![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/XvWG6QFKZfYAfb0AawYgMvXWbm8.mft
File: XvWG6QFKZfYAfb0AawYgMvXWbm8.mft (raw, json)
Hash identifier: rJQW7EUGpE3Yl5PZEsI6Szs/vTzW5StNaEimuNs5/k0=
Subject key identifier: 6E:1B:98:F9:EB:98:46:7E:E5:4C:C6:AC:CF:23:17:AF:F8:A3:5C:CD
Authority key identifier: 5E:F5:86:E9:01:4A:65:F6:00:7D:BD:00:6B:06:20:32:F5:D6:6E:6F
Certificate issuer: /CN=5ef586e9014a65f6007dbd006b062032f5d66e6f
Certificate serial: 0188B2592291D96BC6B27AE98C6E52974B3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XvWG6QFKZfYAfb0AawYgMvXWbm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/XvWG6QFKZfYAfb0AawYgMvXWbm8.mft
Manifest number: 0DDA
Signing time: Tue 13 Jun 2023 01:22:45 +0000
Manifest this update: Tue 13 Jun 2023 01:22:45 +0000
Manifest next update: Wed 14 Jun 2023 01:22:45 +0000
Files and hashes: 1: XvWG6QFKZfYAfb0AawYgMvXWbm8.crl (hash: jfSQ7p2Zh0Z3ru/bOI6kcK1YDH2LFPfAn1BloOLvenI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:88:b2:59:22:91:d9:6b:c6:b2:7a:e9:8c:6e:52:97:4b:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ef586e9014a65f6007dbd006b062032f5d66e6f
Validity
Not Before: Jun 13 01:22:45 2023 GMT
Not After : Jun 14 01:22:45 2023 GMT
Subject: CN=6e1b98f9eb98467ee54cc6accf2317aff8a35ccd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:d2:45:14:30:87:61:ca:f5:a8:70:c7:c9:a8:
94:1f:7d:d3:ac:f8:7f:11:8b:ce:5e:91:e7:38:4f:
91:f7:4b:a4:56:8b:8f:92:7f:0b:e2:40:c4:9d:44:
e8:fb:a2:20:a7:cd:d5:c3:a2:56:05:d1:41:06:61:
d5:6e:96:d8:ea:b5:97:3d:08:e9:4f:9c:50:06:99:
6c:d4:3d:8a:5b:06:43:cc:79:a4:90:a7:97:9f:8d:
f7:37:72:81:81:40:f9:38:ad:84:94:17:42:2d:46:
2e:46:d5:7a:65:ae:37:56:c4:44:cd:d4:50:00:92:
61:08:80:3d:14:3e:80:30:c9:b9:b4:ed:d4:a6:89:
10:b5:9b:27:ea:37:0e:26:99:be:73:de:0b:33:0a:
8e:ae:c5:f0:f6:76:c0:22:72:9e:05:1b:76:ff:66:
2a:fc:9c:94:bf:f0:de:4f:dc:c8:2e:0b:55:04:83:
15:b8:76:03:29:a1:5a:e4:83:73:3a:60:8d:3a:e7:
3f:7a:c9:e1:17:9d:01:21:e8:fd:6c:b0:f8:ae:3c:
75:17:9d:5a:8a:95:73:d5:47:1b:5a:09:af:9e:13:
e5:25:03:6c:90:75:75:91:51:45:46:16:9d:80:b8:
cf:da:eb:8f:e3:38:66:bd:da:4e:f5:64:01:6d:81:
e0:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:1B:98:F9:EB:98:46:7E:E5:4C:C6:AC:CF:23:17:AF:F8:A3:5C:CD
X509v3 Authority Key Identifier:
keyid:5E:F5:86:E9:01:4A:65:F6:00:7D:BD:00:6B:06:20:32:F5:D6:6E:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XvWG6QFKZfYAfb0AawYgMvXWbm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/XvWG6QFKZfYAfb0AawYgMvXWbm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/f31d68-ab5f-4113-afd0-69da307ce49c/1/XvWG6QFKZfYAfb0AawYgMvXWbm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:1e:9c:5e:ac:cc:61:ad:0f:1e:d9:c4:0d:da:39:1a:f7:a7:
bc:70:36:1a:92:64:b0:26:30:5d:f7:6a:20:c9:d0:8d:f8:d7:
41:62:be:02:a8:19:98:72:20:d3:51:19:01:70:11:eb:bf:d3:
33:0b:3d:60:17:dd:0f:70:2a:07:39:07:19:14:c1:59:64:20:
24:9f:4f:c2:61:22:74:8a:58:5e:8c:72:34:2b:ff:df:18:19:
11:96:c3:c1:55:fd:c9:68:4c:8f:bd:93:0e:0f:19:c0:f0:f4:
ff:82:18:77:3f:88:9b:99:e7:cb:4b:63:44:bd:b3:ad:2e:7e:
84:4d:83:c1:41:3e:0b:b1:f5:55:29:54:dc:91:9c:d1:e3:19:
33:f2:b9:4e:0e:f3:8a:b4:4d:2f:b1:a2:05:ee:0b:a7:f6:44:
04:1f:72:68:46:45:11:b5:10:f1:f6:d8:d5:bf:62:ee:44:08:
e1:4e:82:24:e2:ce:8b:52:97:e5:51:98:3a:28:22:0c:72:df:
d7:0c:db:6c:10:c7:83:97:89:52:72:dc:d0:88:f3:77:06:62:
92:36:25:a8:17:fb:04:e1:f0:15:37:6c:ff:27:ee:94:42:86:
d9:fd:b9:a7:cf:47:e1:b2:08:e3:bf:4b:58:61:8e:ae:55:cb:
51:c9:fd:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYiyWSKR2WvGsnrpjG5Sl0s6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlZjU4NmU5MDE0YTY1ZjYwMDdkYmQwMDZiMDYyMDMyZjVk
NjZlNmYwHhcNMjMwNjEzMDEyMjQ1WhcNMjMwNjE0MDEyMjQ1WjAzMTEwLwYDVQQD
Eyg2ZTFiOThmOWViOTg0NjdlZTU0Y2M2YWNjZjIzMTdhZmY4YTM1Y2NkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA69JFFDCHYcr1qHDHyaiUH33TrPh/
EYvOXpHnOE+R90ukVouPkn8L4kDEnUTo+6Igp83Vw6JWBdFBBmHVbpbY6rWXPQjp
T5xQBpls1D2KWwZDzHmkkKeXn433N3KBgUD5OK2ElBdCLUYuRtV6Za43VsREzdRQ
AJJhCIA9FD6AMMm5tO3UpokQtZsn6jcOJpm+c94LMwqOrsXw9nbAInKeBRt2/2Yq
/JyUv/DeT9zILgtVBIMVuHYDKaFa5INzOmCNOuc/esnhF50BIej9bLD4rjx1F51a
ipVz1UcbWgmvnhPlJQNskHV1kVFFRhadgLjP2uuP4zhmvdpO9WQBbYHgFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4bmPnrmEZ+5UzGrM8jF6/4o1zNMB8GA1UdIwQY
MBaAFF71hukBSmX2AH29AGsGIDL11m5vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWHZXRzZRRktaZllBZmIwQWF3WWdNdlhXYm04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC9mMzFkNjgtYWI1Zi00MTEzLWFmZDAt
NjlkYTMwN2NlNDljLzEvWHZXRzZRRktaZllBZmIwQWF3WWdNdlhXYm04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC9mMzFkNjgtYWI1Zi00MTEzLWFmZDAtNjlkYTMwN2NlNDlj
LzEvWHZXRzZRRktaZllBZmIwQWF3WWdNdlhXYm04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAph6cXqzM
Ya0PHtnEDdo5GvenvHA2GpJksCYwXfdqIMnQjfjXQWK+AqgZmHIg01EZAXAR67/T
Mws9YBfdD3AqBzkHGRTBWWQgJJ9PwmEidIpYXoxyNCv/3xgZEZbDwVX9yWhMj72T
Dg8ZwPD0/4IYdz+Im5nny0tjRL2zrS5+hE2DwUE+C7H1VSlU3JGc0eMZM/K5Tg7z
irRNL7GiBe4Lp/ZEBB9yaEZFEbUQ8fbY1b9i7kQI4U6CJOLOi1KX5VGYOigiDHLf
1wzbbBDHg5eJUnLc0IjzdwZikjYlqBf7BOHwFTds/yfulEKG2f25p89H4bII479L
WGGOrlXLUcn9SA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:22:43 2025 by rpki-client