Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
File: syznolxromOxucmrdrjS3DoNaAY.mft (raw, json)
Hash identifier: si7ijIO3CGLdlshnL76q+1b/8XGf8c2v0Idtwbv9l8c=
Subject key identifier: 3B:95:86:1C:27:25:1D:30:EB:BF:BD:9D:D2:29:86:62:80:C3:8A:CE
Authority key identifier: B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
Certificate issuer: /CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Certificate serial: 0194BBCEE6FA0D32949616897CC801E1EA3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
Manifest number: 02DB
Signing time: Fri 31 Jan 2025 10:01:26 +0000
Manifest this update: Fri 31 Jan 2025 10:01:26 +0000
Manifest next update: Sat 01 Feb 2025 10:01:26 +0000
Files and hashes: 1: syznolxromOxucmrdrjS3DoNaAY.crl (hash: 7Bf0jVtF9BbtoKMM7WWsxRqAmq5FIHfcPoy6PLoY5nI=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bb:ce:e6:fa:0d:32:94:96:16:89:7c:c8:01:e1:ea:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ce7a25c6ba263b1b9c9ab76b8d2dc3a0d6806
Validity
Not Before: Jan 31 10:01:26 2025 GMT
Not After : Feb 1 10:01:26 2025 GMT
Subject: CN=3b95861c27251d30ebbfbd9dd229866280c38ace
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:09:6a:25:44:2d:58:93:29:37:a4:10:e9:20:
3f:86:9a:71:91:81:ab:4e:a3:82:4f:cf:f5:89:5b:
a6:b7:6f:62:70:9b:65:0d:32:a3:a4:42:a1:ae:29:
21:09:0c:7a:8a:22:8c:fc:0c:ac:24:91:8c:83:e8:
76:49:ad:40:4f:d9:c0:33:b2:00:51:eb:ee:38:d0:
0b:b8:8d:b5:01:23:77:8a:f4:ce:68:f8:c2:45:88:
57:11:00:10:6a:80:cb:17:c4:3e:a6:0e:b9:cf:76:
e2:c6:b8:5d:25:e9:e2:ce:c2:04:60:1e:94:26:df:
dd:56:b8:5c:6f:9c:96:a8:b9:c6:f4:6e:b8:f8:19:
03:6f:1f:e7:75:f8:2c:86:0f:02:5e:89:56:29:da:
ac:4b:ec:17:b8:a1:2b:56:50:4a:46:41:d9:24:b2:
05:54:e1:f7:e0:8c:c3:74:37:93:91:db:db:6e:98:
8c:73:4d:8a:75:d1:19:be:a8:52:7e:ca:d6:a9:10:
71:f0:f4:d6:c5:9c:4f:9a:57:ec:30:49:45:8a:f0:
8a:66:6a:e5:2f:3d:72:1d:88:e2:21:59:87:4d:54:
10:66:38:04:35:19:35:2d:77:49:ed:b4:35:b8:69:
02:cb:d7:a8:7c:3e:40:ee:a1:62:cf:60:94:61:2a:
64:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:95:86:1C:27:25:1D:30:EB:BF:BD:9D:D2:29:86:62:80:C3:8A:CE
X509v3 Authority Key Identifier:
keyid:B3:2C:E7:A2:5C:6B:A2:63:B1:B9:C9:AB:76:B8:D2:DC:3A:0D:68:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syznolxromOxucmrdrjS3DoNaAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a3a653-aefa-48cd-aac7-3403a84297b1/1/syznolxromOxucmrdrjS3DoNaAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:44:ac:ad:bf:ed:66:3b:1e:65:1b:b9:7e:a6:53:88:a0:8c:
ed:40:c7:30:f4:a0:4f:c8:89:b8:44:44:bd:32:4c:19:16:43:
1f:df:01:80:4f:62:30:7b:c6:9b:c8:37:5e:28:ad:32:c8:46:
7f:0e:c0:e5:ed:dc:6c:61:18:1b:79:b5:3e:c1:00:94:69:14:
18:d2:44:e5:d0:c3:a2:51:40:69:3b:00:64:27:03:69:a7:9f:
b7:fb:ba:b3:0c:14:15:01:dd:7b:43:4a:78:fe:b8:8f:41:81:
f7:92:4d:ec:e4:59:53:98:3b:49:0b:0c:0d:95:73:97:51:e9:
da:4e:9b:b3:a5:ca:cd:1c:84:6d:e6:d7:47:6c:63:42:6e:bd:
a0:df:e8:e4:34:b0:fe:be:7e:c8:6a:f4:ea:55:82:99:46:0b:
1e:18:96:89:e4:88:05:72:ea:5e:ba:24:68:55:72:01:f1:04:
e7:5c:92:f5:bd:a3:c8:71:03:ca:6f:96:1f:c6:05:c7:0f:d3:
43:10:59:e4:cb:96:1f:fe:ec:93:b3:1a:ae:a9:44:26:2d:a4:
9d:d3:d7:57:09:3c:dd:4d:7b:eb:d4:4f:c3:72:ce:9d:1f:c2:
14:26:1a:31:92:2b:e8:cb:44:3d:1d:82:61:00:49:9e:58:31:
9c:7c:4f:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 17:52:58 2025 by rpki-client