Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
File: rEmesNS882vbjnuqgFcJ1Z8jSa0.mft (raw, json)
Hash identifier: 097w7SHCzZUn4RQRO8oLIwFyKXY9aQYQnz+cLCG+EGI=
Subject key identifier: 4C:08:F3:4E:F0:AF:FA:2D:A7:14:30:AE:50:25:94:6B:86:88:67:C5
Authority key identifier: AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD
Certificate issuer: /CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
Certificate serial: 0194BBCEE70AC404C6C0B2ADFFA8B4C4F12E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
Manifest number: 0430
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: rEmesNS882vbjnuqgFcJ1Z8jSa0.crl (hash: tSlr+iPMjORv/nfFPyHFREucZJgHHCsPtqKREXZxNtg=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e7:0a:c4:04:c6:c0:b2:ad:ff:a8:b4:c4:f1:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac499eb0d4bcf36bdb8e7baa805709d59f2349ad
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=4c08f34ef0affa2da71430ae5025946b868867c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:dd:10:cc:00:79:a7:92:c0:2e:41:b9:97:aa:
5b:46:cc:b0:c0:82:71:39:ff:79:c1:34:d7:37:38:
65:89:4b:02:45:04:a9:00:5d:09:4d:97:53:3e:05:
60:85:41:e6:ee:74:fa:42:87:9d:33:fd:a3:94:6f:
39:af:1b:4a:28:6c:91:74:6a:64:56:d4:07:d5:3a:
f1:c1:d6:a6:c3:af:02:8f:ea:49:0b:9f:32:9a:09:
4c:e9:2a:69:5e:85:95:bb:aa:9e:97:85:22:19:04:
17:0c:46:d6:0b:43:96:2e:0e:8e:28:11:c3:9e:1b:
14:8c:aa:ef:f5:71:58:47:0f:29:b8:58:79:16:7d:
81:ff:a2:1c:7c:ce:1a:e3:43:9f:70:b2:59:f1:27:
12:1d:5c:70:1d:22:22:dc:a4:fc:52:ff:a7:86:b1:
d1:52:cb:3d:af:96:fa:f0:9d:5f:a1:77:09:70:d0:
a3:f0:5c:0d:cd:be:d0:93:7e:14:89:96:fa:24:d0:
75:6f:e8:2a:54:33:0d:8e:4c:54:74:69:14:ff:8d:
29:da:f4:72:01:a1:fb:cc:ab:d2:c8:c2:b5:54:11:
26:08:05:20:9a:95:9c:15:bc:5b:a7:57:eb:4a:f8:
82:24:09:ca:e9:43:94:54:4a:20:3d:b4:0d:e9:b5:
ef:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:08:F3:4E:F0:AF:FA:2D:A7:14:30:AE:50:25:94:6B:86:88:67:C5
X509v3 Authority Key Identifier:
keyid:AC:49:9E:B0:D4:BC:F3:6B:DB:8E:7B:AA:80:57:09:D5:9F:23:49:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rEmesNS882vbjnuqgFcJ1Z8jSa0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/5f61a5-7fdb-4d02-93ec-0c65c41a6d2b/1/rEmesNS882vbjnuqgFcJ1Z8jSa0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a3:9e:8d:4a:6b:45:06:3b:4f:79:d6:e4:8a:f9:a0:8f:8a:
ad:3c:ef:75:cd:89:a5:c4:63:55:b0:ce:ca:ea:50:54:70:a5:
ac:ac:45:0c:e8:97:9d:07:b0:d4:70:40:91:bb:79:b0:eb:3c:
da:e2:ce:e7:7e:c1:79:0d:7a:24:72:78:60:45:46:69:da:a4:
2e:f6:6e:94:e6:61:db:27:6f:da:a3:c3:67:0e:3d:85:ca:5e:
c9:c7:8d:84:80:eb:72:8c:0f:64:8e:99:55:ff:f0:8d:51:29:
69:e1:fb:1a:e0:28:d0:76:ab:54:6a:f6:f7:9e:53:a4:b8:86:
3d:3f:ce:0f:c8:f3:c7:e9:66:56:48:54:ac:48:a3:76:4e:65:
7a:00:ad:b6:32:e9:79:40:97:97:9d:ce:f6:1f:b6:fb:d7:23:
14:dc:7e:94:fe:03:35:91:21:ac:b7:6f:02:42:d5:99:d1:0d:
28:a1:d6:a4:58:72:24:25:17:c1:e2:29:b7:56:86:e7:75:5e:
8c:bb:73:86:68:ba:4e:e8:e6:b5:ad:c9:75:cc:ee:bf:da:90:
6d:06:8a:ec:c2:51:65:11:c9:f8:c0:35:ca:d0:16:df:5f:d8:
48:7f:e6:b0:9d:76:41:ed:6b:75:1e:ae:68:f8:03:3d:bb:64:
97:7b:b4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:10:19 2025 by rpki-client