![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.mft
File: UcMyTA14hvX7F8yNJnLNJHqtImQ.mft (raw, json)
Hash identifier: 1Tt9BnJc6z6PkWY6iiXXKFiJFKCPPU9vFp86fEpIl7I=
Subject key identifier: 46:A7:CB:0B:8B:E7:53:52:EC:C5:FC:18:FA:D7:7E:E3:06:D6:0F:7E
Authority key identifier: 51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
Certificate issuer: /CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Certificate serial: 0192D14AB1FE2EB2B92D1EA13362C8E1E469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.mft
Manifest number: 132A
Signing time: Mon 28 Oct 2024 04:03:06 +0000
Manifest this update: Mon 28 Oct 2024 04:03:06 +0000
Manifest next update: Tue 29 Oct 2024 04:03:06 +0000
Files and hashes: 1: ORsbDDrXWVucACS-Banty9Z9Qb8.roa (hash: Z58tp30Knqain01m7cWxAjfBukdxn1vgNKbxUDVzpAw=)
2: UcMyTA14hvX7F8yNJnLNJHqtImQ.crl (hash: IDvZnGuVEkbkdnML6wWsVA06QTPIQI8oqb+ynYp9hwY=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:d1:4a:b1:fe:2e:b2:b9:2d:1e:a1:33:62:c8:e1:e4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51c3324c0d7886f5fb17cc8d2672cd247aad2264
Validity
Not Before: Oct 28 04:03:06 2024 GMT
Not After : Oct 29 04:03:06 2024 GMT
Subject: CN=46a7cb0b8be75352ecc5fc18fad77ee306d60f7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:da:69:69:34:7a:5d:8c:bb:b9:fc:0c:1e:e3:
29:9b:6e:8e:ed:69:f6:d6:62:8f:ed:83:a1:63:5a:
25:44:8c:ce:b9:63:4b:66:46:e2:b6:98:29:a6:67:
17:e6:e2:d5:ba:a3:f7:26:c9:e2:08:02:32:d7:cc:
0d:8b:e6:af:3e:31:79:6f:50:91:4a:e0:20:ca:48:
da:f4:bd:4e:d7:5b:96:3e:57:3b:c8:e9:b6:1d:73:
ab:11:86:45:77:07:bb:7c:46:cb:fa:92:cc:37:32:
84:da:b1:4f:05:f8:c6:06:05:32:d2:7a:c4:f3:5b:
5b:48:49:cc:43:6b:48:e9:67:d9:61:14:49:8c:bc:
ea:64:95:65:cd:0b:1e:4c:c7:e6:57:90:16:12:3c:
43:f5:64:3d:fe:c5:fe:41:cd:bd:02:67:3f:e9:ee:
8a:b3:fa:c0:74:3c:74:ab:e6:1b:49:02:f6:e6:75:
e7:29:03:f2:83:78:c7:5b:7a:6b:3b:f0:bd:97:ea:
3a:cc:7e:6e:f6:de:9b:94:0e:22:7c:69:ce:52:48:
7c:91:0c:88:8e:cf:dc:b6:f2:c9:2d:d9:27:f4:74:
d7:11:05:a4:cd:46:24:a2:a2:b6:a0:7e:4f:37:59:
f6:e6:89:4f:42:eb:1f:73:71:e5:1d:4d:e7:b9:d0:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:A7:CB:0B:8B:E7:53:52:EC:C5:FC:18:FA:D7:7E:E3:06:D6:0F:7E
X509v3 Authority Key Identifier:
keyid:51:C3:32:4C:0D:78:86:F5:FB:17:CC:8D:26:72:CD:24:7A:AD:22:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UcMyTA14hvX7F8yNJnLNJHqtImQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/2cc16e-74e4-41ea-abee-05aa5ed47741/1/UcMyTA14hvX7F8yNJnLNJHqtImQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:74:5d:0e:5f:fc:30:8d:f7:51:fb:23:4b:13:a9:f0:39:0c:
c3:e7:53:fd:ec:11:83:6b:60:2c:fc:64:6f:f7:32:10:fd:0b:
56:44:05:10:97:6a:52:a8:76:72:44:8e:7a:ae:c7:98:9c:bf:
e5:ea:d4:b7:13:52:2a:88:35:5e:4b:a3:fd:6c:2c:cb:71:2d:
67:be:cb:81:72:70:02:d2:fd:56:f5:47:9d:dc:7e:13:80:23:
cb:0e:13:5c:e6:c8:e6:b7:c2:1f:86:23:b0:db:6a:0f:81:38:
8c:b2:ac:c8:2c:3d:a3:a1:43:4e:e1:5b:94:c1:12:f9:f0:09:
4d:ef:8a:54:a1:51:b7:30:a8:21:64:39:11:47:94:18:56:a1:
aa:d5:6f:8a:4d:8b:63:96:af:61:75:bb:71:89:5e:b5:a3:20:
1e:2a:96:45:c8:2d:db:14:e9:1c:20:06:e1:d9:20:7a:eb:37:
ee:9c:6c:95:a5:bb:96:4f:e6:24:37:dd:f3:54:e9:73:98:bf:
a0:ca:ca:98:c3:c2:c5:61:d2:40:c3:c7:62:37:0c:8d:30:c6:
b4:ed:93:10:f7:10:68:d2:f8:e4:0b:42:b0:12:51:d0:69:11:
ab:d2:d5:3c:8b:57:2b:b1:49:41:97:a9:da:07:21:d3:81:b9:
7b:53:a0:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLRSrH+LrK5LR6hM2LI4eRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYzMzMjRjMGQ3ODg2ZjVmYjE3Y2M4ZDI2NzJjZDI0N2Fh
ZDIyNjQwHhcNMjQxMDI4MDQwMzA2WhcNMjQxMDI5MDQwMzA2WjAzMTEwLwYDVQQD
Eyg0NmE3Y2IwYjhiZTc1MzUyZWNjNWZjMThmYWQ3N2VlMzA2ZDYwZjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9ppaTR6XYy7ufwMHuMpm26O7Wn2
1mKP7YOhY1olRIzOuWNLZkbitpgppmcX5uLVuqP3JsniCAIy18wNi+avPjF5b1CR
SuAgykja9L1O11uWPlc7yOm2HXOrEYZFdwe7fEbL+pLMNzKE2rFPBfjGBgUy0nrE
81tbSEnMQ2tI6WfZYRRJjLzqZJVlzQseTMfmV5AWEjxD9WQ9/sX+Qc29Amc/6e6K
s/rAdDx0q+YbSQL25nXnKQPyg3jHW3prO/C9l+o6zH5u9t6blA4ifGnOUkh8kQyI
js/ctvLJLdkn9HTXEQWkzUYkoqK2oH5PN1n25olPQusfc3HlHU3nudAj+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEanywuL51NS7MX8GPrXfuMG1g9+MB8GA1UdIwQY
MBaAFFHDMkwNeIb1+xfMjSZyzSR6rSJkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWNNeVRBMTRodlg3Rjh5TkpuTE5KSHF0SW1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8yY2MxNmUtNzRlNC00MWVhLWFiZWUt
MDVhYTVlZDQ3NzQxLzEvVWNNeVRBMTRodlg3Rjh5TkpuTE5KSHF0SW1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8yY2MxNmUtNzRlNC00MWVhLWFiZWUtMDVhYTVlZDQ3NzQx
LzEvVWNNeVRBMTRodlg3Rjh5TkpuTE5KSHF0SW1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlXRdDl/8
MI33UfsjSxOp8DkMw+dT/ewRg2tgLPxkb/cyEP0LVkQFEJdqUqh2ckSOeq7HmJy/
5erUtxNSKog1Xkuj/Wwsy3EtZ77LgXJwAtL9VvVHndx+E4Ajyw4TXObI5rfCH4Yj
sNtqD4E4jLKsyCw9o6FDTuFblMES+fAJTe+KVKFRtzCoIWQ5EUeUGFahqtVvik2L
Y5avYXW7cYletaMgHiqWRcgt2xTpHCAG4dkgeus37pxslaW7lk/mJDfd81Tpc5i/
oMrKmMPCxWHSQMPHYjcMjTDGtO2TEPcQaNL45AtCsBJR0GkRq9LVPItXK7FJQZep
2gch04G5e1OgoQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:41 2025 by rpki-client