![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft
File: tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft (raw, json)
Hash identifier: czXBXu3Xbrb20h28CmVHOugF2vPxuZfOdbiyLAyR50I=
Subject key identifier: 10:0F:47:3F:F1:A3:48:22:02:A2:B3:32:E0:AA:F6:77:6D:9A:04:00
Authority key identifier: B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
Certificate issuer: /CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Certificate serial: 0193E4279BE0868C4F3F83BE77B90CCE7527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft
Manifest number: 13B8
Signing time: Fri 20 Dec 2024 13:00:21 +0000
Manifest this update: Fri 20 Dec 2024 13:00:21 +0000
Manifest next update: Sat 21 Dec 2024 13:00:21 +0000
Files and hashes: 1: 2coQ0IzDBpJuVPUwoymYN8CDq88.roa (hash: r8qr7V6HewmipWvJwfrm4YeaQlhXXmf59ZUk/LGRg5Y=)
2: tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl (hash: K2xO/W3+mKFZy3pZ63xY5CRTMetd7MPIq7ABSzAmdaI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e4:27:9b:e0:86:8c:4f:3f:83:be:77:b9:0c:ce:75:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c2ccf27b3b5824ede2ffc977229987b9b1694c
Validity
Not Before: Dec 20 13:00:21 2024 GMT
Not After : Dec 21 13:00:21 2024 GMT
Subject: CN=100f473ff1a3482202a2b332e0aaf6776d9a0400
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:3a:f9:b4:ad:8a:8a:03:14:c5:bf:84:02:58:
7e:e5:19:08:e6:3c:29:3f:73:1e:97:a2:79:46:ac:
57:94:d7:5b:8f:6f:55:96:b8:97:a4:5f:5a:76:70:
89:8b:b1:13:b2:cc:10:1e:11:d5:e9:54:7e:2e:bc:
d6:41:b7:82:c4:1a:2b:09:9b:d2:a4:7d:a1:00:f5:
6b:dd:31:5a:70:39:ec:6d:21:05:7c:d4:5d:e6:83:
f7:9d:b8:15:03:65:4d:ce:c2:b0:7d:20:50:79:84:
36:8d:d2:78:21:13:5c:23:a8:2b:b0:29:53:81:64:
f5:76:e6:72:61:54:fc:24:9a:8e:80:5f:c2:e8:5b:
f3:66:70:79:09:87:f6:d4:19:a8:dc:95:10:65:ee:
fd:3a:5a:6c:d9:76:5c:74:af:15:5b:9b:7f:5f:c3:
07:51:55:21:05:34:2d:f1:3c:89:74:00:bf:74:18:
7c:a7:0c:72:88:29:0d:f4:ec:3a:46:e3:eb:84:51:
6b:49:77:bc:8a:c4:44:17:81:01:32:cf:90:f9:9a:
23:39:a3:f8:10:a4:31:25:da:8d:8b:2e:01:65:61:
a2:8e:d3:b9:10:2d:19:17:77:86:a4:08:3c:15:92:
cb:bd:05:6c:d4:45:d2:6c:f2:93:d6:41:fc:61:12:
3a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:0F:47:3F:F1:A3:48:22:02:A2:B3:32:E0:AA:F6:77:6D:9A:04:00
X509v3 Authority Key Identifier:
keyid:B5:C2:CC:F2:7B:3B:58:24:ED:E2:FF:C9:77:22:99:87:B9:B1:69:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcLM8ns7WCTt4v_JdyKZh7mxaUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/262b26-dca1-495e-a7a2-abc9886d96f2/1/tcLM8ns7WCTt4v_JdyKZh7mxaUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:4c:42:87:7c:24:26:77:6f:6d:1e:3f:00:c3:86:75:8d:4c:
70:a9:51:b8:00:c7:f0:53:fe:03:fb:79:56:91:0e:1c:da:53:
0b:cb:bc:72:f1:43:ed:8d:54:0d:b2:cd:98:d3:31:0a:4d:93:
17:0c:00:54:95:01:af:ca:06:4d:fd:2a:78:65:7c:22:d4:f0:
9e:bf:92:7a:39:36:dd:28:c4:ea:dc:58:8a:f2:94:23:1c:5d:
4b:ee:b0:3d:a0:ff:74:eb:ef:16:dd:fa:98:42:39:2e:e1:5c:
ea:f1:a8:05:ce:ca:fd:b2:29:2c:68:88:68:4d:4b:d2:7e:b6:
9f:b8:67:eb:19:b6:6a:d8:17:06:df:be:b9:45:fb:a0:63:21:
a2:e8:36:7f:08:f2:c6:d4:05:63:1f:61:e5:cb:a8:1c:85:53:
c7:a9:8b:6e:6a:99:63:ae:a0:fc:8d:28:db:26:8c:c0:74:65:
a1:fa:a4:ab:e8:66:31:dc:6c:3e:80:a3:00:9e:77:9b:d3:77:
c6:70:9e:2e:68:ed:bc:e8:44:2e:19:c1:f2:62:c7:7b:fd:28:
f8:0a:e8:ba:cc:43:e2:30:95:1f:ca:70:61:9f:ab:f8:e9:a0:
e0:63:e5:2f:3e:96:04:b4:d9:88:e4:45:9c:42:a1:ec:4a:31:
49:2a:ba:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPkJ5vghoxPP4O+d7kMznUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1YzJjY2YyN2IzYjU4MjRlZGUyZmZjOTc3MjI5OTg3Yjli
MTY5NGMwHhcNMjQxMjIwMTMwMDIxWhcNMjQxMjIxMTMwMDIxWjAzMTEwLwYDVQQD
EygxMDBmNDczZmYxYTM0ODIyMDJhMmIzMzJlMGFhZjY3NzZkOWEwNDAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTr5tK2KigMUxb+EAlh+5RkI5jwp
P3Mel6J5RqxXlNdbj29VlriXpF9adnCJi7ETsswQHhHV6VR+LrzWQbeCxBorCZvS
pH2hAPVr3TFacDnsbSEFfNRd5oP3nbgVA2VNzsKwfSBQeYQ2jdJ4IRNcI6grsClT
gWT1duZyYVT8JJqOgF/C6FvzZnB5CYf21Bmo3JUQZe79Olps2XZcdK8VW5t/X8MH
UVUhBTQt8TyJdAC/dBh8pwxyiCkN9Ow6RuPrhFFrSXe8isREF4EBMs+Q+ZojOaP4
EKQxJdqNiy4BZWGijtO5EC0ZF3eGpAg8FZLLvQVs1EXSbPKT1kH8YRI6/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBAPRz/xo0giAqKzMuCq9ndtmgQAMB8GA1UdIwQY
MBaAFLXCzPJ7O1gk7eL/yXcimYe5sWlMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdGNMTThuczdXQ1R0NHZfSmR5S1poN214YVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8yNjJiMjYtZGNhMS00OTVlLWE3YTIt
YWJjOTg4NmQ5NmYyLzEvdGNMTThuczdXQ1R0NHZfSmR5S1poN214YVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8yNjJiMjYtZGNhMS00OTVlLWE3YTItYWJjOTg4NmQ5NmYy
LzEvdGNMTThuczdXQ1R0NHZfSmR5S1poN214YVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdExCh3wk
JndvbR4/AMOGdY1McKlRuADH8FP+A/t5VpEOHNpTC8u8cvFD7Y1UDbLNmNMxCk2T
FwwAVJUBr8oGTf0qeGV8ItTwnr+Sejk23SjE6txYivKUIxxdS+6wPaD/dOvvFt36
mEI5LuFc6vGoBc7K/bIpLGiIaE1L0n62n7hn6xm2atgXBt++uUX7oGMhoug2fwjy
xtQFYx9h5cuoHIVTx6mLbmqZY66g/I0o2yaMwHRlofqkq+hmMdxsPoCjAJ53m9N3
xnCeLmjtvOhELhnB8mLHe/0o+ArousxD4jCVH8pwYZ+r+Omg4GPlLz6WBLTZiORF
nEKh7EoxSSq6kw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:46:37 2025 by rpki-client