![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/a84d44-ee9c-4c27-ba9f-e5e3cd08068e/1/PWiYiktXlOKTTkhGfnjq2q6i0xw.mft
File: PWiYiktXlOKTTkhGfnjq2q6i0xw.mft (raw, json)
Hash identifier: XS3y+V06C8X6XjRlf0EYencPo9D6oKeDV57byE3MqU4=
Subject key identifier: 07:33:CD:81:4B:37:F4:BC:30:A6:4F:40:31:D4:06:B8:A1:08:92:A7
Authority key identifier: 3D:68:98:8A:4B:57:94:E2:93:4E:48:46:7E:78:EA:DA:AE:A2:D3:1C
Certificate issuer: /CN=3d68988a4b5794e2934e48467e78eadaaea2d31c
Certificate serial: 01910C4FC313BA90FC355FAE27B8DCE99BF2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PWiYiktXlOKTTkhGfnjq2q6i0xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/a84d44-ee9c-4c27-ba9f-e5e3cd08068e/1/PWiYiktXlOKTTkhGfnjq2q6i0xw.mft
Manifest number: E8
Signing time: Thu 01 Aug 2024 05:00:39 +0000
Manifest this update: Thu 01 Aug 2024 05:00:39 +0000
Manifest next update: Fri 02 Aug 2024 05:00:39 +0000
Files and hashes: 1: PWiYiktXlOKTTkhGfnjq2q6i0xw.crl (hash: mFRGzdqTFNCUIKuYuLXGVUEiW8ahhEqOj4r3S1bAR4w=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:0c:4f:c3:13:ba:90:fc:35:5f:ae:27:b8:dc:e9:9b:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d68988a4b5794e2934e48467e78eadaaea2d31c
Validity
Not Before: Aug 1 05:00:39 2024 GMT
Not After : Aug 2 05:00:39 2024 GMT
Subject: CN=0733cd814b37f4bc30a64f4031d406b8a10892a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:d0:ab:85:ab:a4:22:89:02:15:9d:79:92:c2:
49:33:49:4d:d4:bf:66:da:54:82:90:f8:6b:1f:7f:
5e:aa:78:86:a9:5a:f6:41:6c:d5:1a:2c:f5:ec:1e:
74:1a:66:c9:7f:7b:03:b3:3b:db:05:a6:e6:9d:d7:
2f:43:79:fe:82:bb:41:3e:13:e1:bd:57:90:0b:91:
35:71:69:9c:ca:d4:0e:a2:8c:8e:c3:6f:b6:73:b7:
b7:fc:7e:77:bc:29:e6:76:c7:8f:99:4c:af:6e:6d:
3d:1d:ea:ce:92:78:b3:1f:6a:65:52:4a:b0:c8:e4:
e1:a0:ec:af:2c:96:2d:ca:ce:ca:c1:63:47:a9:eb:
35:5d:0e:8e:8e:b4:4d:a3:d4:a7:28:71:2f:fb:f1:
fe:39:bd:bf:fd:e8:58:71:e2:e7:cc:ba:19:56:04:
35:49:1f:55:30:87:d1:98:33:15:d6:2a:fe:ca:f4:
a4:26:aa:ba:60:cf:8c:d3:81:40:82:67:fc:76:be:
96:66:22:ba:8f:e4:68:a5:d0:b1:78:23:47:51:68:
25:f4:95:a0:2a:f6:35:49:02:3b:ac:24:f8:a7:dd:
60:61:e7:04:63:7f:b2:b4:ba:76:3f:08:f8:50:97:
e8:f2:65:d8:a5:21:a8:21:17:7d:80:fd:9e:13:26:
83:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:33:CD:81:4B:37:F4:BC:30:A6:4F:40:31:D4:06:B8:A1:08:92:A7
X509v3 Authority Key Identifier:
keyid:3D:68:98:8A:4B:57:94:E2:93:4E:48:46:7E:78:EA:DA:AE:A2:D3:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PWiYiktXlOKTTkhGfnjq2q6i0xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a84d44-ee9c-4c27-ba9f-e5e3cd08068e/1/PWiYiktXlOKTTkhGfnjq2q6i0xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/a84d44-ee9c-4c27-ba9f-e5e3cd08068e/1/PWiYiktXlOKTTkhGfnjq2q6i0xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:9e:0a:4d:cc:27:b4:72:c1:31:84:bd:ad:f0:41:28:33:3e:
d7:6f:c6:bb:c3:01:7f:a4:46:66:38:38:17:e5:b9:6b:d9:10:
c9:32:c9:c9:c9:4b:d6:22:f0:cc:3a:a3:01:66:6b:ed:c8:59:
80:24:6b:29:ec:29:e7:31:a7:1c:9c:13:ab:3c:1f:ad:67:6a:
75:05:25:68:c9:ae:6d:ed:2c:e6:8a:0b:c1:f4:4f:36:5b:25:
a3:90:0f:71:f5:d2:1b:a4:f5:93:d4:37:5f:87:9f:9c:4e:c3:
12:40:bc:fd:27:1e:1a:d2:20:b4:8f:c8:24:20:dc:55:e9:f5:
fa:7c:9a:b6:09:04:ed:4e:34:16:eb:31:94:69:f6:d7:17:63:
4b:46:15:9f:a9:44:a8:29:8c:57:da:37:84:fb:98:2c:77:45:
cb:e8:f0:18:a3:cd:17:7d:42:4f:92:47:d3:8e:fb:a2:58:24:
fb:a6:ed:c1:81:88:9b:99:13:da:90:a5:d7:28:54:74:84:0e:
bb:b6:ec:18:fa:0c:d6:81:b4:e4:16:49:7f:e2:bc:f0:3d:d5:
7e:0c:03:ce:e7:dc:4e:92:0d:82:9a:8b:f3:ee:94:58:53:a5:
36:a6:57:3c:fb:17:08:2a:98:90:a9:21:8c:59:cc:49:4f:7a:
69:4f:99:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZEMT8MTupD8NV+uJ7jc6ZvyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkNjg5ODhhNGI1Nzk0ZTI5MzRlNDg0NjdlNzhlYWRhYWVh
MmQzMWMwHhcNMjQwODAxMDUwMDM5WhcNMjQwODAyMDUwMDM5WjAzMTEwLwYDVQQD
EygwNzMzY2Q4MTRiMzdmNGJjMzBhNjRmNDAzMWQ0MDZiOGExMDg5MmE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtdCrhaukIokCFZ15ksJJM0lN1L9m
2lSCkPhrH39eqniGqVr2QWzVGiz17B50GmbJf3sDszvbBabmndcvQ3n+grtBPhPh
vVeQC5E1cWmcytQOooyOw2+2c7e3/H53vCnmdsePmUyvbm09HerOknizH2plUkqw
yOThoOyvLJYtys7KwWNHqes1XQ6OjrRNo9SnKHEv+/H+Ob2//ehYceLnzLoZVgQ1
SR9VMIfRmDMV1ir+yvSkJqq6YM+M04FAgmf8dr6WZiK6j+RopdCxeCNHUWgl9JWg
KvY1SQI7rCT4p91gYecEY3+ytLp2Pwj4UJfo8mXYpSGoIRd9gP2eEyaDGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAczzYFLN/S8MKZPQDHUBrihCJKnMB8GA1UdIwQY
MBaAFD1omIpLV5Tik05IRn546tquotMcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFdpWWlrdFhsT0tUVGtoR2ZuanEycTZpMHh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9hODRkNDQtZWU5Yy00YzI3LWJhOWYt
ZTVlM2NkMDgwNjhlLzEvUFdpWWlrdFhsT0tUVGtoR2ZuanEycTZpMHh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9hODRkNDQtZWU5Yy00YzI3LWJhOWYtZTVlM2NkMDgwNjhl
LzEvUFdpWWlrdFhsT0tUVGtoR2ZuanEycTZpMHh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbp4KTcwn
tHLBMYS9rfBBKDM+12/Gu8MBf6RGZjg4F+W5a9kQyTLJyclL1iLwzDqjAWZr7chZ
gCRrKewp5zGnHJwTqzwfrWdqdQUlaMmube0s5ooLwfRPNlslo5APcfXSG6T1k9Q3
X4efnE7DEkC8/SceGtIgtI/IJCDcVen1+nyatgkE7U40FusxlGn21xdjS0YVn6lE
qCmMV9o3hPuYLHdFy+jwGKPNF31CT5JH0477olgk+6btwYGIm5kT2pCl1yhUdIQO
u7bsGPoM1oG05BZJf+K88D3VfgwDzufcTpINgpqL8+6UWFOlNqZXPPsXCCqYkKkh
jFnMSU96aU+Zow==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:03 2025 by rpki-client