![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.mft
File: UbpdPqGSrtLTBmbHlJkGna9tw3Q.mft (raw, json)
Hash identifier: EIoGn3vD+or5AeTY7GXr8ctfNNcy9kB+Ky8578/JY6U=
Subject key identifier: FA:77:9C:E8:21:EF:15:06:92:A5:26:9F:23:35:A8:D6:C4:7E:E2:D1
Authority key identifier: 51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
Certificate issuer: /CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Certificate serial: 018C3EC9D249A96C82E50604B90E27966EBB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.mft
Manifest number: 09BD
Signing time: Wed 06 Dec 2023 11:01:03 +0000
Manifest this update: Wed 06 Dec 2023 11:01:03 +0000
Manifest next update: Thu 07 Dec 2023 11:01:03 +0000
Files and hashes: 1: JuU_bGqKm3AN0C9lN5vXyfOotng.roa (hash: NwAOAlBtgVy/7DsyYqqy8wyDNsrT02acJyOlAkU3GvU=)
2: UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl (hash: kWBwFG4HZMgHbhXXxX3DflLbCIIpQgWji4xtYGLvlaE=)
3: aY2bP7d7Iz8hwH8IlVvYLBAirwk.roa (hash: h2geabgGp24GX4B/6xWjqoyPj3+qgNH4je5tIgH8iDE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:3e:c9:d2:49:a9:6c:82:e5:06:04:b9:0e:27:96:6e:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=51ba5d3ea192aed2d30666c79499069daf6dc374
Validity
Not Before: Dec 6 11:01:03 2023 GMT
Not After : Dec 7 11:01:03 2023 GMT
Subject: CN=fa779ce821ef150692a5269f2335a8d6c47ee2d1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:bf:b8:92:1d:b6:9a:49:34:49:4c:a7:49:4a:
34:98:9c:ed:57:47:5e:fa:a2:2c:67:4c:cb:20:5c:
e4:f6:33:8b:f8:28:42:57:67:d5:45:0d:35:e1:dd:
63:91:e1:d9:19:30:94:85:36:c7:6b:68:b2:5f:d7:
dd:d6:1e:c9:a6:d4:c0:4f:e8:24:cb:88:88:c3:7c:
49:4c:20:71:fc:6a:0d:6c:ab:47:86:77:ad:42:7b:
3e:dc:24:08:86:81:8e:ad:c5:8c:0d:04:14:43:6b:
11:88:f5:c7:ff:30:4a:f4:79:a2:f0:33:91:5a:41:
a0:68:c8:b2:2e:53:5e:38:05:c9:a9:37:c9:79:32:
48:20:eb:0c:70:b3:ba:2d:df:3d:13:8b:75:b7:0e:
85:f4:8b:d7:8d:db:75:a9:fd:d4:6d:e2:61:64:38:
f7:80:b5:4f:28:e5:d4:e5:f2:6f:f5:00:b2:1a:17:
d9:0a:71:57:66:dd:d7:70:a3:ef:23:27:9d:04:37:
b0:87:ee:01:bb:51:c7:3d:1c:42:c1:3e:67:83:c3:
a5:e4:b3:bf:13:82:a8:93:c8:f5:e4:2a:0d:c6:0c:
ac:b3:70:38:14:d0:15:ab:e0:c4:8e:45:a0:4f:04:
29:db:41:00:2b:a6:fc:f4:8e:bd:ca:ba:fd:96:6a:
3b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:77:9C:E8:21:EF:15:06:92:A5:26:9F:23:35:A8:D6:C4:7E:E2:D1
X509v3 Authority Key Identifier:
keyid:51:BA:5D:3E:A1:92:AE:D2:D3:06:66:C7:94:99:06:9D:AF:6D:C3:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UbpdPqGSrtLTBmbHlJkGna9tw3Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/1321fd-294d-4a54-973e-dfd69fe6fd61/1/UbpdPqGSrtLTBmbHlJkGna9tw3Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:f0:e2:14:3d:c4:21:c6:f8:93:53:6d:21:d5:4d:b8:6c:d4:
d8:87:8f:e0:ab:0c:c9:e9:2e:b5:4f:04:2a:61:c5:22:86:09:
6f:e7:52:9a:9d:bf:22:8b:f5:3a:b0:cf:b4:5f:ea:a7:8f:f6:
51:07:4a:8e:97:2e:9c:5b:fe:50:46:1c:e6:ab:f5:52:8a:f2:
b4:58:31:10:02:01:f8:68:f5:67:0d:0a:fa:e5:e1:73:f9:ca:
2e:be:a8:ec:a1:50:75:92:e4:91:73:0a:1d:f1:a0:86:60:9d:
68:05:68:9d:a7:c7:cb:b9:de:1d:6b:77:31:45:15:42:8d:94:
d2:0d:e4:a8:b0:27:b9:a9:b9:52:1a:fd:0f:2e:2b:fc:1b:f5:
40:fd:e7:3d:4b:93:07:2e:c0:c0:0b:15:f5:2b:b5:ed:57:b2:
e4:5e:9a:a0:44:34:5e:27:3e:2a:27:53:01:8a:b8:1b:37:7a:
21:16:85:86:9c:5b:fc:ed:4b:4e:f9:f9:9a:ea:e0:ef:dc:f7:
d8:76:06:88:e8:e2:af:39:b3:2f:72:03:3a:c9:a6:b0:78:89:
84:52:2a:69:4e:01:60:89:61:2e:e6:82:26:2f:57:b1:91:34:
cf:10:95:00:47:97:b8:01:a8:54:e3:37:09:e6:59:85:67:10:
f9:28:f0:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAYw+ydJJqWyC5QYEuQ4nlm67MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYmE1ZDNlYTE5MmFlZDJkMzA2NjZjNzk0OTkwNjlkYWY2
ZGMzNzQwHhcNMjMxMjA2MTEwMTAzWhcNMjMxMjA3MTEwMTAzWjAzMTEwLwYDVQQD
EyhmYTc3OWNlODIxZWYxNTA2OTJhNTI2OWYyMzM1YThkNmM0N2VlMmQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgb+4kh22mkk0SUynSUo0mJztV0de
+qIsZ0zLIFzk9jOL+ChCV2fVRQ014d1jkeHZGTCUhTbHa2iyX9fd1h7JptTAT+gk
y4iIw3xJTCBx/GoNbKtHhnetQns+3CQIhoGOrcWMDQQUQ2sRiPXH/zBK9Hmi8DOR
WkGgaMiyLlNeOAXJqTfJeTJIIOsMcLO6Ld89E4t1tw6F9IvXjdt1qf3UbeJhZDj3
gLVPKOXU5fJv9QCyGhfZCnFXZt3XcKPvIyedBDewh+4Bu1HHPRxCwT5ng8Ol5LO/
E4Kok8j15CoNxgyss3A4FNAVq+DEjkWgTwQp20EAK6b89I69yrr9lmo7qwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPp3nOgh7xUGkqUmnyM1qNbEfuLRMB8GA1UdIwQY
MBaAFFG6XT6hkq7S0wZmx5SZBp2vbcN0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWJwZFBxR1NydExUQm1iSGxKa0duYTl0dzNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8xMzIxZmQtMjk0ZC00YTU0LTk3M2Ut
ZGZkNjlmZTZmZDYxLzEvVWJwZFBxR1NydExUQm1iSGxKa0duYTl0dzNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8xMzIxZmQtMjk0ZC00YTU0LTk3M2UtZGZkNjlmZTZmZDYx
LzEvVWJwZFBxR1NydExUQm1iSGxKa0duYTl0dzNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApPDiFD3E
Icb4k1NtIdVNuGzU2IeP4KsMyekutU8EKmHFIoYJb+dSmp2/Iov1OrDPtF/qp4/2
UQdKjpcunFv+UEYc5qv1UorytFgxEAIB+Gj1Zw0K+uXhc/nKLr6o7KFQdZLkkXMK
HfGghmCdaAVonafHy7neHWt3MUUVQo2U0g3kqLAnuam5Uhr9Dy4r/Bv1QP3nPUuT
By7AwAsV9Su17Vey5F6aoEQ0Xic+KidTAYq4Gzd6IRaFhpxb/O1LTvn5murg79z3
2HYGiOjirzmzL3IDOsmmsHiJhFIqaU4BYIlhLuaCJi9XsZE0zxCVAEeXuAGoVOM3
CeZZhWcQ+Sjwmg==
-----END CERTIFICATE-----
Generated at Mon Feb 17 08:10:33 2025 by rpki-client