![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.mft
File: Jm91-OR32pnre1urhaL8P0YDkdg.mft (raw, json)
Hash identifier: wP5z3Ov+LuxelkaqcKltABumSV1Z+2L5MDLh3i0m4bg=
Subject key identifier: 94:D7:2B:C2:29:AB:9A:B0:47:48:0D:8F:7F:AC:41:E0:3D:21:8D:1E
Authority key identifier: 26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8
Certificate issuer: /CN=266f75f8e477da99eb7b5bab85a2fc3f460391d8
Certificate serial: 0182ABC8B97FBE1000B62DC00E8B4C4D7F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jm91-OR32pnre1urhaL8P0YDkdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.mft
Manifest number: 0A66
Signing time: Wed 17 Aug 2022 12:30:34 +0000
Manifest this update: Wed 17 Aug 2022 12:30:34 +0000
Manifest next update: Thu 18 Aug 2022 12:30:34 +0000
Files and hashes: 1: Jm91-OR32pnre1urhaL8P0YDkdg.crl (hash: 89FmkyvV2VG5o3tp+UxpaycJanrY31Y5QAvDPmvvXe8=)
2: UEb4xIUiztn_J8ZkiAGFdEK1M7M.roa (hash: 2JgYrpwg/Tfww2YuH0ach2xpSX/bBBoPejrWJzB+11M=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:ab:c8:b9:7f:be:10:00:b6:2d:c0:0e:8b:4c:4d:7f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=266f75f8e477da99eb7b5bab85a2fc3f460391d8
Validity
Not Before: Aug 17 12:30:34 2022 GMT
Not After : Aug 18 12:30:34 2022 GMT
Subject: CN=94d72bc229ab9ab047480d8f7fac41e03d218d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:58:ef:46:9a:ee:f3:06:8d:61:b9:00:20:79:
ac:1e:de:2c:b4:68:29:f8:de:86:70:b9:8b:cb:07:
43:79:e9:c9:5c:54:ff:d2:18:20:ae:af:b1:7f:d4:
9f:89:14:b7:26:2a:cc:0e:ad:c2:07:3e:46:d3:7e:
50:c2:9d:87:b9:1f:ce:3a:06:5e:5a:4d:65:89:fe:
05:ff:73:a6:d2:42:f3:c6:ff:91:a8:d0:77:37:dd:
90:43:2a:f4:01:27:2e:b2:84:d3:d2:6f:5b:49:59:
d9:da:f7:c3:a7:cf:73:7a:c2:60:37:a6:d2:08:f0:
4a:2c:81:c5:ab:5f:88:5f:59:bd:42:ec:0d:f8:4a:
55:42:54:57:1e:62:09:c0:96:aa:60:eb:2a:f3:6e:
6f:89:67:6d:62:a3:5f:e9:56:58:5b:d9:09:9b:45:
16:52:53:97:7f:74:21:6f:0a:a3:82:51:c8:2d:5b:
d2:39:c0:e9:87:8e:4e:20:9f:cc:7d:41:34:2e:fd:
dd:7b:3e:a8:51:af:29:59:0f:05:49:43:e7:88:92:
45:1e:ec:8c:b3:06:43:c4:58:7a:be:fe:27:56:5b:
2b:f6:30:ed:9f:58:bf:1f:49:cb:04:57:b1:40:17:
16:f1:0e:be:10:2f:a9:b9:dc:e5:7b:a0:35:09:45:
8f:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:D7:2B:C2:29:AB:9A:B0:47:48:0D:8F:7F:AC:41:E0:3D:21:8D:1E
X509v3 Authority Key Identifier:
keyid:26:6F:75:F8:E4:77:DA:99:EB:7B:5B:AB:85:A2:FC:3F:46:03:91:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jm91-OR32pnre1urhaL8P0YDkdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/e64d55-6ea5-48f9-bf2d-31d5b4df9587/1/Jm91-OR32pnre1urhaL8P0YDkdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:96:b1:2c:f2:d9:d2:a2:95:a1:3f:12:d5:23:b1:4c:32:67:
ce:e1:96:41:67:2e:7b:2c:16:50:46:58:f9:42:1a:4e:9b:ba:
f1:51:97:33:6e:8f:33:dc:65:5b:19:5a:99:de:70:9f:2f:56:
45:7f:39:25:c8:56:b6:8a:47:b7:de:0f:d6:a1:a2:4f:37:80:
66:10:4b:75:03:0d:95:b3:53:fb:76:ee:e8:14:22:82:bd:c0:
ad:d3:10:5a:0b:96:45:42:5b:09:21:a5:40:b4:b5:d5:59:7b:
c5:8d:09:54:0f:09:74:ee:23:b1:cf:89:dc:b4:2d:2e:e7:ea:
d1:86:7e:1f:72:58:3e:83:c7:a9:fb:24:36:36:cc:54:c2:62:
dc:f8:1a:fb:c7:5f:97:66:32:8c:03:e9:d5:63:44:22:b5:b1:
ce:a3:d8:9a:92:ec:c2:9c:e4:72:c8:ef:49:34:5f:66:7b:18:
0b:0e:cd:97:9d:76:2c:b3:b9:a5:ce:e2:ed:16:47:7f:ed:8d:
c9:bd:4d:e5:43:70:67:2e:4a:80:c4:ad:a9:5a:89:67:b6:aa:
c0:a5:46:57:8b:1f:76:47:26:4c:e4:82:fb:54:1a:19:7a:8f:
d5:9c:1e:cb:75:cd:1a:ae:91:0f:a3:85:b1:4d:69:af:99:27:
1e:a9:88:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYKryLl/vhAAti3ADotMTX8RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2NmY3NWY4ZTQ3N2RhOTllYjdiNWJhYjg1YTJmYzNmNDYw
MzkxZDgwHhcNMjIwODE3MTIzMDM0WhcNMjIwODE4MTIzMDM0WjAzMTEwLwYDVQQD
Eyg5NGQ3MmJjMjI5YWI5YWIwNDc0ODBkOGY3ZmFjNDFlMDNkMjE4ZDFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgFjvRpru8waNYbkAIHmsHt4stGgp
+N6GcLmLywdDeenJXFT/0hggrq+xf9SfiRS3JirMDq3CBz5G035Qwp2HuR/OOgZe
Wk1lif4F/3Om0kLzxv+RqNB3N92QQyr0AScusoTT0m9bSVnZ2vfDp89zesJgN6bS
CPBKLIHFq1+IX1m9QuwN+EpVQlRXHmIJwJaqYOsq825viWdtYqNf6VZYW9kJm0UW
UlOXf3QhbwqjglHILVvSOcDph45OIJ/MfUE0Lv3dez6oUa8pWQ8FSUPniJJFHuyM
swZDxFh6vv4nVlsr9jDtn1i/H0nLBFexQBcW8Q6+EC+pudzle6A1CUWPgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTXK8Ipq5qwR0gNj3+sQeA9IY0eMB8GA1UdIwQY
MBaAFCZvdfjkd9qZ63tbq4Wi/D9GA5HYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSm05MS1PUjMycG5yZTF1cmhhTDhQMFlEa2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi9lNjRkNTUtNmVhNS00OGY5LWJmMmQt
MzFkNWI0ZGY5NTg3LzEvSm05MS1PUjMycG5yZTF1cmhhTDhQMFlEa2RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi9lNjRkNTUtNmVhNS00OGY5LWJmMmQtMzFkNWI0ZGY5NTg3
LzEvSm05MS1PUjMycG5yZTF1cmhhTDhQMFlEa2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi5axLPLZ
0qKVoT8S1SOxTDJnzuGWQWcueywWUEZY+UIaTpu68VGXM26PM9xlWxlamd5wny9W
RX85JchWtopHt94P1qGiTzeAZhBLdQMNlbNT+3bu6BQigr3ArdMQWguWRUJbCSGl
QLS11Vl7xY0JVA8JdO4jsc+J3LQtLufq0YZ+H3JYPoPHqfskNjbMVMJi3Pga+8df
l2YyjAPp1WNEIrWxzqPYmpLswpzkcsjvSTRfZnsYCw7Nl512LLO5pc7i7RZHf+2N
yb1N5UNwZy5KgMStqVqJZ7aqwKVGV4sfdkcmTOSC+1QaGXqP1Zwey3XNGq6RD6OF
sU1pr5knHqmIbQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:30:56 2025 by rpki-client