![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft
File: Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft (raw, json)
Hash identifier: jWUl506roRuO2pk4dy7HllO7rnLjP/Z/UrihKTia+Dc=
Subject key identifier: 9E:7D:0E:58:96:C3:F1:CE:9F:11:5E:23:FC:4E:D4:A8:14:8F:36:22
Authority key identifier: 21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
Certificate issuer: /CN=21ae63c7fa8753f01470b35e294a0fb586dbf553
Certificate serial: 01840863DAAB6F25420476EA60DA09BF5AFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft
Manifest number: 03C2
Signing time: Mon 24 Oct 2022 05:07:52 +0000
Manifest this update: Mon 24 Oct 2022 05:07:52 +0000
Manifest next update: Tue 25 Oct 2022 05:07:52 +0000
Files and hashes: 1: Ia5jx_qHU_AUcLNeKUoPtYbb9VM.crl (hash: 43zy9A6S1EHLO1PnIGcYXGFp6CtnnPjqToH08Z6hjt8=)
2: xQrZSZoAOWXDhB95cyAYXiTdkIE.roa (hash: veMcQNQC+5XGJj85LAQ3BOLK9rdx3xsgKFSEaqXOk6s=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:84:08:63:da:ab:6f:25:42:04:76:ea:60:da:09:bf:5a:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21ae63c7fa8753f01470b35e294a0fb586dbf553
Validity
Not Before: Oct 24 05:07:52 2022 GMT
Not After : Oct 25 05:07:52 2022 GMT
Subject: CN=9e7d0e5896c3f1ce9f115e23fc4ed4a8148f3622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:8a:96:26:19:fa:e5:4a:21:fd:06:40:c9:af:
30:82:35:ce:38:7a:7a:e8:5c:e6:dc:32:87:79:a6:
a1:53:b3:86:a8:9e:67:5c:77:88:67:d8:17:ee:40:
e1:a7:56:20:42:0d:9a:e4:2c:da:8e:54:c3:08:9a:
6b:ea:3f:95:54:13:fd:32:72:b1:2f:89:8e:c7:71:
39:21:f2:88:ad:04:94:59:6d:ed:cf:df:98:e4:46:
56:aa:1b:73:62:df:7c:57:34:46:a3:43:08:39:c1:
6d:18:43:e1:63:12:57:e1:b1:48:33:4b:48:91:e2:
eb:80:38:c2:ca:a3:53:c4:48:32:03:41:b8:23:0f:
47:01:a1:41:a6:96:42:d9:18:14:02:38:ba:a9:e8:
bd:8c:e6:56:6e:7f:f5:3e:7c:51:2c:75:59:8a:92:
16:fd:87:3d:a2:57:88:91:3a:db:ca:a0:93:a7:22:
63:f0:69:d6:5c:3f:c1:20:77:13:44:8c:17:52:45:
91:b3:e8:e4:8e:f8:40:0c:0c:4a:13:ed:3c:ba:81:
09:8a:4e:68:77:99:c0:51:a0:f6:10:5c:2e:36:4b:
74:34:02:24:92:f0:5b:75:3c:af:ab:b7:6b:36:6e:
47:c2:a6:e6:fe:30:41:d1:1d:9e:d3:e4:ac:91:d5:
8b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:7D:0E:58:96:C3:F1:CE:9F:11:5E:23:FC:4E:D4:A8:14:8F:36:22
X509v3 Authority Key Identifier:
keyid:21:AE:63:C7:FA:87:53:F0:14:70:B3:5E:29:4A:0F:B5:86:DB:F5:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/91fa29-7103-4230-b2dc-36638b61c033/1/Ia5jx_qHU_AUcLNeKUoPtYbb9VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:5b:3a:44:b0:d3:28:af:4b:b2:d6:c9:25:81:1f:ea:c9:60:
24:d4:94:b4:f1:4a:7e:e2:69:78:a5:58:f8:97:60:e3:4c:37:
4f:a6:c9:6b:19:36:8f:4d:f5:78:22:07:95:d7:a8:9d:03:0a:
e1:ea:d5:61:0c:95:16:47:9c:a3:34:45:43:fe:5a:f9:04:a1:
f0:ac:34:d3:ba:08:a1:85:30:7a:4d:03:7d:43:6f:c7:70:03:
c7:25:a0:55:4a:7b:02:a3:5b:b2:e2:68:d4:17:e6:0e:4a:12:
df:89:a8:3e:8d:32:c9:d5:48:dc:11:f5:1b:af:22:90:9d:09:
18:8e:b4:be:c5:64:23:9a:c0:a4:de:9d:ef:1f:5d:22:8c:26:
11:c3:d5:38:37:c2:25:71:bf:13:73:8a:f5:12:57:24:cc:4d:
37:ae:ec:86:46:6c:98:7b:31:64:13:a6:91:0a:53:1c:9c:40:
82:07:c8:89:22:3b:4f:56:cf:15:93:94:ae:2d:8b:c6:a1:48:
cd:af:f1:4d:5e:0a:46:ac:9b:06:69:07:ea:8f:2a:e4:79:3d:
69:ba:6b:70:bc:a7:ae:a0:76:2f:f7:11:d7:7a:37:42:4b:a1:
a4:28:10:84:34:c4:8b:52:b8:14:7d:7b:52:11:93:e6:6f:9a:
b9:59:54:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYQIY9qrbyVCBHbqYNoJv1r6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWU2M2M3ZmE4NzUzZjAxNDcwYjM1ZTI5NGEwZmI1ODZk
YmY1NTMwHhcNMjIxMDI0MDUwNzUyWhcNMjIxMDI1MDUwNzUyWjAzMTEwLwYDVQQD
Eyg5ZTdkMGU1ODk2YzNmMWNlOWYxMTVlMjNmYzRlZDRhODE0OGYzNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnYqWJhn65Uoh/QZAya8wgjXOOHp6
6Fzm3DKHeaahU7OGqJ5nXHeIZ9gX7kDhp1YgQg2a5CzajlTDCJpr6j+VVBP9MnKx
L4mOx3E5IfKIrQSUWW3tz9+Y5EZWqhtzYt98VzRGo0MIOcFtGEPhYxJX4bFIM0tI
keLrgDjCyqNTxEgyA0G4Iw9HAaFBppZC2RgUAji6qei9jOZWbn/1PnxRLHVZipIW
/Yc9oleIkTrbyqCTpyJj8GnWXD/BIHcTRIwXUkWRs+jkjvhADAxKE+08uoEJik5o
d5nAUaD2EFwuNkt0NAIkkvBbdTyvq7drNm5Hwqbm/jBB0R2e0+SskdWL2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ59DliWw/HOnxFeI/xO1KgUjzYiMB8GA1UdIwQY
MBaAFCGuY8f6h1PwFHCzXilKD7WG2/VTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWE1anhfcUhVX0FVY0xOZUtVb1B0WWJiOVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MWZhMjktNzEwMy00MjMwLWIyZGMt
MzY2MzhiNjFjMDMzLzEvSWE1anhfcUhVX0FVY0xOZUtVb1B0WWJiOVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85MWZhMjktNzEwMy00MjMwLWIyZGMtMzY2MzhiNjFjMDMz
LzEvSWE1anhfcUhVX0FVY0xOZUtVb1B0WWJiOVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlls6RLDT
KK9LstbJJYEf6slgJNSUtPFKfuJpeKVY+Jdg40w3T6bJaxk2j031eCIHldeonQMK
4erVYQyVFkecozRFQ/5a+QSh8Kw007oIoYUwek0DfUNvx3ADxyWgVUp7AqNbsuJo
1BfmDkoS34moPo0yydVI3BH1G68ikJ0JGI60vsVkI5rApN6d7x9dIowmEcPVODfC
JXG/E3OK9RJXJMxNN67shkZsmHsxZBOmkQpTHJxAggfIiSI7T1bPFZOUri2LxqFI
za/xTV4KRqybBmkH6o8q5Hk9abprcLynrqB2L/cR13o3QkuhpCgQhDTEi1K4FH17
UhGT5m+auVlUVQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:22:45 2025 by rpki-client