![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.mft
File: 3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.mft (raw, json)
Hash identifier: tskwO/1jkG6iql0WT6Sj8L5up4/7/ufa6T20GRzZQCs=
Subject key identifier: F2:EF:3B:8A:ED:E4:81:92:E0:42:5C:6D:B5:C3:61:F4:84:88:C8:71
Authority key identifier: DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C
Certificate issuer: /CN=dde54706f1767065092e9e02a44da24b6628e88c
Certificate serial: 018AF8A1974433220D4D380087639C1F469C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.mft
Manifest number: 0871
Signing time: Wed 04 Oct 2023 03:00:54 +0000
Manifest this update: Wed 04 Oct 2023 03:00:54 +0000
Manifest next update: Thu 05 Oct 2023 03:00:54 +0000
Files and hashes: 1: 1Jm4DLbDr4-hnwwMVvfQ9uTIe9Q.roa (hash: 6xBLxVElnrXxVySu1lS6scXTmQGPZAIVODNRWEoImKw=)
2: 3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.crl (hash: dwA7z4sHkaesb87Mde85HJwqxFtmmS4coSZcVsUshjI=)
3: H6cfCd4nlW8zCAmd8S2js4-T_NM.roa (hash: ZP7uE5w9sJ3lEPhdxuZXkgiEVFMuf1T6s4z5Do+uro8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:f8:a1:97:44:33:22:0d:4d:38:00:87:63:9c:1f:46:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dde54706f1767065092e9e02a44da24b6628e88c
Validity
Not Before: Oct 4 03:00:54 2023 GMT
Not After : Oct 5 03:00:54 2023 GMT
Subject: CN=f2ef3b8aede48192e0425c6db5c361f48488c871
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:f4:1d:90:e7:20:77:2b:47:ef:58:23:8c:06:
c5:ba:68:f2:63:5e:1a:c0:95:2b:aa:d6:8b:c8:55:
10:9d:87:97:c7:f5:a9:fb:55:e0:31:b2:05:da:97:
bf:89:6e:e5:7f:7a:82:7b:f0:84:b3:ee:b2:14:d5:
8e:92:99:9d:6e:ba:dc:28:e7:7a:d6:ff:7f:07:ec:
4a:fb:cd:d6:ce:7a:b8:14:09:44:3c:bc:f6:1c:e9:
8a:f7:f0:00:86:9d:81:ac:32:29:a5:e7:07:65:e2:
65:56:d6:f9:e8:23:04:03:1b:ba:b4:19:5f:94:c1:
2e:34:75:5b:a8:9c:b3:34:3a:2f:cf:a3:84:1b:85:
a0:01:7b:6b:0a:1c:9a:e3:09:ae:bd:15:49:cc:fe:
6b:47:30:f7:a4:04:99:f1:41:15:2c:ed:af:d8:99:
b0:dd:8f:50:3c:4a:77:35:1c:f9:57:65:62:ec:76:
37:ae:06:69:1f:14:19:90:06:81:aa:40:92:57:44:
28:06:a3:b6:3b:84:41:00:e3:be:8e:ae:ef:b1:ee:
f5:79:fe:a8:9c:7d:28:58:e8:70:77:f1:8d:ef:8a:
2a:ed:2a:cf:db:12:00:75:0f:8c:64:1b:96:b5:fb:
5d:5b:9b:61:50:14:6a:7b:83:07:60:42:2e:27:b3:
6b:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:EF:3B:8A:ED:E4:81:92:E0:42:5C:6D:B5:C3:61:F4:84:88:C8:71
X509v3 Authority Key Identifier:
keyid:DD:E5:47:06:F1:76:70:65:09:2E:9E:02:A4:4D:A2:4B:66:28:E8:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/befdcc-ea6c-4ffc-b0f5-16cd161c49a1/1/3eVHBvF2cGUJLp4CpE2iS2Yo6Iw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:aa:1f:a4:a3:da:26:9b:86:f0:ad:e0:f4:b6:53:8e:da:d0:
60:57:20:16:e6:4f:c6:09:cd:b9:16:8e:23:0c:73:99:d3:25:
e7:f3:68:13:67:7f:92:02:0f:44:f2:02:5a:37:41:26:fa:19:
8a:44:97:4c:fc:ec:0c:88:2a:5f:b5:2b:6f:35:0c:6c:6a:07:
bb:13:9c:62:4e:50:7c:6a:07:1e:69:18:fd:85:73:41:ce:c7:
26:8b:e8:f8:14:e8:fb:01:94:6e:6d:94:61:f0:60:00:4b:95:
f3:6e:8b:5b:3a:14:d9:08:95:00:c5:71:e2:3f:b3:e4:fa:2d:
e7:70:7d:93:d7:90:25:74:3f:f6:b8:60:79:8e:9e:7f:42:87:
1e:00:e1:37:28:08:8a:3a:7a:4b:74:25:41:7f:c0:65:ea:27:
5c:4e:b0:fa:2d:48:df:b5:40:d4:62:17:67:55:ae:8c:64:cc:
1c:49:05:85:9c:9f:1c:fa:16:6d:c0:a0:97:ef:bb:ac:e2:59:
86:aa:bd:88:d6:8d:41:a3:c7:a9:ec:c4:81:e7:c0:bd:ae:1a:
2c:e0:59:9a:1c:4a:00:48:ad:a3:c4:52:f7:6c:ee:07:75:f4:
8f:f5:9d:4b:68:fc:fe:68:60:60:eb:dc:a3:38:13:0f:27:c8:
58:0a:17:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYr4oZdEMyINTTgAh2OcH0acMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRkZTU0NzA2ZjE3NjcwNjUwOTJlOWUwMmE0NGRhMjRiNjYy
OGU4OGMwHhcNMjMxMDA0MDMwMDU0WhcNMjMxMDA1MDMwMDU0WjAzMTEwLwYDVQQD
EyhmMmVmM2I4YWVkZTQ4MTkyZTA0MjVjNmRiNWMzNjFmNDg0ODhjODcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/QdkOcgdytH71gjjAbFumjyY14a
wJUrqtaLyFUQnYeXx/Wp+1XgMbIF2pe/iW7lf3qCe/CEs+6yFNWOkpmdbrrcKOd6
1v9/B+xK+83Wznq4FAlEPLz2HOmK9/AAhp2BrDIppecHZeJlVtb56CMEAxu6tBlf
lMEuNHVbqJyzNDovz6OEG4WgAXtrChya4wmuvRVJzP5rRzD3pASZ8UEVLO2v2Jmw
3Y9QPEp3NRz5V2Vi7HY3rgZpHxQZkAaBqkCSV0QoBqO2O4RBAOO+jq7vse71ef6o
nH0oWOhwd/GN74oq7SrP2xIAdQ+MZBuWtftdW5thUBRqe4MHYEIuJ7NrrQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLvO4rt5IGS4EJcbbXDYfSEiMhxMB8GA1UdIwQY
MBaAFN3lRwbxdnBlCS6eAqRNoktmKOiMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM2VWSEJ2RjJjR1VKTHA0Q3BFMmlTMllvNkl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS9iZWZkY2MtZWE2Yy00ZmZjLWIwZjUt
MTZjZDE2MWM0OWExLzEvM2VWSEJ2RjJjR1VKTHA0Q3BFMmlTMllvNkl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MS9iZWZkY2MtZWE2Yy00ZmZjLWIwZjUtMTZjZDE2MWM0OWEx
LzEvM2VWSEJ2RjJjR1VKTHA0Q3BFMmlTMllvNkl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgqofpKPa
JpuG8K3g9LZTjtrQYFcgFuZPxgnNuRaOIwxzmdMl5/NoE2d/kgIPRPICWjdBJvoZ
ikSXTPzsDIgqX7UrbzUMbGoHuxOcYk5QfGoHHmkY/YVzQc7HJovo+BTo+wGUbm2U
YfBgAEuV826LWzoU2QiVAMVx4j+z5Pot53B9k9eQJXQ/9rhgeY6ef0KHHgDhNygI
ijp6S3QlQX/AZeonXE6w+i1I37VA1GIXZ1WujGTMHEkFhZyfHPoWbcCgl++7rOJZ
hqq9iNaNQaPHqezEgefAva4aLOBZmhxKAEito8RS92zuB3X0j/WdS2j8/mhgYOvc
ozgTDyfIWAoXsQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:16:22 2025 by rpki-client