![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.mft
File: OwUIQF6b81Iuj1itd17FBrFX1xM.mft (raw, json)
Hash identifier: DfgtDu9z4OuBIbh/z14SiTt0fHBvwAzjQ+Joy9Ia09g=
Subject key identifier: F0:75:EB:A5:5E:DF:44:93:1C:E6:36:53:0A:C2:6A:13:A3:7D:97:1F
Authority key identifier: 3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
Certificate issuer: /CN=3b0508405e9bf3522e8f58ad775ec506b157d713
Certificate serial: 018C66B3198F303F86AE68650733217C9B32
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwUIQF6b81Iuj1itd17FBrFX1xM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.mft
Manifest number: 080D
Signing time: Thu 14 Dec 2023 05:01:02 +0000
Manifest this update: Thu 14 Dec 2023 05:01:02 +0000
Manifest next update: Fri 15 Dec 2023 05:01:02 +0000
Files and hashes: 1: OwUIQF6b81Iuj1itd17FBrFX1xM.crl (hash: p5xLY3Z/ZsN/Tl9BjSuvSMkKRc4hfCW2AyNQa8qSodU=)
2: mRecpb9R48mVxMH7jfNfWs149Z0.roa (hash: t9S+0CItWksoaKGUIL31JPQ3A5wQ4h3In9mYoe6q7A4=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:66:b3:19:8f:30:3f:86:ae:68:65:07:33:21:7c:9b:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0508405e9bf3522e8f58ad775ec506b157d713
Validity
Not Before: Dec 14 05:01:02 2023 GMT
Not After : Dec 15 05:01:02 2023 GMT
Subject: CN=f075eba55edf44931ce636530ac26a13a37d971f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d5:12:97:54:87:4c:65:1f:cc:9f:a7:44:56:
b7:f9:e3:0a:26:bb:87:ac:51:0f:90:76:9e:f1:69:
b7:25:e9:58:48:0b:85:f8:8b:66:b4:d6:61:8d:8f:
be:94:f0:e2:7a:0c:7d:78:83:9d:68:43:b1:c6:da:
12:41:b5:1b:34:0d:75:b6:ea:3f:eb:1a:70:78:28:
52:44:20:13:9d:94:f0:c1:36:ac:1b:1f:7a:f8:80:
a4:7e:3d:eb:d9:7f:53:cf:a8:24:ce:dc:a3:89:18:
a4:70:33:d0:50:b6:b4:58:d4:69:0a:07:a9:4a:5e:
c0:8c:5c:4a:88:ed:22:79:cc:4d:90:6b:d8:66:a0:
f4:95:d6:7b:1d:c3:1f:c8:f8:09:fe:82:58:ad:d1:
21:82:d9:9a:7d:dc:4d:c2:0a:6c:26:0d:13:15:6f:
ae:71:8c:51:5b:ff:ed:6c:f2:12:89:fb:da:41:2e:
a8:21:a4:ae:cb:f2:f7:1f:63:b4:fb:22:74:d3:1e:
90:f2:a2:ac:4e:6a:f4:ae:ab:11:c0:bd:89:a3:e0:
5f:91:95:96:ce:93:83:44:30:96:12:df:b0:41:94:
a3:1d:67:ed:28:df:3f:d9:8a:5b:b7:fd:99:7e:74:
24:c9:91:10:f4:8b:d1:78:a5:3a:11:63:04:ad:e0:
46:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:75:EB:A5:5E:DF:44:93:1C:E6:36:53:0A:C2:6A:13:A3:7D:97:1F
X509v3 Authority Key Identifier:
keyid:3B:05:08:40:5E:9B:F3:52:2E:8F:58:AD:77:5E:C5:06:B1:57:D7:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwUIQF6b81Iuj1itd17FBrFX1xM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/2c25fb-1c1f-450d-a1be-6bc619649349/1/OwUIQF6b81Iuj1itd17FBrFX1xM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:b2:5e:45:75:a9:95:c1:98:9b:83:a5:7e:9b:a3:e5:20:d3:
9b:4d:09:24:a0:66:d0:a3:62:89:fc:a5:ea:1a:f1:55:cb:d1:
5a:26:fa:c4:04:d2:a7:94:a5:c1:87:14:42:67:5f:90:fb:11:
f0:fe:87:ed:7f:57:bd:86:9a:0c:e0:f8:32:cd:d5:46:d8:cd:
f2:85:fd:6b:71:fc:cf:ba:66:d0:79:fc:74:80:9a:41:60:7b:
0f:46:34:3e:08:5c:ef:f5:07:fc:3a:da:be:46:43:7a:74:2b:
85:7d:6a:a0:b2:67:54:44:d8:32:79:99:98:91:10:8b:dd:db:
e3:7c:3d:cc:45:db:50:8c:3a:c8:5f:23:ce:7e:f2:84:64:60:
d8:7b:8a:02:46:ed:98:07:db:3f:fd:1e:10:4a:cd:59:de:e3:
d3:82:8b:67:6f:27:e6:5a:37:64:00:58:f0:31:0a:1f:ef:6a:
5a:a1:9b:df:40:90:e7:5a:24:c8:ab:ce:cf:33:68:c9:46:5d:
82:a3:90:16:34:7b:2c:95:dc:b1:85:b6:39:fc:1c:a5:83:f8:
62:dd:f7:58:70:80:01:b6:7c:28:e7:87:73:a2:f9:ee:26:4a:
9f:34:fc:2f:b5:f4:ff:e9:7d:0c:d9:5c:d0:2a:24:2d:44:00:
f4:89:5b:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYxmsxmPMD+GrmhlBzMhfJsyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNiMDUwODQwNWU5YmYzNTIyZThmNThhZDc3NWVjNTA2YjE1
N2Q3MTMwHhcNMjMxMjE0MDUwMTAyWhcNMjMxMjE1MDUwMTAyWjAzMTEwLwYDVQQD
EyhmMDc1ZWJhNTVlZGY0NDkzMWNlNjM2NTMwYWMyNmExM2EzN2Q5NzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoNUSl1SHTGUfzJ+nRFa3+eMKJruH
rFEPkHae8Wm3JelYSAuF+ItmtNZhjY++lPDiegx9eIOdaEOxxtoSQbUbNA11tuo/
6xpweChSRCATnZTwwTasGx96+ICkfj3r2X9Tz6gkztyjiRikcDPQULa0WNRpCgep
Sl7AjFxKiO0iecxNkGvYZqD0ldZ7HcMfyPgJ/oJYrdEhgtmafdxNwgpsJg0TFW+u
cYxRW//tbPISifvaQS6oIaSuy/L3H2O0+yJ00x6Q8qKsTmr0rqsRwL2Jo+BfkZWW
zpODRDCWEt+wQZSjHWftKN8/2Ypbt/2ZfnQkyZEQ9IvReKU6EWMEreBGewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPB166Ve30STHOY2UwrCahOjfZcfMB8GA1UdIwQY
MBaAFDsFCEBem/NSLo9YrXdexQaxV9cTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT3dVSVFGNmI4MUl1ajFpdGQxN0ZCckZYMXhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS8yYzI1ZmItMWMxZi00NTBkLWExYmUt
NmJjNjE5NjQ5MzQ5LzEvT3dVSVFGNmI4MUl1ajFpdGQxN0ZCckZYMXhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS8yYzI1ZmItMWMxZi00NTBkLWExYmUtNmJjNjE5NjQ5MzQ5
LzEvT3dVSVFGNmI4MUl1ajFpdGQxN0ZCckZYMXhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbJeRXWp
lcGYm4Olfpuj5SDTm00JJKBm0KNiifyl6hrxVcvRWib6xATSp5SlwYcUQmdfkPsR
8P6H7X9XvYaaDOD4Ms3VRtjN8oX9a3H8z7pm0Hn8dICaQWB7D0Y0Pghc7/UH/Dra
vkZDenQrhX1qoLJnVETYMnmZmJEQi93b43w9zEXbUIw6yF8jzn7yhGRg2HuKAkbt
mAfbP/0eEErNWd7j04KLZ28n5lo3ZABY8DEKH+9qWqGb30CQ51okyKvOzzNoyUZd
gqOQFjR7LJXcsYW2OfwcpYP4Yt33WHCAAbZ8KOeHc6L57iZKnzT8L7X0/+l9DNlc
0CokLUQA9IlbzA==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:37:55 2025 by rpki-client