Manifest

$ rpki-client -vvf 0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
File:                     C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft (raw, json)
Hash identifier:          410uugoEgEPHfKvlTFB81GThgvVBVpeS4X9LtefLWSA=
Subject key identifier:   91:43:E3:F6:5B:62:23:E7:04:48:42:E5:5C:18:C3:7C:2D:69:0B:00
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Certificate issuer:       /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial:       6681831FF4BB5D92F3E38672C0764C89FADE7B31
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access:      rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
Manifest number:          0634
Signing time:             Sat 26 Apr 2025 10:57:10 +0000
Manifest this update:     Sat 26 Apr 2025 10:52:10 +0000
Manifest next update:     Sun 27 Apr 2025 14:02:10 +0000
Files and hashes:         1: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (hash: VxApuIDEnwTqQ6WGnUzRodDciZZkhdWtDDb5ZPWEs7g=)
                          2: 38352e3139332e37382e302f32342d3234203d3e20313937373330.roa (hash: +uQwS2sIiIw5Nag1eIOK6jhQ8L/KtwZkpaaxkqKEIhI=)
                          3: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (hash: HhN3ELLZe66TJ+fij1LtP0zX5dGcB65eWUhaxPnm+ok=)
                          4: C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl (hash: Nrts3hp0c9sgZazLpMmIOZvbMBetaYQPa+6tJkM7dIo=)
                          5: 38352e3139332e37382e302f32342d3234203d3e203134363138.roa (hash: qeUBNqX0cdTuUUSXV2MePCJ8eS8Tr53k1jxkWSOVxMQ=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
                          rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 27 Apr 2025 11:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:81:83:1f:f4:bb:5d:92:f3:e3:86:72:c0:76:4c:89:fa:de:7b:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
        Validity
            Not Before: Apr 26 10:52:10 2025 GMT
            Not After : Apr 27 14:02:10 2025 GMT
        Subject: CN=9143E3F65B6223E7044842E55C18C37C2D690B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:de:e3:df:00:e9:9d:32:a8:8c:45:f3:d1:a4:
                    34:9d:b4:bf:26:07:b7:e8:48:61:55:b4:e2:03:f8:
                    20:07:75:7d:f7:9e:ee:47:fe:ff:e9:68:07:96:75:
                    6c:44:fa:99:20:e7:04:08:30:9e:ca:33:a2:9d:56:
                    2d:c1:bd:3d:3c:e3:d4:3b:6b:3b:f1:22:bd:85:6e:
                    99:21:aa:14:d2:5a:65:1a:37:75:ca:fc:d0:f0:2e:
                    f9:c2:9c:6f:de:8f:21:ef:f9:cd:90:3b:82:e8:45:
                    6b:e2:bd:3a:42:15:04:8a:e4:88:9e:ef:22:a4:55:
                    88:a4:04:e5:91:19:4f:b2:30:4c:07:ff:05:d9:ba:
                    54:6e:ba:cc:41:b6:cc:e5:e0:dd:62:47:45:6f:83:
                    4f:1d:05:54:cb:f3:d2:31:1f:a4:d4:79:dd:4f:30:
                    b6:6a:c2:0e:65:6f:d1:38:a1:86:c1:9e:a9:55:71:
                    d5:d0:b4:7c:2e:b6:80:d3:7d:18:30:4d:ec:08:a7:
                    0d:f9:59:10:c8:3e:ac:c7:5d:7c:d4:d3:1d:42:7f:
                    6d:48:ec:95:1a:f1:7d:d1:63:9b:6c:14:28:bc:b6:
                    df:2f:8d:81:3c:7c:82:a2:e6:7f:3e:6f:e6:d7:f8:
                    74:4e:46:4c:aa:3a:00:fc:62:2b:a7:00:88:4d:3b:
                    87:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:43:E3:F6:5B:62:23:E7:04:48:42:E5:5C:18:C3:7C:2D:69:0B:00
            X509v3 Authority Key Identifier:
                keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:19:2f:df:3b:71:6a:c6:dd:65:5f:dc:b9:01:b7:86:f4:62:
         70:85:27:6c:05:40:06:6c:12:01:f0:6b:57:bb:4c:65:6f:12:
         09:83:16:29:4d:43:d2:52:f0:c4:7a:c5:b8:11:00:78:a0:c5:
         9c:31:f6:22:27:b4:96:06:2b:b4:9a:e3:97:c7:4b:08:12:d4:
         1c:88:a8:42:5c:29:e8:90:79:c9:0b:5a:85:13:96:ce:b3:35:
         05:bd:f3:c4:d6:74:6f:97:eb:aa:b8:e0:ad:9f:ef:d3:32:78:
         2d:30:90:1d:d5:92:03:62:1a:ce:65:2d:dd:24:4e:a9:8d:1b:
         18:4d:1a:23:4d:37:80:22:60:9c:f2:83:61:5a:fe:55:51:3e:
         ad:d4:94:3b:61:05:30:33:9d:77:81:e9:15:71:b7:16:0c:b8:
         8b:13:ab:5b:db:d4:ef:68:1a:c6:0f:ae:2d:71:55:5d:92:ae:
         26:3e:e4:96:5c:29:20:72:d9:ab:8f:7b:da:62:89:4b:e3:0a:
         9c:e0:eb:ab:9d:ab:2c:67:70:75:26:66:9a:5f:cc:6a:c7:33:
         a7:8f:44:1b:0a:24:c5:28:a9:74:23:46:6d:ea:76:17:4b:93:
         fc:6d:da:4d:5d:26:2f:89:e1:ab:a7:ab:2a:3d:4a:5f:21:d7:
         67:88:d0:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 19:02:42 2025 by rpki-client