![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft
File: AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft (raw, json)
Hash identifier: lXHOv/2LLADzONqOzJljN4KjRDbcIPPY6sXfeb/9ft4=
Subject key identifier: 57:02:1B:04:63:8E:DD:3C:B0:CF:27:60:E3:61:AD:F9:48:94:A3:05
Authority key identifier: 02:F7:CA:A1:17:26:22:82:54:15:BA:CE:3F:21:D4:E1:EB:C1:33:A4
Certificate issuer: /CN=02f7caa1172622825415bace3f21d4e1ebc133a4
Certificate serial: 0181FA1C80DE4A6DAC2B4E317D61CAF88590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AvfKoRcmIoJUFbrOPyHU4evBM6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft
Manifest number: 0A01
Signing time: Thu 14 Jul 2022 00:29:40 +0000
Manifest this update: Thu 14 Jul 2022 00:29:40 +0000
Manifest next update: Fri 15 Jul 2022 00:29:40 +0000
Files and hashes: 1: AvfKoRcmIoJUFbrOPyHU4evBM6Q.crl (hash: 3UuuCrHexu1rwFJDtahulZBZGtH7kVDB53AQ3gMEI8g=)
2: QFs5TAMVj0hcMD5fEfugVuWa4gg.roa (hash: 5CLapp+HZQKkjJg5O+6FV9t8wO+AQk/WnFCZpWU2Wkw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:81:fa:1c:80:de:4a:6d:ac:2b:4e:31:7d:61:ca:f8:85:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=02f7caa1172622825415bace3f21d4e1ebc133a4
Validity
Not Before: Jul 14 00:29:40 2022 GMT
Not After : Jul 15 00:29:40 2022 GMT
Subject: CN=57021b04638edd3cb0cf2760e361adf94894a305
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:3b:05:64:70:87:ff:68:df:b3:d5:f4:79:26:
1d:3c:fb:cf:d5:db:cc:ad:6e:31:15:43:73:db:cb:
10:40:19:48:cb:e3:69:8f:e5:6a:5e:15:96:70:b8:
6a:5e:8f:dd:da:52:1c:62:ae:13:45:90:ab:8d:29:
18:0b:bd:82:9a:6d:3a:b2:40:5e:8a:2d:ea:ce:4f:
75:67:f1:9e:f0:81:73:47:7a:60:83:a3:6d:ae:49:
d7:6a:ff:25:6e:2a:17:62:9f:a0:91:c3:6b:9c:75:
05:24:b6:f3:bb:9e:de:6a:8a:18:90:c9:6e:84:10:
80:da:28:cd:5e:3e:43:fd:cc:51:6e:c3:d8:98:40:
64:b3:8d:47:83:2c:12:2a:21:f3:dc:b1:70:00:39:
d4:98:28:52:7a:7b:f4:d9:7c:f3:72:06:39:d1:f9:
e5:bc:08:ce:be:f9:d2:96:31:11:4f:6d:4a:03:1b:
ac:90:7f:77:03:a2:6f:56:f7:e9:f0:35:a6:1a:85:
3b:48:da:f2:b6:6c:23:cc:b2:47:f0:34:50:67:e3:
3b:17:82:ea:6d:11:f0:8b:a8:ac:34:db:a4:16:b1:
87:f1:12:c7:f6:56:f5:d5:f7:0b:db:22:00:ea:a6:
d7:71:d5:b9:ba:94:1a:55:fa:2e:f2:21:a8:ee:27:
15:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:02:1B:04:63:8E:DD:3C:B0:CF:27:60:E3:61:AD:F9:48:94:A3:05
X509v3 Authority Key Identifier:
keyid:02:F7:CA:A1:17:26:22:82:54:15:BA:CE:3F:21:D4:E1:EB:C1:33:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AvfKoRcmIoJUFbrOPyHU4evBM6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/5af7c8-0d9b-463e-b121-429b84f95b63/1/AvfKoRcmIoJUFbrOPyHU4evBM6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:10:5f:16:c3:64:a9:ae:c0:1f:2a:d3:e6:87:6e:e3:ec:64:
c9:c2:31:07:73:54:1f:a4:df:fc:45:17:66:7d:cc:64:6e:0f:
b4:0f:ad:9a:f3:d1:c5:e3:43:7b:dd:5c:f5:ff:5a:6a:3b:40:
44:d2:5f:c1:b0:ca:b1:a1:b9:a2:aa:2c:a5:56:f9:ea:fc:61:
88:2e:a9:fb:15:8e:8c:76:95:02:e0:43:e6:eb:f2:29:5e:26:
04:b9:98:9b:1f:6a:b5:92:6a:e5:95:15:34:64:94:22:05:88:
c1:bb:8f:75:76:d6:7a:03:61:fb:b3:6d:48:6e:ad:5c:8c:58:
20:de:b2:03:c5:4a:bd:c0:07:07:13:5f:26:eb:a9:ae:92:94:
48:ec:97:9c:28:89:37:8b:c3:be:25:51:9f:b2:56:0d:17:fd:
77:14:63:c8:4c:93:cb:88:39:83:ce:69:cd:6c:78:b0:9c:6c:
64:02:19:e8:8c:3a:d8:6c:70:ae:c8:e1:5e:f0:2f:39:67:28:
3f:d3:58:b0:54:21:8e:85:ed:22:40:1f:bc:bc:00:09:14:b8:
da:b0:73:e5:f8:0a:58:15:47:ba:11:e9:e5:3d:7d:1c:1e:ba:
8f:74:c0:78:71:82:d9:3d:26:fd:f7:b9:82:5b:3d:6f:15:49:
da:11:b4:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYH6HIDeSm2sK04xfWHK+IWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyZjdjYWExMTcyNjIyODI1NDE1YmFjZTNmMjFkNGUxZWJj
MTMzYTQwHhcNMjIwNzE0MDAyOTQwWhcNMjIwNzE1MDAyOTQwWjAzMTEwLwYDVQQD
Eyg1NzAyMWIwNDYzOGVkZDNjYjBjZjI3NjBlMzYxYWRmOTQ4OTRhMzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApjsFZHCH/2jfs9X0eSYdPPvP1dvM
rW4xFUNz28sQQBlIy+Npj+VqXhWWcLhqXo/d2lIcYq4TRZCrjSkYC72Cmm06skBe
ii3qzk91Z/Ge8IFzR3pgg6NtrknXav8lbioXYp+gkcNrnHUFJLbzu57eaooYkMlu
hBCA2ijNXj5D/cxRbsPYmEBks41HgywSKiHz3LFwADnUmChSenv02XzzcgY50fnl
vAjOvvnSljERT21KAxuskH93A6JvVvfp8DWmGoU7SNrytmwjzLJH8DRQZ+M7F4Lq
bRHwi6isNNukFrGH8RLH9lb11fcL2yIA6qbXcdW5upQaVfou8iGo7icVbQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFcCGwRjjt08sM8nYONhrflIlKMFMB8GA1UdIwQY
MBaAFAL3yqEXJiKCVBW6zj8h1OHrwTOkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQXZmS29SY21Jb0pVRmJyT1B5SFU0ZXZCTTZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS81YWY3YzgtMGQ5Yi00NjNlLWIxMjEt
NDI5Yjg0Zjk1YjYzLzEvQXZmS29SY21Jb0pVRmJyT1B5SFU0ZXZCTTZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS81YWY3YzgtMGQ5Yi00NjNlLWIxMjEtNDI5Yjg0Zjk1YjYz
LzEvQXZmS29SY21Jb0pVRmJyT1B5SFU0ZXZCTTZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALxBfFsNk
qa7AHyrT5odu4+xkycIxB3NUH6Tf/EUXZn3MZG4PtA+tmvPRxeNDe91c9f9aajtA
RNJfwbDKsaG5oqospVb56vxhiC6p+xWOjHaVAuBD5uvyKV4mBLmYmx9qtZJq5ZUV
NGSUIgWIwbuPdXbWegNh+7NtSG6tXIxYIN6yA8VKvcAHBxNfJuuprpKUSOyXnCiJ
N4vDviVRn7JWDRf9dxRjyEyTy4g5g85pzWx4sJxsZAIZ6Iw62GxwrsjhXvAvOWco
P9NYsFQhjoXtIkAfvLwACRS42rBz5fgKWBVHuhHp5T19HB66j3TAeHGC2T0m/fe5
gls9bxVJ2hG0Jw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:21:42 2025 by rpki-client