![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.mft
File: ob5y2V-TdKlBZbirb35JnyvRejg.mft (raw, json)
Hash identifier: r/xoKkI5JW2/ekdGe8i70Yq5ep0tOeOtP3r0UtPRhig=
Subject key identifier: 86:20:76:43:B0:54:31:E9:0B:64:12:F2:47:D0:95:17:4D:29:9A:12
Authority key identifier: A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
Certificate issuer: /CN=a1be72d95f9374a94165b8ab6f7e499f2bd17a38
Certificate serial: 17B9BC56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ob5y2V-TdKlBZbirb35JnyvRejg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.mft
Manifest number: 08A0
Signing time: Wed 16 Mar 2022 04:28:22 +0000
Manifest this update: Wed 16 Mar 2022 04:28:22 +0000
Manifest next update: Thu 17 Mar 2022 04:28:22 +0000
Files and hashes: 1: CHfM8hdHCYaGB4Vd_s9tLpWHGjA.roa (hash: KQOqDSQqmLGtvk/O9ruPcAY2rcdqjUTKnBW3sU75iJw=)
2: ob5y2V-TdKlBZbirb35JnyvRejg.crl (hash: +1038ZesOZQdIHIn0gj5wXl4YW4y5YFxR1Gau0NAYUg=)
3: pFRSrTEv56-im6XbAsmzuxKFy8o.roa (hash: ayrg4ugG+Fw2cZDvzLwR+kMwn/G81Pmzhp2mPd4cVck=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 398048342 (0x17b9bc56)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1be72d95f9374a94165b8ab6f7e499f2bd17a38
Validity
Not Before: Mar 16 04:28:22 2022 GMT
Not After : Mar 17 04:28:22 2022 GMT
Subject: CN=86207643b05431e90b6412f247d095174d299a12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:9c:8f:b9:bd:5f:2c:5a:a5:25:72:eb:42:72:
d4:97:d3:f0:76:7b:2c:f2:51:7c:02:9e:51:89:f6:
55:6f:8c:9f:a2:cf:d3:dc:ce:0a:dd:34:74:85:ff:
9d:bf:35:64:ed:b7:d4:92:c9:f8:de:2c:f6:e5:aa:
47:fc:b7:fd:45:f6:38:5d:f4:a8:5e:97:4a:1c:1f:
64:cd:80:ef:2c:20:be:42:74:88:f4:3f:c7:85:cc:
f1:f9:78:2e:7a:65:a1:80:94:51:e2:00:67:88:08:
4e:d6:7d:dc:ae:63:97:a8:dd:5b:bd:29:87:77:d5:
25:92:9e:74:91:87:ad:a4:de:6b:71:93:9b:24:1c:
b4:65:84:7d:b7:0f:8a:5b:ad:a0:25:2c:5d:ad:93:
e5:f6:b0:5f:32:04:56:87:55:80:cc:3b:e3:8a:7b:
42:09:d3:f4:c4:5c:10:52:09:c2:5f:7c:32:59:27:
38:01:75:03:f4:23:02:df:76:38:66:11:ad:24:9f:
12:26:37:da:5f:c3:55:09:2d:7e:04:bd:df:0e:15:
43:32:19:8d:ca:f8:13:83:c1:d8:d9:c0:ad:63:76:
92:33:34:08:4b:44:32:3c:ae:b6:55:84:75:d9:fc:
2b:0c:c6:b3:d9:4f:eb:4f:33:5b:49:8a:1c:b8:e3:
cd:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:20:76:43:B0:54:31:E9:0B:64:12:F2:47:D0:95:17:4D:29:9A:12
X509v3 Authority Key Identifier:
keyid:A1:BE:72:D9:5F:93:74:A9:41:65:B8:AB:6F:7E:49:9F:2B:D1:7A:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ob5y2V-TdKlBZbirb35JnyvRejg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/4b9a83-cea4-4399-859d-7d9a5bf6e1b1/1/ob5y2V-TdKlBZbirb35JnyvRejg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:07:b3:ca:4e:29:0a:bf:e0:92:9e:7a:de:bc:c2:d8:3b:ef:
6c:6e:08:89:bf:bd:8e:e5:1e:fa:c8:2c:4a:2e:cb:4e:84:5f:
9c:81:76:8d:25:6c:15:25:f9:43:7f:7e:d7:db:59:01:ea:d3:
77:d9:bb:b5:8a:a6:5d:31:0f:80:95:d3:9b:ec:63:90:18:88:
46:6e:7c:73:5c:e1:3d:57:5b:d5:ed:6c:5b:84:62:4d:78:24:
4c:09:e9:c2:ca:76:0e:7f:80:01:4e:d6:eb:57:40:f9:88:1c:
96:97:7b:bd:b7:46:6e:7a:84:8a:95:69:a5:9e:bc:30:a9:3b:
f8:db:53:71:2b:49:37:4c:72:1f:63:e4:84:2b:60:48:85:31:
02:22:0a:ea:3c:a7:96:5e:46:80:77:16:cd:a8:1e:89:a0:df:
44:d1:3c:a8:57:f4:68:c0:7a:26:6e:5a:86:6b:6b:ee:d3:89:
78:39:b7:61:c7:09:e6:33:21:9c:1c:b6:cc:ce:2a:30:4a:54:
de:e3:bc:aa:17:71:3c:a5:52:2c:5a:f2:1f:45:30:86:e0:18:
06:2d:1a:fe:d1:00:b8:a2:23:dd:52:4b:80:f9:e9:6d:fc:4c:
9c:e0:43:df:8f:37:a6:59:f4:71:80:7a:82:e2:08:9f:c8:49:
44:7b:46:ba
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEF7m8VjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhh
MWJlNzJkOTVmOTM3NGE5NDE2NWI4YWI2ZjdlNDk5ZjJiZDE3YTM4MB4XDTIyMDMx
NjA0MjgyMloXDTIyMDMxNzA0MjgyMlowMzExMC8GA1UEAxMoODYyMDc2NDNiMDU0
MzFlOTBiNjQxMmYyNDdkMDk1MTc0ZDI5OWExMjCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAL2cj7m9XyxapSVy60Jy1JfT8HZ7LPJRfAKeUYn2VW+Mn6LP
09zOCt00dIX/nb81ZO231JLJ+N4s9uWqR/y3/UX2OF30qF6XShwfZM2A7ywgvkJ0
iPQ/x4XM8fl4LnploYCUUeIAZ4gITtZ93K5jl6jdW70ph3fVJZKedJGHraTea3GT
myQctGWEfbcPilutoCUsXa2T5fawXzIEVodVgMw744p7QgnT9MRcEFIJwl98Mlkn
OAF1A/QjAt92OGYRrSSfEiY32l/DVQktfgS93w4VQzIZjcr4E4PB2NnArWN2kjM0
CEtEMjyutlWEddn8KwzGs9lP608zW0mKHLjjzQ0CAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSGIHZDsFQx6QtkEvJH0JUXTSmaEjAfBgNVHSMEGDAWgBShvnLZX5N0qUFl
uKtvfkmfK9F6ODAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L29iNXkyVi1UZEtsQlpiaXJiMzVKbnl2UmVqZy5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvMmMvNGI5YTgzLWNlYTQtNDM5OS04NTlkLTdkOWE1YmY2ZTFiMS8x
L29iNXkyVi1UZEtsQlpiaXJiMzVKbnl2UmVqZy5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMmMv
NGI5YTgzLWNlYTQtNDM5OS04NTlkLTdkOWE1YmY2ZTFiMS8xL29iNXkyVi1UZEts
QlpiaXJiMzVKbnl2UmVqZy5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAI8Hs8pOKQq/4JKeet68wtg772xu
CIm/vY7lHvrILEouy06EX5yBdo0lbBUl+UN/ftfbWQHq03fZu7WKpl0xD4CV05vs
Y5AYiEZufHNc4T1XW9XtbFuEYk14JEwJ6cLKdg5/gAFO1utXQPmIHJaXe723Rm56
hIqVaaWevDCpO/jbU3ErSTdMch9j5IQrYEiFMQIiCuo8p5ZeRoB3Fs2oHomg30TR
PKhX9GjAeiZuWoZra+7TiXg5t2HHCeYzIZwctszOKjBKVN7jvKoXcTylUixa8h9F
MIbgGAYtGv7RALiiI91SS4D56W38TJzgQ9+PN6ZZ9HGAeoLiCJ/ISUR7Rro=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:43:23 2025 by rpki-client