![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft
File: R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft (raw, json)
Hash identifier: drxcdALAaxaZCrAnpabmhZa0vrDgeb8Hlfb4rlujS20=
Subject key identifier: B7:52:A8:AC:30:43:71:F8:98:B4:B5:2D:8C:34:7D:5B:F8:FE:B4:A2
Authority key identifier: 47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B
Certificate issuer: /CN=47c7d77c498b2831ccdce7e93e9a8d22e4f5552b
Certificate serial: 0163E84A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft
Manifest number: 01C7
Signing time: Wed 16 Mar 2022 05:28:14 +0000
Manifest this update: Wed 16 Mar 2022 05:28:14 +0000
Manifest next update: Thu 17 Mar 2022 05:28:14 +0000
Files and hashes: 1: R8fXfEmLKDHM3OfpPpqNIuT1VSs.crl (hash: D09T9dGT3Mv9fKUrV/Buz+bn0dagKe4bY8GYHqdFxzE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 23324746 (0x163e84a)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47c7d77c498b2831ccdce7e93e9a8d22e4f5552b
Validity
Not Before: Mar 16 05:28:14 2022 GMT
Not After : Mar 17 05:28:14 2022 GMT
Subject: CN=b752a8ac304371f898b4b52d8c347d5bf8feb4a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:aa:07:e6:6f:43:4b:ad:7a:ce:62:f2:c6:a6:
8e:a3:31:7b:04:9d:71:7d:f6:94:2a:77:77:8b:92:
ac:da:b8:f0:d5:1d:ef:11:68:0f:f4:55:b2:f4:38:
08:86:61:e2:1b:e4:86:60:9a:5d:27:ce:0c:29:f5:
b0:c5:c7:56:0d:4e:a8:86:73:27:9b:fa:7c:26:c0:
0e:44:f1:18:40:cd:60:bc:0e:77:34:17:b0:b7:ce:
b0:0e:dd:ca:83:91:a3:a5:37:d0:fb:5c:27:4b:91:
7e:bb:90:bd:82:e3:67:21:85:0d:91:d2:a5:06:ae:
0d:93:55:69:86:68:fd:02:a3:39:f4:f9:ab:57:ab:
c9:c3:3e:1d:57:aa:dd:73:4f:1f:be:54:41:f8:75:
94:8f:79:b4:25:79:e3:b0:b3:76:c6:e8:7f:fc:1f:
62:b7:5b:ab:f0:08:66:cb:67:75:ff:f2:45:4d:57:
6a:b0:ba:d1:ed:60:1b:25:d3:f6:e5:33:2b:bb:f0:
57:68:fb:fa:7a:2c:ed:a6:a8:7f:73:97:e1:9d:db:
df:bd:60:e7:47:74:4c:09:76:20:7b:c9:7c:a0:8f:
ee:bc:f6:fe:d5:f4:e9:2e:0d:58:13:82:bb:cc:f1:
f3:80:f5:1d:0a:94:a5:2e:25:c8:bc:9a:96:b0:8c:
ce:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:52:A8:AC:30:43:71:F8:98:B4:B5:2D:8C:34:7D:5B:F8:FE:B4:A2
X509v3 Authority Key Identifier:
keyid:47:C7:D7:7C:49:8B:28:31:CC:DC:E7:E9:3E:9A:8D:22:E4:F5:55:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R8fXfEmLKDHM3OfpPpqNIuT1VSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/5277e9-c709-405e-adea-313dd2abc955/1/R8fXfEmLKDHM3OfpPpqNIuT1VSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:74:a7:42:bd:be:8a:1a:e5:50:38:fd:ad:3d:15:83:f0:7e:
98:b0:cd:76:2b:c4:fa:e4:d7:b6:f0:14:b1:b6:bb:a9:2e:33:
b0:47:92:3a:6f:56:d0:be:c5:45:d0:24:a8:38:29:31:47:91:
e6:6a:33:52:c1:e5:06:c8:16:9f:64:07:df:83:51:d9:32:ee:
2a:40:88:f3:a5:0b:8e:28:45:53:a2:a9:b0:eb:b0:c0:e2:5d:
e4:fd:74:4a:cb:31:9c:32:c5:3e:f7:17:05:61:b1:b2:22:39:
a1:b4:47:c7:7c:48:d8:3e:87:af:f8:f5:39:12:be:b4:57:c0:
b1:e9:bd:cc:ec:c1:7f:e7:91:e6:a7:4f:65:0a:ae:b2:ca:1b:
3a:0b:5f:dc:fc:09:29:74:46:16:f8:c4:c2:36:e0:6a:0b:8e:
db:6b:a5:f0:3e:dd:69:5e:ee:c0:24:19:fa:4a:a2:ea:f2:c4:
92:60:6c:e8:19:61:06:ef:44:39:8c:13:6b:38:9f:4a:98:8d:
38:d5:cc:f3:d5:d8:0e:83:97:e7:94:50:2f:c4:41:be:3c:b3:
8e:ce:af:bc:cb:71:df:db:1a:93:79:2d:5b:54:ba:10:11:20:
32:8f:b5:9d:fc:2f:8c:c1:ad:ea:fb:ae:19:d0:1e:bb:de:ce:
59:b0:25:b7
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEAWPoSjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0
N2M3ZDc3YzQ5OGIyODMxY2NkY2U3ZTkzZTlhOGQyMmU0ZjU1NTJiMB4XDTIyMDMx
NjA1MjgxNFoXDTIyMDMxNzA1MjgxNFowMzExMC8GA1UEAxMoYjc1MmE4YWMzMDQz
NzFmODk4YjRiNTJkOGMzNDdkNWJmOGZlYjRhMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAImqB+ZvQ0utes5i8samjqMxewSdcX32lCp3d4uSrNq48NUd
7xFoD/RVsvQ4CIZh4hvkhmCaXSfODCn1sMXHVg1OqIZzJ5v6fCbADkTxGEDNYLwO
dzQXsLfOsA7dyoORo6U30PtcJ0uRfruQvYLjZyGFDZHSpQauDZNVaYZo/QKjOfT5
q1erycM+HVeq3XNPH75UQfh1lI95tCV547Czdsbof/wfYrdbq/AIZstndf/yRU1X
arC60e1gGyXT9uUzK7vwV2j7+nos7aaof3OX4Z3b371g50d0TAl2IHvJfKCP7rz2
/tX06S4NWBOCu8zx84D1HQqUpS4lyLyalrCMzukCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBS3UqisMENx+Ji0tS2MNH1b+P60ojAfBgNVHSMEGDAWgBRHx9d8SYsoMczc
5+k+mo0i5PVVKzAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L1I4ZlhmRW1MS0RITTNPZnBQcHFOSXVUMVZTcy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMjcvNTI3N2U5LWM3MDktNDA1ZS1hZGVhLTMxM2RkMmFiYzk1NS8x
L1I4ZlhmRW1MS0RITTNPZnBQcHFOSXVUMVZTcy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjcv
NTI3N2U5LWM3MDktNDA1ZS1hZGVhLTMxM2RkMmFiYzk1NS8xL1I4ZlhmRW1MS0RI
TTNPZnBQcHFOSXVUMVZTcy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABB0p0K9vooa5VA4/a09FYPwfpiw
zXYrxPrk17bwFLG2u6kuM7BHkjpvVtC+xUXQJKg4KTFHkeZqM1LB5QbIFp9kB9+D
Udky7ipAiPOlC44oRVOiqbDrsMDiXeT9dErLMZwyxT73FwVhsbIiOaG0R8d8SNg+
h6/49TkSvrRXwLHpvczswX/nkeanT2UKrrLKGzoLX9z8CSl0Rhb4xMI24GoLjttr
pfA+3Wle7sAkGfpKouryxJJgbOgZYQbvRDmME2s4n0qYjTjVzPPV2A6Dl+eUUC/E
Qb48s47Or7zLcd/bGpN5LVtUuhARIDKPtZ38L4zBrer7rhnQHrvezlmwJbc=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:08 2025 by rpki-client