Manifest

$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File:                     861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier:          cZuiVBhUs4n0ofCZ4vDId3RMn/qKeeDX0gPUZ6P3Qrc=
Subject key identifier:   C5:CB:05:03:60:16:B0:37:2C:C2:BD:2E:60:76:B1:F5:B3:92:0A:06
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer:       /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial:       6989CD09647686E8CE858C0230C8A98E37EFA9B0
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access:      rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number:          055F
Signing time:             Fri 22 Nov 2024 05:08:03 +0000
Manifest this update:     Fri 22 Nov 2024 05:03:03 +0000
Manifest next update:     Sat 23 Nov 2024 06:17:03 +0000
Files and hashes:         1: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
                          2: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
                          3: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
                          4: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: YECwtO2bOE/kZeHwtYz3yvwhrCMmzH5jdB0clLf5508=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
                          rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 22 Nov 2024 23:17:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:89:cd:09:64:76:86:e8:ce:85:8c:02:30:c8:a9:8e:37:ef:a9:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
        Validity
            Not Before: Nov 22 05:03:03 2024 GMT
            Not After : Nov 23 06:17:03 2024 GMT
        Subject: CN=C5CB05036016B0372CC2BD2E6076B1F5B3920A06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3f:ac:15:af:48:e5:86:c4:da:e3:87:e3:f9:
                    09:a8:a5:a0:10:d4:3d:7f:5b:2b:83:e8:57:e4:66:
                    f8:e5:48:78:f7:3a:c2:c7:28:ff:2a:77:18:98:52:
                    b4:b4:e3:21:85:37:fd:9e:8c:4d:e2:45:a4:66:f5:
                    de:08:a0:f4:c7:a2:24:d9:91:bd:0c:6d:a3:3f:c6:
                    36:ad:aa:26:e6:8d:f9:66:b0:d5:b2:8e:35:ee:6a:
                    af:8f:70:52:3c:79:be:58:7f:9f:d8:29:1f:56:81:
                    87:21:d1:c1:34:70:5d:30:61:d9:b0:e3:6d:68:ed:
                    2e:ab:da:6c:aa:fd:f1:50:0a:65:6d:9a:7a:6a:64:
                    99:30:2e:33:53:e2:f1:91:16:38:f7:ac:ae:a2:7b:
                    5a:bc:6c:d0:54:99:58:03:16:57:1b:1b:e3:22:70:
                    f4:4a:fb:de:8c:26:04:78:92:ca:9d:70:13:ef:83:
                    10:21:5c:ee:ca:7b:b0:84:10:64:dc:05:f7:88:61:
                    31:10:49:7e:9f:2e:f7:dc:f2:ed:af:ad:e9:a4:ac:
                    e7:0b:69:9f:60:eb:30:58:a4:e5:79:0c:8f:55:a8:
                    0a:b7:a3:80:83:e1:c4:cf:b0:e3:00:46:bf:de:75:
                    d2:c2:b1:33:38:98:fb:b0:4f:24:24:24:31:37:35:
                    35:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CB:05:03:60:16:B0:37:2C:C2:BD:2E:60:76:B1:F5:B3:92:0A:06
            X509v3 Authority Key Identifier:
                keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:8a:58:bc:fc:1a:4c:5e:c9:0b:30:b9:d1:bb:81:f0:55:ad:
         60:88:34:c6:d0:7f:a0:c1:08:a7:20:4d:ff:71:b2:d6:d3:4d:
         3f:4f:8c:a3:20:76:2f:be:29:ed:1d:c7:97:05:1c:cc:73:8d:
         ba:a1:c3:13:75:3a:65:95:a8:5e:f7:6c:aa:f4:1b:60:57:e7:
         d5:d7:c0:89:dd:97:2f:10:d4:e4:78:3f:cf:5b:d2:d7:e8:24:
         8d:8a:2f:7b:12:36:b1:f8:a5:13:87:a9:a4:8a:de:ef:9d:56:
         7f:d7:7f:ce:f2:39:36:29:93:9a:83:fe:53:44:11:48:3c:8d:
         0f:eb:85:c7:0f:c5:f3:41:2c:7a:45:8f:4f:ea:85:6e:e9:d2:
         b8:92:df:81:b1:62:fd:f3:ea:a6:cb:4f:50:5c:7d:39:2f:fd:
         21:2f:59:fa:4f:14:42:ca:f8:53:65:9f:1a:d0:9e:03:2d:b0:
         31:70:dc:7a:a8:81:b2:75:e6:47:c7:71:fc:5b:e7:30:e6:66:
         68:99:ed:19:b6:9c:a3:d7:f0:b5:c3:1c:a7:4e:ba:a1:fd:9f:
         19:fa:ea:51:65:b9:d8:3f:e0:c9:a2:9b:f0:e4:27:86:64:a2:
         70:62:d5:19:4d:ac:9f:04:80:af:3e:09:c5:6d:38:15:39:a9:
         18:63:e9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 06:33:21 2024 by rpki-client on console-ams.rpki-client.org