15:20:40:ea:20:23:fc:37:cc:53:5a:09:d4:00:35:
8c:af:4d:cf:cb:ac:4f:1e:83:b8:1d:b3:31:61:3c:23:5a:b0:
35:c4:0f:96:1f:2b:fc:57:12:3b:95:9f:a6:0b:e7:4a:d5:56:
e1:69:68:a9:52:3b:16:30:34:37:f6:e0:bb:79:ef:1a:38:29:
13:1b:2c:ec:ae:55:9c:02:01:08:0a:a9:a5:c8:6a:4b:79:aa:
af:c3:19:38:ff:e6:dd:89:14:44:45:72:42:d9:ce:67:cc:92:
a6:1d:8e:7c:2d:47:68:50:c9:1a:5c:f5:59:07:d3:63:2d:78:
fe:33:9f:09:cd:5f:91:9f:ab:5b:12:79:05:47:b4:0b:06:c7:
a1:b8:a8:c2:f4:51:67:50:31:32:ce:52:68:88:34:31:2f:2b:
52:a5:6f:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZMauGOiiFiD9apMlaEvfiAaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0N2MyZTNhNTE0ODlmMWIwMWI0MzcxNzU4MDk5YmM4NWRk
OTBmMDcwHhcNMjQxMTExMTAxNTExWhcNMjQxMTEyMTAxNTExWjAzMTEwLwYDVQQD
EyhmMDdmYTQ1NzdlNGZhNTQ2OTdhOTJiY2Q2MGZkMWU3ZGQ3MzhmMzU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJ6IMkjkdRPLdnNB4oyQJloXJMdb
hAJB8JKAid8/luZCowhk+9iXTrq3ST8BqLUyNq7Y9Ym303pVPxGls3FSgrV8O/BX
1Wr9SYdOz/kYvH99Szxg0MWgji+XvjK8uEKbKqrDFJ4yfca8M/V6AobN7qO8CNHY
XeoaYo4ABFUqQ+/NsKl6KdwifCoCT2WMIwdcRB/7KPlJ1I4bNy4cFBDZyh2eMhT4
FklxHcqqSGXBSdVLB12m2yI31FKSzLvDjmlIJ+EjgCkt9t31tJggqiZnx2bWsMmu
uu48XrlbmLVV9NwdFz8h4VbqNo4bCNvHLVr+ySqw2tYNtLf7VU9f+DMwSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPB/pFd+T6VGl6krzWD9Hn3XOPNWMB8GA1UdIwQY
MBaAFHR8LjpRSJ8bAbQ3F1gJm8hd2Q8HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85YjI0MGMtMGQyOC00NjkwLTg5YjQt
MWE4YTRhMzhhODA1LzEvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85YjI0MGMtMGQyOC00NjkwLTg5YjQtMWE4YTRhMzhhODA1
LzEvZEh3dU9sRklueHNCdERjWFdBbWJ5RjNaRHdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYwye7owr
eg40vn3r10PkmaEusLuyY4QXH/h2QapN4s/GOjHKPedpi0M5xBG5cfV76OvW260f
KSImoZNPG3LFY6v+sCzaeYRurylfBiSSHhQE+HRFJzL04wyz3MtyFSBA6iAj/DfM
U1oJ1AA1jK9Nz8usTx6DuB2zMWE8I1qwNcQPlh8r/FcSO5WfpgvnStVW4WloqVI7
FjA0N/bgu3nvGjgpExss7K5VnAIBCAqppchqS3mqr8MZOP/m3YkUREVyQtnOZ8yS
ph2OfC1HaFDJGlz1WQfTYy14/jOfCc1fkZ+rWxJ5BUe0CwbHobiowvRRZ1AxMs5S
aIg0MS8rUqVvaQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:27 2025 by rpki-client