Manifest

$ rpki-client -vvf 0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
File:                     137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft (raw, json)
Hash identifier:          3Cu+QiRzv37j7vdgemkBjyhpIr3vSPLbvXDJIDzUAhA=
Subject key identifier:   35:EE:06:D8:01:BB:29:60:C1:AF:D1:73:43:9D:20:5F:27:1A:67:40
Authority key identifier: 13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23
Certificate issuer:       /CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
Certificate serial:       217DFED1783A430D18BBD54F2FD801BB7BD8F533
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
Subject info access:      rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
Manifest number:          0567
Signing time:             Fri 22 Nov 2024 14:43:03 +0000
Manifest this update:     Fri 22 Nov 2024 14:38:03 +0000
Manifest next update:     Sat 23 Nov 2024 16:56:03 +0000
Files and hashes:         1: 137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl (hash: sTIYhKjKlTj69o9cxt5zGGR5dBDBOPl/msmvgzgqI9U=)
                          2: 326131323a653163303a3a2f32392d3438203d3e20323130343239.roa (hash: KNyaa8mDudI2kYlMfbKvT19xmFpRWHn44NSy6dfAbHc=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl
                          rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7d:fe:d1:78:3a:43:0d:18:bb:d5:4f:2f:d8:01:bb:7b:d8:f5:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
        Validity
            Not Before: Nov 22 14:38:03 2024 GMT
            Not After : Nov 23 16:56:03 2024 GMT
        Subject: CN=35EE06D801BB2960C1AFD173439D205F271A6740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:5f:0b:13:64:97:7f:89:28:1b:3c:6c:46:4d:
                    f2:5c:31:1a:c5:46:e6:4b:de:a5:59:2f:4a:0d:84:
                    cd:c5:0a:c5:e4:b1:22:b7:1f:e0:98:79:b2:88:f2:
                    6c:29:07:ef:52:d6:68:49:28:b9:63:a5:95:6f:b3:
                    9d:08:e5:cb:80:89:b5:38:5b:4a:7f:f8:e2:33:9c:
                    5b:cd:9c:7d:0f:80:65:2e:46:47:51:88:9f:59:50:
                    7b:34:0d:2f:99:c4:d9:9f:19:ca:b3:96:b5:96:e0:
                    ba:6c:87:90:13:0a:2b:5b:14:67:5c:b9:c9:62:b4:
                    93:7f:83:ae:bc:69:c3:18:26:a0:f6:b3:98:37:f5:
                    6d:6c:1c:42:65:cd:97:7a:b5:31:45:0b:53:27:48:
                    94:c0:fe:2d:64:be:ba:d4:1e:19:8b:22:ed:2d:e9:
                    18:80:1a:4f:a3:37:dc:7b:e1:32:7a:df:8a:bf:86:
                    21:68:42:db:c5:a2:6a:43:2f:53:6b:83:0a:03:5a:
                    df:e8:cc:43:64:6f:a0:15:58:24:e4:5b:cd:a5:b6:
                    c9:b2:1c:49:c2:fc:20:5c:0b:42:b6:96:47:9e:c3:
                    c9:96:af:2a:75:61:c5:f4:99:9f:66:82:f3:a8:85:
                    b5:1d:34:61:bd:78:a0:fb:e4:88:26:22:46:1b:c9:
                    8c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:EE:06:D8:01:BB:29:60:C1:AF:D1:73:43:9D:20:5F:27:1A:67:40
            X509v3 Authority Key Identifier:
                keyid:13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:bc:cc:29:fc:4a:e1:e0:2b:ea:37:2c:33:b8:37:da:09:b5:
         d6:b6:59:82:1b:fe:58:10:db:bf:a2:3a:ae:6a:b9:72:a4:2e:
         e4:72:b3:91:17:1f:42:60:98:3a:3e:f9:c3:34:3d:ff:2f:0a:
         79:fc:7d:fd:35:a3:ed:5f:81:5b:42:a3:b0:c7:7c:16:7d:aa:
         6a:ee:69:2e:ec:02:9e:08:51:a4:30:41:84:66:db:2e:6d:7e:
         4c:85:6b:da:e5:d8:ed:b3:82:1a:c4:ec:e3:3d:31:36:ed:a7:
         3c:d2:75:cb:db:78:7a:d2:59:39:69:29:75:6d:68:5c:70:0b:
         91:15:c5:08:3a:7c:d2:65:0e:4d:7c:72:f4:6d:08:cc:38:60:
         dc:ee:e9:e1:df:d5:8b:87:5f:4f:7a:f8:81:35:1d:5a:20:d6:
         7e:dd:5e:d1:ef:ba:50:6d:8c:5a:d3:54:7b:9d:fe:2c:3f:8c:
         8b:b8:f7:91:a2:ec:ed:3b:d1:ba:d1:ba:17:5b:0c:61:15:69:
         17:8d:83:0d:b8:8b:48:81:be:30:bb:d4:2e:07:55:a6:f6:8d:
         1f:3a:a5:dd:0c:e3:cb:b5:9e:60:bc:0d:5c:ac:57:4d:26:c6:
         1a:ff:ab:13:66:d5:4d:f4:41:6e:db:ee:9a:12:bc:6f:6a:08:
         79:94:d2:4a
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUIX3+0Xg6Qw0Yu9VPL9gBu3vY9TMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTM3Y2I4ZDVjNjYxYTFjMTVmZjJhZDIxMDE5NmI2YjYy
YTc1YjYyMzAeFw0yNDExMjIxNDM4MDNaFw0yNDExMjMxNjU2MDNaMDMxMTAvBgNV
BAMTKDM1RUUwNkQ4MDFCQjI5NjBDMUFGRDE3MzQzOUQyMDVGMjcxQTY3NDAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoXwsTZJd/iSgbPGxGTfJcMRrF
RuZL3qVZL0oNhM3FCsXksSK3H+CYebKI8mwpB+9S1mhJKLljpZVvs50I5cuAibU4
W0p/+OIznFvNnH0PgGUuRkdRiJ9ZUHs0DS+ZxNmfGcqzlrWW4Lpsh5ATCitbFGdc
uclitJN/g668acMYJqD2s5g39W1sHEJlzZd6tTFFC1MnSJTA/i1kvrrUHhmLIu0t
6RiAGk+jN9x74TJ634q/hiFoQtvFompDL1NrgwoDWt/ozENkb6AVWCTkW82ltsmy
HEnC/CBcC0K2lkeew8mWryp1YcX0mZ9mgvOohbUdNGG9eKD75IgmIkYbyYwTAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUNe4G2AG7KWDBr9FzQ50gXycaZ0AwHwYDVR0j
BBgwFoAUE3y41cZhocFf8q0hAZa2tip1tiMwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzMyLzEzN0NCOEQ1QzY2
MUExQzE1RkYyQUQyMTAxOTZCNkI2MkE3NUI2MjMuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9FM3k0MWNaaG9jRmY4cTBoQVphMnRpcDF0aU0uY2VyMGAGCCsGAQUF
BwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzIvMTM3
Q0I4RDVDNjYxQTFDMTVGRjJBRDIxMDE5NkI2QjYyQTc1QjYyMy5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AEa8zCn8SuHgK+o3LDO4N9oJtda2WYIb/lgQ27+iOq5quXKkLuRys5EXH0JgmDo+
+cM0Pf8vCnn8ff01o+1fgVtCo7DHfBZ9qmruaS7sAp4IUaQwQYRm2y5tfkyFa9rl
2O2zghrE7OM9MTbtpzzSdcvbeHrSWTlpKXVtaFxwC5EVxQg6fNJlDk18cvRtCMw4
YNzu6eHf1YuHX096+IE1HVog1n7dXtHvulBtjFrTVHud/iw/jIu495Gi7O070brR
uhdbDGEVaReNgw24i0iBvjC71C4HVab2jR86pd0M48u1nmC8DVysV00mxhr/qxNm
1U30QW7b7poSvG9qCHmU0ko=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:22:17 2024 by rpki-client on console-fra.rpki-client.org