![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.mft
File: JE16OJlktk-Oo1cranljuJQT19k.mft (raw, json)
Hash identifier: /71aY5g90ZppL9cdubuKHovbZTQ6WHugqN8SwR112WQ=
Subject key identifier: B2:49:7A:71:64:45:52:AC:EB:0D:17:AD:1B:EB:B8:3F:4A:54:C0:C6
Authority key identifier: 24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9
Certificate issuer: /CN=244d7a389964b64f8ea3572b6a7963b89413d7d9
Certificate serial: 018210EB688CDCC56E327B910705977EAAEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JE16OJlktk-Oo1cranljuJQT19k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.mft
Manifest number: 06C1
Signing time: Mon 18 Jul 2022 10:47:19 +0000
Manifest this update: Mon 18 Jul 2022 10:47:19 +0000
Manifest next update: Tue 19 Jul 2022 10:47:19 +0000
Files and hashes: 1: JE16OJlktk-Oo1cranljuJQT19k.crl (hash: Ezt68vXx2Qqvu1toi4KYOdgxiXDbMbwKNTjYtGC+p3c=)
2: wkxNlzq1QAtaUf7pBhCmSPO3qVs.roa (hash: xF4sFLUOCUG9XSsbz+W7xEXHIRD9vlzIKhqvBa/i8lk=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:10:eb:68:8c:dc:c5:6e:32:7b:91:07:05:97:7e:aa:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=244d7a389964b64f8ea3572b6a7963b89413d7d9
Validity
Not Before: Jul 18 10:47:19 2022 GMT
Not After : Jul 19 10:47:19 2022 GMT
Subject: CN=b2497a71644552aceb0d17ad1bebb83f4a54c0c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:48:03:e6:6c:97:63:ff:e7:c0:1a:4b:75:b9:
d8:d8:ed:eb:73:23:88:6a:80:eb:3b:e8:0d:74:f2:
ff:ee:c0:ad:c6:59:de:58:35:ba:71:2c:84:8a:7b:
2e:92:40:69:d1:b7:09:de:62:9c:c1:d1:17:dd:4a:
9a:13:86:a3:80:e5:62:5a:e7:5f:5f:f8:1b:39:06:
af:d8:d2:a0:cf:7a:4a:be:0d:a7:00:66:53:88:e5:
c9:2b:11:9e:56:f5:b5:ac:80:d0:f4:82:5e:ff:5b:
6b:35:7a:d7:45:8b:b7:6a:a8:4e:61:92:0f:85:7a:
84:74:51:76:d0:e4:b9:3e:3a:00:01:a5:97:f4:f6:
85:6a:5f:66:0d:a1:0f:9c:77:ac:13:f2:82:f5:b1:
c1:c6:ad:95:ff:4a:f9:ea:89:be:30:0a:47:f3:3e:
1a:7f:0b:42:23:77:cc:68:26:56:7a:22:69:8a:a7:
12:78:d1:fc:e5:c1:9d:16:9c:28:1a:3f:6f:5d:58:
32:43:d4:58:01:33:d0:de:8e:11:46:97:47:51:99:
f2:48:a3:87:b2:01:cb:ae:a4:f4:97:2c:3d:95:34:
2c:79:67:46:30:3b:1e:bc:5d:00:b6:ca:86:a0:b4:
bf:08:1b:6f:77:1e:c2:83:4b:40:a5:e6:60:b5:74:
95:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:49:7A:71:64:45:52:AC:EB:0D:17:AD:1B:EB:B8:3F:4A:54:C0:C6
X509v3 Authority Key Identifier:
keyid:24:4D:7A:38:99:64:B6:4F:8E:A3:57:2B:6A:79:63:B8:94:13:D7:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JE16OJlktk-Oo1cranljuJQT19k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/8ed162-11bd-4d6e-abd1-fc4ddb9e5317/1/JE16OJlktk-Oo1cranljuJQT19k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:57:8b:31:d7:23:1e:3a:63:f5:a8:36:0b:75:47:b2:39:fd:
e7:35:d4:e2:d5:a5:3e:b6:93:0e:fd:db:ea:83:6f:32:d8:98:
26:49:ca:48:72:cc:a6:b3:10:7e:dd:8b:b9:ff:10:84:6e:5e:
ee:48:7f:08:38:97:98:83:ae:61:8e:40:90:17:a8:62:c0:9b:
85:4a:a5:fe:4e:6f:ac:4b:4f:28:9e:aa:4a:e8:b5:99:f6:b7:
4e:5d:b9:39:be:9b:c0:9c:8d:aa:43:b2:04:99:cf:f1:70:2b:
70:8f:39:07:5b:65:ba:e7:2a:66:46:e6:ae:2e:7b:c0:82:b8:
73:ea:82:fc:0e:aa:0c:1d:34:d4:35:e2:30:2f:ad:4a:c2:2c:
87:4f:44:29:f6:82:d5:3f:2e:e8:2b:6a:76:cf:25:7b:a6:85:
9e:b9:c8:cd:56:a5:88:e7:09:9b:23:3c:c9:b8:84:f7:8e:59:
39:ee:d4:41:d4:76:3a:9b:66:a5:33:47:af:0e:48:66:3b:bd:
33:02:9b:7c:a6:fa:c6:2f:18:85:d0:56:0a:15:dc:ad:59:6d:
d1:3b:fb:17:be:12:76:b5:a7:c4:72:bb:04:47:98:48:2e:0d:
96:2c:f7:eb:58:c9:f2:c0:72:08:71:5a:4a:05:f5:f8:bd:38:
3b:d4:c3:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYIQ62iM3MVuMnuRBwWXfqrvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI0NGQ3YTM4OTk2NGI2NGY4ZWEzNTcyYjZhNzk2M2I4OTQx
M2Q3ZDkwHhcNMjIwNzE4MTA0NzE5WhcNMjIwNzE5MTA0NzE5WjAzMTEwLwYDVQQD
EyhiMjQ5N2E3MTY0NDU1MmFjZWIwZDE3YWQxYmViYjgzZjRhNTRjMGM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjEgD5myXY//nwBpLdbnY2O3rcyOI
aoDrO+gNdPL/7sCtxlneWDW6cSyEinsukkBp0bcJ3mKcwdEX3UqaE4ajgOViWudf
X/gbOQav2NKgz3pKvg2nAGZTiOXJKxGeVvW1rIDQ9IJe/1trNXrXRYu3aqhOYZIP
hXqEdFF20OS5PjoAAaWX9PaFal9mDaEPnHesE/KC9bHBxq2V/0r56om+MApH8z4a
fwtCI3fMaCZWeiJpiqcSeNH85cGdFpwoGj9vXVgyQ9RYATPQ3o4RRpdHUZnySKOH
sgHLrqT0lyw9lTQseWdGMDsevF0AtsqGoLS/CBtvdx7Cg0tApeZgtXSVfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLJJenFkRVKs6w0XrRvruD9KVMDGMB8GA1UdIwQY
MBaAFCRNejiZZLZPjqNXK2p5Y7iUE9fZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSkUxNk9KbGt0ay1PbzFjcmFubGp1SlFUMTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC84ZWQxNjItMTFiZC00ZDZlLWFiZDEt
ZmM0ZGRiOWU1MzE3LzEvSkUxNk9KbGt0ay1PbzFjcmFubGp1SlFUMTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC84ZWQxNjItMTFiZC00ZDZlLWFiZDEtZmM0ZGRiOWU1MzE3
LzEvSkUxNk9KbGt0ay1PbzFjcmFubGp1SlFUMTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEFeLMdcj
Hjpj9ag2C3VHsjn95zXU4tWlPraTDv3b6oNvMtiYJknKSHLMprMQft2Luf8QhG5e
7kh/CDiXmIOuYY5AkBeoYsCbhUql/k5vrEtPKJ6qSui1mfa3Tl25Ob6bwJyNqkOy
BJnP8XArcI85B1tluucqZkbmri57wIK4c+qC/A6qDB001DXiMC+tSsIsh09EKfaC
1T8u6Ctqds8le6aFnrnIzValiOcJmyM8ybiE945ZOe7UQdR2OptmpTNHrw5IZju9
MwKbfKb6xi8YhdBWChXcrVlt0Tv7F74SdrWnxHK7BEeYSC4Nliz361jJ8sByCHFa
SgX1+L04O9TDzQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:24 2025 by rpki-client