Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
File: vq0i1TCtLl-opRJL0FqAPBh2rM0.mft (raw, json)
Hash identifier: iVcwl782DPH1DsWkbpl+PJzpC4a7MTYJxK3ugZPZphk=
Subject key identifier: 33:57:70:13:22:B7:13:82:33:5D:41:D5:9B:0D:BE:C8:FF:2C:20:1D
Authority key identifier: BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
Certificate issuer: /CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Certificate serial: 0182685FEAA6F0F239BB177108D46418403D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
Manifest number: 0A40
Signing time: Thu 04 Aug 2022 10:21:32 +0000
Manifest this update: Thu 04 Aug 2022 10:21:32 +0000
Manifest next update: Fri 05 Aug 2022 10:21:32 +0000
Files and hashes: 1: n1_XsSWu0O01boqrftt3Tj5kW-Q.roa (hash: kHe3LvMm1Q+9trR/P6altk1cVJjrdVHK8aEDEcoM24o=)
2: vq0i1TCtLl-opRJL0FqAPBh2rM0.crl (hash: 5reWQ9YLen+7OUOR1Lrey1wjb5rAE11QWfUK1QfPpWU=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:82:68:5f:ea:a6:f0:f2:39:bb:17:71:08:d4:64:18:40:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bead22d530ad2e5fa8a5124bd05a803c1876accd
Validity
Not Before: Aug 4 10:21:32 2022 GMT
Not After : Aug 5 10:21:32 2022 GMT
Subject: CN=3357701322b71382335d41d59b0dbec8ff2c201d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:d0:7d:f9:e1:8e:e9:2f:90:7a:73:eb:5c:
44:d9:9b:11:db:f7:74:53:55:e4:0f:81:9d:90:f7:
d8:30:95:82:f4:e2:5a:16:c8:3f:94:8f:51:39:8c:
e5:17:8e:8a:2f:e9:65:a9:6a:47:a7:f4:ce:80:4a:
d9:c6:a9:d8:df:e9:64:91:cc:3d:bd:ca:ae:b3:d5:
f7:3d:af:10:ea:ab:36:fd:8c:2d:44:ab:a6:8d:07:
1a:4a:96:d4:02:47:f3:db:45:40:75:92:e8:f7:40:
30:f6:15:98:76:ee:91:b5:d6:8f:21:60:52:24:a1:
0c:c3:ce:95:3a:83:d6:f0:d3:ee:0e:0e:10:a0:86:
ed:e1:db:29:a5:be:33:3e:c9:67:9e:4a:bf:f9:9e:
20:38:1a:39:00:39:74:b5:4e:a4:96:e5:f6:e1:0b:
ea:7c:f2:26:2a:b2:93:46:3a:d2:bc:bc:bc:95:03:
7d:f7:d9:3b:69:af:fb:e8:cc:57:9f:95:96:fc:ca:
86:a9:38:39:77:58:7f:91:0c:c7:c1:43:75:c1:db:
72:52:74:4b:ce:bd:47:9b:92:08:85:bd:d4:fe:c7:
15:37:b3:18:a2:4d:95:5e:7a:3c:c6:5a:b7:37:86:
9c:0c:89:38:98:75:10:b7:af:8b:77:58:1d:82:eb:
cb:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:57:70:13:22:B7:13:82:33:5D:41:D5:9B:0D:BE:C8:FF:2C:20:1D
X509v3 Authority Key Identifier:
keyid:BE:AD:22:D5:30:AD:2E:5F:A8:A5:12:4B:D0:5A:80:3C:18:76:AC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vq0i1TCtLl-opRJL0FqAPBh2rM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/2c03dc-d902-4b81-b160-2abacf752282/1/vq0i1TCtLl-opRJL0FqAPBh2rM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:c5:25:0b:c2:9c:c9:d6:92:aa:e6:01:7b:fc:a7:b0:a3:63:
e5:d5:db:32:c7:4a:22:7e:ad:8b:e1:98:38:9d:a5:67:53:55:
21:77:08:71:4d:2e:97:4a:ae:6d:f9:38:c8:2d:b1:b3:cc:90:
c6:4c:46:05:3f:ff:7e:92:7a:c6:40:60:fd:3d:fd:06:b7:a3:
7c:f1:68:7c:3a:d2:12:e8:d5:90:bf:1d:16:5c:9c:e1:cc:e0:
7b:ea:da:c3:51:63:28:a8:92:70:eb:64:17:5f:7e:86:2a:0b:
22:d1:ee:cf:b8:dd:34:bd:e6:78:7f:9b:6a:ce:7f:0e:54:ec:
e2:33:c3:bd:8b:21:53:75:34:1a:fa:cd:18:6c:e2:c5:7f:d3:
3a:99:25:c0:29:57:96:10:e9:5d:4e:0c:1a:25:93:1c:5e:b6:
43:10:5b:d2:45:ea:65:f7:a6:44:4f:d2:87:ad:f6:44:91:5e:
4b:58:06:3b:4f:00:19:f7:5e:f5:f7:e5:0b:5f:79:2a:f0:41:
9b:62:d7:4e:67:ab:f6:4e:1f:db:d3:5a:31:6b:c8:ea:33:2b:
bb:88:91:cd:17:14:f1:8d:6a:64:c5:34:d2:92:73:52:1a:99:
6d:25:86:54:eb:35:50:71:4a:83:45:a3:d1:de:03:10:ec:17:
e8:ba:ba:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 20 17:34:18 2025 by rpki-client