![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
File: E-t7ffg1sROrs_Ym9iA_7pexmSw.mft (raw, json)
Hash identifier: LLej3u30FV0a5lXBr1QMcpl+yk8IPDmWEd2/EY0d5Mk=
Subject key identifier: 70:B0:81:F9:F2:1E:F1:75:BC:67:A2:75:EC:E7:5E:F2:AD:94:71:D2
Authority key identifier: 13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
Certificate issuer: /CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Certificate serial: 0191C6FE3A125ADBCA6E899EC8B22EC3C87C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
Manifest number: 0BF9
Signing time: Fri 06 Sep 2024 11:00:35 +0000
Manifest this update: Fri 06 Sep 2024 11:00:35 +0000
Manifest next update: Sat 07 Sep 2024 11:00:35 +0000
Files and hashes: 1: E-t7ffg1sROrs_Ym9iA_7pexmSw.crl (hash: +5YCRbJ8t7uZbzPpFWjELadwdAP5RKMz8zyZilP2LEM=)
2: azVz-wfweHTpXb17aEzq16c9r4k.roa (hash: +Bfy09uaRXECMQSLOoD1RaQmzEj2feO6Mxy0GPcxTds=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:91:c6:fe:3a:12:5a:db:ca:6e:89:9e:c8:b2:2e:c3:c8:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13eb7b7df835b113abb3f626f6203fee97b1992c
Validity
Not Before: Sep 6 11:00:35 2024 GMT
Not After : Sep 7 11:00:35 2024 GMT
Subject: CN=70b081f9f21ef175bc67a275ece75ef2ad9471d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8a:97:12:bf:68:02:85:a7:7b:b5:20:0f:de:
b8:e5:b4:17:a7:79:4f:67:44:59:b9:a0:f0:e1:e3:
ce:bf:e9:68:d5:73:97:9c:c3:45:b3:49:5b:c2:f2:
b2:99:ae:b5:fa:ed:6e:0b:46:6d:23:f5:4e:db:a0:
30:89:33:c3:d1:cc:7e:59:01:3b:cb:7d:f6:2a:0e:
4f:ee:1f:d5:6d:ac:2f:a5:e8:35:5a:68:e7:56:6a:
cc:ed:41:5b:c3:b2:e5:d7:2c:16:e6:2c:b5:cb:ad:
72:06:51:5b:4d:73:fc:58:54:17:2d:ff:b2:0a:8b:
8d:1c:d4:55:dc:a2:6d:ed:77:8c:eb:2e:bc:53:cc:
e5:58:e9:80:08:3b:09:d4:71:f1:03:46:b4:43:f4:
e8:8d:33:c9:84:ed:25:61:08:cb:fe:f0:29:05:1c:
dd:5f:68:d4:2f:25:e2:98:78:3d:59:0f:3e:e3:74:
08:1c:48:f9:f0:9c:23:50:88:4a:dd:95:f3:23:45:
59:4b:c1:0d:e3:36:77:94:6f:97:dc:a9:ce:36:75:
2c:a4:5f:64:11:e7:f6:7a:a2:e6:ab:2c:80:fb:b3:
c4:9e:39:0c:30:c6:07:cf:d9:d5:ce:00:78:f7:31:
04:7b:8d:6d:df:98:a1:32:c2:2e:0a:2a:f3:ac:1d:
89:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:B0:81:F9:F2:1E:F1:75:BC:67:A2:75:EC:E7:5E:F2:AD:94:71:D2
X509v3 Authority Key Identifier:
keyid:13:EB:7B:7D:F8:35:B1:13:AB:B3:F6:26:F6:20:3F:EE:97:B1:99:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E-t7ffg1sROrs_Ym9iA_7pexmSw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/661d4e-cd6a-477f-919c-81c716f5bca2/1/E-t7ffg1sROrs_Ym9iA_7pexmSw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:1e:eb:0c:ca:29:56:3e:88:b7:f2:44:b9:b1:04:f8:ca:b6:
44:98:34:5f:0d:8a:ef:71:7a:cb:b3:4e:76:a6:ef:1c:90:c5:
fc:66:bb:aa:ad:b0:10:97:7f:0f:ba:fc:9f:5a:d8:2f:f2:cb:
09:e4:fe:28:10:c2:41:6e:35:bc:71:25:7e:0c:ca:4d:be:2f:
0e:2d:75:5d:60:f1:7b:89:b1:4e:41:27:5b:97:b0:8e:a8:dd:
f6:20:bf:d7:63:18:c4:e5:0a:ec:23:89:47:d6:c8:0a:2f:59:
94:81:32:d9:eb:98:74:d6:79:94:88:66:d2:13:1c:3b:f3:51:
bf:33:d6:73:ab:01:83:1b:cd:12:ea:2e:d6:ad:14:91:b7:41:
3c:a7:e8:11:c0:d1:c1:2e:f7:ef:69:96:9d:66:aa:de:cd:4b:
7f:7d:ac:14:96:8b:3f:1e:17:35:58:d1:6c:37:a4:3b:c1:77:
d2:6d:91:54:ec:f7:9a:1f:ff:57:91:9c:91:22:be:14:19:95:
a9:13:86:b7:b6:8a:f3:a5:3e:ad:5a:a8:68:9a:85:b1:44:28:
20:fe:85:57:4c:ee:96:8f:33:48:52:52:1a:15:6b:a7:52:99:
30:d4:77:13:e1:64:90:2b:75:80:8e:25:64:24:f6:b6:d3:8e:
c0:7a:8f:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZHG/joSWtvKbomeyLIuw8h8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZWI3YjdkZjgzNWIxMTNhYmIzZjYyNmY2MjAzZmVlOTdi
MTk5MmMwHhcNMjQwOTA2MTEwMDM1WhcNMjQwOTA3MTEwMDM1WjAzMTEwLwYDVQQD
Eyg3MGIwODFmOWYyMWVmMTc1YmM2N2EyNzVlY2U3NWVmMmFkOTQ3MWQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIqXEr9oAoWne7UgD9645bQXp3lP
Z0RZuaDw4ePOv+lo1XOXnMNFs0lbwvKyma61+u1uC0ZtI/VO26AwiTPD0cx+WQE7
y332Kg5P7h/Vbawvpeg1WmjnVmrM7UFbw7Ll1ywW5iy1y61yBlFbTXP8WFQXLf+y
CouNHNRV3KJt7XeM6y68U8zlWOmACDsJ1HHxA0a0Q/TojTPJhO0lYQjL/vApBRzd
X2jULyXimHg9WQ8+43QIHEj58JwjUIhK3ZXzI0VZS8EN4zZ3lG+X3KnONnUspF9k
Eef2eqLmqyyA+7PEnjkMMMYHz9nVzgB49zEEe41t35ihMsIuCirzrB2JjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCwgfnyHvF1vGeideznXvKtlHHSMB8GA1UdIwQY
MBaAFBPre334NbETq7P2JvYgP+6XsZksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRS10N2ZmZzFzUk9yc19ZbTlpQV83cGV4bVN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS82NjFkNGUtY2Q2YS00NzdmLTkxOWMt
ODFjNzE2ZjViY2EyLzEvRS10N2ZmZzFzUk9yc19ZbTlpQV83cGV4bVN3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS82NjFkNGUtY2Q2YS00NzdmLTkxOWMtODFjNzE2ZjViY2Ey
LzEvRS10N2ZmZzFzUk9yc19ZbTlpQV83cGV4bVN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWx7rDMop
Vj6It/JEubEE+Mq2RJg0Xw2K73F6y7NOdqbvHJDF/Ga7qq2wEJd/D7r8n1rYL/LL
CeT+KBDCQW41vHElfgzKTb4vDi11XWDxe4mxTkEnW5ewjqjd9iC/12MYxOUK7COJ
R9bICi9ZlIEy2euYdNZ5lIhm0hMcO/NRvzPWc6sBgxvNEuou1q0UkbdBPKfoEcDR
wS7372mWnWaq3s1Lf32sFJaLPx4XNVjRbDekO8F30m2RVOz3mh//V5GckSK+FBmV
qROGt7aK86U+rVqoaJqFsUQoIP6FV0zulo8zSFJSGhVrp1KZMNR3E+FkkCt1gI4l
ZCT2ttOOwHqPGQ==
-----END CERTIFICATE-----
Generated at Mon Feb 17 07:33:17 2025 by rpki-client