![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
File: 1s5abikpiZKz5F-MlICVSbpE7yQ.mft (raw, json)
Hash identifier: JCqvSdLY2s5T9RDVMzxdwW166QuaEHnqoYy11CYMxKY=
Subject key identifier: 36:3D:16:8E:95:E7:A4:92:8A:1D:D1:BA:82:EC:75:A8:FE:B4:D0:A8
Authority key identifier: D6:CE:5A:6E:29:29:89:92:B3:E4:5F:8C:94:80:95:49:BA:44:EF:24
Certificate issuer: /CN=d6ce5a6e29298992b3e45f8c94809549ba44ef24
Certificate serial: 0192DCE116F86E0B8C66BDFFF72D109394B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1s5abikpiZKz5F-MlICVSbpE7yQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
Manifest number: 035E
Signing time: Wed 30 Oct 2024 10:03:11 +0000
Manifest this update: Wed 30 Oct 2024 10:03:11 +0000
Manifest next update: Thu 31 Oct 2024 10:03:11 +0000
Files and hashes: 1: 1s5abikpiZKz5F-MlICVSbpE7yQ.crl (hash: hAhpc8V9eRUPF7v0fI4bUsB+Ga2XEb7J/B3aMS5gZ5c=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:92:dc:e1:16:f8:6e:0b:8c:66:bd:ff:f7:2d:10:93:94:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6ce5a6e29298992b3e45f8c94809549ba44ef24
Validity
Not Before: Oct 30 10:03:11 2024 GMT
Not After : Oct 31 10:03:11 2024 GMT
Subject: CN=363d168e95e7a4928a1dd1ba82ec75a8feb4d0a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:57:79:b9:53:d6:c1:94:2d:06:0e:d8:30:65:
10:da:77:4b:79:51:08:ba:17:84:47:d8:90:e0:19:
19:62:f7:87:b1:c0:b6:4a:99:b9:47:e4:9f:d9:fb:
ad:94:32:72:56:f8:b9:2a:08:5d:75:e3:ea:7e:50:
6d:a5:24:79:01:70:92:eb:aa:64:53:86:08:f2:e8:
3c:04:87:4b:d7:eb:26:62:6f:d3:df:ce:85:41:7b:
fc:3f:f3:a7:9c:e6:9a:86:d0:23:78:60:51:23:92:
0c:3a:a0:bc:b8:73:e5:6e:ce:75:d2:24:85:d2:f8:
a0:4c:b8:0d:3c:55:28:e6:3e:cb:ab:67:f7:4d:e4:
a1:0e:33:1a:fd:95:ed:80:6c:4f:2e:db:81:ff:86:
5f:d0:4b:79:9b:5e:70:63:fd:1f:e7:f3:6a:5d:6d:
e2:1a:43:75:53:cb:7f:a6:5a:f4:7b:16:fd:bd:cc:
06:ea:75:3c:a7:a4:b6:28:4e:83:ba:e5:38:ba:fb:
6c:76:db:bb:67:a8:f7:bc:e5:d7:af:1f:76:65:bd:
cc:4d:ed:46:17:ea:73:c9:6e:34:c2:65:ea:24:e5:
3f:20:58:dd:d6:eb:b0:5d:7f:69:0b:a5:fe:83:7a:
98:1d:c2:0d:5b:6f:f0:99:fa:ac:1a:35:51:99:4d:
ab:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:3D:16:8E:95:E7:A4:92:8A:1D:D1:BA:82:EC:75:A8:FE:B4:D0:A8
X509v3 Authority Key Identifier:
keyid:D6:CE:5A:6E:29:29:89:92:B3:E4:5F:8C:94:80:95:49:BA:44:EF:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1s5abikpiZKz5F-MlICVSbpE7yQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/6fa417-3ae6-43ac-a844-a7c62eba7bc0/1/1s5abikpiZKz5F-MlICVSbpE7yQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:0a:c0:6f:05:f6:ce:d4:ca:34:ce:95:13:42:7b:16:90:0f:
bf:bc:78:f7:ef:4a:2b:de:d0:32:8f:07:c9:28:ac:5d:d7:1d:
5b:68:23:0d:e3:19:03:83:43:5f:3a:cd:5c:85:a6:59:2d:df:
40:9e:bf:7e:16:9d:2c:3c:fb:80:51:6d:59:ac:23:2f:04:40:
a7:a4:04:2d:28:16:19:77:89:a7:1c:50:96:63:5b:2d:fa:28:
52:8d:68:60:32:7c:ec:43:4b:bd:6a:fb:d9:f2:13:68:67:5a:
ef:f8:d0:60:35:bc:d9:55:f7:ac:b1:11:69:44:10:0f:00:f9:
70:31:4e:c7:db:12:ef:4f:01:d1:6e:f5:e8:8c:c0:e8:ab:3f:
23:3d:0a:01:c5:3c:eb:88:0b:05:43:40:9e:9e:26:80:13:09:
15:9d:96:23:45:ba:f4:fd:8e:31:ac:25:11:83:78:0f:40:7c:
18:01:97:68:6e:af:3b:61:fb:b3:9a:8e:45:34:68:c7:c8:81:
ca:4a:34:ff:3b:13:12:a2:c6:8d:80:1f:67:e7:e6:fd:ac:e7:
99:bb:cd:73:fc:0e:78:61:df:3d:5b:59:db:9d:da:12:7c:05:
6f:52:90:e0:cb:13:b6:3b:ab:3e:17:b4:84:15:78:54:de:ac:
0f:54:a2:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZLc4Rb4bguMZr3/9y0Qk5SwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2Y2U1YTZlMjkyOTg5OTJiM2U0NWY4Yzk0ODA5NTQ5YmE0
NGVmMjQwHhcNMjQxMDMwMTAwMzExWhcNMjQxMDMxMTAwMzExWjAzMTEwLwYDVQQD
EygzNjNkMTY4ZTk1ZTdhNDkyOGExZGQxYmE4MmVjNzVhOGZlYjRkMGE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9ld5uVPWwZQtBg7YMGUQ2ndLeVEI
uheER9iQ4BkZYveHscC2Spm5R+Sf2futlDJyVvi5KghddePqflBtpSR5AXCS66pk
U4YI8ug8BIdL1+smYm/T386FQXv8P/OnnOaahtAjeGBRI5IMOqC8uHPlbs510iSF
0vigTLgNPFUo5j7Lq2f3TeShDjMa/ZXtgGxPLtuB/4Zf0Et5m15wY/0f5/NqXW3i
GkN1U8t/plr0exb9vcwG6nU8p6S2KE6DuuU4uvtsdtu7Z6j3vOXXrx92Zb3MTe1G
F+pzyW40wmXqJOU/IFjd1uuwXX9pC6X+g3qYHcINW2/wmfqsGjVRmU2rJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDY9Fo6V56SSih3RuoLsdaj+tNCoMB8GA1UdIwQY
MBaAFNbOWm4pKYmSs+RfjJSAlUm6RO8kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXM1YWJpa3BpWkt6NUYtTWxJQ1ZTYnBFN3lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy82ZmE0MTctM2FlNi00M2FjLWE4NDQt
YTdjNjJlYmE3YmMwLzEvMXM1YWJpa3BpWkt6NUYtTWxJQ1ZTYnBFN3lRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy82ZmE0MTctM2FlNi00M2FjLWE4NDQtYTdjNjJlYmE3YmMw
LzEvMXM1YWJpa3BpWkt6NUYtTWxJQ1ZTYnBFN3lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABQrAbwX2
ztTKNM6VE0J7FpAPv7x49+9KK97QMo8HySisXdcdW2gjDeMZA4NDXzrNXIWmWS3f
QJ6/fhadLDz7gFFtWawjLwRAp6QELSgWGXeJpxxQlmNbLfooUo1oYDJ87ENLvWr7
2fITaGda7/jQYDW82VX3rLERaUQQDwD5cDFOx9sS708B0W716IzA6Ks/Iz0KAcU8
64gLBUNAnp4mgBMJFZ2WI0W69P2OMawlEYN4D0B8GAGXaG6vO2H7s5qORTRox8iB
yko0/zsTEqLGjYAfZ+fm/aznmbvNc/wOeGHfPVtZ253aEnwFb1KQ4MsTtjurPhe0
hBV4VN6sD1Sikg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:57:35 2025 by rpki-client