Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.mft
File: iUCMZm-TadtDTormwz2gL7VtScE.mft (raw, json)
Hash identifier: 3yr04bUUNjCuCqAjBrg+eBRQaGMwUl3baTbD2m7b9kg=
Subject key identifier: 95:DD:3A:44:80:44:A9:3D:83:9F:29:FD:AA:9B:C8:DD:0D:83:47:89
Authority key identifier: 89:40:8C:66:6F:93:69:DB:43:4E:8A:E6:C3:3D:A0:2F:B5:6D:49:C1
Certificate issuer: /CN=89408c666f9369db434e8ae6c33da02fb56d49c1
Certificate serial: 018C57E4F2167BDA3AD7355A095A4E0EFCCA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUCMZm-TadtDTormwz2gL7VtScE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.mft
Manifest number: 01C0
Signing time: Mon 11 Dec 2023 08:01:10 +0000
Manifest this update: Mon 11 Dec 2023 08:01:10 +0000
Manifest next update: Tue 12 Dec 2023 08:01:10 +0000
Files and hashes: 1: iUCMZm-TadtDTormwz2gL7VtScE.crl (hash: YmjvfIm3PkY4N4kpg2Yq3QLoP5EUqosJI6pCbDpZ0Ro=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:57:e4:f2:16:7b:da:3a:d7:35:5a:09:5a:4e:0e:fc:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89408c666f9369db434e8ae6c33da02fb56d49c1
Validity
Not Before: Dec 11 08:01:10 2023 GMT
Not After : Dec 12 08:01:10 2023 GMT
Subject: CN=95dd3a448044a93d839f29fdaa9bc8dd0d834789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:f5:b8:5a:5a:be:12:3b:41:e8:a6:e7:d9:0f:
8a:1d:b3:b0:5d:c3:98:71:80:ad:e3:2e:18:d2:08:
98:a2:4d:2b:ba:96:e5:71:b1:c5:0b:ae:1b:f7:fe:
26:51:a0:22:ee:8a:bb:e4:00:b7:e3:64:6d:37:16:
53:2e:fb:6e:ea:de:8d:b9:14:55:ca:5d:4a:bd:5e:
12:77:39:21:e8:7a:6d:de:90:21:87:13:bb:a4:85:
4a:e7:c6:91:2b:30:76:39:ae:db:d5:34:cb:9e:d5:
94:c8:27:c9:c8:04:3c:bd:c9:55:b4:33:fd:96:66:
32:c7:2b:bf:bc:05:5a:30:a0:1e:03:1f:2d:e5:ca:
17:75:00:f4:73:61:8c:30:5a:f5:9c:1a:27:3f:83:
e0:5c:d0:d9:10:7c:65:10:cd:f2:2b:ae:1c:ff:16:
d3:18:ce:44:8e:90:12:bc:e1:b8:e0:1c:34:80:8b:
67:ed:cb:5f:01:99:fa:d0:f4:32:6c:71:f2:dd:0d:
3d:6b:a9:74:31:f2:6e:ae:2c:4a:df:5a:cd:71:9a:
f4:aa:d2:ca:90:4e:a1:f3:63:9a:4c:73:32:ac:40:
fb:ed:48:d5:a8:4f:76:e7:08:05:60:74:f2:06:32:
43:db:ec:61:b2:12:25:cb:25:33:50:88:d6:f9:0a:
c1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:DD:3A:44:80:44:A9:3D:83:9F:29:FD:AA:9B:C8:DD:0D:83:47:89
X509v3 Authority Key Identifier:
keyid:89:40:8C:66:6F:93:69:DB:43:4E:8A:E6:C3:3D:A0:2F:B5:6D:49:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUCMZm-TadtDTormwz2gL7VtScE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/e2411e-a243-47e8-8de3-3c2d4a08125c/1/iUCMZm-TadtDTormwz2gL7VtScE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:a4:be:c1:81:46:78:7d:ac:f9:a2:04:cb:9e:e9:68:6e:92:
4f:be:8c:ac:6b:6e:7b:a8:88:fb:70:9f:4f:6a:ea:90:eb:36:
8d:61:b0:fc:bb:4e:74:0f:5f:30:c7:f2:ac:fe:19:f8:b6:18:
35:55:5f:32:63:19:12:3a:f1:e4:30:b5:95:54:7a:a9:28:e2:
69:53:f3:5c:c6:d9:d9:b3:46:b0:19:be:04:69:6c:ff:80:90:
c3:ec:48:6c:29:0b:8e:45:de:23:05:72:de:f8:8c:c8:fb:be:
b4:58:1b:17:8b:0b:88:f8:17:be:85:37:f8:d3:5f:29:d3:df:
36:5d:d3:30:6e:42:a4:81:8d:0b:fe:8c:53:9e:14:a8:3a:ff:
28:1d:ec:4b:20:fc:2c:04:f5:44:fc:cd:08:fd:00:97:4e:62:
5c:55:87:15:8e:0d:4e:9a:54:a0:60:59:88:cb:5c:4d:b1:e2:
5c:7c:56:ac:c8:58:8e:27:f5:73:8d:f9:87:7c:77:96:69:c8:
e5:56:eb:0f:5f:7e:ed:f5:b9:75:eb:0f:3f:dc:df:b5:a7:04:
d3:b9:e5:82:40:4e:a1:2f:19:60:d0:17:21:bb:1b:4e:ab:d5:
12:4a:5d:a7:45:2c:0f:cf:8d:a3:f3:45:3b:7c:e4:76:d6:68:
7c:29:b9:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:30:43 2024 by rpki-client on console-fra.rpki-client.org