![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
File: ByF8BjTBAscbo-RE8GiKvdGvTOg.mft (raw, json)
Hash identifier: CALRfThhpmgoB+AHSTJWJkB0jgLFG+KmxiqG4DPGixs=
Subject key identifier: 94:64:04:7C:AC:54:58:D1:B3:19:55:4C:E4:3F:73:09:66:53:FB:48
Authority key identifier: 07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
Certificate issuer: /CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
Certificate serial: 018CCA0CF8918893892BD715D8C5B13E93CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
Manifest number: 1012
Signing time: Tue 02 Jan 2024 12:01:36 +0000
Manifest this update: Tue 02 Jan 2024 12:01:36 +0000
Manifest next update: Wed 03 Jan 2024 12:01:36 +0000
Files and hashes: 1: ByF8BjTBAscbo-RE8GiKvdGvTOg.crl (hash: LryTPtrAagGpOpDu0uctvPzIzR/uC6HGak/tIhBKjzg=)
2: FRZAkwaBFN4eCMivFm1ndTqH7i8.roa (hash: uW+W8NN4YXjHoJvHddhlWNoM8/vHm9XWFaPD6lEqRo0=)
3: GRAcCw7u7aFKixVetJ4_ry0M47U.roa (hash: BfidvZbBpkz+5E9XcvbDoH/8UzBxwTljoU29CRprfWI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:ca:0c:f8:91:88:93:89:2b:d7:15:d8:c5:b1:3e:93:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07217c0634c102c71ba3e444f0688abdd1af4ce8
Validity
Not Before: Jan 2 12:01:36 2024 GMT
Not After : Jan 3 12:01:36 2024 GMT
Subject: CN=9464047cac5458d1b319554ce43f73096653fb48
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:37:32:35:ce:74:ef:e3:c1:ae:6e:21:5d:83:
49:23:9d:1e:6a:67:2c:31:45:9c:6e:0c:f6:9b:cf:
65:f2:e5:81:7b:5b:91:b0:bf:fd:e2:39:78:82:a5:
1e:d2:9c:75:14:51:28:c7:bf:12:72:44:9b:3b:29:
f4:75:77:3d:41:98:83:60:e9:00:8b:b7:5e:3e:9f:
8e:0c:a9:a7:43:d2:69:fd:12:f3:f5:8d:e2:56:c4:
90:8e:85:ac:96:5f:7a:67:68:c2:75:d5:75:e7:e1:
dd:cb:21:eb:6b:e9:8a:2d:c2:8a:1e:6b:85:6e:20:
89:4e:c0:8a:c3:82:cb:32:1f:e2:6b:77:c3:31:a6:
08:f5:6d:b9:33:4e:39:9f:00:60:1a:74:d1:fe:12:
79:88:5c:94:97:c6:9b:34:ea:9e:03:44:ad:6a:80:
ea:c0:2b:20:cd:e5:0a:6c:69:06:bc:1d:bd:27:87:
5e:8b:aa:c2:f4:59:fc:73:8b:24:cf:0b:7c:87:9c:
42:b6:c2:0f:0e:9f:3e:3b:03:51:76:e7:c9:c6:f7:
68:7a:f8:61:c2:79:42:94:4c:7f:73:17:94:34:f3:
ca:fa:42:91:07:81:5f:cc:3b:c3:e6:1f:6c:ce:83:
a7:31:40:f6:61:90:94:14:e4:08:35:f9:47:b4:27:
1d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:64:04:7C:AC:54:58:D1:B3:19:55:4C:E4:3F:73:09:66:53:FB:48
X509v3 Authority Key Identifier:
keyid:07:21:7C:06:34:C1:02:C7:1B:A3:E4:44:F0:68:8A:BD:D1:AF:4C:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ByF8BjTBAscbo-RE8GiKvdGvTOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/b41ad4-8500-4f26-9019-0f0bc9f629d3/1/ByF8BjTBAscbo-RE8GiKvdGvTOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:2f:58:69:51:15:49:f2:e3:b1:e7:44:33:53:6e:a7:0f:43:
bf:db:e0:73:4a:60:e7:e5:ae:d5:b9:fd:72:77:32:7e:51:87:
1d:f3:9a:fd:47:6e:b0:29:8e:a8:bf:28:97:4f:72:f3:39:af:
a0:b8:01:15:6f:42:ac:34:ab:b5:db:9b:4c:93:0d:5a:01:69:
a5:3a:0e:6a:8c:e2:8d:ec:5e:03:0f:f3:0f:6f:33:0a:77:15:
1a:cb:0a:44:2a:56:bf:3d:2d:d8:8a:57:d4:5f:37:00:ff:70:
02:65:05:5c:4b:d7:79:80:57:da:b6:7d:56:62:ba:bd:47:c6:
bd:48:4f:f8:0e:80:ae:9e:6c:01:3f:0d:b1:64:a6:cc:d1:5d:
03:6e:90:4b:c0:0a:2f:29:bc:52:18:f8:1c:aa:32:85:a6:1f:
45:3a:cc:98:41:8e:d9:1f:c4:cc:e5:07:58:e1:55:61:dd:ad:
d2:b5:e2:2a:11:5a:53:27:fa:8f:5c:a5:f5:ae:5a:fa:60:30:
45:ba:a8:d9:0b:27:e8:ac:d9:06:0c:27:84:aa:2a:b8:84:a3:
b3:a9:37:62:f2:74:d3:01:a9:6c:8e:25:e3:3b:51:c1:d7:e6:
af:51:50:3b:9f:35:06:30:54:ee:01:4f:67:aa:4b:06:61:54:
94:fe:b4:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYzKDPiRiJOJK9cV2MWxPpPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MjE3YzA2MzRjMTAyYzcxYmEzZTQ0NGYwNjg4YWJkZDFh
ZjRjZTgwHhcNMjQwMTAyMTIwMTM2WhcNMjQwMTAzMTIwMTM2WjAzMTEwLwYDVQQD
Eyg5NDY0MDQ3Y2FjNTQ1OGQxYjMxOTU1NGNlNDNmNzMwOTY2NTNmYjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvTcyNc507+PBrm4hXYNJI50eamcs
MUWcbgz2m89l8uWBe1uRsL/94jl4gqUe0px1FFEox78SckSbOyn0dXc9QZiDYOkA
i7dePp+ODKmnQ9Jp/RLz9Y3iVsSQjoWsll96Z2jCddV15+HdyyHra+mKLcKKHmuF
biCJTsCKw4LLMh/ia3fDMaYI9W25M045nwBgGnTR/hJ5iFyUl8abNOqeA0StaoDq
wCsgzeUKbGkGvB29J4dei6rC9Fn8c4skzwt8h5xCtsIPDp8+OwNRdufJxvdoevhh
wnlClEx/cxeUNPPK+kKRB4FfzDvD5h9szoOnMUD2YZCUFOQINflHtCcd4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJRkBHysVFjRsxlVTOQ/cwlmU/tIMB8GA1UdIwQY
MBaAFAchfAY0wQLHG6PkRPBoir3Rr0zoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQnlGOEJqVEJBc2Niby1SRThHaUt2ZEd2VE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC9iNDFhZDQtODUwMC00ZjI2LTkwMTkt
MGYwYmM5ZjYyOWQzLzEvQnlGOEJqVEJBc2Niby1SRThHaUt2ZEd2VE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC9iNDFhZDQtODUwMC00ZjI2LTkwMTktMGYwYmM5ZjYyOWQz
LzEvQnlGOEJqVEJBc2Niby1SRThHaUt2ZEd2VE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJy9YaVEV
SfLjsedEM1Nupw9Dv9vgc0pg5+Wu1bn9cncyflGHHfOa/UdusCmOqL8ol09y8zmv
oLgBFW9CrDSrtdubTJMNWgFppToOaozijexeAw/zD28zCncVGssKRCpWvz0t2IpX
1F83AP9wAmUFXEvXeYBX2rZ9VmK6vUfGvUhP+A6Arp5sAT8NsWSmzNFdA26QS8AK
Lym8Uhj4HKoyhaYfRTrMmEGO2R/EzOUHWOFVYd2t0rXiKhFaUyf6j1yl9a5a+mAw
Rbqo2Qsn6KzZBgwnhKoquISjs6k3YvJ00wGpbI4l4ztRwdfmr1FQO581BjBU7gFP
Z6pLBmFUlP60DA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:23:30 2025 by rpki-client