Manifest

$ rpki-client -vvf 0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
File:                     8228F35F3A87298DB3D06995A9C6C045721122B2.mft (raw, json)
Hash identifier:          q1bCPSOyprgo8TdPp3qYMAxj9Qz7wROr+UrtWJ6Ogs0=
Subject key identifier:   BA:12:74:12:55:AA:CE:CD:D5:2A:6B:7D:F5:C8:7E:53:8F:06:72:B7
Authority key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Certificate issuer:       /CN=8228f35f3a87298db3d06995a9c6c045721122b2
Certificate serial:       4A790C4570CABEE1BE376A3633FA576AC2F210B4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
Subject info access:      rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
Manifest number:          045F
Signing time:             Fri 17 May 2024 02:19:29 +0000
Manifest this update:     Fri 17 May 2024 02:14:29 +0000
Manifest next update:     Sat 18 May 2024 05:33:29 +0000
Files and hashes:         1: 3138352e34362e36382e302f32342d3234203d3e20323130343239.roa (hash: OjkW6Vtbf03KJaExgiFfGZPDF4LTmyon3xqKxZIcU4I=)
                          2: 8228F35F3A87298DB3D06995A9C6C045721122B2.crl (hash: y/skVZBU4niSPKj8fFurtTKSSHLQ/YNL5JmL+R/Yl1o=)
                          3: 326130643a613034303a3a2f32392d3438203d3e20323130343239.roa (hash: WlTs9b+CS5M7AkJqlGwRD8Qb4fnuntNIZhvGbTR6Roo=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl
                          rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 17 May 2024 19:23:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:79:0c:45:70:ca:be:e1:be:37:6a:36:33:fa:57:6a:c2:f2:10:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8228f35f3a87298db3d06995a9c6c045721122b2
        Validity
            Not Before: May 17 02:14:29 2024 GMT
            Not After : May 18 05:33:29 2024 GMT
        Subject: CN=BA12741255AACECDD52A6B7DF5C87E538F0672B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a6:cd:9c:10:af:86:a8:cd:b8:91:e7:ac:a3:
                    97:31:a5:45:c3:1d:ea:17:1a:d3:21:61:6e:7b:a2:
                    f3:0e:ac:25:6e:8a:30:2e:95:2d:d2:d4:17:4e:44:
                    13:3e:45:68:94:58:3d:bd:00:12:07:07:21:24:8e:
                    17:77:0a:6e:09:b9:3e:ce:32:96:7a:4e:c8:8a:7d:
                    d1:43:2a:36:f0:7a:03:ad:6e:3b:f3:19:38:bb:e2:
                    78:70:16:15:a3:c8:44:16:b4:9a:99:84:36:fc:ea:
                    a1:d0:73:6d:b8:7a:c1:99:37:ce:d8:ab:e9:44:af:
                    a2:d7:34:bc:12:2e:73:9b:40:98:0f:d8:ad:d1:04:
                    aa:aa:3e:b2:f9:82:ce:e0:41:00:32:24:6a:d1:59:
                    b4:e1:43:4c:46:c3:d6:0c:6a:ee:e3:dd:d8:86:7d:
                    42:b0:df:0d:01:ba:bc:e0:bf:4a:00:db:cb:4a:69:
                    7d:7f:f0:eb:35:19:da:95:b9:cb:fc:21:ed:46:2d:
                    ba:af:4c:a1:f6:44:73:37:63:e2:a5:df:3a:c5:15:
                    91:fe:35:39:2c:56:a5:f8:c7:e9:25:7a:b8:c3:90:
                    a5:b5:8f:5b:37:f6:af:4a:36:2f:44:70:29:46:4d:
                    3d:47:89:52:60:dd:6f:57:a9:80:2f:fa:a9:8e:22:
                    f9:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:12:74:12:55:AA:CE:CD:D5:2A:6B:7D:F5:C8:7E:53:8F:06:72:B7
            X509v3 Authority Key Identifier:
                keyid:82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:b3:22:b0:5a:bc:90:74:44:9d:4b:a0:06:eb:86:c1:4b:7e:
         b2:14:6e:b8:b5:65:07:1b:c6:28:eb:bd:1a:6f:4a:09:2b:8e:
         75:2f:d5:bf:fc:39:6c:98:05:dd:b4:b5:ca:47:22:03:ff:15:
         6a:a2:ee:1f:50:9f:fa:d3:16:50:19:bc:0f:57:ca:92:52:c5:
         b5:5c:36:18:74:52:08:f0:90:41:3c:57:33:b9:ed:50:d1:9f:
         06:76:a7:b9:7f:60:54:fd:80:79:c7:0f:86:34:b4:5e:da:7f:
         f5:1b:25:c2:c3:6e:8d:a4:fa:9b:6f:c5:5d:06:dc:ea:f1:38:
         be:d2:12:5f:b4:e3:09:ad:ba:7a:35:dd:c9:58:be:9f:8c:3b:
         88:12:08:4b:f9:9a:15:2f:f9:47:72:5e:1f:d2:5a:3c:f8:d3:
         57:5b:da:17:d1:c4:80:c3:9e:ec:7f:e9:05:2f:8d:fb:6e:6f:
         28:59:d0:81:3a:3a:b4:e4:96:ed:4f:1f:a0:6b:86:66:61:1c:
         f4:1a:6f:97:00:69:f7:cd:a3:04:3f:5f:5b:a4:6d:53:cc:d4:
         b7:1e:48:3b:5d:e5:da:10:fa:eb:f6:c6:94:5a:ad:61:60:06:
         1b:eb:32:cc:18:30:71:19:26:89:a5:b9:e0:39:06:09:24:82:
         87:66:ec:bd
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUSnkMRXDKvuG+N2o2M/pXasLyELQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODIyOGYzNWYzYTg3Mjk4ZGIzZDA2OTk1YTljNmMwNDU3
MjExMjJiMjAeFw0yNDA1MTcwMjE0MjlaFw0yNDA1MTgwNTMzMjlaMDMxMTAvBgNV
BAMTKEJBMTI3NDEyNTVBQUNFQ0RENTJBNkI3REY1Qzg3RTUzOEYwNjcyQjcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDps2cEK+GqM24keeso5cxpUXD
HeoXGtMhYW57ovMOrCVuijAulS3S1BdORBM+RWiUWD29ABIHByEkjhd3Cm4JuT7O
MpZ6TsiKfdFDKjbwegOtbjvzGTi74nhwFhWjyEQWtJqZhDb86qHQc224esGZN87Y
q+lEr6LXNLwSLnObQJgP2K3RBKqqPrL5gs7gQQAyJGrRWbThQ0xGw9YMau7j3diG
fUKw3w0Burzgv0oA28tKaX1/8Os1GdqVucv8Ie1GLbqvTKH2RHM3Y+Kl3zrFFZH+
NTksVqX4x+klerjDkKW1j1s39q9KNi9EcClGTT1HiVJg3W9XqYAv+qmOIvmtAgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUuhJ0ElWqzs3VKmt99ch+U48GcrcwHwYDVR0j
BBgwFoAUgijzXzqHKY2z0GmVqcbARXIRIrIwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM0LzgyMjhGMzVGM0E4
NzI5OERCM0QwNjk5NUE5QzZDMDQ1NzIxMTIyQjIuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9naWp6WHpxSEtZMnowR21WcWNiQVJYSVJJckkuY2VyMGAGCCsGAQUF
BwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzQvODIy
OEYzNUYzQTg3Mjk4REIzRDA2OTk1QTlDNkMwNDU3MjExMjJCMi5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AAKzIrBavJB0RJ1LoAbrhsFLfrIUbri1ZQcbxijrvRpvSgkrjnUv1b/8OWyYBd20
tcpHIgP/FWqi7h9Qn/rTFlAZvA9XypJSxbVcNhh0UgjwkEE8VzO57VDRnwZ2p7l/
YFT9gHnHD4Y0tF7af/UbJcLDbo2k+ptvxV0G3OrxOL7SEl+04wmtuno13clYvp+M
O4gSCEv5mhUv+UdyXh/SWjz401db2hfRxIDDnux/6QUvjftubyhZ0IE6OrTklu1P
H6BrhmZhHPQab5cAaffNowQ/X1ukbVPM1LceSDtd5doQ+uv2xpRarWFgBhvrMswY
MHEZJomlueA5Bgkkgodm7L0=
-----END CERTIFICATE-----