Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          uNa+ik9+0FIcNdM5guZct5K9L6auNoBtxkf1l4HSVGQ=
Subject key identifier:   C1:A2:39:0A:62:77:79:D9:6B:90:23:BE:96:AB:54:93:73:05:85:61
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       07AEB71EA9BE8888964EECC0245815921F4D0470
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          28
Signing time:             Mon 04 Aug 2025 10:07:09 +0000
Manifest this update:     Mon 04 Aug 2025 10:02:09 +0000
Manifest next update:     Tue 05 Aug 2025 11:50:09 +0000
Files and hashes:         1: AS47778.asa (hash: r7x168jc/t4kC2CKt3ERONBsUJWICgaP/67P2/IU3Wc=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: ArcdCIjicbawKQ1rIbpj5n2KJHkjpQwufdDSqEMmIdk=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 05 Aug 2025 11:50:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ae:b7:1e:a9:be:88:88:96:4e:ec:c0:24:58:15:92:1f:4d:04:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Aug  4 10:02:09 2025 GMT
            Not After : Aug  5 11:50:09 2025 GMT
        Subject: CN=C1A2390A627779D96B9023BE96AB549373058561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:90:e6:d0:2d:fc:da:d5:1c:7f:a1:68:9c:57:
                    0b:9c:d3:ac:6a:25:e6:09:79:14:3d:71:bc:a2:ca:
                    20:fa:25:bb:2a:c0:70:f1:61:2c:9c:8c:76:58:81:
                    f9:89:87:c4:98:95:cd:48:b0:ec:10:77:5b:5e:bf:
                    2e:fe:14:23:d7:f1:11:98:ad:65:a4:49:e4:30:b5:
                    75:ab:98:ff:27:9a:2c:2a:01:68:f7:b8:f6:33:4c:
                    1c:ac:5d:2f:b3:f6:69:2e:3d:1f:e3:ec:23:41:d2:
                    b1:2e:e3:ba:98:69:77:8b:ab:83:1b:03:50:bd:6a:
                    30:91:21:b5:67:af:6d:d7:44:58:da:51:1f:2b:9a:
                    04:15:2e:18:8f:72:dc:48:71:ae:79:2e:69:64:de:
                    75:d3:38:80:1d:08:b8:a2:be:cd:39:ec:c4:e7:ff:
                    2d:64:ce:cc:f1:29:52:1e:6c:9e:fd:13:ab:60:69:
                    fc:f5:a4:82:d2:3a:c8:a8:ae:09:31:3a:a1:24:44:
                    d1:8b:f1:85:4d:f1:a3:45:cd:66:06:90:7d:0d:11:
                    d2:3e:64:03:c3:ea:f3:a2:c9:78:9c:c7:aa:ce:89:
                    1e:95:4b:1e:7e:05:db:18:2a:21:e3:32:67:55:7e:
                    69:bb:ad:ca:46:5d:5e:e6:9e:16:d9:e3:b4:02:09:
                    6a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:39:0A:62:77:79:D9:6B:90:23:BE:96:AB:54:93:73:05:85:61
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:60:ba:38:6b:97:83:b5:d7:00:6e:46:99:89:40:f4:6e:5c:
         30:ed:e5:a5:f4:5e:f1:e0:a2:98:f9:77:e8:d2:be:60:d3:57:
         36:1d:02:26:9e:d6:42:ed:d5:88:43:4d:a4:1c:d7:e2:dc:21:
         72:cf:52:89:64:9a:be:c6:77:5a:14:96:da:dd:91:f9:9b:46:
         18:42:a0:b9:58:96:05:fb:38:c7:35:04:25:81:6b:7a:74:6d:
         f1:53:6d:3d:c8:d0:3b:77:90:65:e0:d3:dd:a1:61:23:27:eb:
         a0:fa:6c:b6:03:ea:62:49:3b:f7:85:43:e4:60:82:8b:a3:16:
         85:0c:4a:67:42:b9:69:a2:58:93:7e:a2:50:0b:47:05:9a:a9:
         c6:96:d3:87:1b:42:90:95:98:92:00:30:9e:26:5c:b1:81:ea:
         f4:d6:de:d0:f0:f1:5a:d9:7d:c0:8b:dc:ba:1a:52:16:53:19:
         f9:41:27:e7:70:12:ae:09:63:d7:a3:81:e6:58:ae:1e:0b:dd:
         2f:71:9a:35:cb:ee:79:0e:1d:ff:ec:c0:18:25:8d:92:0a:d1:
         e5:86:51:a6:8d:ad:80:b3:77:69:d5:af:71:cc:63:69:86:e9:
         1c:2c:3e:9f:a2:84:4b:68:f8:06:91:8a:71:e1:73:44:23:2d:
         fe:ea:d8:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 4 15:37:25 2025 by rpki-client