![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft
File: Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft (raw, json)
Hash identifier: P1UZM5RIO7UgXY3kBwPDf+SyiJFer1HRhCI2pIAVskk=
Subject key identifier: 1F:24:82:1C:4E:30:C5:F8:B3:A2:79:81:D8:76:A9:C7:90:76:3E:B4
Authority key identifier: 4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
Certificate issuer: /CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Certificate serial: 018E080D39E6E2C5A9E6649AA50CB5765F32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft
Manifest number: 10B1
Signing time: Mon 04 Mar 2024 06:01:08 +0000
Manifest this update: Mon 04 Mar 2024 06:01:08 +0000
Manifest next update: Tue 05 Mar 2024 06:01:08 +0000
Files and hashes: 1: Tmem5HMP2ytYIjBtEfQ9vYwzN90.crl (hash: eOq1no7dPDDS/HbvpX11fp7GMY8cUApc9dBIfy01QBw=)
2: YxNyCA8EusX030YlHL9sedaLetI.roa (hash: nJ9Ds1JMsa0sor8ZapVbc2b2tegUSb03YDS2mw9hSAI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8e:08:0d:39:e6:e2:c5:a9:e6:64:9a:a5:0c:b5:76:5f:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e67a6e4730fdb2b5822306d11f43dbd8c3337dd
Validity
Not Before: Mar 4 06:01:08 2024 GMT
Not After : Mar 5 06:01:08 2024 GMT
Subject: CN=1f24821c4e30c5f8b3a27981d876a9c790763eb4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:02:c0:c8:c5:c9:a5:9b:8f:9a:91:02:d8:02:
14:eb:3b:d1:09:e8:f7:2c:05:68:20:c0:0b:99:ea:
09:18:a6:f1:6f:58:32:ac:7a:bf:b5:c9:5d:28:1e:
a2:e2:0d:f9:79:de:de:ec:cd:09:d6:13:8e:5a:96:
10:76:93:22:4d:9b:05:83:93:30:36:d5:97:f6:75:
e6:20:29:dc:bc:c6:c4:63:e8:91:e7:5f:f4:87:35:
b3:09:f9:03:ae:7b:06:e8:8a:ae:22:32:6f:8e:8c:
60:3c:ee:67:af:5d:76:79:a7:f2:0c:66:4d:46:7d:
b0:46:62:5a:f2:0d:f6:f3:b6:a8:5b:f0:35:47:06:
a2:4a:a1:e5:0c:97:40:7f:da:98:d1:c1:a1:c8:26:
1b:be:35:5f:87:b8:7f:42:84:24:82:2c:e1:9c:a9:
d5:fd:6c:e1:11:e0:74:b6:bc:09:e8:1a:58:cf:6b:
12:17:5b:e6:dd:af:cf:2e:96:59:44:c9:ae:c3:db:
c8:44:37:17:f8:3c:27:52:bf:04:97:06:16:bc:51:
f3:f4:c4:4d:e6:2d:a4:96:ff:66:92:42:03:c3:8f:
ca:84:9c:d3:39:eb:8b:00:2f:c5:4d:40:e7:e6:f4:
4a:73:18:01:57:e8:15:d2:15:1e:f1:3e:0a:88:3d:
fb:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:24:82:1C:4E:30:C5:F8:B3:A2:79:81:D8:76:A9:C7:90:76:3E:B4
X509v3 Authority Key Identifier:
keyid:4E:67:A6:E4:73:0F:DB:2B:58:22:30:6D:11:F4:3D:BD:8C:33:37:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Tmem5HMP2ytYIjBtEfQ9vYwzN90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/51518c-ebbf-43e8-a30d-52ccd02ec722/1/Tmem5HMP2ytYIjBtEfQ9vYwzN90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:a1:c6:03:45:d2:9a:6a:e3:bf:22:03:68:60:8a:00:1f:92:
80:e6:3e:ec:2b:ea:df:dd:72:2a:42:55:ff:58:13:05:af:c4:
62:29:e7:ba:cb:4a:d0:2c:f7:6a:24:36:6f:24:16:0c:6b:14:
32:92:f6:ff:04:8b:94:ad:0b:33:57:d1:0d:81:97:a3:74:45:
49:a5:0c:ae:e1:24:7e:0a:5f:75:92:d2:2e:55:ac:6b:49:ec:
e3:dd:cb:55:55:0e:fb:75:78:51:a6:67:30:51:c8:36:fa:44:
bb:9b:0e:70:9a:f0:1c:a0:df:4b:b6:df:b7:62:2e:56:ac:52:
56:ca:39:fe:be:6f:5c:f2:b5:07:a5:53:7a:30:3f:cc:e4:bb:
5f:a2:70:58:02:fb:15:95:51:5f:df:e7:75:b2:02:15:2f:0d:
29:f7:62:18:0b:8b:ad:82:7c:b4:e3:6b:19:5d:5a:57:ea:0b:
5b:0d:42:0d:40:74:3c:d6:af:98:5c:03:a2:00:d6:54:eb:b2:
48:b0:49:08:6d:bf:a4:6d:93:60:bc:5e:f4:4e:df:bf:db:ae:
71:23:aa:e0:f6:01:07:8e:42:2e:a4:07:df:d3:ef:3b:87:9e:
7c:60:1c:49:d3:ae:c2:58:9c:d1:0e:e3:71:2a:5f:0b:b4:f3:
6a:ae:63:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY4IDTnm4sWp5mSapQy1dl8yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRlNjdhNmU0NzMwZmRiMmI1ODIyMzA2ZDExZjQzZGJkOGMz
MzM3ZGQwHhcNMjQwMzA0MDYwMTA4WhcNMjQwMzA1MDYwMTA4WjAzMTEwLwYDVQQD
EygxZjI0ODIxYzRlMzBjNWY4YjNhMjc5ODFkODc2YTljNzkwNzYzZWI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogLAyMXJpZuPmpEC2AIU6zvRCej3
LAVoIMALmeoJGKbxb1gyrHq/tcldKB6i4g35ed7e7M0J1hOOWpYQdpMiTZsFg5Mw
NtWX9nXmICncvMbEY+iR51/0hzWzCfkDrnsG6IquIjJvjoxgPO5nr112eafyDGZN
Rn2wRmJa8g3287aoW/A1RwaiSqHlDJdAf9qY0cGhyCYbvjVfh7h/QoQkgizhnKnV
/WzhEeB0trwJ6BpYz2sSF1vm3a/PLpZZRMmuw9vIRDcX+DwnUr8ElwYWvFHz9MRN
5i2klv9mkkIDw4/KhJzTOeuLAC/FTUDn5vRKcxgBV+gV0hUe8T4KiD37ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB8kghxOMMX4s6J5gdh2qceQdj60MB8GA1UdIwQY
MBaAFE5npuRzD9srWCIwbRH0Pb2MMzfdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVG1lbTVITVAyeXRZSWpCdEVmUTl2WXd6TjkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81MTUxOGMtZWJiZi00M2U4LWEzMGQt
NTJjY2QwMmVjNzIyLzEvVG1lbTVITVAyeXRZSWpCdEVmUTl2WXd6TjkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81MTUxOGMtZWJiZi00M2U4LWEzMGQtNTJjY2QwMmVjNzIy
LzEvVG1lbTVITVAyeXRZSWpCdEVmUTl2WXd6TjkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcKHGA0XS
mmrjvyIDaGCKAB+SgOY+7Cvq391yKkJV/1gTBa/EYinnustK0Cz3aiQ2byQWDGsU
MpL2/wSLlK0LM1fRDYGXo3RFSaUMruEkfgpfdZLSLlWsa0ns493LVVUO+3V4UaZn
MFHINvpEu5sOcJrwHKDfS7bft2IuVqxSVso5/r5vXPK1B6VTejA/zOS7X6JwWAL7
FZVRX9/ndbICFS8NKfdiGAuLrYJ8tONrGV1aV+oLWw1CDUB0PNavmFwDogDWVOuy
SLBJCG2/pG2TYLxe9E7fv9uucSOq4PYBB45CLqQH39PvO4eefGAcSdOuwlic0Q7j
cSpfC7Tzaq5jgg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:49 2025 by rpki-client