![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.mft
File: A2B4p2nxULgAR0zMuR1GsypsuKo.mft (raw, json)
Hash identifier: OmFzVli+XTLcGa3f13YGllTP9MQUYO0lfkAynkVC/gg=
Subject key identifier: 66:55:50:43:D0:EA:27:EE:C4:4A:60:75:10:6F:F3:E5:8B:D6:7F:B9
Authority key identifier: 03:60:78:A7:69:F1:50:B8:00:47:4C:CC:B9:1D:46:B3:2A:6C:B8:AA
Certificate issuer: /CN=036078a769f150b800474cccb91d46b32a6cb8aa
Certificate serial: 0182629A1C3AC310D96D86562E177E56E7CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2B4p2nxULgAR0zMuR1GsypsuKo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.mft
Manifest number: 01
Signing time: Wed 03 Aug 2022 07:27:23 +0000
Manifest this update: Wed 03 Aug 2022 07:27:23 +0000
Manifest next update: Thu 04 Aug 2022 07:27:23 +0000
Files and hashes: 1: A2B4p2nxULgAR0zMuR1GsypsuKo.crl (hash: TU0SiX7p3O/4QQxrBTJowJo3Y27vzZIPUhvt3BwXJRU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:62:9a:1c:3a:c3:10:d9:6d:86:56:2e:17:7e:56:e7:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036078a769f150b800474cccb91d46b32a6cb8aa
Validity
Not Before: Aug 3 07:27:23 2022 GMT
Not After : Aug 4 07:27:23 2022 GMT
Subject: CN=66555043d0ea27eec44a6075106ff3e58bd67fb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:82:a6:5c:91:8a:11:eb:3f:94:d8:a8:18:00:
93:09:6e:b5:fc:f7:b4:92:81:ce:c8:4f:9b:85:e8:
74:96:4d:2f:86:8e:f4:09:29:24:84:be:79:36:22:
0d:0b:5c:01:e6:64:dd:ec:21:ac:3d:0e:c2:c2:04:
5e:b8:a3:12:66:52:f6:25:23:d7:dc:d6:eb:3e:6d:
5a:63:e9:08:d4:2e:2c:12:e1:0b:1a:b7:cb:76:6f:
20:95:e6:54:4d:8e:63:61:f2:e8:f7:81:de:f9:53:
b8:8b:dd:44:6a:d0:e5:6f:95:4c:b2:0a:f8:3d:d8:
cc:cb:39:b2:b9:6c:fd:21:c2:42:18:7f:c8:ad:b6:
b3:75:3c:62:c6:ba:98:8b:b5:55:04:7d:b3:f4:6f:
49:ea:73:d6:da:57:4a:f2:8b:3c:75:8d:f0:83:13:
50:53:29:cd:5a:80:ba:a5:e4:37:b2:32:e7:98:b3:
92:4d:5f:83:43:ed:d8:6c:74:d0:31:1e:4f:6b:ce:
4d:be:11:70:39:66:9e:04:88:eb:17:b0:77:3e:fb:
df:de:c8:54:79:4b:90:49:a9:43:3e:0e:79:65:15:
fd:67:ec:e5:cb:ab:42:ac:57:7f:41:fc:33:7b:6f:
b1:c3:d9:45:41:85:56:0c:2e:6f:aa:66:58:21:63:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:55:50:43:D0:EA:27:EE:C4:4A:60:75:10:6F:F3:E5:8B:D6:7F:B9
X509v3 Authority Key Identifier:
keyid:03:60:78:A7:69:F1:50:B8:00:47:4C:CC:B9:1D:46:B3:2A:6C:B8:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2B4p2nxULgAR0zMuR1GsypsuKo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2e/23e548-92c1-4fac-8e20-6b265c919ed2/1/A2B4p2nxULgAR0zMuR1GsypsuKo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:17:15:38:be:6b:fc:4f:e7:3f:f4:fd:fa:74:e1:af:79:43:
04:3d:25:ed:df:aa:39:60:b0:0b:da:64:d2:d6:47:14:05:da:
00:b9:9e:d5:f8:05:83:33:18:48:dc:da:a9:9e:85:4c:7e:6d:
aa:54:9a:fd:e5:88:dc:f9:81:24:3d:6a:3f:63:cb:72:b8:c2:
64:e3:0f:ad:32:bc:3d:44:18:d8:c1:26:8c:80:9c:2d:d5:5e:
92:3d:78:8a:e2:74:b8:e1:13:58:11:a8:73:37:de:71:9c:2e:
0c:18:c8:f5:f5:51:81:7a:8d:ed:fa:6e:75:8a:75:96:dd:58:
ef:8e:79:ec:fd:c4:79:b5:d3:fb:d3:ec:cc:89:3f:6e:ea:9c:
46:f6:11:30:c5:80:6e:ae:d3:70:6c:b0:eb:65:9a:7b:c2:ca:
d3:a5:b2:58:f5:ad:b9:f1:14:0b:31:dc:d7:81:3d:66:a1:9c:
48:d9:f0:c7:57:e4:c4:79:07:ac:ac:24:3b:3e:08:c2:08:e0:
43:96:27:f6:9e:4e:9f:cb:9a:02:33:60:89:bf:5a:48:2b:bc:
53:a8:0a:72:a1:72:ca:05:f6:9b:8f:ae:fe:8a:b8:a4:2a:36:
3b:9f:e4:4d:ca:ae:3e:e5:c2:23:32:d5:0b:3f:cd:80:a9:a0:
76:ab:68:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYJimhw6wxDZbYZWLhd+VufOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNjA3OGE3NjlmMTUwYjgwMDQ3NGNjY2I5MWQ0NmIzMmE2
Y2I4YWEwHhcNMjIwODAzMDcyNzIzWhcNMjIwODA0MDcyNzIzWjAzMTEwLwYDVQQD
Eyg2NjU1NTA0M2QwZWEyN2VlYzQ0YTYwNzUxMDZmZjNlNThiZDY3ZmI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIKmXJGKEes/lNioGACTCW61/Pe0
koHOyE+bheh0lk0vho70CSkkhL55NiINC1wB5mTd7CGsPQ7CwgReuKMSZlL2JSPX
3NbrPm1aY+kI1C4sEuELGrfLdm8gleZUTY5jYfLo94He+VO4i91EatDlb5VMsgr4
PdjMyzmyuWz9IcJCGH/IrbazdTxixrqYi7VVBH2z9G9J6nPW2ldK8os8dY3wgxNQ
UynNWoC6peQ3sjLnmLOSTV+DQ+3YbHTQMR5Pa85NvhFwOWaeBIjrF7B3Pvvf3shU
eUuQSalDPg55ZRX9Z+zly6tCrFd/Qfwze2+xw9lFQYVWDC5vqmZYIWPi6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZVUEPQ6ifuxEpgdRBv8+WL1n+5MB8GA1UdIwQY
MBaAFANgeKdp8VC4AEdMzLkdRrMqbLiqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJCNHAybnhVTGdBUjB6TXVSMUdzeXBzdUtvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZS8yM2U1NDgtOTJjMS00ZmFjLThlMjAt
NmIyNjVjOTE5ZWQyLzEvQTJCNHAybnhVTGdBUjB6TXVSMUdzeXBzdUtvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZS8yM2U1NDgtOTJjMS00ZmFjLThlMjAtNmIyNjVjOTE5ZWQy
LzEvQTJCNHAybnhVTGdBUjB6TXVSMUdzeXBzdUtvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJxcVOL5r
/E/nP/T9+nThr3lDBD0l7d+qOWCwC9pk0tZHFAXaALme1fgFgzMYSNzaqZ6FTH5t
qlSa/eWI3PmBJD1qP2PLcrjCZOMPrTK8PUQY2MEmjICcLdVekj14iuJ0uOETWBGo
czfecZwuDBjI9fVRgXqN7fpudYp1lt1Y74557P3EebXT+9PszIk/buqcRvYRMMWA
bq7TcGyw62Wae8LK06WyWPWtufEUCzHc14E9ZqGcSNnwx1fkxHkHrKwkOz4Iwgjg
Q5Yn9p5On8uaAjNgib9aSCu8U6gKcqFyygX2m4+u/oq4pCo2O5/kTcquPuXCIzLV
Cz/NgKmgdqto7Q==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:03 2025 by rpki-client