![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
File: dht9IeQ1pZElXFwd-fjXdIng8qA.mft (raw, json)
Hash identifier: eoujKRoWnqRwD7nkj2X9+hMAY04T263AIvdIlH1uYGo=
Subject key identifier: 42:09:7E:47:22:52:CA:B1:CD:AF:E9:B8:9E:1C:8B:D4:7D:97:37:BB
Authority key identifier: 76:1B:7D:21:E4:35:A5:91:25:5C:5C:1D:F9:F8:D7:74:89:E0:F2:A0
Certificate issuer: /CN=761b7d21e435a591255c5c1df9f8d77489e0f2a0
Certificate serial: 01914B3039486E4C2634309DA7F5791E1D70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dht9IeQ1pZElXFwd-fjXdIng8qA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
Manifest number: 0D76
Signing time: Tue 13 Aug 2024 10:02:17 +0000
Manifest this update: Tue 13 Aug 2024 10:02:17 +0000
Manifest next update: Wed 14 Aug 2024 10:02:17 +0000
Files and hashes: 1: dht9IeQ1pZElXFwd-fjXdIng8qA.crl (hash: uACybeWP+BwAyrfmbiwoqMndqW2ty+R3RlFI6kkwkmU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:4b:30:39:48:6e:4c:26:34:30:9d:a7:f5:79:1e:1d:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=761b7d21e435a591255c5c1df9f8d77489e0f2a0
Validity
Not Before: Aug 13 10:02:17 2024 GMT
Not After : Aug 14 10:02:17 2024 GMT
Subject: CN=42097e472252cab1cdafe9b89e1c8bd47d9737bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3d:6a:43:3c:0e:86:38:9c:9f:9e:a4:72:e9:
e5:28:09:57:f1:c7:ed:f6:e0:04:64:24:bf:7d:cc:
4d:06:f1:12:c2:c0:17:b6:f6:8f:25:19:60:92:06:
a5:aa:55:5b:7b:2c:eb:6d:36:d6:9f:6d:df:70:32:
e3:77:4c:cf:b1:71:f2:43:24:e3:26:7e:38:3d:ac:
a2:51:1c:43:4e:78:99:e9:bb:a5:bb:a9:b0:36:f5:
e5:97:37:ea:f7:2d:20:02:a3:85:c1:c0:41:ed:11:
98:27:77:16:6a:a0:e4:8b:55:6b:ba:cc:39:93:0a:
32:00:b8:03:e7:ab:b6:21:85:78:7d:b3:fd:9a:69:
65:6a:3a:21:0d:ec:39:18:a6:af:0e:bb:30:07:89:
07:2e:2c:6c:f3:e4:82:9a:c9:47:31:3c:4f:21:d7:
58:31:f6:59:f9:b5:cc:0c:c6:22:72:85:31:13:32:
fe:3c:bb:e2:09:5c:eb:bd:35:bd:0d:af:bb:3f:86:
1f:d1:31:1d:cf:52:74:ce:d9:5f:42:e4:f2:bc:a7:
75:25:d0:ec:51:0c:1c:53:47:25:04:ab:45:fe:89:
1a:c4:ce:1f:00:e8:07:8b:db:21:6b:15:1e:6c:95:
13:2f:a6:9a:85:15:45:9d:dd:ac:9f:cd:e3:88:7f:
c2:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:7E:47:22:52:CA:B1:CD:AF:E9:B8:9E:1C:8B:D4:7D:97:37:BB
X509v3 Authority Key Identifier:
keyid:76:1B:7D:21:E4:35:A5:91:25:5C:5C:1D:F9:F8:D7:74:89:E0:F2:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dht9IeQ1pZElXFwd-fjXdIng8qA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/195d60-2e91-4c3f-ab9d-10dcad560443/1/dht9IeQ1pZElXFwd-fjXdIng8qA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:bb:e3:d6:df:57:da:81:21:1b:18:e0:db:88:7a:0e:79:91:
9f:92:88:1a:da:0c:8a:72:f5:5d:04:4c:f0:90:ff:01:b8:ec:
b3:0e:1d:b7:6d:83:b7:2f:ff:8e:75:3a:01:8e:53:23:10:fc:
49:40:f6:e1:27:06:db:fc:f3:3b:31:72:ec:d5:91:dd:57:31:
e3:80:42:47:0e:1b:c4:f0:8c:8c:29:f8:4d:eb:43:7d:ad:55:
38:6f:63:74:fb:0e:c2:2a:54:51:39:70:0a:ec:25:ba:07:ec:
21:7b:c5:da:8e:c7:71:4d:d4:c4:78:0f:e4:b8:5f:c0:ac:da:
da:6f:6a:95:31:28:8e:bc:ea:a4:6f:5f:64:6c:62:ce:df:74:
b8:4a:65:ae:54:99:22:2e:f8:ed:70:be:a3:17:0b:c4:54:3e:
0a:1c:88:7f:1c:7c:db:36:25:60:ed:49:f6:0f:71:a7:8b:3b:
10:8f:25:3a:01:a2:d2:b9:4f:52:d8:07:32:8b:8f:4b:14:a0:
65:48:94:1a:32:30:46:5e:8c:8d:1c:aa:c4:91:81:0f:b7:e3:
89:45:8e:bd:7f:d0:f8:da:95:61:55:4c:88:1f:41:3a:f5:77:
53:c7:17:2f:b6:09:57:a9:70:b8:f2:da:bc:5b:18:a5:33:01:
7f:52:f8:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZFLMDlIbkwmNDCdp/V5Hh1wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2MWI3ZDIxZTQzNWE1OTEyNTVjNWMxZGY5ZjhkNzc0ODll
MGYyYTAwHhcNMjQwODEzMTAwMjE3WhcNMjQwODE0MTAwMjE3WjAzMTEwLwYDVQQD
Eyg0MjA5N2U0NzIyNTJjYWIxY2RhZmU5Yjg5ZTFjOGJkNDdkOTczN2JiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwj1qQzwOhjicn56kcunlKAlX8cft
9uAEZCS/fcxNBvESwsAXtvaPJRlgkgalqlVbeyzrbTbWn23fcDLjd0zPsXHyQyTj
Jn44PayiURxDTniZ6bulu6mwNvXllzfq9y0gAqOFwcBB7RGYJ3cWaqDki1Vrusw5
kwoyALgD56u2IYV4fbP9mmllajohDew5GKavDrswB4kHLixs8+SCmslHMTxPIddY
MfZZ+bXMDMYicoUxEzL+PLviCVzrvTW9Da+7P4Yf0TEdz1J0ztlfQuTyvKd1JdDs
UQwcU0clBKtF/okaxM4fAOgHi9shaxUebJUTL6aahRVFnd2sn83jiH/CZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEIJfkciUsqxza/puJ4ci9R9lze7MB8GA1UdIwQY
MBaAFHYbfSHkNaWRJVxcHfn413SJ4PKgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGh0OUllUTFwWkVsWEZ3ZC1malhkSW5nOHFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8xOTVkNjAtMmU5MS00YzNmLWFiOWQt
MTBkY2FkNTYwNDQzLzEvZGh0OUllUTFwWkVsWEZ3ZC1malhkSW5nOHFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYy8xOTVkNjAtMmU5MS00YzNmLWFiOWQtMTBkY2FkNTYwNDQz
LzEvZGh0OUllUTFwWkVsWEZ3ZC1malhkSW5nOHFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYbvj1t9X
2oEhGxjg24h6DnmRn5KIGtoMinL1XQRM8JD/Abjssw4dt22Dty//jnU6AY5TIxD8
SUD24ScG2/zzOzFy7NWR3Vcx44BCRw4bxPCMjCn4TetDfa1VOG9jdPsOwipUUTlw
CuwlugfsIXvF2o7HcU3UxHgP5LhfwKza2m9qlTEojrzqpG9fZGxizt90uEplrlSZ
Ii747XC+oxcLxFQ+ChyIfxx82zYlYO1J9g9xp4s7EI8lOgGi0rlPUtgHMouPSxSg
ZUiUGjIwRl6MjRyqxJGBD7fjiUWOvX/Q+NqVYVVMiB9BOvV3U8cXL7YJV6lwuPLa
vFsYpTMBf1L4Hg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:33:26 2025 by rpki-client