![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft
File: hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft (raw, json)
Hash identifier: BNFBMcxEb2jBpR9XwYWCpASV9NZzvi2PVxsppSmTo4c=
Subject key identifier: C6:12:24:E3:B3:2B:ED:E9:E9:43:8C:97:6D:21:1E:F0:A3:72:ED:6B
Authority key identifier: 84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF
Certificate issuer: /CN=84808b8234181ff48d3210ddfc87090ed67d02bf
Certificate serial: 01860246B9F1A5521A411C85E8138EDCA844
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft
Manifest number: 0C4E
Signing time: Mon 30 Jan 2023 10:43:54 +0000
Manifest this update: Mon 30 Jan 2023 10:43:54 +0000
Manifest next update: Tue 31 Jan 2023 10:43:54 +0000
Files and hashes: 1: 2gHBgQ5q4tsvm3z68Dm072ST_zQ.roa (hash: 9l1f7HIjoJtkBnL1h4Hj0kakdu/w/kC1KmpF3pDdqL8=)
2: hICLgjQYH_SNMhDd_IcJDtZ9Ar8.crl (hash: WI6xOQSjicrWw7P9ULrB16FnspBlmbnWDFAKg3hMK5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:86:02:46:b9:f1:a5:52:1a:41:1c:85:e8:13:8e:dc:a8:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84808b8234181ff48d3210ddfc87090ed67d02bf
Validity
Not Before: Jan 30 10:43:54 2023 GMT
Not After : Jan 31 10:43:54 2023 GMT
Subject: CN=c61224e3b32bede9e9438c976d211ef0a372ed6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:19:c7:63:3c:39:05:97:e8:10:79:2e:a5:12:
a7:3f:98:7a:8c:55:6b:24:9a:43:94:a7:2f:77:2b:
c4:0c:b5:ac:65:9e:61:62:c7:4f:c1:b5:03:d4:3c:
a8:cf:2e:2e:dc:31:14:10:3b:09:42:0d:79:d2:3e:
32:10:61:29:4c:e6:4e:d2:50:07:79:ef:d2:aa:f0:
d5:34:0b:bb:0c:b6:58:d3:05:8d:05:7a:42:2b:fa:
23:dc:18:3e:0c:53:1d:69:79:e4:1a:34:27:23:4b:
1c:75:e1:fb:8e:b1:32:80:b2:bb:49:c4:ce:1a:3d:
1b:8f:e7:7c:95:54:7f:8f:29:bf:e1:91:e2:6e:b1:
67:4d:d4:1a:73:30:d3:c6:5f:25:21:ab:ff:d1:e3:
6a:b4:d9:65:61:69:eb:e8:91:f5:e2:8c:1b:76:c9:
06:9b:2e:41:e7:69:fe:ae:bb:4d:01:ed:ca:62:ed:
75:b5:2c:86:50:60:be:9c:18:9f:5d:1c:76:cc:98:
8c:85:1c:51:e2:75:a0:21:e5:d7:71:75:56:9e:84:
b7:66:2e:2a:df:bf:77:8e:a3:0c:23:ac:cf:da:be:
cb:79:cf:34:8a:99:06:97:95:78:5f:bb:12:ea:fa:
b7:63:7c:4f:bc:eb:bf:dd:c7:16:9b:1e:f5:5e:f2:
27:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:12:24:E3:B3:2B:ED:E9:E9:43:8C:97:6D:21:1E:F0:A3:72:ED:6B
X509v3 Authority Key Identifier:
keyid:84:80:8B:82:34:18:1F:F4:8D:32:10:DD:FC:87:09:0E:D6:7D:02:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/697564-0025-4f92-8dfd-ce1c03400d4d/1/hICLgjQYH_SNMhDd_IcJDtZ9Ar8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:47:e0:58:70:ad:f7:8c:ee:e6:fb:b6:e0:46:47:5e:98:5a:
04:ae:8b:b4:3d:cd:83:e2:67:0f:62:cd:ae:b6:01:0b:87:c7:
b2:e2:9a:6c:69:19:b3:89:ab:39:f9:3d:82:01:2a:9b:91:3b:
e0:62:26:35:41:0b:d1:7a:20:41:22:1f:2f:9f:8f:38:5f:bf:
34:60:f5:fe:88:db:62:94:fb:0f:23:17:9e:15:45:ac:fd:3a:
61:09:ba:05:7a:2f:50:36:b3:ac:3a:c1:db:7c:63:ec:6a:f7:
00:13:f5:b5:f8:41:97:b3:9a:3a:44:bd:13:40:a1:e7:de:a8:
90:9b:54:fa:16:17:d7:e5:00:72:9d:11:4e:59:c0:1e:97:a4:
3f:cf:c8:8a:1f:33:a1:0f:30:73:de:57:78:fe:c0:00:fb:0f:
97:3a:5d:78:79:3f:dc:1e:b7:6c:6f:b4:2c:e2:75:cc:f6:b7:
2b:3a:12:49:1f:3e:99:71:5d:fa:25:c6:2d:15:71:c4:43:0a:
c8:d0:05:a8:39:4d:50:93:04:b1:50:0d:ba:48:14:41:4f:87:
8d:96:4d:2f:bf:f2:42:b2:b8:44:e0:0b:40:f6:74:96:1d:39:
47:82:c4:4b:cd:0a:15:0d:6f:2e:ef:76:65:8c:92:d8:b0:95:
b8:6f:28:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYYCRrnxpVIaQRyF6BOO3KhEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ODA4YjgyMzQxODFmZjQ4ZDMyMTBkZGZjODcwOTBlZDY3
ZDAyYmYwHhcNMjMwMTMwMTA0MzU0WhcNMjMwMTMxMTA0MzU0WjAzMTEwLwYDVQQD
EyhjNjEyMjRlM2IzMmJlZGU5ZTk0MzhjOTc2ZDIxMWVmMGEzNzJlZDZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkBnHYzw5BZfoEHkupRKnP5h6jFVr
JJpDlKcvdyvEDLWsZZ5hYsdPwbUD1Dyozy4u3DEUEDsJQg150j4yEGEpTOZO0lAH
ee/SqvDVNAu7DLZY0wWNBXpCK/oj3Bg+DFMdaXnkGjQnI0scdeH7jrEygLK7ScTO
Gj0bj+d8lVR/jym/4ZHibrFnTdQaczDTxl8lIav/0eNqtNllYWnr6JH14owbdskG
my5B52n+rrtNAe3KYu11tSyGUGC+nBifXRx2zJiMhRxR4nWgIeXXcXVWnoS3Zi4q
3793jqMMI6zP2r7Lec80ipkGl5V4X7sS6vq3Y3xPvOu/3ccWmx71XvInWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMYSJOOzK+3p6UOMl20hHvCjcu1rMB8GA1UdIwQY
MBaAFISAi4I0GB/0jTIQ3fyHCQ7WfQK/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaElDTGdqUVlIX1NOTWhEZF9JY0pEdFo5QXI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQt
Y2UxYzAzNDAwZDRkLzEvaElDTGdqUVlIX1NOTWhEZF9JY0pEdFo5QXI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC82OTc1NjQtMDAyNS00ZjkyLThkZmQtY2UxYzAzNDAwZDRk
LzEvaElDTGdqUVlIX1NOTWhEZF9JY0pEdFo5QXI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi0fgWHCt
94zu5vu24EZHXphaBK6LtD3Ng+JnD2LNrrYBC4fHsuKabGkZs4mrOfk9ggEqm5E7
4GImNUEL0XogQSIfL5+POF+/NGD1/ojbYpT7DyMXnhVFrP06YQm6BXovUDazrDrB
23xj7Gr3ABP1tfhBl7OaOkS9E0Ch596okJtU+hYX1+UAcp0RTlnAHpekP8/Iih8z
oQ8wc95XeP7AAPsPlzpdeHk/3B63bG+0LOJ1zPa3KzoSSR8+mXFd+iXGLRVxxEMK
yNAFqDlNUJMEsVANukgUQU+HjZZNL7/yQrK4ROALQPZ0lh05R4LES80KFQ1vLu92
ZYyS2LCVuG8ofg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:14 2025 by rpki-client