![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.mft
File: aguD3NU5lRLJK1kcU452-_8S26o.mft (raw, json)
Hash identifier: dUWeSfFeXfGSVgW+5Pa92hLDpOm5Ql5XgYLcNR++2II=
Subject key identifier: 9B:D3:EC:8F:72:7B:67:3A:C4:04:B4:C2:DD:D3:A1:AC:24:87:F8:DA
Authority key identifier: 6A:0B:83:DC:D5:39:95:12:C9:2B:59:1C:53:8E:76:FB:FF:12:DB:AA
Certificate issuer: /CN=6a0b83dcd5399512c92b591c538e76fbff12dbaa
Certificate serial: 03EFEC7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aguD3NU5lRLJK1kcU452-_8S26o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.mft
Manifest number: 0523
Signing time: Thu 17 Feb 2022 05:26:12 +0000
Manifest this update: Thu 17 Feb 2022 05:26:12 +0000
Manifest next update: Fri 18 Feb 2022 05:26:12 +0000
Files and hashes: 1: aguD3NU5lRLJK1kcU452-_8S26o.crl (hash: rNzI5qW1RvaKeqDxAaWpn4iSilK7jT6+jX/KIfPdTdo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 66055293 (0x3efec7d)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0b83dcd5399512c92b591c538e76fbff12dbaa
Validity
Not Before: Feb 17 05:26:12 2022 GMT
Not After : Feb 18 05:26:12 2022 GMT
Subject: CN=9bd3ec8f727b673ac404b4c2ddd3a1ac2487f8da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:d4:f7:99:49:86:af:93:c3:b4:9d:6c:cf:ea:
5e:0f:7e:40:37:9d:c6:3f:a5:2d:40:f9:48:18:6a:
1f:89:d7:6d:be:4c:50:8e:ff:27:23:58:75:60:9f:
f0:28:fd:38:8f:34:cd:1e:c0:f5:25:3d:ad:65:71:
c5:29:ab:00:a8:c8:a1:49:45:a7:fb:44:91:2f:51:
c4:30:9c:7c:be:48:f9:17:b2:87:5a:e1:d2:07:03:
46:fa:a4:81:42:04:b5:0e:e0:c6:9e:70:9e:1d:b9:
85:38:be:a0:76:3f:de:a1:66:c0:33:85:7c:ce:0f:
b2:d2:a6:b7:66:13:05:f5:96:58:ab:38:35:65:d7:
67:1f:40:0b:eb:17:87:bd:0d:3b:99:57:d5:3b:60:
b9:30:1b:eb:10:2e:74:ca:cc:05:b3:0a:28:ba:8e:
f0:5f:52:de:1b:a0:d7:82:b9:23:f6:4e:87:4e:41:
0d:d2:be:e5:a6:ad:93:de:d8:31:1d:3a:76:96:c8:
dc:76:1d:ff:d2:2a:a4:35:7c:7e:26:74:e0:60:7c:
65:d3:5b:fd:f9:a6:0e:9d:a8:5b:e0:7e:37:42:49:
b9:94:a7:d5:3f:d4:07:4b:03:07:fb:c8:71:08:a8:
d0:1c:1a:32:37:d3:34:e4:6f:6b:8a:f4:9d:73:94:
e3:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:D3:EC:8F:72:7B:67:3A:C4:04:B4:C2:DD:D3:A1:AC:24:87:F8:DA
X509v3 Authority Key Identifier:
keyid:6A:0B:83:DC:D5:39:95:12:C9:2B:59:1C:53:8E:76:FB:FF:12:DB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aguD3NU5lRLJK1kcU452-_8S26o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/66b11f-2643-48aa-b168-b6b76ec19a11/1/aguD3NU5lRLJK1kcU452-_8S26o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
db:cb:19:6b:0c:2a:ab:cb:b8:05:6c:79:69:2d:1e:8e:6e:9d:
64:6c:82:ba:c3:1c:59:b0:9b:00:3d:42:13:e0:8f:5b:49:b9:
42:8d:49:77:b7:72:da:33:a1:d6:80:28:cd:22:bd:36:70:67:
bf:f9:e9:63:c6:42:2f:2f:be:e4:40:8b:60:39:d8:b9:52:d4:
96:6a:16:cc:aa:fd:e4:d5:6a:46:02:2b:ad:fd:3f:83:b1:37:
2d:d3:f7:4f:ef:e7:ab:6d:60:f1:e2:ae:e0:69:7c:a5:12:39:
d9:b1:cd:2b:38:90:5a:83:e2:9c:d8:f6:f0:63:77:fe:2e:14:
a3:3b:71:b5:63:8e:75:84:70:1e:fb:e8:8a:06:6b:47:b3:58:
75:1d:1f:e8:62:50:96:f8:63:22:66:08:23:f2:f6:00:bd:9b:
fa:1b:1a:ba:e3:de:c1:5f:ff:cf:ff:24:c6:07:1c:b3:cb:ed:
a8:bc:8a:b2:ee:b3:c4:aa:a7:74:dc:2a:a7:eb:a0:30:2d:dd:
f4:21:ed:3a:68:7a:3c:68:58:fd:15:7e:ef:03:2c:7c:48:34:
8d:68:3c:70:6e:ad:f3:b2:22:a6:94:be:cd:29:43:21:05:37:
a6:38:5c:e5:62:00:92:b0:15:6b:21:bd:d8:b0:1d:66:41:7f:
e3:90:fd:18
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgIEA+/sfTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg2
YTBiODNkY2Q1Mzk5NTEyYzkyYjU5MWM1MzhlNzZmYmZmMTJkYmFhMB4XDTIyMDIx
NzA1MjYxMloXDTIyMDIxODA1MjYxMlowMzExMC8GA1UEAxMoOWJkM2VjOGY3Mjdi
NjczYWM0MDRiNGMyZGRkM2ExYWMyNDg3ZjhkYTCCASIwDQYJKoZIhvcNAQEBBQAD
ggEPADCCAQoCggEBAKzU95lJhq+Tw7SdbM/qXg9+QDedxj+lLUD5SBhqH4nXbb5M
UI7/JyNYdWCf8Cj9OI80zR7A9SU9rWVxxSmrAKjIoUlFp/tEkS9RxDCcfL5I+Rey
h1rh0gcDRvqkgUIEtQ7gxp5wnh25hTi+oHY/3qFmwDOFfM4PstKmt2YTBfWWWKs4
NWXXZx9AC+sXh70NO5lX1TtguTAb6xAudMrMBbMKKLqO8F9S3hug14K5I/ZOh05B
DdK+5aatk97YMR06dpbI3HYd/9IqpDV8fiZ04GB8ZdNb/fmmDp2oW+B+N0JJuZSn
1T/UB0sDB/vIcQio0BwaMjfTNORva4r0nXOU47sCAwEAAaOCAiIwggIeMB0GA1Ud
DgQWBBSb0+yPcntnOsQEtMLd06GsJIf42jAfBgNVHSMEGDAWgBRqC4Pc1TmVEskr
WRxTjnb7/xLbqjAOBgNVHQ8BAf8EBAMCB4AwZAYIKwYBBQUHAQEEWDBWMFQGCCsG
AQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxU
L2FndUQzTlU1bFJMSksxa2NVNDUyLV84UzI2by5jZXIwgY0GCCsGAQUFBwELBIGA
MH4wfAYIKwYBBQUHMAuGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNGMvNjZiMTFmLTI2NDMtNDhhYS1iMTY4LWI2Yjc2ZWMxOWExMS8x
L2FndUQzTlU1bFJMSksxa2NVNDUyLV84UzI2by5tZnQwgYEGA1UdHwR6MHgwdqB0
oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNGMv
NjZiMTFmLTI2NDMtNDhhYS1iMTY4LWI2Yjc2ZWMxOWExMS8xL2FndUQzTlU1bFJM
Sksxa2NVNDUyLV84UzI2by5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAh
BggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/
BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBANvLGWsMKqvLuAVseWktHo5unWRs
grrDHFmwmwA9QhPgj1tJuUKNSXe3ctozodaAKM0ivTZwZ7/56WPGQi8vvuRAi2A5
2LlS1JZqFsyq/eTVakYCK639P4OxNy3T90/v56ttYPHiruBpfKUSOdmxzSs4kFqD
4pzY9vBjd/4uFKM7cbVjjnWEcB776IoGa0ezWHUdH+hiUJb4YyJmCCPy9gC9m/ob
Grrj3sFf/8//JMYHHLPL7ai8irLus8Sqp3TcKqfroDAt3fQh7TpoejxoWP0Vfu8D
LHxINI1oPHBurfOyIqaUvs0pQyEFN6Y4XOViAJKwFWshvdiwHWZBf+OQ/Rg=
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:47:03 2025 by rpki-client