![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/c6f8cb-5327-4535-a437-b5dd81e808d6/1/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.mft
File: CQ6AcZO_TAzsz0iMo3yVF1L-p-k.mft (raw, json)
Hash identifier: WoZRuD2f9BzlMGHRPgObGMfBfT8Ydyz++vPPuOmPzD8=
Subject key identifier: AA:5C:76:66:25:30:E3:F9:4A:4C:71:8E:48:D5:EB:07:80:23:40:67
Authority key identifier: 09:0E:80:71:93:BF:4C:0C:EC:CF:48:8C:A3:7C:95:17:52:FE:A7:E9
Certificate issuer: /CN=090e807193bf4c0ceccf488ca37c951752fea7e9
Certificate serial: 0187266CD42DF5596464B0FD1A8F2824100C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/c6f8cb-5327-4535-a437-b5dd81e808d6/1/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.mft
Manifest number: 0919
Signing time: Tue 28 Mar 2023 04:14:38 +0000
Manifest this update: Tue 28 Mar 2023 04:14:38 +0000
Manifest next update: Wed 29 Mar 2023 04:14:38 +0000
Files and hashes: 1: CQ6AcZO_TAzsz0iMo3yVF1L-p-k.crl (hash: CcmxpxLMPUX9yoT/DSTSCnGrDv3lXDn7sZuS3fXIGLg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:87:26:6c:d4:2d:f5:59:64:64:b0:fd:1a:8f:28:24:10:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=090e807193bf4c0ceccf488ca37c951752fea7e9
Validity
Not Before: Mar 28 04:14:38 2023 GMT
Not After : Mar 29 04:14:38 2023 GMT
Subject: CN=aa5c76662530e3f94a4c718e48d5eb0780234067
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:ec:c6:66:33:81:3c:55:5d:00:28:d9:95:84:
2c:ca:20:0f:a7:d0:40:6a:56:4f:55:fe:d6:b7:68:
5b:53:03:7a:2f:41:54:09:50:bc:00:ab:58:22:37:
d4:f0:3c:08:38:09:2e:3a:ec:79:09:a5:cc:96:e7:
61:c1:d9:60:0d:c2:e3:91:d0:d7:76:c9:02:b1:b8:
e7:13:4f:2d:02:a2:d0:82:6c:d1:3e:68:d3:a7:77:
fb:70:a5:c2:04:ef:c3:60:53:20:6a:e0:43:0d:a9:
87:5a:85:33:c9:88:0f:db:ab:25:7a:a6:62:aa:ed:
3e:ed:52:1e:35:e6:d3:e7:5c:f7:9e:e2:66:4a:12:
4f:03:9a:90:b1:73:5a:a2:07:7c:6b:a5:e2:a8:d7:
26:f0:cf:4b:ae:b6:81:f6:a2:af:52:e6:12:d8:08:
9d:f1:44:a8:57:89:40:07:a5:63:27:91:c3:42:a7:
05:7e:10:17:26:c7:47:8f:7a:e5:d1:f5:07:78:13:
c6:67:02:b0:89:93:3e:3a:42:3f:21:f2:2b:bd:f3:
65:c5:d7:2a:fa:44:d6:f5:83:7f:8f:75:ad:ec:7d:
f1:18:60:41:b2:c0:bd:17:0a:34:f8:1a:50:7c:51:
6f:9b:80:8c:a6:a5:1c:9b:ce:82:68:d1:d1:5d:bc:
70:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5C:76:66:25:30:E3:F9:4A:4C:71:8E:48:D5:EB:07:80:23:40:67
X509v3 Authority Key Identifier:
keyid:09:0E:80:71:93:BF:4C:0C:EC:CF:48:8C:A3:7C:95:17:52:FE:A7:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c6f8cb-5327-4535-a437-b5dd81e808d6/1/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/c6f8cb-5327-4535-a437-b5dd81e808d6/1/CQ6AcZO_TAzsz0iMo3yVF1L-p-k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:d8:72:06:5c:b3:33:fa:0e:8b:ac:e7:05:21:cd:d3:11:a2:
9e:d8:b2:77:1b:f8:75:12:d1:f8:3f:30:4c:53:b6:7a:22:47:
a1:3a:33:b7:ab:c1:9d:22:25:e8:e3:89:0c:e7:cf:94:18:de:
d3:f1:a0:67:b3:4a:67:52:d7:7b:e7:cc:20:bc:f9:c7:cf:15:
d5:c5:27:1a:d7:3e:26:02:b5:72:1c:11:18:f2:27:c9:35:ce:
ea:5a:78:c7:0a:13:de:18:c0:3c:9b:c0:46:1e:fe:4a:7c:f3:
56:3d:88:a5:9f:6c:07:a4:d7:51:38:1c:a9:aa:0c:82:05:c8:
f1:4f:1c:17:20:e2:50:27:b4:a6:21:45:97:22:56:fa:0f:4d:
b3:cf:da:10:f3:f4:09:a3:e9:2f:43:86:4b:31:34:eb:d1:df:
78:5b:3d:da:9f:7a:5a:cb:75:71:e6:d6:d9:43:54:6d:f7:78:
73:39:f2:a8:9c:1d:bf:4d:b6:e8:85:dc:92:80:c0:a3:88:7d:
24:44:c0:03:25:08:6e:d7:36:99:4e:73:35:d7:02:06:a9:39:
7c:4c:76:6f:27:e3:ee:1d:ff:01:6c:95:47:05:d3:e8:c3:f6:
22:9b:12:62:75:49:41:a5:1b:29:d8:03:5b:b3:e1:be:8c:de:
33:cf:3f:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYcmbNQt9VlkZLD9Go8oJBAMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MGU4MDcxOTNiZjRjMGNlY2NmNDg4Y2EzN2M5NTE3NTJm
ZWE3ZTkwHhcNMjMwMzI4MDQxNDM4WhcNMjMwMzI5MDQxNDM4WjAzMTEwLwYDVQQD
EyhhYTVjNzY2NjI1MzBlM2Y5NGE0YzcxOGU0OGQ1ZWIwNzgwMjM0MDY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuzGZjOBPFVdACjZlYQsyiAPp9BA
alZPVf7Wt2hbUwN6L0FUCVC8AKtYIjfU8DwIOAkuOux5CaXMludhwdlgDcLjkdDX
dskCsbjnE08tAqLQgmzRPmjTp3f7cKXCBO/DYFMgauBDDamHWoUzyYgP26sleqZi
qu0+7VIeNebT51z3nuJmShJPA5qQsXNaogd8a6XiqNcm8M9LrraB9qKvUuYS2Aid
8USoV4lAB6VjJ5HDQqcFfhAXJsdHj3rl0fUHeBPGZwKwiZM+OkI/IfIrvfNlxdcq
+kTW9YN/j3Wt7H3xGGBBssC9Fwo0+BpQfFFvm4CMpqUcm86CaNHRXbxwLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKpcdmYlMOP5SkxxjkjV6weAI0BnMB8GA1UdIwQY
MBaAFAkOgHGTv0wM7M9IjKN8lRdS/qfpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1E2QWNaT19UQXpzejBpTW8zeVZGMUwtcC1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC9jNmY4Y2ItNTMyNy00NTM1LWE0Mzct
YjVkZDgxZTgwOGQ2LzEvQ1E2QWNaT19UQXpzejBpTW8zeVZGMUwtcC1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC9jNmY4Y2ItNTMyNy00NTM1LWE0MzctYjVkZDgxZTgwOGQ2
LzEvQ1E2QWNaT19UQXpzejBpTW8zeVZGMUwtcC1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs9hyBlyz
M/oOi6znBSHN0xGintiydxv4dRLR+D8wTFO2eiJHoTozt6vBnSIl6OOJDOfPlBje
0/GgZ7NKZ1LXe+fMILz5x88V1cUnGtc+JgK1chwRGPInyTXO6lp4xwoT3hjAPJvA
Rh7+SnzzVj2IpZ9sB6TXUTgcqaoMggXI8U8cFyDiUCe0piFFlyJW+g9Ns8/aEPP0
CaPpL0OGSzE069HfeFs92p96Wst1cebW2UNUbfd4cznyqJwdv0226IXckoDAo4h9
JETAAyUIbtc2mU5zNdcCBqk5fEx2byfj7h3/AWyVRwXT6MP2IpsSYnVJQaUbKdgD
W7PhvozeM88/Sw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:56 2025 by rpki-client