![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.mft
File: VDsOblBlUEM1elUtS2wrMC3ll_A.mft (raw, json)
Hash identifier: eKW3itCxnTMsO8OqK63FMe0cHrYbrua6fgb3JkUdFjM=
Subject key identifier: 93:BF:4B:73:36:B9:EC:44:5E:3B:F9:E0:27:73:20:E9:C3:C0:F7:9C
Authority key identifier: 54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
Certificate issuer: /CN=543b0e6e50655043357a552d4b6c2b302de597f0
Certificate serial: 018C1905AB5F6B9F078DE742D69CCC443B4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.mft
Manifest number: 08AF
Signing time: Wed 29 Nov 2023 03:00:50 +0000
Manifest this update: Wed 29 Nov 2023 03:00:50 +0000
Manifest next update: Thu 30 Nov 2023 03:00:50 +0000
Files and hashes: 1: B4ePyl8zrlHMFntPTOIW1YNARmQ.roa (hash: NsYSHixU7ehjp7s5ABMDG2cR8f5hOjA7w8kyS5SW1bU=)
2: LX0teJV7lVYGlEE6RY8MQMXcse4.roa (hash: G8Uy8s6ucxbQergSbQ2vXHR2W8q0FgGh1XlIrNWbzwM=)
3: P47HD-jbwn01nyJVnKvVCTt8kYo.roa (hash: gQUi8QUtuYsKnqKMDfLtDl4j5BXdPwdSdnfNIh37w1g=)
4: VDsOblBlUEM1elUtS2wrMC3ll_A.crl (hash: EJU64YtRseXoiMPYO+kWZh2Rnw3FvQywnn7gFJy7VLI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:19:05:ab:5f:6b:9f:07:8d:e7:42:d6:9c:cc:44:3b:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543b0e6e50655043357a552d4b6c2b302de597f0
Validity
Not Before: Nov 29 03:00:50 2023 GMT
Not After : Nov 30 03:00:50 2023 GMT
Subject: CN=93bf4b7336b9ec445e3bf9e0277320e9c3c0f79c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:8e:5d:96:1a:2b:69:1f:42:03:af:30:ca:d6:
52:0c:77:f4:68:8d:32:9a:06:90:56:37:73:40:4c:
17:bc:5e:5d:3f:a9:7f:9e:03:6a:57:87:e0:af:72:
35:e8:db:ce:a8:cf:74:4f:56:ad:d3:c2:87:32:51:
39:45:03:cc:23:55:5f:47:ab:53:4c:95:e2:f9:c8:
74:4a:7a:af:b8:db:dd:da:98:b1:d7:df:e0:3a:b0:
45:2d:0b:1b:0e:05:b9:36:81:43:70:7f:f0:16:a5:
dd:2c:8a:e6:20:24:27:da:17:82:9a:49:4a:6b:41:
f6:4f:a9:5b:5f:22:cb:83:0d:c8:55:3e:5c:0e:4a:
f9:d9:bf:bd:f4:c8:01:0a:7a:73:38:c7:98:f3:f2:
6c:e3:17:65:96:55:8f:20:9c:ce:57:f2:64:ad:f8:
41:4b:27:46:4b:96:1c:1e:99:cf:36:3e:3e:34:4b:
d6:cd:17:83:e2:db:6f:a0:45:68:c8:a4:8b:f5:e6:
da:a2:14:75:96:09:40:71:0f:7f:02:2f:64:05:8b:
d3:c1:db:d7:3c:ea:52:46:18:9a:69:1d:72:f4:46:
9b:96:ce:11:e8:c2:61:38:e9:b6:52:4d:94:ca:71:
78:70:1c:23:47:3c:61:d4:b7:ee:cf:b0:7c:5e:00:
ba:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:BF:4B:73:36:B9:EC:44:5E:3B:F9:E0:27:73:20:E9:C3:C0:F7:9C
X509v3 Authority Key Identifier:
keyid:54:3B:0E:6E:50:65:50:43:35:7A:55:2D:4B:6C:2B:30:2D:E5:97:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDsOblBlUEM1elUtS2wrMC3ll_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/1c2a4a-0b62-4df3-99a3-54ec3e27129a/1/VDsOblBlUEM1elUtS2wrMC3ll_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:5d:4b:2c:e6:84:4b:34:ee:cf:c6:0c:d6:75:46:13:d9:b7:
ec:07:ec:8f:35:c2:eb:fe:48:10:a4:07:bd:9a:0c:13:ee:57:
84:ac:7f:cc:b3:76:0e:15:94:66:e9:78:7d:d1:9e:b9:c2:81:
bb:d9:6b:f3:39:33:b5:94:4b:39:90:66:2b:32:a8:e4:c2:20:
4f:b4:3a:b7:1b:1e:3d:a3:23:84:62:b2:42:0c:11:e5:7d:37:
b4:51:b2:45:44:4e:ce:90:d6:20:4c:9d:c7:bc:57:82:48:2e:
c8:ba:53:52:94:c6:1a:8d:7a:c6:f4:94:41:89:ca:d4:e9:fe:
57:e0:12:e2:21:03:32:7f:6f:52:af:42:7d:70:5a:5d:f0:c8:
ce:16:3c:12:a6:56:85:09:45:7b:40:47:e2:cf:61:51:ba:d8:
98:e3:86:e1:c1:f1:f8:7a:6a:95:45:40:8a:1d:f9:a1:94:91:
5e:d3:23:02:da:a4:52:07:4d:ce:c4:24:dc:e2:c2:af:30:ec:
c7:61:9a:2e:19:cd:17:66:69:cf:8f:2d:c4:b6:40:67:1d:7b:
4b:8c:28:3e:14:10:de:99:98:2a:54:e0:ac:76:de:60:d6:79:
ad:d9:8c:83:08:44:17:40:f6:ff:98:b7:85:1e:68:64:19:98:
4c:1b:0c:ec
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYwZBatfa58HjedC1pzMRDtKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2IwZTZlNTA2NTUwNDMzNTdhNTUyZDRiNmMyYjMwMmRl
NTk3ZjAwHhcNMjMxMTI5MDMwMDUwWhcNMjMxMTMwMDMwMDUwWjAzMTEwLwYDVQQD
Eyg5M2JmNGI3MzM2YjllYzQ0NWUzYmY5ZTAyNzczMjBlOWMzYzBmNzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgY5dlhoraR9CA68wytZSDHf0aI0y
mgaQVjdzQEwXvF5dP6l/ngNqV4fgr3I16NvOqM90T1at08KHMlE5RQPMI1VfR6tT
TJXi+ch0SnqvuNvd2pix19/gOrBFLQsbDgW5NoFDcH/wFqXdLIrmICQn2heCmklK
a0H2T6lbXyLLgw3IVT5cDkr52b+99MgBCnpzOMeY8/Js4xdlllWPIJzOV/JkrfhB
SydGS5YcHpnPNj4+NEvWzReD4ttvoEVoyKSL9ebaohR1lglAcQ9/Ai9kBYvTwdvX
POpSRhiaaR1y9Eabls4R6MJhOOm2Uk2UynF4cBwjRzxh1Lfuz7B8XgC6RwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJO/S3M2uexEXjv54CdzIOnDwPecMB8GA1UdIwQY
MBaAFFQ7Dm5QZVBDNXpVLUtsKzAt5ZfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkRzT2JsQmxVRU0xZWxVdFMyd3JNQzNsbF9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8xYzJhNGEtMGI2Mi00ZGYzLTk5YTMt
NTRlYzNlMjcxMjlhLzEvVkRzT2JsQmxVRU0xZWxVdFMyd3JNQzNsbF9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8xYzJhNGEtMGI2Mi00ZGYzLTk5YTMtNTRlYzNlMjcxMjlh
LzEvVkRzT2JsQmxVRU0xZWxVdFMyd3JNQzNsbF9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs11LLOaE
SzTuz8YM1nVGE9m37AfsjzXC6/5IEKQHvZoME+5XhKx/zLN2DhWUZul4fdGeucKB
u9lr8zkztZRLOZBmKzKo5MIgT7Q6txsePaMjhGKyQgwR5X03tFGyRUROzpDWIEyd
x7xXgkguyLpTUpTGGo16xvSUQYnK1On+V+AS4iEDMn9vUq9CfXBaXfDIzhY8EqZW
hQlFe0BH4s9hUbrYmOOG4cHx+HpqlUVAih35oZSRXtMjAtqkUgdNzsQk3OLCrzDs
x2GaLhnNF2Zpz48txLZAZx17S4woPhQQ3pmYKlTgrHbeYNZ5rdmMgwhEF0D2/5i3
hR5oZBmYTBsM7A==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:24:22 2025 by rpki-client