![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft
File: U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft (raw, json)
Hash identifier: dWnSpzHwd1ItrVdRVuSirWBLjOISAqvYHu3K9tQO3QY=
Subject key identifier: 02:70:D7:41:14:CF:D3:1F:63:54:56:56:81:D8:C4:70:DB:C2:9B:A2
Authority key identifier: 53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
Certificate issuer: /CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Certificate serial: 01894912453F7562330542C6BB09D86D5AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft
Manifest number: 0E2C
Signing time: Wed 12 Jul 2023 07:48:01 +0000
Manifest this update: Wed 12 Jul 2023 07:48:01 +0000
Manifest next update: Thu 13 Jul 2023 07:48:01 +0000
Files and hashes: 1: GILrTXNaFZiocKfFB4pujxx3imo.roa (hash: kqs1LPH8uGqoyF5XSKEhpmNT1jOBhNIqae2wDW0kecU=)
2: U7fHcJ7WvcOilcc1WlA-uNYf0jI.crl (hash: yu8AKMPf+l/it8h/FUtlxJokQPTokHX5iDBSYHhQrc8=)
3: u4CCGzRBUDV4ICzxZZsgpN0rCgU.roa (hash: F+9MOoKikOT/3OyChT4cKIUsU5jrZT5efG1sIOqxXHE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:89:49:12:45:3f:75:62:33:05:42:c6:bb:09:d8:6d:5a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b7c7709ed6bdc3a295c7355a503eb8d61fd232
Validity
Not Before: Jul 12 07:48:01 2023 GMT
Not After : Jul 13 07:48:01 2023 GMT
Subject: CN=0270d74114cfd31f6354565681d8c470dbc29ba2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:08:25:80:bf:99:5a:af:d2:24:21:28:77:41:
dc:25:19:49:ee:f2:a4:3f:8f:99:29:17:94:7a:e6:
31:57:77:a5:0a:f3:67:9b:fc:46:dd:d9:a6:db:64:
3e:b1:f9:9c:bc:a4:c5:a7:4c:2d:db:23:13:d1:de:
c9:28:db:d2:7c:e5:69:fe:f6:0e:e1:4d:8c:b6:86:
39:a3:5d:8c:de:94:ab:ec:fa:26:d1:28:c1:1a:4f:
0f:a5:0c:f7:ba:cf:80:30:09:68:ac:39:8b:81:6f:
3e:ca:95:6c:36:97:3e:36:9d:96:d3:c0:b0:70:40:
18:11:d1:1d:cc:e1:33:85:d1:39:3a:36:27:02:16:
92:a5:d2:96:7f:16:2e:55:ef:a7:96:db:7f:1e:0a:
e1:ff:49:96:d5:7a:44:88:58:46:1e:1c:0d:0b:81:
04:a2:75:9b:9c:05:0b:77:1f:21:e4:55:cd:a4:7a:
79:74:c9:78:83:f6:4c:81:9c:fc:e9:31:c9:9a:ea:
c6:9d:5a:ae:54:70:68:c0:3b:4d:74:89:22:42:4f:
28:98:0b:b9:ce:3b:59:dc:ae:eb:54:38:4a:5c:66:
b8:44:e4:38:2c:2f:d0:33:44:fd:72:b0:80:a7:d9:
fb:93:ab:62:5d:f9:90:78:18:78:03:5c:eb:d3:2e:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:70:D7:41:14:CF:D3:1F:63:54:56:56:81:D8:C4:70:DB:C2:9B:A2
X509v3 Authority Key Identifier:
keyid:53:B7:C7:70:9E:D6:BD:C3:A2:95:C7:35:5A:50:3E:B8:D6:1F:D2:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7fHcJ7WvcOilcc1WlA-uNYf0jI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d7aed8-4a41-4df1-ae87-ee370ac6190b/1/U7fHcJ7WvcOilcc1WlA-uNYf0jI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:26:9d:18:29:d2:64:e8:b8:b2:56:6b:d2:fe:81:35:dd:3c:
4c:e7:57:0b:6a:e8:df:eb:53:21:2c:5e:52:07:77:fb:b3:72:
a0:67:6a:00:89:e1:96:43:4b:a2:36:5c:d5:32:4a:cf:62:af:
c9:ef:03:38:d4:82:e5:89:ca:65:c9:d6:26:af:41:d4:6f:9e:
e1:f4:af:f4:89:82:c6:88:33:f2:da:fe:a4:b6:90:1e:da:31:
73:39:ed:b7:5e:09:23:23:13:40:61:f6:36:eb:0e:8b:79:b6:
62:7c:e9:61:3e:88:82:a1:98:d1:c1:5a:f7:a1:59:28:db:6c:
5c:4e:25:65:53:45:11:0b:6c:7d:95:d7:88:33:89:b9:5e:43:
38:37:3f:0b:17:ef:5d:d8:02:d4:5e:90:ec:ca:e6:40:83:16:
2d:c9:38:46:d3:b4:12:67:25:c5:0d:ce:67:f9:95:37:3c:f1:
72:c0:51:e8:66:88:56:97:36:ad:24:5a:f3:a7:98:95:12:1e:
6c:4c:c1:fe:04:89:aa:c9:96:a2:87:65:a9:d3:7b:27:b1:1d:
49:b4:ce:36:5e:2d:d7:e3:5d:c2:46:ca:45:5e:f2:77:01:4b:
18:1c:67:f9:1e:1e:03:78:5a:90:71:9c:3e:4c:34:51:2c:46:
e1:18:4f:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYlJEkU/dWIzBULGuwnYbVrHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjdjNzcwOWVkNmJkYzNhMjk1YzczNTVhNTAzZWI4ZDYx
ZmQyMzIwHhcNMjMwNzEyMDc0ODAxWhcNMjMwNzEzMDc0ODAxWjAzMTEwLwYDVQQD
EygwMjcwZDc0MTE0Y2ZkMzFmNjM1NDU2NTY4MWQ4YzQ3MGRiYzI5YmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gglgL+ZWq/SJCEod0HcJRlJ7vKk
P4+ZKReUeuYxV3elCvNnm/xG3dmm22Q+sfmcvKTFp0wt2yMT0d7JKNvSfOVp/vYO
4U2MtoY5o12M3pSr7Pom0SjBGk8PpQz3us+AMAlorDmLgW8+ypVsNpc+Np2W08Cw
cEAYEdEdzOEzhdE5OjYnAhaSpdKWfxYuVe+nltt/Hgrh/0mW1XpEiFhGHhwNC4EE
onWbnAULdx8h5FXNpHp5dMl4g/ZMgZz86THJmurGnVquVHBowDtNdIkiQk8omAu5
zjtZ3K7rVDhKXGa4ROQ4LC/QM0T9crCAp9n7k6tiXfmQeBh4A1zr0y5BiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAJw10EUz9MfY1RWVoHYxHDbwpuiMB8GA1UdIwQY
MBaAFFO3x3Ce1r3DopXHNVpQPrjWH9IyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdmSGNKN1d2Y09pbGNjMVdsQS11TllmMGpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kN2FlZDgtNGE0MS00ZGYxLWFlODct
ZWUzNzBhYzYxOTBiLzEvVTdmSGNKN1d2Y09pbGNjMVdsQS11TllmMGpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kN2FlZDgtNGE0MS00ZGYxLWFlODctZWUzNzBhYzYxOTBi
LzEvVTdmSGNKN1d2Y09pbGNjMVdsQS11TllmMGpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeiadGCnS
ZOi4slZr0v6BNd08TOdXC2ro3+tTISxeUgd3+7NyoGdqAInhlkNLojZc1TJKz2Kv
ye8DONSC5YnKZcnWJq9B1G+e4fSv9ImCxogz8tr+pLaQHtoxczntt14JIyMTQGH2
NusOi3m2YnzpYT6IgqGY0cFa96FZKNtsXE4lZVNFEQtsfZXXiDOJuV5DODc/Cxfv
XdgC1F6Q7MrmQIMWLck4RtO0EmclxQ3OZ/mVNzzxcsBR6GaIVpc2rSRa86eYlRIe
bEzB/gSJqsmWoodlqdN7J7EdSbTONl4t1+NdwkbKRV7ydwFLGBxn+R4eA3hakHGc
Pkw0USxG4RhPWQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:20:30 2025 by rpki-client