Manifest

$ rpki-client -vvf 0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
File:                     137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft (raw, json)
Hash identifier:          HBWcftlVN/UiyhR2ZKhyI6dKbOnWylsCiRcIT0h6kxY=
Subject key identifier:   64:1C:55:95:FA:72:2D:5D:89:96:D0:F3:17:F3:DC:76:0C:83:5F:02
Authority key identifier: 13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23
Certificate issuer:       /CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
Certificate serial:       306C412B3E9A76A39D7E554FE097D07BBAD6FC38
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
Subject info access:      rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
Manifest number:          0620
Signing time:             Sat 05 Apr 2025 02:56:31 +0000
Manifest this update:     Sat 05 Apr 2025 02:51:31 +0000
Manifest next update:     Sun 06 Apr 2025 03:00:31 +0000
Files and hashes:         1: 137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl (hash: 1wFfgupp1tE0/bb2Y+kFJiTgO6EiTmFWtipne6JuYI0=)
                          2: 326131323a653163303a3a2f32392d3438203d3e20323130343239.roa (hash: KNyaa8mDudI2kYlMfbKvT19xmFpRWHn44NSy6dfAbHc=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl
                          rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 06 Apr 2025 03:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6c:41:2b:3e:9a:76:a3:9d:7e:55:4f:e0:97:d0:7b:ba:d6:fc:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
        Validity
            Not Before: Apr  5 02:51:31 2025 GMT
            Not After : Apr  6 03:00:31 2025 GMT
        Subject: CN=641C5595FA722D5D8996D0F317F3DC760C835F02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0d:21:5e:d9:df:0e:e7:62:c6:2e:9d:6f:3e:
                    32:d2:10:35:fc:db:6b:81:77:c2:02:33:cd:65:e4:
                    fb:99:d8:b4:09:33:55:5a:c5:f2:90:a3:62:ef:7f:
                    f5:c8:bb:d2:f4:11:e6:5b:0f:64:ac:64:34:b3:c4:
                    a9:87:0e:d8:22:9f:3e:37:8b:05:73:f2:50:3c:8c:
                    27:e2:00:75:a2:5c:39:42:d9:00:71:68:ac:c3:b3:
                    75:35:1d:ed:9a:1e:ed:54:65:2f:a6:1a:c6:89:92:
                    8c:a5:25:10:c6:db:f9:7e:46:05:38:23:20:2b:c6:
                    e2:c4:dc:74:01:bd:b1:d3:9a:63:64:98:9c:0c:25:
                    73:b0:93:e9:ae:47:95:4a:2e:aa:93:31:d5:6f:f6:
                    34:d5:53:4a:cb:56:92:85:9a:22:49:ec:ef:3c:dc:
                    35:02:d7:8d:ef:95:23:a1:06:a7:56:64:40:46:ca:
                    42:e3:9a:a8:4e:d0:6c:3c:c6:63:56:39:5e:8f:cd:
                    c7:e7:14:75:83:53:fc:f2:13:8a:6b:98:97:95:10:
                    9d:f0:02:f5:03:0f:03:5f:f9:be:23:7e:d5:61:bc:
                    19:68:24:02:bf:70:11:31:93:87:7c:32:97:1f:87:
                    d9:9f:52:ff:cf:83:4b:0f:d3:37:e2:7a:62:f6:01:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1C:55:95:FA:72:2D:5D:89:96:D0:F3:17:F3:DC:76:0C:83:5F:02
            X509v3 Authority Key Identifier:
                keyid:13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ca:85:3c:b3:20:f9:c4:1e:37:f1:26:69:a3:1d:f2:89:71:
         e6:a1:4a:dc:5c:17:fe:c6:97:eb:fd:34:81:5a:90:76:0c:cd:
         69:65:76:b7:69:b7:71:e9:19:87:9d:8d:70:d8:3d:09:2d:cd:
         ec:51:8d:5a:c4:81:36:ba:c8:30:cf:83:62:34:e3:be:3c:ae:
         2a:98:a9:ef:e1:f3:9f:63:f7:f9:12:c6:1e:98:e4:9c:a9:66:
         03:2a:d5:fe:6f:8e:fa:3f:6b:4e:60:41:f7:fa:34:d6:ae:29:
         81:ad:e4:11:a3:17:bb:e1:47:ec:c5:4d:2d:71:44:83:60:da:
         97:3c:e1:9d:ea:56:66:f8:18:3f:80:63:4d:d5:3c:7c:16:05:
         d2:fd:05:ad:f8:86:0e:6a:3e:e1:0c:05:7c:47:91:ec:67:62:
         12:26:08:c1:02:3c:6f:76:7e:cd:9d:bd:71:35:b0:b5:ac:24:
         95:a0:81:4a:1f:e0:76:9a:ed:ef:35:3a:4e:da:b1:3a:a7:83:
         23:aa:7a:2d:bd:71:06:23:b2:76:93:f4:1e:01:51:c9:5d:50:
         b2:7b:6d:48:e6:19:18:cf:30:a7:22:79:7d:ff:06:d9:ae:0f:
         23:51:df:88:83:b0:4a:c6:1b:30:28:da:22:29:a1:dc:e8:87:
         56:0c:e9:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:17:20 2025 by rpki-client