Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
File: BR01GL3lliv_5z55iEcY5u0PpFY.mft (raw, json)
Hash identifier: Bj5hU1r/fg8l9nLvRLutafjhliLpNsXH6V9gdxmRdjs=
Subject key identifier: 51:14:AB:9A:7D:D8:D0:BF:8E:FF:E9:B4:B3:CD:65:58:5A:5D:DB:63
Authority key identifier: 05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
Certificate issuer: /CN=051d3518bde5962bffe73e79884718e6ed0fa456
Certificate serial: 0194BC0502CC27E7B7F395D7A20A3901FB0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
Manifest number: 0E83
Signing time: Fri 31 Jan 2025 11:00:32 +0000
Manifest this update: Fri 31 Jan 2025 11:00:32 +0000
Manifest next update: Sat 01 Feb 2025 11:00:32 +0000
Files and hashes: 1: BR01GL3lliv_5z55iEcY5u0PpFY.crl (hash: gghDkQJb50jcMhFuxcg36pDMq3+tbkQ7KcN1ymF0CRE=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:05:02:cc:27:e7:b7:f3:95:d7:a2:0a:39:01:fb:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=051d3518bde5962bffe73e79884718e6ed0fa456
Validity
Not Before: Jan 31 11:00:32 2025 GMT
Not After : Feb 1 11:00:32 2025 GMT
Subject: CN=5114ab9a7dd8d0bf8effe9b4b3cd65585a5ddb63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:a4:98:a5:fa:3d:74:3c:2f:59:8e:64:9d:85:
38:00:b2:2b:3f:d7:29:e6:90:78:4a:0e:a7:30:05:
c4:15:fb:aa:59:f6:8f:a7:aa:57:51:15:5c:93:55:
ca:c8:96:b9:22:d6:66:84:d9:eb:15:6a:66:05:93:
4c:4a:64:2f:4b:7f:c0:18:3a:a6:d5:c8:f0:9b:ec:
71:13:4d:31:c1:39:6b:1a:84:09:32:a5:b9:69:89:
c2:07:b1:5a:a3:3e:8c:cd:a5:80:2c:11:35:3a:ba:
f6:91:d6:a9:b8:ee:c0:a3:23:8d:bc:e2:11:c1:62:
22:ea:35:59:f5:21:c2:ba:b6:b6:80:05:94:16:41:
d7:10:e8:dc:6d:6b:ec:79:bf:02:62:3f:68:d0:59:
ad:16:2b:d4:cd:fb:a3:4f:f5:b6:5a:c4:9e:12:71:
8d:89:4e:04:fa:79:39:ff:e0:4b:e1:fe:61:1c:54:
e0:d9:46:72:bd:ce:07:38:e0:2a:ad:6c:44:b0:6a:
38:d0:4d:4d:aa:b5:72:0c:b9:3d:06:1d:36:be:bf:
03:80:5c:c7:a3:5a:f1:da:c8:06:49:73:ae:88:5f:
be:af:f4:59:ac:35:46:46:36:46:56:08:b4:68:5e:
9e:80:bd:39:78:05:d1:25:3c:8c:71:24:5b:de:5c:
5b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:14:AB:9A:7D:D8:D0:BF:8E:FF:E9:B4:B3:CD:65:58:5A:5D:DB:63
X509v3 Authority Key Identifier:
keyid:05:1D:35:18:BD:E5:96:2B:FF:E7:3E:79:88:47:18:E6:ED:0F:A4:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BR01GL3lliv_5z55iEcY5u0PpFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f9a602-c4eb-4b4c-bead-c5beb2e245fe/1/BR01GL3lliv_5z55iEcY5u0PpFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:27:32:59:9e:65:b1:84:73:16:39:d9:41:c3:66:6b:7f:45:
72:75:3e:b5:ac:3f:bd:c9:ae:d0:32:2c:54:41:10:63:1e:fe:
f5:ad:56:21:34:6c:a4:e7:1e:c4:83:3a:95:ac:28:dd:d6:e6:
52:a0:ce:4f:53:0e:f0:45:ec:66:70:e8:0b:52:0d:ab:2d:ea:
4a:b8:64:90:28:2d:bd:66:eb:70:46:f3:e1:f6:e1:8d:b1:0e:
9f:d4:11:ca:53:c3:4c:e7:4e:15:e0:53:33:8c:2a:cf:3a:02:
5c:9d:bb:db:bf:73:29:14:80:5e:ce:18:f2:09:6f:d2:07:bc:
59:63:85:bf:b4:72:a1:77:8f:57:ee:fc:42:c3:76:ed:9f:a1:
ba:06:6b:27:77:3e:b1:56:a0:a0:61:bf:70:49:fb:22:0e:dd:
99:62:f9:5b:7c:0e:05:f5:5e:9d:dc:be:eb:3d:51:00:0f:dc:
df:e4:e2:b3:10:6d:10:a2:80:65:88:78:75:cc:5b:89:2f:14:
f4:f5:d6:53:d1:e6:af:77:bf:48:a6:32:e4:61:19:58:43:76:
2a:b7:33:5d:bb:13:64:05:ae:a5:8e:30:32:d3:77:d9:64:d2:
10:26:e8:cb:44:ba:6c:f9:74:20:3c:7e:43:26:7d:ba:15:c5:
4d:da:d1:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 02:59:07 2025 by rpki-client