![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.mft
File: jgLuuAftAReViBxh9nHaBBktLEk.mft (raw, json)
Hash identifier: jbqivkldEZdBqn1yVxrkcqBbsUGiuS4mLUbj+XSqB7g=
Subject key identifier: E7:9D:AC:C2:4E:30:BB:F8:CA:66:60:01:B8:6A:7E:1C:A2:85:19:4D
Authority key identifier: 8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
Certificate issuer: /CN=8e02eeb807ed011795881c61f671da04192d2c49
Certificate serial: 018BC77C9749D44D16D4EA704FD8627EDF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.mft
Manifest number: 085D
Signing time: Mon 13 Nov 2023 07:01:52 +0000
Manifest this update: Mon 13 Nov 2023 07:01:52 +0000
Manifest next update: Tue 14 Nov 2023 07:01:52 +0000
Files and hashes: 1: 1c974v6FZwF6RAiBxknhlTIoqQA.roa (hash: RSBUwC6aE3GCS8H8A+eyKWp5InpzaBRIdE3CryiMD5E=)
2: jgLuuAftAReViBxh9nHaBBktLEk.crl (hash: JriV/KCkWRUSP5P/Ug21EnmerukS92rMBAQ6laWTxHs=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8b:c7:7c:97:49:d4:4d:16:d4:ea:70:4f:d8:62:7e:df:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e02eeb807ed011795881c61f671da04192d2c49
Validity
Not Before: Nov 13 07:01:52 2023 GMT
Not After : Nov 14 07:01:52 2023 GMT
Subject: CN=e79dacc24e30bbf8ca666001b86a7e1ca285194d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:aa:8e:71:3b:cf:5d:35:2c:2e:c1:6c:c8:48:
31:d8:89:aa:b9:2a:63:38:a9:19:79:1b:31:7d:66:
93:aa:4e:54:f7:12:a2:2e:85:43:cd:ff:cd:4c:e0:
0c:00:50:83:d0:fd:ac:82:e6:75:b9:e7:65:a2:82:
72:88:59:56:a4:dd:ba:86:02:97:0d:5e:21:74:74:
b5:de:b1:e6:24:2e:cc:c5:c8:aa:96:2a:66:50:5d:
1e:0b:22:37:0b:1d:86:8b:08:f9:4c:ef:14:f7:58:
85:26:e6:1c:1e:cf:70:68:8d:e5:a9:14:9f:b0:5e:
37:73:e6:2b:2a:80:01:53:93:39:7c:c2:75:d4:52:
92:a6:3e:62:83:d1:33:7a:7e:51:19:85:1c:61:17:
ad:e0:c7:6b:fa:7f:e4:04:57:69:cb:10:f4:b8:e2:
80:f0:86:38:e4:63:93:56:15:07:df:c2:a0:07:ee:
34:d8:db:54:69:d6:2c:06:0f:36:7d:5f:a1:70:70:
e4:98:99:65:50:ca:67:b3:62:b2:70:b0:3d:44:ef:
45:63:c3:3b:df:7f:57:98:f0:ef:c8:4b:f4:b3:0c:
8a:91:38:a2:22:3b:94:f7:c0:44:85:9b:88:c3:f9:
cc:cf:a3:9a:32:00:a4:3b:e9:b5:8e:52:57:b0:27:
2f:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:9D:AC:C2:4E:30:BB:F8:CA:66:60:01:B8:6A:7E:1C:A2:85:19:4D
X509v3 Authority Key Identifier:
keyid:8E:02:EE:B8:07:ED:01:17:95:88:1C:61:F6:71:DA:04:19:2D:2C:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jgLuuAftAReViBxh9nHaBBktLEk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/3bd5e2-4f6b-4a98-b406-1623128ff651/1/jgLuuAftAReViBxh9nHaBBktLEk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:7b:09:59:1e:9c:7b:c8:40:25:b2:7a:09:b8:cc:c3:8b:83:
4f:68:49:06:96:ea:25:73:53:4c:25:c2:3b:84:ba:34:7b:5b:
e8:cb:4a:a5:c0:f3:0a:9a:6c:37:90:a3:8c:27:04:bc:3a:18:
50:23:48:de:37:29:a3:e1:b3:46:6f:58:20:70:12:2d:6c:4e:
c9:e6:35:58:4a:97:cb:16:31:44:11:6a:15:44:f9:bf:db:16:
e4:b3:f4:dc:e9:fe:74:6d:be:38:a7:fd:12:17:a5:35:5f:1e:
c5:d2:a4:be:e0:0a:bd:ab:d6:59:c0:b0:75:bb:0d:7e:a4:b7:
27:6c:6f:b1:be:9f:5a:a6:b3:6c:59:4b:18:36:5b:0a:b0:03:
51:9c:0c:50:39:7e:e4:1b:25:38:07:b7:c6:ee:30:87:af:21:
ae:22:d8:fd:c5:bb:9a:7c:54:4a:50:51:9e:7e:97:63:43:8c:
37:ec:76:b6:b7:ed:0e:f9:0d:06:94:76:2e:08:92:d4:1b:f6:
0f:39:be:e0:da:26:f6:b1:28:5f:fe:27:9e:15:3f:a0:9a:76:
01:f7:50:b1:ff:9b:97:70:22:ff:c3:4e:01:8e:5f:4d:e3:c0:
a6:4c:3b:7f:30:b9:ed:08:cb:4b:7e:98:35:47:8b:e6:9a:55:
55:46:e9:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYvHfJdJ1E0W1OpwT9hift9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlMDJlZWI4MDdlZDAxMTc5NTg4MWM2MWY2NzFkYTA0MTky
ZDJjNDkwHhcNMjMxMTEzMDcwMTUyWhcNMjMxMTE0MDcwMTUyWjAzMTEwLwYDVQQD
EyhlNzlkYWNjMjRlMzBiYmY4Y2E2NjYwMDFiODZhN2UxY2EyODUxOTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApaqOcTvPXTUsLsFsyEgx2ImquSpj
OKkZeRsxfWaTqk5U9xKiLoVDzf/NTOAMAFCD0P2sguZ1uedlooJyiFlWpN26hgKX
DV4hdHS13rHmJC7MxciqlipmUF0eCyI3Cx2Giwj5TO8U91iFJuYcHs9waI3lqRSf
sF43c+YrKoABU5M5fMJ11FKSpj5ig9Ezen5RGYUcYRet4Mdr+n/kBFdpyxD0uOKA
8IY45GOTVhUH38KgB+402NtUadYsBg82fV+hcHDkmJllUMpns2KycLA9RO9FY8M7
339XmPDvyEv0swyKkTiiIjuU98BEhZuIw/nMz6OaMgCkO+m1jlJXsCcvlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOedrMJOMLv4ymZgAbhqfhyihRlNMB8GA1UdIwQY
MBaAFI4C7rgH7QEXlYgcYfZx2gQZLSxJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamdMdXVBZnRBUmVWaUJ4aDluSGFCQmt0TEVrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi8zYmQ1ZTItNGY2Yi00YTk4LWI0MDYt
MTYyMzEyOGZmNjUxLzEvamdMdXVBZnRBUmVWaUJ4aDluSGFCQmt0TEVrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi8zYmQ1ZTItNGY2Yi00YTk4LWI0MDYtMTYyMzEyOGZmNjUx
LzEvamdMdXVBZnRBUmVWaUJ4aDluSGFCQmt0TEVrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjXsJWR6c
e8hAJbJ6CbjMw4uDT2hJBpbqJXNTTCXCO4S6NHtb6MtKpcDzCppsN5CjjCcEvDoY
UCNI3jcpo+GzRm9YIHASLWxOyeY1WEqXyxYxRBFqFUT5v9sW5LP03On+dG2+OKf9
EhelNV8exdKkvuAKvavWWcCwdbsNfqS3J2xvsb6fWqazbFlLGDZbCrADUZwMUDl+
5BslOAe3xu4wh68hriLY/cW7mnxUSlBRnn6XY0OMN+x2trftDvkNBpR2LgiS1Bv2
Dzm+4Nom9rEoX/4nnhU/oJp2AfdQsf+bl3Ai/8NOAY5fTePApkw7fzC57QjLS36Y
NUeL5ppVVUbpEg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:41:59 2025 by rpki-client