Manifest

$ rpki-client -vvf 0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
File:                     8228F35F3A87298DB3D06995A9C6C045721122B2.mft (raw, json)
Hash identifier:          +AZb0QtKqfhNL8ENzATJeIUBlZlZ3nlJ4nBxSc499Vo=
Subject key identifier:   53:2C:A8:38:A9:35:C6:A3:FE:10:43:76:10:4C:7B:08:77:68:8D:C6
Authority key identifier: 82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2
Certificate issuer:       /CN=8228f35f3a87298db3d06995a9c6c045721122b2
Certificate serial:       41DF15501E87D66EE3A5335913CB7EE8C7524774
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
Subject info access:      rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
Manifest number:          055F
Signing time:             Fri 22 Nov 2024 18:13:03 +0000
Manifest this update:     Fri 22 Nov 2024 18:08:03 +0000
Manifest next update:     Sat 23 Nov 2024 21:09:03 +0000
Files and hashes:         1: 8228F35F3A87298DB3D06995A9C6C045721122B2.crl (hash: Sk3GHroqRJJAxCT818EfT4gpZ0/tKwyHD3OBpxxw3uU=)
                          2: 3138352e34362e36382e302f32342d3234203d3e20323130343239.roa (hash: OjkW6Vtbf03KJaExgiFfGZPDF4LTmyon3xqKxZIcU4I=)
                          3: 326130643a613034303a3a2f32392d3438203d3e20323130343239.roa (hash: +7g+7j6SHpppuglAu2aLIHljmRGfZOIJtko5ZqEcRos=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl
                          rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 12:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:df:15:50:1e:87:d6:6e:e3:a5:33:59:13:cb:7e:e8:c7:52:47:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8228f35f3a87298db3d06995a9c6c045721122b2
        Validity
            Not Before: Nov 22 18:08:03 2024 GMT
            Not After : Nov 23 21:09:03 2024 GMT
        Subject: CN=532CA838A935C6A3FE104376104C7B0877688DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b9:a7:84:6e:e0:cc:79:79:c2:39:d2:59:5f:
                    6d:51:aa:ff:79:f6:3a:64:13:e9:24:7d:31:96:a5:
                    af:56:ef:bc:c9:cb:13:fe:22:f2:97:6c:26:b2:f5:
                    a0:c6:25:07:7d:b9:7c:16:5b:0b:90:e1:ec:84:3a:
                    fc:3b:5a:b6:dc:9a:c8:33:17:be:85:1a:2d:aa:b1:
                    07:72:b9:eb:e5:12:83:ea:1d:2b:4b:7d:c7:1f:f4:
                    6f:a4:a4:f8:9e:be:2a:87:f4:02:67:fe:99:aa:8c:
                    b9:72:3c:74:a6:3a:d3:27:01:fa:43:6c:c6:da:6a:
                    98:1a:41:18:44:3f:53:ff:98:0b:01:18:17:f7:f4:
                    af:de:de:9e:91:70:5e:00:dd:54:b8:1f:08:a7:e8:
                    d1:2c:5c:8e:76:8c:c1:78:93:5f:42:c1:16:f2:4c:
                    b7:94:d8:fb:a3:9d:f2:8a:1d:95:4f:25:6a:9d:fa:
                    5c:53:f8:33:a2:be:bf:30:51:4f:03:5e:7d:2b:18:
                    6b:e5:98:8a:37:3a:c2:d0:42:8f:e9:d3:d7:92:36:
                    a0:a0:63:9e:37:c8:12:bb:c1:b2:bb:a6:06:fa:77:
                    2a:65:eb:7a:0e:4c:4e:fb:77:59:a9:50:65:1d:ed:
                    1f:ab:63:47:dd:23:81:f1:3c:57:a2:df:0e:46:e5:
                    c7:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:2C:A8:38:A9:35:C6:A3:FE:10:43:76:10:4C:7B:08:77:68:8D:C6
            X509v3 Authority Key Identifier:
                keyid:82:28:F3:5F:3A:87:29:8D:B3:D0:69:95:A9:C6:C0:45:72:11:22:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gijzXzqHKY2z0GmVqcbARXIRIrI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/34/8228F35F3A87298DB3D06995A9C6C045721122B2.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:9e:ee:5a:36:43:e1:b4:ea:07:a5:0e:41:7a:49:74:76:f0:
         f2:d0:d4:a9:ce:de:0e:87:03:f1:41:50:19:37:85:d3:4f:bd:
         87:74:0f:68:5a:ac:29:9d:76:02:6d:6f:e9:36:3c:c2:79:06:
         59:ce:bf:50:6e:8a:d6:e6:76:96:4e:cc:a1:cb:e5:fa:aa:fa:
         88:84:9d:ad:66:58:37:be:63:79:ca:6d:a7:d7:19:47:18:f9:
         fc:c1:39:88:24:69:3e:15:4f:25:b9:90:23:32:c5:6a:08:94:
         80:20:b6:c4:0e:e5:be:40:19:67:c3:96:f9:03:52:21:cd:6d:
         12:eb:c5:3c:ff:db:9c:85:50:2c:64:a8:d1:23:2f:50:53:2f:
         4d:e1:4d:91:a7:a9:3d:2c:f2:3d:e3:8d:8c:b4:db:6a:83:d3:
         67:45:93:ce:f2:43:5c:b1:b7:99:8e:7c:ca:89:c0:b6:14:39:
         fa:5e:0a:e2:d5:08:05:5e:2e:13:0f:09:be:ac:d1:af:06:f2:
         97:d4:8e:91:3b:5f:99:28:8e:ae:a8:aa:30:56:6e:b5:f4:04:
         21:3c:5d:9e:c7:e2:2d:1e:d6:13:98:55:23:bf:c8:e0:7b:7e:
         e0:0e:a0:70:bd:6d:5b:36:b7:69:cf:99:92:1f:bb:be:90:a5:
         2a:aa:27:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 19:41:53 2024 by rpki-client on console-fra.rpki-client.org