![](/console.gif)
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft
File: 03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft (raw, json)
Hash identifier: 6iLhgmoRr8XbqwFNcecgq05vD2yHdDsUoDXLFzi/rMI=
Subject key identifier: 15:A5:39:52:5C:72:8F:AD:15:C9:EC:AD:D8:19:09:DD:D6:97:1A:7F
Authority key identifier: D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
Certificate issuer: /CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Certificate serial: 018D86724CB6E5FFC9A26885787315F14543
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft
Manifest number: 0861
Signing time: Thu 08 Feb 2024 02:00:53 +0000
Manifest this update: Thu 08 Feb 2024 02:00:53 +0000
Manifest next update: Fri 09 Feb 2024 02:00:53 +0000
Files and hashes: 1: 03DWfQ0tWE5sRqMJo3pUWrF13Qw.crl (hash: 86eDvhqDB9pJ1iw9qJLpxO0EoLvTqTUffsWgCmFtd28=)
2: 8_M_bHpC1LAyzlZTTXSuY19mRd0.roa (hash: 0uFKY2QzFNsyNOj4T5xlPuj9ZaqY3FBwOHz364P98PU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8d:86:72:4c:b6:e5:ff:c9:a2:68:85:78:73:15:f1:45:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d370d67d0d2d584e6c46a309a37a545ab175dd0c
Validity
Not Before: Feb 8 02:00:53 2024 GMT
Not After : Feb 9 02:00:53 2024 GMT
Subject: CN=15a539525c728fad15c9ecadd81909ddd6971a7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a9:7c:fb:46:b7:b9:a2:50:2d:cf:16:87:1e:
c1:d3:45:99:94:e4:08:53:9c:ab:09:d3:f7:64:b7:
67:6f:4f:bc:15:81:56:e3:bb:5b:39:f6:2c:cd:39:
dd:bd:ab:9a:bb:39:6f:2d:a3:71:81:73:f4:fd:66:
45:44:56:16:68:88:29:3c:9a:0b:04:03:21:f8:09:
37:ba:75:17:63:cc:7b:10:30:cd:6d:81:0e:22:76:
82:2f:44:f8:c7:c6:b1:b5:c9:70:88:db:e8:18:da:
46:99:e2:67:dd:90:53:c3:dc:9c:fc:14:ce:5c:c9:
27:7a:5e:ae:58:31:b6:d9:07:1a:a9:0a:cb:e9:4d:
bd:dd:d2:a2:2d:fd:47:51:7d:7c:8a:e2:a7:b6:42:
f5:e3:e3:e1:bb:f4:25:c7:70:58:2d:2f:7d:63:5b:
24:b7:fd:c3:9e:40:9e:af:38:ad:c6:01:bf:1b:2f:
d7:cf:b2:da:b9:69:d8:e9:1c:0e:35:e7:92:5c:58:
d4:a7:93:fa:c2:09:e1:ea:07:fb:e5:ae:02:ce:7a:
b6:d9:25:eb:94:34:c5:b8:f4:a0:0f:9f:7e:81:61:
f9:73:e5:98:dd:c2:84:99:0d:6c:ac:df:c7:df:e6:
a1:29:4a:b3:cd:51:06:2f:5e:43:81:61:87:55:ba:
6e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:A5:39:52:5C:72:8F:AD:15:C9:EC:AD:D8:19:09:DD:D6:97:1A:7F
X509v3 Authority Key Identifier:
keyid:D3:70:D6:7D:0D:2D:58:4E:6C:46:A3:09:A3:7A:54:5A:B1:75:DD:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/03DWfQ0tWE5sRqMJo3pUWrF13Qw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/3d71e9-1889-4263-8d8d-a3df89843958/1/03DWfQ0tWE5sRqMJo3pUWrF13Qw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:49:78:e2:d7:d8:b7:dd:d8:f9:7a:65:69:2f:0d:94:aa:29:
76:a4:0a:de:b6:dd:4a:92:da:99:d1:ce:83:90:4c:90:34:e0:
f3:5d:fb:be:c6:05:81:dd:3b:d8:8d:0f:6a:69:48:06:64:5d:
51:ed:d9:d6:e7:75:22:f5:a0:4f:8e:31:49:fd:ed:f9:2d:af:
4e:0d:03:7f:82:a5:06:7a:56:23:c7:e5:6b:52:4c:f4:ce:7a:
ec:bc:30:40:a8:41:02:e6:5b:df:81:f7:5b:c2:52:5f:78:3d:
d8:96:2d:8f:4f:0d:31:5d:b2:6c:0d:f1:d6:9a:cd:da:3e:d3:
2c:9b:65:83:45:e5:46:f2:97:19:92:3c:dc:31:be:3c:bd:5c:
f3:ca:65:dc:4c:93:69:ed:26:4e:ba:c6:10:f5:bd:4a:ae:26:
a1:20:21:46:8b:ba:4f:39:17:1d:81:7c:44:85:60:7c:9e:8e:
db:67:1c:03:7c:ea:a8:7d:8e:a4:78:98:a6:7d:a6:58:84:87:
ac:ca:df:53:ce:bf:96:e2:a8:d1:41:ae:2c:2e:06:79:e5:92:
23:ea:11:47:b5:1b:50:c6:b5:2e:ba:66:e0:35:2c:09:a1:10:
8b:eb:83:9e:a4:40:d4:fe:d6:ad:ed:ae:f0:7c:d2:5f:a0:6e:
25:a3:e7:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Feb 17 08:16:46 2025 by rpki-client