![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft
File: f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft (raw, json)
Hash identifier: EeQ9UQb1rX+AgYolVLBbpWN8Rq0THXZzHcrgcTAwYEo=
Subject key identifier: 98:FD:8E:42:53:EE:43:77:15:86:A5:DA:5A:38:4F:04:83:A7:AA:8D
Authority key identifier: 7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF
Certificate issuer: /CN=7f7554c170db4c29ac0cc123516ffb6c92fea9cf
Certificate serial: 018529378446B4B084F96A239C26DE56ED5F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft
Manifest number: 0480
Signing time: Mon 19 Dec 2022 07:09:42 +0000
Manifest this update: Mon 19 Dec 2022 07:09:42 +0000
Manifest next update: Tue 20 Dec 2022 07:09:42 +0000
Files and hashes: 1: 3TzNkjToXD54RautaFva45GNUY4.roa (hash: a1bEZzZhf7Lf4lPVhgewsxF083fEuZNzAlNt4lDS/+g=)
2: 9I_XpyfBSNfU4RNRYkC4IoS47zg.roa (hash: ArVSUiMfPArkenkygTbFXr0hAd+HpYUOWE7iIIQqdQ4=)
3: f3VUwXDbTCmsDMEjUW_7bJL-qc8.crl (hash: Z8XvwzzajDkWNyb9fm7I3WW/FSgpObosQgG2INWzYPI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:85:29:37:84:46:b4:b0:84:f9:6a:23:9c:26:de:56:ed:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f7554c170db4c29ac0cc123516ffb6c92fea9cf
Validity
Not Before: Dec 19 07:09:42 2022 GMT
Not After : Dec 20 07:09:42 2022 GMT
Subject: CN=98fd8e4253ee43771586a5da5a384f0483a7aa8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:66:9c:32:b2:4b:7a:aa:2d:60:77:d7:1a:ca:
a2:86:10:e0:e9:e6:9c:b8:67:e1:fa:37:2a:8e:7e:
24:b1:fe:1e:11:1e:0f:9f:b4:a2:ab:56:33:62:b6:
60:ec:13:14:6f:bb:cf:f7:fe:d5:3c:9d:35:dd:a7:
a9:e4:f2:54:02:06:34:6a:32:f8:21:b3:0c:be:30:
6b:b6:a4:93:18:68:3f:e7:9a:4d:b5:42:4d:9d:47:
e5:cb:5c:5f:b5:b0:0a:40:b0:f1:4a:f0:94:bd:3b:
96:d8:3d:0a:7d:55:d8:6d:a9:53:64:83:01:84:30:
e8:a0:9f:a4:90:c0:8e:6c:7c:d2:03:fe:cc:14:c3:
97:52:20:87:04:98:59:33:a5:da:d6:63:55:03:7c:
a8:05:b9:53:a4:b6:bd:eb:9d:52:73:24:d6:10:98:
00:5a:7d:dc:68:f7:8f:f7:c7:d4:1e:28:88:f7:cf:
16:7f:a9:24:c7:fb:48:6d:65:79:f1:61:1c:3e:3c:
5e:bd:c0:7e:ca:31:98:fb:ef:42:cd:21:81:42:02:
19:1c:97:fd:de:81:d3:04:e3:da:c3:43:9f:00:c2:
1c:dc:65:49:2c:0b:d9:ba:a9:85:ef:23:16:fa:67:
7d:af:70:3e:5a:96:5c:a8:6b:61:38:e0:ba:ca:4e:
9d:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:FD:8E:42:53:EE:43:77:15:86:A5:DA:5A:38:4F:04:83:A7:AA:8D
X509v3 Authority Key Identifier:
keyid:7F:75:54:C1:70:DB:4C:29:AC:0C:C1:23:51:6F:FB:6C:92:FE:A9:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3VUwXDbTCmsDMEjUW_7bJL-qc8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/18b1a0-9dcf-43ef-b3fc-2bbfbe1f86a8/1/f3VUwXDbTCmsDMEjUW_7bJL-qc8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:5d:e0:0e:28:23:bd:e7:66:84:31:bf:96:b0:2b:d5:24:86:
74:20:33:24:78:fd:2c:a9:c9:3d:ff:6d:d6:c1:cb:97:9d:e9:
46:58:ad:03:14:91:2b:a8:57:a1:42:da:b8:45:c2:1b:b9:b5:
7f:9b:10:5a:2b:7a:98:8a:51:ff:28:78:fb:c6:f0:50:23:15:
6b:25:ec:9c:49:68:e0:af:6f:b4:17:01:13:43:68:75:3f:22:
dc:58:ee:cb:46:97:01:20:52:dd:55:1f:71:6c:fb:d8:86:7d:
56:77:7e:62:26:09:6d:3f:bf:4f:b3:f9:17:2a:2e:78:8d:81:
a2:a6:a1:04:9f:16:eb:cb:95:98:6c:5f:29:c1:aa:f3:7b:00:
8e:12:c5:e7:7b:54:dc:c8:96:14:0e:a7:4e:c0:86:e6:6a:39:
14:36:1b:e3:ea:9b:0a:ba:ad:d4:4f:50:34:ab:b3:05:53:2c:
0e:c7:70:5c:4b:1b:02:e8:c6:d3:9e:a6:99:9f:1c:df:8f:31:
42:de:20:db:89:c0:8e:68:58:c5:b3:64:23:58:39:8d:11:8c:
fb:bf:c3:46:80:f1:d4:bc:90:b5:84:15:56:5d:7a:6f:3b:6c:
f2:a5:61:6d:b1:53:44:f2:51:ed:34:87:36:28:e2:fe:1b:2f:
df:da:e0:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYUpN4RGtLCE+WojnCbeVu1fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNzU1NGMxNzBkYjRjMjlhYzBjYzEyMzUxNmZmYjZjOTJm
ZWE5Y2YwHhcNMjIxMjE5MDcwOTQyWhcNMjIxMjIwMDcwOTQyWjAzMTEwLwYDVQQD
Eyg5OGZkOGU0MjUzZWU0Mzc3MTU4NmE1ZGE1YTM4NGYwNDgzYTdhYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmacMrJLeqotYHfXGsqihhDg6eac
uGfh+jcqjn4ksf4eER4Pn7Siq1YzYrZg7BMUb7vP9/7VPJ013aep5PJUAgY0ajL4
IbMMvjBrtqSTGGg/55pNtUJNnUfly1xftbAKQLDxSvCUvTuW2D0KfVXYbalTZIMB
hDDooJ+kkMCObHzSA/7MFMOXUiCHBJhZM6Xa1mNVA3yoBblTpLa9651ScyTWEJgA
Wn3caPeP98fUHiiI988Wf6kkx/tIbWV58WEcPjxevcB+yjGY++9CzSGBQgIZHJf9
3oHTBOPaw0OfAMIc3GVJLAvZuqmF7yMW+md9r3A+WpZcqGthOOC6yk6deQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJj9jkJT7kN3FYal2lo4TwSDp6qNMB8GA1UdIwQY
MBaAFH91VMFw20wprAzBI1Fv+2yS/qnPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjNWVXdYRGJUQ21zRE1FalVXXzdiSkwtcWM4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC8xOGIxYTAtOWRjZi00M2VmLWIzZmMt
MmJiZmJlMWY4NmE4LzEvZjNWVXdYRGJUQ21zRE1FalVXXzdiSkwtcWM4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNC8xOGIxYTAtOWRjZi00M2VmLWIzZmMtMmJiZmJlMWY4NmE4
LzEvZjNWVXdYRGJUQ21zRE1FalVXXzdiSkwtcWM4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI13gDigj
vedmhDG/lrAr1SSGdCAzJHj9LKnJPf9t1sHLl53pRlitAxSRK6hXoULauEXCG7m1
f5sQWit6mIpR/yh4+8bwUCMVayXsnElo4K9vtBcBE0NodT8i3Fjuy0aXASBS3VUf
cWz72IZ9Vnd+YiYJbT+/T7P5FyoueI2BoqahBJ8W68uVmGxfKcGq83sAjhLF53tU
3MiWFA6nTsCG5mo5FDYb4+qbCrqt1E9QNKuzBVMsDsdwXEsbAujG056mmZ8c348x
Qt4g24nAjmhYxbNkI1g5jRGM+7/DRoDx1LyQtYQVVl16bzts8qVhbbFTRPJR7TSH
Niji/hsv39rgIg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:18:23 2025 by rpki-client