Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: o4ZHqb3TaAebkhtI6q5oSZuXNuzXoTBqM4IN+ULtFD4=
Subject key identifier: B1:C4:54:A6:95:A4:95:9D:FA:3A:D0:BF:18:D2:C0:9F:30:67:4D:21
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 01936AB45006B1DC8121652BFDA70B4A5C89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 073A
Signing time: Tue 26 Nov 2024 23:00:22 +0000
Manifest this update: Tue 26 Nov 2024 23:00:22 +0000
Manifest next update: Wed 27 Nov 2024 23:00:22 +0000
Files and hashes: 1: Y3cqm_SKUVIKboDdk96dj-yn9H4.roa (hash: uaXFFykwCZYmndOr2yOXAhu7tu1dDU2+8VDY+HcItis=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: nKorbnoJBh3mmCnU9b1IxJC5Ts3lXkRNx8DX5rTUJU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 27 Nov 2024 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:93:6a:b4:50:06:b1:dc:81:21:65:2b:fd:a7:0b:4a:5c:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Nov 26 23:00:22 2024 GMT
Not After : Nov 27 23:00:22 2024 GMT
Subject: CN=b1c454a695a4959dfa3ad0bf18d2c09f30674d21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:c8:b2:de:6f:b9:13:f7:17:6c:f1:0c:57:ed:
16:47:10:94:ba:9b:3b:5d:60:46:eb:21:f8:a5:90:
68:72:1a:c9:35:3a:96:be:1b:ae:3f:28:91:45:ba:
ee:6b:17:69:54:4e:11:92:4e:49:76:91:51:f0:be:
6f:42:a5:e1:e6:c2:5c:b6:a2:24:b2:3a:94:3b:0f:
99:bf:29:fe:84:3c:fd:14:52:39:f9:35:0c:08:72:
7d:77:97:05:2c:dc:f5:c6:a1:2c:3a:b1:51:3c:b5:
60:74:b2:8b:5f:81:5b:70:40:37:c0:9a:54:b7:19:
97:b5:e4:6a:6b:36:a2:f1:d1:61:aa:a0:9c:a9:bf:
06:ad:42:6f:3c:71:6d:f4:f8:91:29:b6:6f:85:bf:
7e:b4:0a:01:81:b8:a7:96:65:50:71:1c:91:8d:c3:
4f:c0:c2:bf:6b:11:b2:88:85:02:bf:c2:d4:c3:72:
06:8f:52:4b:87:1d:0b:14:bf:7b:c3:62:59:de:8e:
46:e8:d5:3d:59:bd:82:f2:50:49:f2:fc:d4:4b:37:
ed:30:18:0d:2e:16:11:2b:42:21:0c:d1:a3:3b:6e:
ed:3a:cd:a7:66:84:e6:a0:df:68:67:d5:f4:93:5a:
ba:73:f5:ad:10:bf:18:30:9e:69:6c:ec:91:65:03:
67:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:54:A6:95:A4:95:9D:FA:3A:D0:BF:18:D2:C0:9F:30:67:4D:21
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:08:dc:10:ae:6c:cb:7b:01:e7:c8:7b:bb:7f:05:6e:83:7c:
26:fd:4e:e2:97:55:24:c8:d5:43:ca:1b:87:28:eb:a5:7c:70:
f6:41:13:9c:0f:95:49:fa:6d:22:bf:84:97:68:ec:92:bc:5a:
a4:45:68:37:29:8b:01:32:63:08:bf:f6:ba:13:b5:f3:4d:a6:
69:80:3f:97:7a:4d:96:f4:46:2c:b8:56:34:ec:7b:a2:de:6c:
e5:cd:34:51:79:5c:5e:a5:1e:2c:19:cf:77:22:40:31:be:86:
96:b1:3f:70:0d:a4:0f:bc:f2:2d:8c:1c:ac:d8:f5:ab:3f:9b:
61:da:0c:b7:d9:4b:d5:75:7b:ee:69:de:3d:1c:94:8d:99:71:
6c:27:f0:52:34:43:0e:e7:e2:f7:b0:85:0c:9d:d8:94:21:bb:
ef:ad:24:d6:92:d5:7f:f2:47:55:21:49:a4:2a:4e:28:14:eb:
47:b7:9b:2e:6f:43:0e:2c:fc:69:9c:1d:88:99:3d:e4:2c:a6:
5b:6b:78:3a:c4:f3:fa:10:1a:bc:17:89:31:79:a0:e8:66:f8:
ea:b2:56:87:2c:ed:a7:1e:4d:dd:7b:dd:69:c8:87:a8:e5:84:
db:84:82:23:2e:20:97:26:36:72:3a:8a:8d:b8:ce:29:53:34:
98:62:5c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 27 00:45:44 2024 by rpki-client on console-fra.rpki-client.org