Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
File: a-BR-5PgFam3YbtFr-EJ2740fGY.mft (raw, json)
Hash identifier: 4fHd1TVzeK4YBJw6R/cgVG2d5b62D+6IDdieORiA+Uk=
Subject key identifier: E1:AA:CD:AF:C9:E7:45:61:27:2F:62:9D:24:C4:E8:72:BE:26:36:51
Authority key identifier: 6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
Certificate issuer: /CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Certificate serial: 0194BCA981F04847F86FC1699CB13E16471E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
Manifest number: 03DB
Signing time: Fri 31 Jan 2025 14:00:12 +0000
Manifest this update: Fri 31 Jan 2025 14:00:12 +0000
Manifest next update: Sat 01 Feb 2025 14:00:12 +0000
Files and hashes: 1: a-BR-5PgFam3YbtFr-EJ2740fGY.crl (hash: c2SlaOjHdJ10PiZDSc/PXbGFwy50vOep3A1HODg+PRw=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bc:a9:81:f0:48:47:f8:6f:c1:69:9c:b1:3e:16:47:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6be051fb93e015a9b761bb45afe109dbbe347c66
Validity
Not Before: Jan 31 14:00:12 2025 GMT
Not After : Feb 1 14:00:12 2025 GMT
Subject: CN=e1aacdafc9e74561272f629d24c4e872be263651
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:8d:ac:be:b9:65:f6:db:7b:f2:96:8d:4f:df:
4f:dd:3a:73:3c:8b:1e:1b:bd:46:83:00:98:22:e5:
bc:ec:38:1f:17:96:f3:04:33:ca:73:97:98:99:a0:
b0:a5:66:bf:1e:b3:87:8c:49:f2:f7:6c:0e:53:df:
c8:76:7f:3e:8b:39:94:59:77:83:40:da:4f:f6:d7:
a2:6b:3a:76:70:55:e2:71:1c:7b:65:c6:67:7e:ae:
8b:77:8a:83:e4:09:ec:e2:5e:9a:48:1f:f9:16:77:
63:f5:3a:aa:90:1f:3d:06:65:91:3e:13:9d:81:e0:
99:28:3c:10:66:9a:50:73:aa:5c:2a:81:af:55:16:
70:3d:db:17:cd:e9:fa:46:d5:c2:65:fa:3c:4c:bf:
8c:0f:70:cb:d0:a6:d0:b1:05:ba:a5:83:6c:bb:5f:
70:5c:d8:cb:42:2d:98:02:aa:5a:db:01:71:51:0c:
85:9d:4f:66:ea:fe:d2:24:a4:48:da:46:96:b8:4e:
67:68:1a:3b:6d:06:2f:14:a9:23:22:39:93:e2:6b:
93:37:35:56:24:62:f7:9f:39:28:63:42:5a:07:6d:
9c:2e:38:59:93:75:2b:3d:d4:b9:fc:d9:52:37:87:
f7:f9:62:17:d7:45:7b:af:a7:a0:c9:b4:ac:aa:91:
aa:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:AA:CD:AF:C9:E7:45:61:27:2F:62:9D:24:C4:E8:72:BE:26:36:51
X509v3 Authority Key Identifier:
keyid:6B:E0:51:FB:93:E0:15:A9:B7:61:BB:45:AF:E1:09:DB:BE:34:7C:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-BR-5PgFam3YbtFr-EJ2740fGY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/25f85e-d070-488b-89f6-f4e59f39a74a/1/a-BR-5PgFam3YbtFr-EJ2740fGY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:72:f9:5e:5a:f1:62:b2:f6:f4:1d:f8:36:8e:c5:ac:7c:c2:
68:d8:0d:01:f9:49:2d:d4:ac:3c:7a:9e:9a:9e:7c:52:ce:28:
04:5c:28:d4:9b:3f:4a:73:e5:88:c9:e7:03:86:3c:06:d7:23:
08:b9:ac:c6:f7:53:65:8e:f2:1b:76:40:6c:5a:3a:fa:d9:05:
55:b5:c3:6d:f0:92:34:7d:7d:52:25:73:3b:93:ca:74:b0:a9:
53:b5:3d:d9:bb:5c:86:72:3a:f4:19:71:27:6a:2b:9f:d1:a0:
6e:5d:9e:88:0c:bd:60:b5:b1:28:dd:2c:a4:79:01:f6:f1:c1:
72:a9:1a:c2:57:6a:35:5a:ec:60:35:98:e4:a1:4a:9b:5d:bf:
71:27:f0:4a:38:bc:ae:0f:ff:5a:d6:47:64:66:cc:54:54:4e:
00:0b:96:c8:2c:b2:9f:55:55:ac:7d:d4:41:71:5f:80:82:f4:
7b:9c:66:6a:aa:fd:63:1a:42:02:82:38:dd:25:e0:10:05:c2:
2f:67:bd:c2:31:44:0a:ab:e0:e9:45:58:e4:e9:e9:5c:3c:0b:
37:86:bb:d0:b4:ac:20:c3:eb:1e:d2:87:4b:e9:63:8b:81:ab:
2a:75:2d:8a:94:35:c5:78:c4:2d:f3:83:02:5c:c7:d3:2b:99:
3d:93:82:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 06:46:50 2025 by rpki-client