![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
File: j16lJA6n2tcx0YuL6flbQjgLfDE.mft (raw, json)
Hash identifier: DeMnx7jPagzS0r3WzDNhO+9z36RLfQy+RiZkczUn634=
Subject key identifier: 37:B3:19:B8:90:61:8F:95:13:8F:13:1A:81:3D:42:5C:BA:9B:E8:85
Authority key identifier: 8F:5E:A5:24:0E:A7:DA:D7:31:D1:8B:8B:E9:F9:5B:42:38:0B:7C:31
Certificate issuer: /CN=8f5ea5240ea7dad731d18b8be9f95b42380b7c31
Certificate serial: 0193E202AB1B39A344BD1103EBC3AC13C2B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j16lJA6n2tcx0YuL6flbQjgLfDE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
Manifest number: 02B3
Signing time: Fri 20 Dec 2024 03:00:45 +0000
Manifest this update: Fri 20 Dec 2024 03:00:45 +0000
Manifest next update: Sat 21 Dec 2024 03:00:45 +0000
Files and hashes: 1: j16lJA6n2tcx0YuL6flbQjgLfDE.crl (hash: Uc4Mmyw4aP42uRCaNrFqbcO0tDbY7dQENNtrvg2doqo=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:e2:02:ab:1b:39:a3:44:bd:11:03:eb:c3:ac:13:c2:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f5ea5240ea7dad731d18b8be9f95b42380b7c31
Validity
Not Before: Dec 20 03:00:45 2024 GMT
Not After : Dec 21 03:00:45 2024 GMT
Subject: CN=37b319b890618f95138f131a813d425cba9be885
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:84:58:06:21:d5:b3:f4:b6:4d:34:a0:cd:99:
1a:27:43:56:e5:ad:0b:37:1c:2d:7d:7f:a6:54:7a:
f3:5a:b9:4e:fa:c0:8a:50:82:46:c6:ea:27:40:9f:
95:93:39:34:ae:e4:87:60:29:4f:12:05:30:a2:db:
08:b5:b6:b7:df:8a:4a:51:53:cf:b7:77:08:18:17:
99:c2:bf:c3:5d:fa:32:24:3f:29:34:4c:51:65:10:
09:4d:11:af:92:f7:8a:a9:00:68:ea:7a:a4:f4:da:
d2:bb:f3:e1:93:b8:80:e7:a7:e7:6d:5b:a7:a5:b0:
cb:bd:fb:4e:6f:4a:12:9b:b2:0e:06:c2:f4:45:63:
65:26:ee:ab:bf:c1:bb:41:29:5f:e8:6f:3c:c2:b4:
8b:8b:b7:db:25:48:19:e0:a5:ed:ef:b4:7c:c2:3b:
43:5f:8a:6c:a7:66:75:c6:ee:d1:12:07:a1:82:f7:
fb:c5:83:cf:0e:bf:5e:55:55:be:ec:4c:84:6e:60:
9e:e8:97:6e:5c:cc:83:5a:2e:b8:65:68:69:12:fe:
06:59:51:7f:82:3c:e2:77:03:e3:01:4f:16:7a:23:
43:f2:4b:13:b0:ea:14:e0:d9:aa:6d:bb:76:d3:20:
29:46:4c:48:3e:3e:b6:95:54:80:1d:6d:2f:30:f9:
e3:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:B3:19:B8:90:61:8F:95:13:8F:13:1A:81:3D:42:5C:BA:9B:E8:85
X509v3 Authority Key Identifier:
keyid:8F:5E:A5:24:0E:A7:DA:D7:31:D1:8B:8B:E9:F9:5B:42:38:0B:7C:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j16lJA6n2tcx0YuL6flbQjgLfDE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/cd61c7-873a-4dd5-8237-6cb4752cff6a/1/j16lJA6n2tcx0YuL6flbQjgLfDE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ba:fc:7a:d1:23:10:0e:26:af:c4:fd:1d:2e:fa:e6:16:ad:7d:
72:b4:17:c9:ae:a5:18:87:c1:01:4c:4f:88:85:08:fc:46:55:
49:56:db:63:2d:51:ec:0a:b2:77:9d:4a:4f:18:19:5b:16:81:
a4:5d:8c:63:ad:58:9a:44:a2:e0:d8:cd:4a:f8:70:af:57:fc:
df:cc:26:cf:7c:08:a1:bd:de:0a:e2:cd:a4:7d:63:73:c8:35:
dd:80:6c:05:34:15:14:ce:0e:15:1f:20:f5:f9:d5:08:ed:54:
21:b6:87:0c:66:2e:48:5d:61:6a:01:0a:b8:60:bc:41:f5:e1:
f4:ef:32:21:4d:77:f9:af:18:a6:83:bd:7b:e6:a6:61:56:15:
03:02:a8:82:98:4b:c8:97:9c:0a:89:a1:78:b5:c6:4c:55:85:
9e:88:20:69:a4:af:30:89:74:92:f8:95:78:60:14:6a:38:00:
b6:21:e5:a4:d4:84:de:f1:a4:07:79:51:85:a8:59:73:16:33:
6e:87:33:66:34:5a:cf:92:0f:ae:3a:0d:44:cb:55:a3:ac:b8:
04:b0:6f:3b:a3:b6:ee:f5:36:f0:91:d6:70:f0:bb:02:8d:0a:
06:b9:5a:ce:97:3d:34:05:19:44:b1:4d:24:e8:98:f1:2c:ae:
9d:07:5a:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZPiAqsbOaNEvRED68OsE8K1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmNWVhNTI0MGVhN2RhZDczMWQxOGI4YmU5Zjk1YjQyMzgw
YjdjMzEwHhcNMjQxMjIwMDMwMDQ1WhcNMjQxMjIxMDMwMDQ1WjAzMTEwLwYDVQQD
EygzN2IzMTliODkwNjE4Zjk1MTM4ZjEzMWE4MTNkNDI1Y2JhOWJlODg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIRYBiHVs/S2TTSgzZkaJ0NW5a0L
NxwtfX+mVHrzWrlO+sCKUIJGxuonQJ+Vkzk0ruSHYClPEgUwotsItba334pKUVPP
t3cIGBeZwr/DXfoyJD8pNExRZRAJTRGvkveKqQBo6nqk9NrSu/Phk7iA56fnbVun
pbDLvftOb0oSm7IOBsL0RWNlJu6rv8G7QSlf6G88wrSLi7fbJUgZ4KXt77R8wjtD
X4psp2Z1xu7REgehgvf7xYPPDr9eVVW+7EyEbmCe6JduXMyDWi64ZWhpEv4GWVF/
gjzidwPjAU8WeiND8ksTsOoU4Nmqbbt20yApRkxIPj62lVSAHW0vMPnjhQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDezGbiQYY+VE48TGoE9Qly6m+iFMB8GA1UdIwQY
MBaAFI9epSQOp9rXMdGLi+n5W0I4C3wxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajE2bEpBNm4ydGN4MFl1TDZmbGJRamdMZkRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi9jZDYxYzctODczYS00ZGQ1LTgyMzct
NmNiNDc1MmNmZjZhLzEvajE2bEpBNm4ydGN4MFl1TDZmbGJRamdMZkRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi9jZDYxYzctODczYS00ZGQ1LTgyMzctNmNiNDc1MmNmZjZh
LzEvajE2bEpBNm4ydGN4MFl1TDZmbGJRamdMZkRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuvx60SMQ
DiavxP0dLvrmFq19crQXya6lGIfBAUxPiIUI/EZVSVbbYy1R7Aqyd51KTxgZWxaB
pF2MY61YmkSi4NjNSvhwr1f838wmz3wIob3eCuLNpH1jc8g13YBsBTQVFM4OFR8g
9fnVCO1UIbaHDGYuSF1hagEKuGC8QfXh9O8yIU13+a8YpoO9e+amYVYVAwKogphL
yJecComheLXGTFWFnoggaaSvMIl0kviVeGAUajgAtiHlpNSE3vGkB3lRhahZcxYz
boczZjRaz5IPrjoNRMtVo6y4BLBvO6O27vU28JHWcPC7Ao0KBrlazpc9NAUZRLFN
JOiY8SyunQdajw==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:31:30 2025 by rpki-client