Manifest

$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File:                     861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier:          tcoepYg3lyAuWYdvmDuv2ZeM8hWhmiYRaE6MGHXmFFs=
Subject key identifier:   5F:3C:8B:91:FC:90:D2:55:31:35:39:54:B8:1E:46:0C:0A:EE:2E:84
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer:       /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial:       3002E89BBA79CB766DD46A448A2F4261DB929A10
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access:      rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number:          0637
Signing time:             Sat 26 Apr 2025 10:47:10 +0000
Manifest this update:     Sat 26 Apr 2025 10:42:10 +0000
Manifest next update:     Sun 27 Apr 2025 10:52:10 +0000
Files and hashes:         1: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: 9AULA3gVfXwqa9G0A8IFrfoQnTth0WOwApn3Qi/l42A=)
                          2: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
                          3: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
                          4: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
                          rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 10:52:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:02:e8:9b:ba:79:cb:76:6d:d4:6a:44:8a:2f:42:61:db:92:9a:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
        Validity
            Not Before: Apr 26 10:42:10 2025 GMT
            Not After : Apr 27 10:52:10 2025 GMT
        Subject: CN=5F3C8B91FC90D25531353954B81E460C0AEE2E84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:04:c5:60:66:7d:38:84:f9:54:8c:cf:25:08:
                    67:3b:27:93:ea:b3:79:7b:e5:76:23:fe:81:39:e6:
                    fc:fa:a4:6d:9f:2c:19:1f:46:85:64:2a:13:10:0c:
                    04:2b:03:6f:95:77:8a:c0:44:74:6e:6b:9e:20:5f:
                    af:cf:d1:af:23:9c:4c:e6:6a:06:03:3e:67:37:7b:
                    2d:f6:2b:67:96:d8:ee:2f:43:17:4e:1a:c4:24:5a:
                    d1:6a:73:38:74:35:e6:65:fb:98:28:1c:50:d6:9b:
                    5e:c9:7d:5a:ff:23:4e:23:ef:3c:a1:a2:ae:b8:9c:
                    4d:34:b8:2f:f4:37:a4:7b:2e:52:b2:f2:1f:3a:b7:
                    bb:30:52:eb:42:5f:37:01:66:f7:39:c6:1b:af:ea:
                    55:a8:48:3d:d2:59:57:b0:93:64:bd:bf:10:4c:25:
                    f3:e4:cc:46:f2:14:d3:7b:8b:40:ec:89:b0:c6:59:
                    b8:eb:7e:79:8d:88:8a:e8:64:7b:e8:f6:1f:ad:af:
                    ca:c6:f0:0f:14:ce:4d:a4:a9:d2:99:26:24:96:0e:
                    37:e3:89:f7:97:44:db:03:9d:27:80:fe:b4:0a:dd:
                    30:1e:59:9d:ae:cc:dc:da:da:9a:04:4a:46:15:37:
                    b4:f8:e5:3c:b4:02:4a:4d:f3:52:e4:e3:fe:28:1d:
                    f9:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3C:8B:91:FC:90:D2:55:31:35:39:54:B8:1E:46:0C:0A:EE:2E:84
            X509v3 Authority Key Identifier:
                keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:46:55:6d:51:fe:e8:6e:e9:e2:58:30:d1:22:7b:58:1d:73:
         0a:99:3b:0a:dd:ba:40:5e:bf:cb:d5:de:3d:77:c5:8e:f9:e7:
         83:42:03:a1:05:b7:d9:b3:3e:28:52:df:58:37:b8:ef:86:98:
         59:e2:dc:f1:2a:20:3c:7e:c8:bd:a3:d6:7a:a4:80:22:45:9f:
         e5:05:11:4b:5d:a1:18:62:53:9e:78:13:85:b9:c3:c4:c1:d0:
         b1:fb:ba:03:a3:8e:95:8c:93:c6:e1:6e:15:64:f2:c4:55:47:
         4a:71:3b:27:23:e5:87:55:86:b1:41:92:a8:13:32:ad:00:4e:
         72:a9:1f:14:6c:d7:20:43:62:bc:4b:c9:4e:0f:40:2c:07:e6:
         14:b7:9b:5f:7e:f9:03:25:a3:61:37:a9:29:06:ff:71:77:f4:
         22:da:80:2b:7b:da:62:a5:b9:32:62:23:1d:2d:0b:4a:b9:2f:
         b6:f8:d2:e3:af:45:e5:fb:5e:c8:5a:6d:5c:1d:52:c5:67:8b:
         c9:8e:3b:06:2b:9a:b9:d5:25:b3:80:2f:1e:44:f2:0a:22:22:
         93:f7:86:c4:0e:9e:dd:7f:0c:15:cc:cc:1c:27:2e:92:22:05:
         81:81:7c:5f:93:7e:09:91:44:40:c6:9a:88:89:d0:5a:26:10:
         47:5e:bf:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 18:11:53 2025 by rpki-client