![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.mft
File: ZahUqbv_E5FNBRZIwR1mfGQ4sTM.mft (raw, json)
Hash identifier: 2G+ZWpkM8aqK6Hfq47wmUgnsoEVN1a1x5iD2W+k4+wU=
Subject key identifier: 1F:A4:79:3E:F2:9D:CE:1A:F7:B7:04:5A:F2:BB:46:03:0E:73:37:B1
Authority key identifier: 65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
Certificate issuer: /CN=65a854a9bbff13914d051648c11d667c6438b133
Certificate serial: 018CAAB9219341CDB3830295CA9E92FBE847
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.mft
Manifest number: 07D7
Signing time: Wed 27 Dec 2023 10:01:48 +0000
Manifest this update: Wed 27 Dec 2023 10:01:48 +0000
Manifest next update: Thu 28 Dec 2023 10:01:48 +0000
Files and hashes: 1: ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl (hash: VlMVAER1v4YN1z7lkPhnfuFy0f2dg+RN03lId5QLIpM=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:aa:b9:21:93:41:cd:b3:83:02:95:ca:9e:92:fb:e8:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65a854a9bbff13914d051648c11d667c6438b133
Validity
Not Before: Dec 27 10:01:48 2023 GMT
Not After : Dec 28 10:01:48 2023 GMT
Subject: CN=1fa4793ef29dce1af7b7045af2bb46030e7337b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ee:e3:29:86:6f:ce:41:93:b9:23:85:1d:7a:
f4:46:50:73:aa:99:37:a7:28:bd:4b:08:63:5e:3e:
2c:2d:1a:b1:50:df:4c:01:d2:42:29:af:a0:b3:67:
6d:ed:44:01:32:91:eb:6c:96:99:ae:fd:44:f2:88:
7a:c1:71:f8:5b:ad:7b:3c:6c:37:d5:a2:27:50:e8:
9f:3d:13:7e:be:5e:b2:cf:46:9b:90:f8:eb:33:d2:
2e:42:04:aa:b9:af:26:33:7e:89:b6:86:b6:b7:08:
f4:20:6d:b1:66:48:12:c8:f1:0d:80:b3:5d:cd:35:
fe:e0:68:55:e7:07:ce:e0:e9:11:28:9a:ea:93:30:
85:00:80:6e:ba:4e:d2:ec:99:7b:b5:5e:8c:cf:88:
89:13:09:86:8b:c9:be:71:36:39:c7:e6:34:71:c2:
c4:8a:32:46:67:43:62:32:aa:d7:47:79:f6:c7:b1:
58:5f:bb:db:8b:79:1b:fd:4d:92:25:e9:48:b3:13:
b8:46:d2:d9:30:a2:32:4c:36:5b:43:cc:85:ff:55:
0e:68:9a:c6:9e:f5:09:69:b6:11:bb:cb:d5:2a:d3:
ef:5f:dc:46:38:fc:dd:f5:6e:88:70:de:88:d0:24:
14:c8:be:bb:f1:ca:20:59:27:55:b4:cb:df:00:37:
aa:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:79:3E:F2:9D:CE:1A:F7:B7:04:5A:F2:BB:46:03:0E:73:37:B1
X509v3 Authority Key Identifier:
keyid:65:A8:54:A9:BB:FF:13:91:4D:05:16:48:C1:1D:66:7C:64:38:B1:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/8550a3-f571-46e9-ad0e-62684d30557b/1/ZahUqbv_E5FNBRZIwR1mfGQ4sTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:85:e3:ce:41:6c:b8:a4:6c:80:01:25:fa:b9:4a:fa:25:c2:
44:af:1e:cc:32:c3:92:54:05:6b:87:28:03:43:ec:2c:39:4d:
16:d4:48:ee:26:14:cb:bb:9a:f4:c7:7b:58:00:5f:bb:5c:dc:
5c:61:fc:74:8b:17:70:20:c2:6a:3b:2f:af:aa:21:6d:2a:57:
a1:d4:96:71:31:b5:f6:d6:da:b3:60:26:6d:a3:04:44:a0:fc:
35:47:68:94:64:78:70:f4:60:d7:12:f0:f1:15:e3:e8:db:32:
d8:b6:c6:bd:99:e6:b0:72:75:35:29:be:53:0a:da:87:89:5f:
ec:9c:ed:4c:a1:e8:3b:b4:4f:42:f2:4e:9c:dd:63:b9:9b:9d:
8e:93:ba:56:4f:42:5f:0f:f1:03:b1:3c:3c:90:9e:60:33:b7:
e4:f3:1e:c1:b2:be:7e:fb:d5:ff:5f:37:18:70:e1:1a:ba:36:
3b:79:f3:3a:23:87:b8:c0:26:61:b5:a6:82:c7:47:ca:93:4c:
5e:8e:aa:3c:43:49:b9:a7:3c:d0:3b:13:b5:72:9c:fa:44:a1:
3e:02:c8:e7:a5:4b:41:f0:4c:36:44:d3:6e:6c:e1:30:b7:fa:
9b:31:9d:a7:1d:02:6b:0e:cf:a8:9f:de:cc:3b:f9:3a:a2:37:
bf:45:85:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYyquSGTQc2zgwKVyp6S++hHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1YTg1NGE5YmJmZjEzOTE0ZDA1MTY0OGMxMWQ2NjdjNjQz
OGIxMzMwHhcNMjMxMjI3MTAwMTQ4WhcNMjMxMjI4MTAwMTQ4WjAzMTEwLwYDVQQD
EygxZmE0NzkzZWYyOWRjZTFhZjdiNzA0NWFmMmJiNDYwMzBlNzMzN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5+7jKYZvzkGTuSOFHXr0RlBzqpk3
pyi9SwhjXj4sLRqxUN9MAdJCKa+gs2dt7UQBMpHrbJaZrv1E8oh6wXH4W617PGw3
1aInUOifPRN+vl6yz0abkPjrM9IuQgSqua8mM36Jtoa2twj0IG2xZkgSyPENgLNd
zTX+4GhV5wfO4OkRKJrqkzCFAIBuuk7S7Jl7tV6Mz4iJEwmGi8m+cTY5x+Y0ccLE
ijJGZ0NiMqrXR3n2x7FYX7vbi3kb/U2SJelIsxO4RtLZMKIyTDZbQ8yF/1UOaJrG
nvUJabYRu8vVKtPvX9xGOPzd9W6IcN6I0CQUyL678cogWSdVtMvfADeqNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB+keT7ync4a97cEWvK7RgMOczexMB8GA1UdIwQY
MBaAFGWoVKm7/xORTQUWSMEdZnxkOLEzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUt
NjI2ODRkMzA1NTdiLzEvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS84NTUwYTMtZjU3MS00NmU5LWFkMGUtNjI2ODRkMzA1NTdi
LzEvWmFoVXFidl9FNUZOQlJaSXdSMW1mR1E0c1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKIXjzkFs
uKRsgAEl+rlK+iXCRK8ezDLDklQFa4coA0PsLDlNFtRI7iYUy7ua9Md7WABfu1zc
XGH8dIsXcCDCajsvr6ohbSpXodSWcTG19tbas2AmbaMERKD8NUdolGR4cPRg1xLw
8RXj6Nsy2LbGvZnmsHJ1NSm+Uwrah4lf7JztTKHoO7RPQvJOnN1juZudjpO6Vk9C
Xw/xA7E8PJCeYDO35PMewbK+fvvV/183GHDhGro2O3nzOiOHuMAmYbWmgsdHypNM
Xo6qPENJuac80DsTtXKc+kShPgLI56VLQfBMNkTTbmzhMLf6mzGdpx0Caw7PqJ/e
zDv5OqI3v0WFEw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:56 2025 by rpki-client