![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
File: gtB-spT0BQdjLzcAik1HtpgxET4.mft (raw, json)
Hash identifier: XTbot1/fc/tnw5/b/vr1xCDOlMDkVccSQ8zZZtz2kCc=
Subject key identifier: 8A:4B:93:DE:81:5D:CD:0F:01:1E:9D:D9:94:13:97:D0:75:3D:19:02
Authority key identifier: 82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
Certificate issuer: /CN=82d07eb294f40507632f37008a4d47b69831113e
Certificate serial: 018AEEF9CEF27A312861C00497BA728E825E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
Manifest number: 0857
Signing time: Mon 02 Oct 2023 06:01:03 +0000
Manifest this update: Mon 02 Oct 2023 06:01:03 +0000
Manifest next update: Tue 03 Oct 2023 06:01:03 +0000
Files and hashes: 1: VpWZhBhyeCu8eVYqRL1VKSpjKlg.roa (hash: vojTgDkjM/L9uS5O8cVw0AElshLQkkWUGAIZs2b8ceY=)
2: gtB-spT0BQdjLzcAik1HtpgxET4.crl (hash: AdQaICMmjvAxKiriTXkLiElL4aKUKjloPOoVjIobmfI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8a:ee:f9:ce:f2:7a:31:28:61:c0:04:97:ba:72:8e:82:5e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=82d07eb294f40507632f37008a4d47b69831113e
Validity
Not Before: Oct 2 06:01:03 2023 GMT
Not After : Oct 3 06:01:03 2023 GMT
Subject: CN=8a4b93de815dcd0f011e9dd9941397d0753d1902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f1:a4:ec:a2:26:c7:01:bf:1f:9e:bb:6c:1c:
d8:51:25:5c:f8:c1:6e:32:94:2d:dc:3e:55:db:3c:
ad:b1:ff:a5:ab:18:ee:a5:c8:08:c9:06:5a:f7:a9:
91:32:d6:3a:a2:97:a0:e4:f8:23:a9:19:0d:38:b9:
56:e2:72:16:80:a6:28:cb:e5:bd:69:06:cc:9a:e8:
41:a4:25:21:be:2f:e6:11:fb:0a:98:ff:96:47:81:
20:75:f8:a5:77:8f:a4:98:13:1e:f6:6f:32:85:9e:
6a:d8:ce:ac:66:c9:bb:9a:fd:c1:76:87:25:a2:f9:
04:69:72:c5:51:fa:78:9c:30:4d:36:dc:0e:a8:9a:
75:ea:68:08:27:e7:5c:1f:dc:13:b0:84:ef:ee:8e:
50:2b:9d:de:d6:84:97:48:9f:0f:26:05:87:ed:a2:
18:db:4c:04:16:c1:da:87:9b:2b:2d:e6:f4:b8:0f:
01:46:c3:51:55:13:86:28:cc:4a:62:45:7e:26:45:
db:2e:1e:95:1d:25:76:29:65:0f:9b:41:c2:fa:18:
3e:04:74:7a:a3:5e:97:42:6d:33:8d:4e:71:cd:95:
ca:6b:04:c8:01:aa:ec:9f:e6:0f:ab:a7:f0:b1:9f:
77:75:f3:30:bf:d3:26:0a:7b:22:31:fc:39:b4:cf:
d4:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:4B:93:DE:81:5D:CD:0F:01:1E:9D:D9:94:13:97:D0:75:3D:19:02
X509v3 Authority Key Identifier:
keyid:82:D0:7E:B2:94:F4:05:07:63:2F:37:00:8A:4D:47:B6:98:31:11:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gtB-spT0BQdjLzcAik1HtpgxET4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/dd1c46-2338-4bb3-956d-ba3d16b06a52/1/gtB-spT0BQdjLzcAik1HtpgxET4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:d7:cb:99:25:ad:ca:77:dd:e1:47:92:31:f6:b0:1e:db:20:
a3:4d:69:bb:2e:6e:46:03:e2:9f:f6:c1:c7:de:ef:90:9d:a8:
cc:32:4b:ed:93:35:30:61:bf:8e:d3:5d:cc:62:ef:5f:44:db:
de:43:d0:a0:05:63:cd:b9:be:31:1e:ca:09:1b:f6:56:9a:8a:
2a:d4:bb:22:dd:b8:50:52:72:3d:1d:87:77:de:75:8f:d6:65:
59:ad:1c:25:f9:87:f8:c2:a6:9c:79:62:3c:fe:d3:29:87:d8:
a2:94:5f:f1:53:0b:73:66:14:09:c1:b7:58:94:d1:0e:91:49:
46:38:13:f3:e1:63:f0:9d:53:2a:e6:31:c9:fa:19:6c:e4:c6:
06:6c:8a:af:b7:01:24:d4:6f:5d:77:ad:8b:f6:8f:fd:36:e2:
23:2a:56:8d:c4:de:7d:63:88:1d:f0:85:73:6d:5e:f3:84:e8:
56:9b:f3:d3:91:cf:7f:9e:40:4e:ad:86:11:11:31:af:38:70:
e6:cb:51:dd:d2:a6:d2:17:21:11:83:00:86:89:38:b8:70:fa:
01:3c:22:0a:fa:a3:ee:51:da:b2:f4:02:c9:10:9a:68:d6:b0:
c6:e0:6b:28:5c:9f:3f:fb:5f:99:c0:cd:ff:47:bf:db:e9:b7:
b4:99:17:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYru+c7yejEoYcAEl7pyjoJeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyZDA3ZWIyOTRmNDA1MDc2MzJmMzcwMDhhNGQ0N2I2OTgz
MTExM2UwHhcNMjMxMDAyMDYwMTAzWhcNMjMxMDAzMDYwMTAzWjAzMTEwLwYDVQQD
Eyg4YTRiOTNkZTgxNWRjZDBmMDExZTlkZDk5NDEzOTdkMDc1M2QxOTAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwfGk7KImxwG/H567bBzYUSVc+MFu
MpQt3D5V2zytsf+lqxjupcgIyQZa96mRMtY6opeg5PgjqRkNOLlW4nIWgKYoy+W9
aQbMmuhBpCUhvi/mEfsKmP+WR4Egdfild4+kmBMe9m8yhZ5q2M6sZsm7mv3Bdocl
ovkEaXLFUfp4nDBNNtwOqJp16mgIJ+dcH9wTsITv7o5QK53e1oSXSJ8PJgWH7aIY
20wEFsHah5srLeb0uA8BRsNRVROGKMxKYkV+JkXbLh6VHSV2KWUPm0HC+hg+BHR6
o16XQm0zjU5xzZXKawTIAarsn+YPq6fwsZ93dfMwv9MmCnsiMfw5tM/USwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIpLk96BXc0PAR6d2ZQTl9B1PRkCMB8GA1UdIwQY
MBaAFILQfrKU9AUHYy83AIpNR7aYMRE+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9kZDFjNDYtMjMzOC00YmIzLTk1NmQt
YmEzZDE2YjA2YTUyLzEvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9kZDFjNDYtMjMzOC00YmIzLTk1NmQtYmEzZDE2YjA2YTUy
LzEvZ3RCLXNwVDBCUWRqTHpjQWlrMUh0cGd4RVQ0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY9fLmSWt
ynfd4UeSMfawHtsgo01puy5uRgPin/bBx97vkJ2ozDJL7ZM1MGG/jtNdzGLvX0Tb
3kPQoAVjzbm+MR7KCRv2VpqKKtS7It24UFJyPR2Hd951j9ZlWa0cJfmH+MKmnHli
PP7TKYfYopRf8VMLc2YUCcG3WJTRDpFJRjgT8+Fj8J1TKuYxyfoZbOTGBmyKr7cB
JNRvXXeti/aP/TbiIypWjcTefWOIHfCFc21e84ToVpvz05HPf55ATq2GERExrzhw
5stR3dKm0hchEYMAhok4uHD6ATwiCvqj7lHasvQCyRCaaNawxuBrKFyfP/tfmcDN
/0e/2+m3tJkXuQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:55:22 2025 by rpki-client