Manifest

$ rpki-client -vvf 0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
File:                     322056FD080C9CDACB18A9C427EB01033B2D0854.mft (raw, json)
Hash identifier:          5GyrAxuWfwZZcFooliy3rUdPP0LXVkwAuw7G7W49b8Q=
Subject key identifier:   75:BD:EE:99:82:39:D8:D3:4B:29:14:AE:A5:E3:B1:29:F1:A5:D9:B2
Authority key identifier: 32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54
Certificate issuer:       /CN=322056fd080c9cdacb18a9c427eb01033b2d0854
Certificate serial:       33166D37DD7BCE122F98659B19668B108D3A1BB1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
Subject info access:      rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
Manifest number:          0643
Signing time:             Fri 22 Nov 2024 21:48:03 +0000
Manifest this update:     Fri 22 Nov 2024 21:43:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:09:03 +0000
Files and hashes:         1: 33312e32342e38362e302f32342d3234203d3e20313336383937.roa (hash: BVs6D16irmtKlYm2Zj9Vkd6M4upMCNutsfdlWc4XN+s=)
                          2: 322056FD080C9CDACB18A9C427EB01033B2D0854.crl (hash: hX4AWstVm0CqGwL57dPgAujt+5tMSl9boeXmTpOrS40=)
                          3: 326131323a346538303a3a2f32392d3438203d3e20323130343334.roa (hash: G/S1hbk8plA+NQ55+AksZDxyuRatlWHzyC4Camze5+Y=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.crl
                          rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:16:6d:37:dd:7b:ce:12:2f:98:65:9b:19:66:8b:10:8d:3a:1b:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=322056fd080c9cdacb18a9c427eb01033b2d0854
        Validity
            Not Before: Nov 22 21:43:03 2024 GMT
            Not After : Nov 24 01:09:03 2024 GMT
        Subject: CN=75BDEE998239D8D34B2914AEA5E3B129F1A5D9B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:9d:71:d8:b1:ca:15:d8:73:9d:76:76:e5:da:
                    d3:3c:47:40:a8:7c:85:7d:b0:f9:8c:c0:6f:04:15:
                    60:9f:17:2f:29:2f:d5:72:ba:79:1d:78:da:c5:99:
                    5a:61:c7:c0:fe:4e:d4:f5:bc:6f:28:74:5e:ed:7f:
                    9d:d0:e8:74:fa:bc:fc:24:bf:b2:65:49:d7:00:a0:
                    26:d8:96:76:6f:b4:23:88:26:d4:3b:3f:6b:a0:2a:
                    92:12:52:7b:68:6c:77:96:97:5b:37:10:88:97:45:
                    b8:0c:5b:33:ef:92:06:2e:ed:20:37:55:22:d9:3c:
                    c0:47:ed:57:57:81:51:47:e9:d1:59:fa:a5:5f:e1:
                    21:25:13:2c:d5:25:49:68:2f:94:a4:6f:6b:cd:37:
                    71:3d:62:78:8c:fb:74:96:e5:7d:be:5c:b0:09:bd:
                    8c:f1:d6:5c:bd:92:6f:30:59:80:1c:c0:9a:f4:24:
                    8c:90:19:56:28:4a:9c:2a:93:b4:f1:a1:93:92:d1:
                    e3:af:ce:4d:c7:1e:4d:cd:bb:74:22:f1:8e:0d:35:
                    3b:58:ff:c2:c9:2c:5d:a5:ae:bf:0d:64:38:64:d4:
                    dd:d0:c8:e6:db:0e:c3:5f:f1:20:e6:c5:14:a1:37:
                    33:cc:eb:3e:76:83:cc:85:02:00:f3:a4:b7:c8:9d:
                    d6:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BD:EE:99:82:39:D8:D3:4B:29:14:AE:A5:E3:B1:29:F1:A5:D9:B2
            X509v3 Authority Key Identifier:
                keyid:32:20:56:FD:08:0C:9C:DA:CB:18:A9:C4:27:EB:01:03:3B:2D:08:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MiBW_QgMnNrLGKnEJ-sBAzstCFQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/22/322056FD080C9CDACB18A9C427EB01033B2D0854.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:28:86:e3:bc:77:a3:86:3a:77:26:2e:5b:28:2a:dd:f1:df:
         8b:af:b1:bd:7e:56:45:eb:52:e0:db:45:1d:a6:22:ef:b5:fc:
         c6:b8:27:45:c9:a2:65:1a:e6:fa:63:2d:f4:52:21:fe:74:4f:
         75:12:9a:b8:d8:6d:b4:ac:5e:71:8d:6f:6e:72:f5:eb:50:11:
         3e:e4:d2:e4:b9:ef:5d:5d:f7:53:d9:61:ac:7c:cc:e7:f2:ac:
         43:7b:1a:1a:2c:ff:e4:2e:0b:31:8c:f9:e7:83:5c:55:34:f7:
         1c:ea:ca:b0:d6:6d:05:5f:4d:91:fd:c7:e8:d2:e2:d2:13:0c:
         b9:a8:cb:c5:5e:cd:8e:c0:8e:16:b4:fc:03:a5:d6:94:ec:2f:
         e3:48:be:bd:20:47:2a:1d:a2:33:4b:a0:d8:18:50:72:c0:f4:
         0b:11:f4:18:4f:8a:38:84:e7:eb:26:a0:f8:4b:1f:51:0f:76:
         d2:55:5b:bd:f1:35:f7:4d:46:c8:54:e3:bc:fc:26:50:3d:74:
         46:22:75:51:35:eb:e2:b1:1d:b0:bd:98:08:52:18:07:79:c3:
         9b:1b:c7:3f:4b:74:cb:97:93:ba:91:58:9a:2c:44:d6:54:dd:
         07:c9:41:e1:c6:af:f2:c3:87:e0:23:d3:29:aa:bc:32:66:fa:
         17:76:b0:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----