Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
File: sbNOAGdlsVTze200hFiBiVEfsgA.mft (raw, json)
Hash identifier: XfU9fbovuvKbwByrCT9SU45li1bg/HmSXSXMESZ/X9s=
Subject key identifier: AF:5A:80:C5:FC:DC:CF:61:D5:EF:28:ED:9D:CE:5A:39:77:02:31:6B
Authority key identifier: B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
Certificate issuer: /CN=b1b34e006765b154f37b6d3484588189511fb200
Certificate serial: 0194BD17B1F6B804F936F8BB0F6A72CC9E1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
Manifest number: 07EA
Signing time: Fri 31 Jan 2025 16:00:34 +0000
Manifest this update: Fri 31 Jan 2025 16:00:34 +0000
Manifest next update: Sat 01 Feb 2025 16:00:34 +0000
Files and hashes: 1: aVq4cLrPwFzzhZqO1-advKfUZmA.roa (hash: /eEXPn/0u7ownwImimo5XirraLhO6aVXTWk+e0HToH4=)
2: sbNOAGdlsVTze200hFiBiVEfsgA.crl (hash: DAPgyXSpS3uzQjOX0FTU5DPGtZjMIHisfhBc1O53Tx8=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:bd:17:b1:f6:b8:04:f9:36:f8:bb:0f:6a:72:cc:9e:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1b34e006765b154f37b6d3484588189511fb200
Validity
Not Before: Jan 31 16:00:34 2025 GMT
Not After : Feb 1 16:00:34 2025 GMT
Subject: CN=af5a80c5fcdccf61d5ef28ed9dce5a397702316b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:ca:81:f0:68:77:24:59:1a:be:af:4a:9e:a1:
5d:30:9a:9d:6b:44:98:6f:cc:67:ce:4a:2d:63:bb:
d5:b6:2f:8c:9a:d2:f9:bc:7f:74:f3:a5:4a:5b:cd:
21:c9:80:96:f9:9c:c9:10:0a:3b:5b:3a:8c:6a:52:
21:de:77:90:7f:cf:3a:fb:7d:2f:21:28:a5:92:cd:
ff:9b:a1:e3:3b:4d:7b:00:94:c5:fd:f2:02:01:2c:
db:14:64:c1:24:74:9a:b2:13:b6:2e:79:aa:8d:10:
78:d0:fd:f9:19:f1:04:15:77:04:cd:2d:32:ac:ca:
30:84:a5:c0:0c:e7:7f:38:5f:37:35:8f:46:8f:bb:
54:af:aa:3f:d7:d1:90:fe:be:3d:89:e9:65:7d:49:
18:a7:ff:95:9c:27:53:18:18:ea:26:b8:36:82:dd:
2f:ec:9f:4b:55:7e:3f:c5:7d:f6:84:58:07:b0:ce:
af:aa:b0:ae:22:aa:a9:a2:8a:f3:f4:9e:d9:9f:31:
4f:7e:13:94:e5:39:bb:b9:39:fc:20:49:2b:d9:c0:
05:76:40:70:a2:41:ed:44:cc:f0:f7:77:6f:b9:6d:
4a:f6:5c:e2:d5:97:1a:09:50:47:f8:1b:df:16:fc:
02:eb:d1:60:11:96:e1:52:dd:10:a3:b1:e1:81:91:
2f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:5A:80:C5:FC:DC:CF:61:D5:EF:28:ED:9D:CE:5A:39:77:02:31:6B
X509v3 Authority Key Identifier:
keyid:B1:B3:4E:00:67:65:B1:54:F3:7B:6D:34:84:58:81:89:51:1F:B2:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sbNOAGdlsVTze200hFiBiVEfsgA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/999cf5-812f-4e0a-8ea1-618238b7b942/1/sbNOAGdlsVTze200hFiBiVEfsgA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:b7:6b:25:9a:90:83:72:88:cb:0d:fc:87:62:05:62:30:e6:
9e:fd:18:ac:fb:45:ee:1d:c1:67:d0:b2:e3:8a:0e:6d:56:a5:
4e:4c:98:68:01:a7:a2:27:c0:68:45:29:02:84:1a:60:62:a8:
a1:27:bc:5e:87:4d:25:b0:26:47:23:ae:b8:b4:63:96:14:a5:
d6:50:9b:3d:c0:3d:e3:8e:5a:f6:be:b5:d9:09:42:5c:46:9a:
31:42:d7:32:92:0a:3c:4d:73:74:d2:41:fa:28:c1:e7:bb:7c:
0c:3f:07:bc:23:73:e6:06:df:07:8a:2b:f9:d8:11:18:26:c7:
8f:6c:1f:a0:ca:af:14:ae:e3:f1:7d:7c:82:f1:9e:24:11:61:
94:0f:d8:38:1d:5a:d8:68:59:43:09:e9:61:6d:8e:6c:c3:28:
73:9e:57:3d:4f:78:da:65:53:ed:35:02:2b:de:ae:03:6f:c2:
85:b5:3f:6c:d8:ae:16:e3:f2:07:50:2b:f6:63:a4:14:de:af:
de:cb:fb:0c:1b:0c:82:cb:b3:50:e2:e0:a0:2b:b8:06:0f:cf:
a8:d0:46:d4:bc:7e:e0:3b:45:91:61:c1:46:7e:84:f1:f1:76:
28:51:b2:7f:d5:b3:b8:6a:ff:ef:ea:f2:7a:d5:5c:d0:7a:06:
71:11:b9:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZS9F7H2uAT5Nvi7D2pyzJ4eMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxYjM0ZTAwNjc2NWIxNTRmMzdiNmQzNDg0NTg4MTg5NTEx
ZmIyMDAwHhcNMjUwMTMxMTYwMDM0WhcNMjUwMjAxMTYwMDM0WjAzMTEwLwYDVQQD
EyhhZjVhODBjNWZjZGNjZjYxZDVlZjI4ZWQ5ZGNlNWEzOTc3MDIzMTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsqB8Gh3JFkavq9KnqFdMJqda0SY
b8xnzkotY7vVti+MmtL5vH9086VKW80hyYCW+ZzJEAo7WzqMalIh3neQf886+30v
ISilks3/m6HjO017AJTF/fICASzbFGTBJHSashO2LnmqjRB40P35GfEEFXcEzS0y
rMowhKXADOd/OF83NY9Gj7tUr6o/19GQ/r49iellfUkYp/+VnCdTGBjqJrg2gt0v
7J9LVX4/xX32hFgHsM6vqrCuIqqpoorz9J7ZnzFPfhOU5Tm7uTn8IEkr2cAFdkBw
okHtRMzw93dvuW1K9lzi1ZcaCVBH+BvfFvwC69FgEZbhUt0Qo7HhgZEvhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK9agMX83M9h1e8o7Z3OWjl3AjFrMB8GA1UdIwQY
MBaAFLGzTgBnZbFU83ttNIRYgYlRH7IAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEt
NjE4MjM4YjdiOTQyLzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy85OTljZjUtODEyZi00ZTBhLThlYTEtNjE4MjM4YjdiOTQy
LzEvc2JOT0FHZGxzVlR6ZTIwMGhGaUJpVkVmc2dBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7drJZqQ
g3KIyw38h2IFYjDmnv0YrPtF7h3BZ9Cy44oObValTkyYaAGnoifAaEUpAoQaYGKo
oSe8XodNJbAmRyOuuLRjlhSl1lCbPcA9445a9r612QlCXEaaMULXMpIKPE1zdNJB
+ijB57t8DD8HvCNz5gbfB4or+dgRGCbHj2wfoMqvFK7j8X18gvGeJBFhlA/YOB1a
2GhZQwnpYW2ObMMoc55XPU942mVT7TUCK96uA2/ChbU/bNiuFuPyB1Ar9mOkFN6v
3sv7DBsMgsuzUOLgoCu4Bg/PqNBG1Lx+4DtFkWHBRn6E8fF2KFGyf9WzuGr/7+ry
etVc0HoGcRG5LQ==
-----END CERTIFICATE-----
Generated at Fri Apr 25 01:25:47 2025 by rpki-client