Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          igL8oURZnksTv6ekUljHLEFF6WpakRzMM00wKUZmblU=
Subject key identifier:   68:9D:93:A6:B5:7E:E5:EA:40:3C:1D:6A:D6:C9:5C:36:DA:5B:10:7E
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       2CB86246A05EDB0F0E659BE3DD95E37A82190800
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          A7
Signing time:             Wed 05 Nov 2025 08:58:34 +0000
Manifest this update:     Wed 05 Nov 2025 08:53:34 +0000
Manifest next update:     Thu 06 Nov 2025 09:40:34 +0000
Files and hashes:         1: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: 2NT2CF5Kw8VvJGMRYVPbNfucHbodG0+W9NG6DsyqbDg=)
                          2: AS47778.asa (hash: SAfMfeDsADPUOP2iBmwsrS0HncvCePFRvbpzmC8QVNQ=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Thu 06 Nov 2025 09:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:b8:62:46:a0:5e:db:0f:0e:65:9b:e3:dd:95:e3:7a:82:19:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Nov  5 08:53:34 2025 GMT
            Not After : Nov  6 09:40:34 2025 GMT
        Subject: CN=689D93A6B57EE5EA403C1D6AD6C95C36DA5B107E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:49:66:07:16:0d:a2:81:f0:58:84:46:59:c2:
                    fc:f1:9c:82:6d:a1:91:2d:f4:51:4f:c2:c3:68:85:
                    52:ed:ca:59:10:3f:98:f6:f1:38:21:bd:f6:69:c5:
                    11:b4:8b:bf:50:39:c4:a3:c8:52:23:32:da:f1:b0:
                    f6:cb:90:21:f9:9d:e7:f4:13:ac:cf:b8:86:63:75:
                    4d:34:e7:5b:33:1b:8a:ee:77:26:88:7c:b7:02:ee:
                    68:c6:d4:df:54:48:e8:e7:ef:c4:f8:4f:fa:54:26:
                    d3:be:04:2a:b4:c1:21:16:01:7c:e1:19:c1:f3:e6:
                    d9:62:65:04:f2:94:62:72:fd:1d:94:95:7e:21:a8:
                    0a:44:27:03:af:36:05:26:13:25:ef:6c:8b:95:de:
                    2a:05:1b:23:95:9a:91:87:46:c6:a3:31:84:0a:10:
                    2c:e3:77:c5:3b:f3:9c:77:b4:72:c7:c7:7e:78:59:
                    c1:c5:e9:ad:7f:e4:a8:a5:d7:66:39:f4:15:3b:66:
                    71:cd:c0:ce:08:5b:c9:89:d2:43:36:f3:8c:e9:d4:
                    d0:39:12:54:17:29:cc:25:c1:8c:b1:97:87:47:7e:
                    c1:01:ec:0f:a4:28:a2:87:75:5d:4b:f7:08:7a:69:
                    f6:76:fa:be:8a:a0:cd:f9:13:5d:88:c6:2e:8e:4d:
                    97:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:9D:93:A6:B5:7E:E5:EA:40:3C:1D:6A:D6:C9:5C:36:DA:5B:10:7E
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:45:7e:7b:41:fc:12:e6:65:5e:51:e3:58:41:16:d0:d5:f8:
         12:53:cd:cc:7f:17:d4:40:eb:93:2b:61:ee:0d:93:01:1d:fb:
         6e:22:1c:b3:12:20:d8:84:83:aa:f6:dd:03:fc:69:7f:90:75:
         ff:32:98:c7:74:bc:1e:c4:83:30:55:05:d7:e6:ea:56:b7:21:
         01:61:7d:0c:45:0e:ee:ea:55:db:a8:c9:4b:38:7c:42:84:4e:
         07:9b:15:0a:de:72:b6:aa:3e:a1:e6:33:92:fe:19:ac:cb:f9:
         43:83:d1:7d:4b:53:e0:38:61:23:60:42:8f:b6:2b:23:81:27:
         d5:44:52:97:b8:62:ac:4a:d3:c1:c0:d3:ca:88:2c:ff:ca:2e:
         93:bf:67:38:a6:4c:b0:66:f3:94:f7:bd:e0:7a:3e:49:2e:18:
         e1:5e:84:a7:2d:74:6e:95:4b:06:ac:5d:05:13:93:61:15:2e:
         76:52:8a:6d:92:f6:23:4e:d4:ab:ca:49:39:05:45:6f:1f:f2:
         61:b3:d0:83:40:ac:b6:44:35:7d:3e:dd:17:bb:95:61:70:e7:
         2c:d4:d7:7c:17:b1:d0:46:ef:4d:e3:98:5f:6d:e2:2e:99:7f:
         9e:79:08:ff:40:3e:8c:ad:aa:e6:f7:d8:54:7d:2a:39:d6:60:
         36:85:0d:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 18:05:21 2025 by rpki-client