Manifest

$ rpki-client -vvf 0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
File:                     C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft (raw, json)
Hash identifier:          KZCd42XTdt2mL1sIsVa15UVuKGSy3arjx+QahQ46pCI=
Subject key identifier:   AD:37:73:11:4E:71:47:FF:49:62:B8:F1:72:7A:8F:B4:42:14:A8:61
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Certificate issuer:       /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial:       30F2D4ECF5876845F996B0E089B91E972F9AAD8A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access:      rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
Manifest number:          0468
Signing time:             Fri 24 May 2024 18:59:44 +0000
Manifest this update:     Fri 24 May 2024 18:54:44 +0000
Manifest next update:     Sat 25 May 2024 19:54:44 +0000
Files and hashes:         1: C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl (hash: y8/3QsWV0mGOk51P4m5srVKCIDw5acISBdHcCqRGvpw=)
                          2: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (hash: 8ibSY19O8V5ycSe73auuxPB6n3z86FH6HYh2fAUJuGc=)
                          3: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (hash: E0q6+eqPPybjkHZYG/wBE8PIQy91kIZk4jWW2ULyuvE=)
                          4: 38352e3139332e37382e302f32342d3234203d3e203134363138.roa (hash: 5z2YNjD7ok1UFT/KM+gtGJg2M92pJa2vLRJVd7eeUNE=)
                          5: 38352e3139332e37382e302f32342d3234203d3e20313937373330.roa (hash: 95QJUPjCcF8/CwnLBHQROLBkzMI/LingnRL1NDUTdyo=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
                          rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 25 May 2024 19:54:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:f2:d4:ec:f5:87:68:45:f9:96:b0:e0:89:b9:1e:97:2f:9a:ad:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
        Validity
            Not Before: May 24 18:54:44 2024 GMT
            Not After : May 25 19:54:44 2024 GMT
        Subject: CN=AD3773114E7147FF4962B8F1727A8FB44214A861
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:af:15:64:ac:c2:02:91:ff:d1:b0:65:15:84:
                    a8:45:d5:8a:a4:c6:e3:64:fa:3b:ad:9c:ae:95:9e:
                    f0:0f:d0:ef:34:e8:67:6f:6f:c0:11:f6:1b:8b:d7:
                    f2:5a:50:a0:f4:4e:13:71:3a:88:c9:ef:d1:31:be:
                    16:0a:08:13:93:56:30:1f:36:c7:82:f6:c9:68:e8:
                    6e:34:97:65:30:e4:94:b2:01:ee:76:05:7d:c0:56:
                    f6:7a:04:5e:4a:79:8a:aa:de:89:8f:0c:31:46:b0:
                    40:1c:47:62:bf:96:41:7a:da:fe:50:4c:94:8e:bd:
                    e3:7d:a4:05:5d:0c:f3:56:a0:9c:97:60:a9:8f:6c:
                    0e:61:5c:c9:8b:2d:7f:4e:ad:c0:0a:43:2d:52:9b:
                    3b:81:98:7c:f2:e0:65:af:35:4f:17:d1:32:97:8e:
                    55:62:4a:93:f2:e3:f3:32:1e:34:28:ad:5e:47:72:
                    4f:e3:82:e1:e8:0e:e6:36:f2:ac:48:7c:bf:93:7c:
                    48:ce:df:1a:1c:3f:2c:e2:e3:cb:46:e5:1c:6d:6a:
                    f0:a5:cc:73:4e:fd:47:f8:de:f7:59:9f:8a:a8:d3:
                    e8:03:f7:8a:72:5c:ae:70:b7:c6:c9:ea:ae:1c:0a:
                    f7:f1:8f:f4:0f:b2:30:d3:ee:f4:6b:19:e6:c5:4c:
                    cf:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:37:73:11:4E:71:47:FF:49:62:B8:F1:72:7A:8F:B4:42:14:A8:61
            X509v3 Authority Key Identifier:
                keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:24:a4:54:44:c3:d3:8b:68:80:ac:fb:1a:3b:bd:a7:86:13:
         c7:64:12:36:fc:0d:01:ea:d1:db:21:23:04:7d:90:c5:7c:34:
         e6:8e:0a:23:29:23:41:19:af:d1:8f:d2:35:38:ad:aa:ed:3e:
         79:ed:b2:be:98:32:24:68:d3:da:38:27:d7:cb:d8:2c:5d:92:
         29:78:0b:2d:3c:34:e6:e9:fb:1f:b1:43:24:7e:1a:0e:21:7a:
         01:e2:45:fe:48:1a:55:84:10:56:c9:64:a3:77:c4:4b:59:b5:
         14:68:07:c2:5a:87:eb:df:3c:0d:6e:2e:20:db:60:6d:c2:d3:
         da:6b:1c:d1:1f:8c:1c:f9:68:3a:3a:3c:22:d5:bd:18:ad:f6:
         4c:b3:10:23:9f:23:07:45:a8:f3:1c:c4:df:9b:be:e4:5f:29:
         88:ff:d3:b0:f2:9f:51:e3:25:07:3a:73:b3:ea:9c:b7:60:e4:
         80:07:dc:76:23:cd:98:6b:e5:44:71:d1:9a:e7:8e:91:e9:9d:
         f1:7f:88:65:12:37:5f:d2:d0:3c:a1:4e:20:c0:49:d3:eb:37:
         a1:24:6a:f1:98:68:fa:6d:87:54:67:fd:50:db:c5:a7:64:12:
         92:aa:70:3c:4e:19:27:a5:6d:49:7b:9f:7f:92:48:93:ef:6a:
         f8:66:6f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 24 21:40:39 2024 by rpki-client on console-ams.rpki-client.org