![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft
File: 9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft (raw, json)
Hash identifier: 94q6//Fo2bGS7BWChYa9DjFmX3fvev0Jv0m3gtbspSU=
Subject key identifier: EB:57:76:79:9C:C9:12:CB:A7:DD:66:3A:C2:AF:8B:0E:40:33:29:AA
Authority key identifier: F5:AA:A5:1C:90:4D:C6:3C:68:D2:5A:01:AF:88:80:D0:3D:86:97:92
Certificate issuer: /CN=f5aaa51c904dc63c68d25a01af8880d03d869792
Certificate serial: 0191083BB6722483402C3BDFFCD814858803
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9aqlHJBNxjxo0loBr4iA0D2Gl5I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft
Manifest number: 060A
Signing time: Wed 31 Jul 2024 10:00:16 +0000
Manifest this update: Wed 31 Jul 2024 10:00:16 +0000
Manifest next update: Thu 01 Aug 2024 10:00:16 +0000
Files and hashes: 1: 9aqlHJBNxjxo0loBr4iA0D2Gl5I.crl (hash: J5VLW6adYdxo4R/9rYjt2e2KyVhi6rOs81yImjTmQDg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:08:3b:b6:72:24:83:40:2c:3b:df:fc:d8:14:85:88:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5aaa51c904dc63c68d25a01af8880d03d869792
Validity
Not Before: Jul 31 10:00:16 2024 GMT
Not After : Aug 1 10:00:16 2024 GMT
Subject: CN=eb5776799cc912cba7dd663ac2af8b0e403329aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:cc:d0:7a:a9:8c:25:ba:ce:85:5c:fd:f4:
e7:59:f2:bf:0d:91:18:b2:ad:ff:ea:7b:f6:21:0a:
36:ad:68:f9:0b:9f:53:90:d6:b5:a8:82:09:e7:05:
7a:73:af:99:d0:79:69:72:0d:60:c0:93:c4:a8:d5:
8b:78:c3:02:a1:cf:72:17:d7:bb:43:60:22:fb:08:
43:02:71:04:84:ff:93:aa:e3:68:17:7e:75:6c:e5:
ff:53:65:82:52:5c:cc:2a:93:46:04:fe:ec:61:13:
1a:5c:97:e2:d5:f6:e9:9c:45:45:65:05:d5:6f:98:
cb:54:55:89:67:b5:84:f9:7b:a3:35:0a:13:ab:5f:
82:6d:40:e2:a0:32:03:9d:31:3b:71:11:4c:c1:e7:
47:1c:75:40:09:61:7a:fd:8d:2b:4f:79:a1:ca:7b:
6d:8c:8a:c5:b5:fb:97:9b:a8:ef:c5:52:0e:b3:4f:
98:88:d0:a4:85:f5:ca:6d:0f:8f:dc:56:66:51:0a:
fa:05:15:1b:f5:c4:82:b0:57:9b:be:18:5e:c4:3b:
72:32:0a:44:28:5d:74:65:f2:2f:a7:9a:40:2a:69:
e2:ac:8f:6f:21:9a:aa:a1:49:1b:05:da:8c:d0:0d:
cd:5d:e4:6b:82:67:6e:cb:f0:5d:07:ba:35:d7:3b:
47:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:57:76:79:9C:C9:12:CB:A7:DD:66:3A:C2:AF:8B:0E:40:33:29:AA
X509v3 Authority Key Identifier:
keyid:F5:AA:A5:1C:90:4D:C6:3C:68:D2:5A:01:AF:88:80:D0:3D:86:97:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9aqlHJBNxjxo0loBr4iA0D2Gl5I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/287f51-6470-43cf-9781-2bf701636627/1/9aqlHJBNxjxo0loBr4iA0D2Gl5I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:e9:51:4a:5d:44:ff:0d:7f:1f:0f:8b:60:36:c2:9c:c9:b1:
84:a3:11:9f:a1:37:8e:5a:04:7c:51:54:bf:64:1a:bb:f5:0b:
6e:ea:55:cc:d9:24:11:10:fd:1b:78:f7:ef:4f:ce:e0:5e:7a:
45:46:de:05:e4:06:f2:7d:28:7c:7a:dc:07:69:1d:28:2c:a0:
d5:29:fc:54:a0:56:48:27:45:35:34:50:02:05:f8:e8:99:39:
ba:d6:6d:06:14:37:e5:2c:73:0b:1f:51:73:84:39:b3:64:09:
60:3f:1c:80:39:8d:f1:4c:45:df:c6:53:86:11:26:16:30:c1:
7e:62:27:16:a5:af:73:9d:21:7b:01:1b:02:3c:db:83:eb:4b:
28:e9:bf:9f:95:ac:d5:8c:23:e1:ac:b8:ef:47:15:cc:27:57:
c4:d0:8c:18:96:c4:c5:04:a0:39:29:37:b8:df:b2:86:62:ec:
e0:17:55:8e:19:0c:e1:be:2a:82:fc:8d:d8:22:18:d0:34:11:
40:00:d7:39:a1:e2:7b:02:0e:30:ad:de:76:da:01:3b:58:25:
ef:e8:e4:4b:17:ca:d5:69:f7:b7:6c:58:34:26:91:e2:24:17:
bb:ac:f6:d1:c2:0b:34:00:ba:95:9b:5f:3d:97:1f:46:40:a8:
7b:99:7b:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZEIO7ZyJINALDvf/NgUhYgDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1YWFhNTFjOTA0ZGM2M2M2OGQyNWEwMWFmODg4MGQwM2Q4
Njk3OTIwHhcNMjQwNzMxMTAwMDE2WhcNMjQwODAxMTAwMDE2WjAzMTEwLwYDVQQD
EyhlYjU3NzY3OTljYzkxMmNiYTdkZDY2M2FjMmFmOGIwZTQwMzMyOWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv3M0HqpjCW6zoVc/fTnWfK/DZEY
sq3/6nv2IQo2rWj5C59TkNa1qIIJ5wV6c6+Z0Hlpcg1gwJPEqNWLeMMCoc9yF9e7
Q2Ai+whDAnEEhP+TquNoF351bOX/U2WCUlzMKpNGBP7sYRMaXJfi1fbpnEVFZQXV
b5jLVFWJZ7WE+XujNQoTq1+CbUDioDIDnTE7cRFMwedHHHVACWF6/Y0rT3mhyntt
jIrFtfuXm6jvxVIOs0+YiNCkhfXKbQ+P3FZmUQr6BRUb9cSCsFebvhhexDtyMgpE
KF10ZfIvp5pAKmnirI9vIZqqoUkbBdqM0A3NXeRrgmduy/BdB7o11ztHvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtXdnmcyRLLp91mOsKviw5AMymqMB8GA1UdIwQY
MBaAFPWqpRyQTcY8aNJaAa+IgNA9hpeSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWFxbEhKQk54anhvMGxvQnI0aUEwRDJHbDVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8yODdmNTEtNjQ3MC00M2NmLTk3ODEt
MmJmNzAxNjM2NjI3LzEvOWFxbEhKQk54anhvMGxvQnI0aUEwRDJHbDVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC8yODdmNTEtNjQ3MC00M2NmLTk3ODEtMmJmNzAxNjM2NjI3
LzEvOWFxbEhKQk54anhvMGxvQnI0aUEwRDJHbDVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb+lRSl1E
/w1/Hw+LYDbCnMmxhKMRn6E3jloEfFFUv2Qau/ULbupVzNkkERD9G3j370/O4F56
RUbeBeQG8n0ofHrcB2kdKCyg1Sn8VKBWSCdFNTRQAgX46Jk5utZtBhQ35SxzCx9R
c4Q5s2QJYD8cgDmN8UxF38ZThhEmFjDBfmInFqWvc50hewEbAjzbg+tLKOm/n5Ws
1Ywj4ay470cVzCdXxNCMGJbExQSgOSk3uN+yhmLs4BdVjhkM4b4qgvyN2CIY0DQR
QADXOaHiewIOMK3edtoBO1gl7+jkSxfK1Wn3t2xYNCaR4iQXu6z20cILNAC6lZtf
PZcfRkCoe5l7BQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:50:45 2025 by rpki-client