![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.mft
File: ao7S-HEhcGSQZouk69xHpRrTsUs.mft (raw, json)
Hash identifier: u4Tj1L1+MBe1eg71umStEHcmLTHLwie+D8KgkrB+gMg=
Subject key identifier: 5B:1A:63:99:EF:DE:B7:9E:8D:D1:E5:AF:7A:07:23:55:D7:7D:1B:49
Authority key identifier: 6A:8E:D2:F8:71:21:70:64:90:66:8B:A4:EB:DC:47:A5:1A:D3:B1:4B
Certificate issuer: /CN=6a8ed2f87121706490668ba4ebdc47a51ad3b14b
Certificate serial: 01856234AE17104450D581C0966B04B536AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ao7S-HEhcGSQZouk69xHpRrTsUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.mft
Manifest number: 0207
Signing time: Fri 30 Dec 2022 08:44:57 +0000
Manifest this update: Fri 30 Dec 2022 08:44:57 +0000
Manifest next update: Sat 31 Dec 2022 08:44:57 +0000
Files and hashes: 1: ao7S-HEhcGSQZouk69xHpRrTsUs.crl (hash: GOWHS85ANm4fZ6lkBIjJVOdepKlhYu/alTL1SR7ABRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:62:34:ae:17:10:44:50:d5:81:c0:96:6b:04:b5:36:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a8ed2f87121706490668ba4ebdc47a51ad3b14b
Validity
Not Before: Dec 30 08:44:57 2022 GMT
Not After : Dec 31 08:44:57 2022 GMT
Subject: CN=5b1a6399efdeb79e8dd1e5af7a072355d77d1b49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:0d:f3:ef:27:06:53:e4:8a:4c:46:15:40:d0:
61:7d:fb:5e:f1:a8:9b:ad:9d:84:ff:5b:0d:0c:21:
e8:98:a2:92:19:57:eb:18:99:6c:cb:6e:21:dd:ab:
26:53:fa:3e:cb:33:23:57:db:5d:34:55:7a:52:68:
18:fb:97:43:6b:89:92:aa:bd:c7:6d:94:9d:b8:9d:
dc:cf:bb:2b:3d:ef:b6:56:e6:b3:4e:cb:3a:9b:fa:
77:67:84:b7:d9:c6:09:15:fd:84:da:a9:03:36:d7:
bf:76:c2:f7:36:4b:5a:db:72:e5:26:52:c6:58:7c:
f1:07:82:f5:de:a1:6e:04:37:a6:7d:07:b0:ae:79:
9b:c4:31:6e:c9:d6:0c:b2:94:8e:60:bf:73:71:d7:
e6:0f:70:67:ff:45:66:7e:ac:2e:c7:be:56:90:e7:
1e:e6:6f:2a:8d:63:15:21:bf:4b:6d:b5:5f:f9:dd:
dd:11:8a:a8:78:cc:e2:c8:2b:9a:e0:97:fe:37:bc:
6d:ef:e1:a7:d2:36:78:a3:ad:bf:14:c9:5c:e6:83:
f2:12:25:8e:28:a9:31:65:cd:d6:b6:5a:b2:3f:ef:
8b:1d:8f:cb:0e:4b:5f:37:05:6c:08:51:12:c5:fa:
c6:81:fb:f4:d0:29:4d:46:3f:c9:d8:3c:7f:cb:02:
07:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:1A:63:99:EF:DE:B7:9E:8D:D1:E5:AF:7A:07:23:55:D7:7D:1B:49
X509v3 Authority Key Identifier:
keyid:6A:8E:D2:F8:71:21:70:64:90:66:8B:A4:EB:DC:47:A5:1A:D3:B1:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ao7S-HEhcGSQZouk69xHpRrTsUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/cd6783-f0f4-426d-b8e0-048214ae4d31/1/ao7S-HEhcGSQZouk69xHpRrTsUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:b1:0b:de:c5:40:d9:b5:ff:b8:ec:2c:c8:0a:d3:81:ca:54:
bd:8c:2c:90:2e:23:fa:d1:ca:ff:02:50:ce:ad:e8:39:a9:84:
28:32:4e:2e:f3:51:ba:2e:ee:c9:d4:91:a4:20:02:8b:64:88:
bc:1b:e5:6e:c0:dd:f2:6a:12:d5:49:e6:bd:26:f6:41:13:9a:
88:50:4c:44:1c:fb:61:4d:ef:e0:1f:1b:ec:b1:ef:56:94:ae:
32:cf:a1:2e:04:8f:00:e0:0f:19:dd:36:ce:57:09:0f:2b:1d:
e8:b5:4e:2a:23:e1:5d:96:9f:b6:02:de:f3:4e:62:3e:f4:7b:
dc:a6:7d:b8:e5:44:10:7f:d1:31:32:1a:d3:e2:bf:4f:3a:18:
c7:39:23:84:33:d9:24:2a:89:d3:31:e7:9d:0e:9e:b3:2f:45:
0e:01:ea:cf:f4:b2:fb:dc:5b:ba:2d:7a:a9:4f:4c:3d:8d:c7:
0a:96:ae:42:d6:2f:9f:d9:dd:07:48:41:0f:1d:02:92:4b:12:
67:c6:df:44:31:3b:03:3d:f9:e9:02:93:8a:20:4a:8d:da:39:
9c:47:67:04:1f:40:56:26:23:d4:d3:30:d6:01:2a:20:dc:99:
94:6d:4e:c0:de:d0:6c:8c:33:f1:5c:17:70:ba:66:65:8c:0f:
77:c1:2e:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYViNK4XEERQ1YHAlmsEtTatMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOGVkMmY4NzEyMTcwNjQ5MDY2OGJhNGViZGM0N2E1MWFk
M2IxNGIwHhcNMjIxMjMwMDg0NDU3WhcNMjIxMjMxMDg0NDU3WjAzMTEwLwYDVQQD
Eyg1YjFhNjM5OWVmZGViNzllOGRkMWU1YWY3YTA3MjM1NWQ3N2QxYjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgg3z7ycGU+SKTEYVQNBhffte8aib
rZ2E/1sNDCHomKKSGVfrGJlsy24h3asmU/o+yzMjV9tdNFV6UmgY+5dDa4mSqr3H
bZSduJ3cz7srPe+2VuazTss6m/p3Z4S32cYJFf2E2qkDNte/dsL3Nkta23LlJlLG
WHzxB4L13qFuBDemfQewrnmbxDFuydYMspSOYL9zcdfmD3Bn/0Vmfqwux75WkOce
5m8qjWMVIb9LbbVf+d3dEYqoeMziyCua4Jf+N7xt7+Gn0jZ4o62/FMlc5oPyEiWO
KKkxZc3WtlqyP++LHY/LDktfNwVsCFESxfrGgfv00ClNRj/J2Dx/ywIHuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsaY5nv3reejdHlr3oHI1XXfRtJMB8GA1UdIwQY
MBaAFGqO0vhxIXBkkGaLpOvcR6Ua07FLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYW83Uy1IRWhjR1NRWm91azY5eEhwUnJUc1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS9jZDY3ODMtZjBmNC00MjZkLWI4ZTAt
MDQ4MjE0YWU0ZDMxLzEvYW83Uy1IRWhjR1NRWm91azY5eEhwUnJUc1VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS9jZDY3ODMtZjBmNC00MjZkLWI4ZTAtMDQ4MjE0YWU0ZDMx
LzEvYW83Uy1IRWhjR1NRWm91azY5eEhwUnJUc1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAELEL3sVA
2bX/uOwsyArTgcpUvYwskC4j+tHK/wJQzq3oOamEKDJOLvNRui7uydSRpCACi2SI
vBvlbsDd8moS1UnmvSb2QROaiFBMRBz7YU3v4B8b7LHvVpSuMs+hLgSPAOAPGd02
zlcJDysd6LVOKiPhXZaftgLe805iPvR73KZ9uOVEEH/RMTIa0+K/TzoYxzkjhDPZ
JCqJ0zHnnQ6esy9FDgHqz/Sy+9xbui16qU9MPY3HCpauQtYvn9ndB0hBDx0CkksS
Z8bfRDE7Az356QKTiiBKjdo5nEdnBB9AViYj1NMw1gEqINyZlG1OwN7QbIwz8VwX
cLpmZYwPd8Eu2w==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:24:07 2025 by rpki-client