Manifest

$ rpki-client -vvf 0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft
File:                     3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft (raw, json)
Hash identifier:          O248aQt9Fu9QIT//qeBTqQPXPmFz1SeSjJcH48zBfcM=
Subject key identifier:   94:D7:39:76:8B:15:FD:C5:82:B0:BD:B0:CE:A7:48:95:59:53:37:30
Authority key identifier: 35:07:D4:7E:E4:E9:7F:6B:FD:3A:C4:CE:07:BF:99:C0:55:4C:9A:4B
Certificate issuer:       /CN=3507d47ee4e97f6bfd3ac4ce07bf99c0554c9a4b
Certificate serial:       228AD9060A1E66A1C82DA995AB67BD9C1B0B180E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/NQfUfuTpf2v9OsTOB7-ZwFVMmks.cer
Subject info access:      rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft
Manifest number:          0563
Signing time:             Fri 22 Nov 2024 20:38:03 +0000
Manifest this update:     Fri 22 Nov 2024 20:33:03 +0000
Manifest next update:     Sun 24 Nov 2024 00:29:03 +0000
Files and hashes:         1: 39312e3232302e32352e302f32342d3234203d3e20313937373330.roa (hash: h1bFqOyn4Ckbfc/LcTkQK9G+cN9y+iCf6TJsPy510FU=)
                          2: 3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.crl (hash: bIi2XCvXMmmMBmJxbHWGHRRr0tqKkgscCuyCkpzk3y4=)
                          3: 39312e3232302e32352e302f32342d3234203d3e203134363138.roa (hash: /bIZZ9ewDGFMJqud+NFUI13kqixNTeVW5IIJBueAQqE=)
                          4: 39312e3232302e32352e302f32342d3234203d3e203136353039.roa (hash: iZ8jsPvXD/HekWt0D2ZvsD43rIXxMvo+7vo1MRvUy7A=)
                          5: 326131323a663234303a3a2f32392d3239203d3e20323130343334.roa (hash: sIRA9nwpVfrUrnLpMqEe1D8DTq0rGOwDGPgKdQZ8JYs=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.crl
                          rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/NQfUfuTpf2v9OsTOB7-ZwFVMmks.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:8a:d9:06:0a:1e:66:a1:c8:2d:a9:95:ab:67:bd:9c:1b:0b:18:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3507d47ee4e97f6bfd3ac4ce07bf99c0554c9a4b
        Validity
            Not Before: Nov 22 20:33:03 2024 GMT
            Not After : Nov 24 00:29:03 2024 GMT
        Subject: CN=94D739768B15FDC582B0BDB0CEA7489559533730
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:2c:23:10:21:cd:31:59:4b:93:19:43:7e:77:
                    84:4f:ea:7b:21:e5:f0:04:97:f1:8d:a2:77:2d:a0:
                    49:41:d8:08:d7:50:f9:41:a9:90:3f:a8:8a:83:23:
                    9d:c6:cc:ef:38:15:be:c7:a2:94:3c:1c:b0:07:7b:
                    1e:cf:8a:2c:85:a1:b1:7d:3e:78:48:db:22:b4:b1:
                    e9:46:e7:34:db:d5:37:ae:78:fa:60:df:86:98:78:
                    33:51:bb:70:76:a7:22:9c:7f:12:ac:df:9d:25:83:
                    31:d1:c9:83:43:10:cd:45:07:54:39:f5:a6:23:64:
                    d8:e4:cd:2d:e0:c7:7c:56:36:a6:11:6e:39:b8:1c:
                    35:8b:10:03:98:0c:0b:51:50:96:d2:75:32:82:f3:
                    86:65:0e:0f:b1:a1:af:a9:0b:8d:f2:48:87:69:7d:
                    83:22:91:d4:92:bd:e4:26:31:e2:c7:97:6a:20:90:
                    da:90:c4:d2:18:19:d1:80:86:8a:71:2b:22:39:9f:
                    6e:70:28:1e:e2:7e:9a:13:02:21:99:67:d1:af:44:
                    37:76:79:75:de:25:5d:23:29:c8:b7:1d:be:68:ed:
                    31:11:3e:e2:77:a6:ee:bd:42:7a:a9:e1:43:3d:cb:
                    36:94:8e:17:fb:11:1e:ca:22:84:c9:3f:f5:9f:b6:
                    9f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:D7:39:76:8B:15:FD:C5:82:B0:BD:B0:CE:A7:48:95:59:53:37:30
            X509v3 Authority Key Identifier:
                keyid:35:07:D4:7E:E4:E9:7F:6B:FD:3A:C4:CE:07:BF:99:C0:55:4C:9A:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NQfUfuTpf2v9OsTOB7-ZwFVMmks.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/35/3507D47EE4E97F6BFD3AC4CE07BF99C0554C9A4B.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:5b:a0:0a:66:9e:9a:3c:d3:41:a8:62:00:92:07:d5:3d:35:
         8a:37:5a:34:92:01:82:50:7c:07:ad:4d:65:6b:da:e7:99:7b:
         e3:07:02:c4:10:4f:19:bd:86:e4:0e:d5:22:16:00:cc:5e:cf:
         16:56:8f:7e:a4:1e:ba:c7:06:0d:dc:87:58:e9:1e:f4:f2:0e:
         a7:48:6b:6e:09:44:2f:6b:b7:21:27:ca:46:81:95:32:b6:1a:
         44:21:40:09:89:6f:21:d6:49:89:d1:59:64:4b:b4:7a:f4:70:
         9f:ba:5d:d8:49:b2:62:38:f8:e9:c3:dc:e6:77:ed:ac:a9:a8:
         ce:b2:61:f3:20:70:09:bc:9f:8a:1a:d1:36:56:3c:21:df:e4:
         08:07:86:a2:9a:7b:5d:91:c6:33:24:f4:5f:21:ae:2d:47:e5:
         9f:5e:c6:c5:e5:9a:6a:a0:86:0a:6a:0e:69:ba:43:3e:0c:d3:
         93:95:9b:57:25:c5:34:79:e6:2a:70:58:2d:81:0b:1b:61:4f:
         7c:8d:3c:eb:33:64:06:72:41:88:c6:f3:4f:d4:90:dc:bb:94:
         0a:06:2a:af:17:88:c8:8f:30:a0:bf:5d:7d:62:88:92:a2:e8:
         6e:c8:8a:8b:ac:cf:f0:0d:52:0c:59:2b:6e:1a:01:ca:4a:91:
         97:f6:53:59
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUIorZBgoeZqHILamVq2e9nBsLGA4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzUwN2Q0N2VlNGU5N2Y2YmZkM2FjNGNlMDdiZjk5YzA1
NTRjOWE0YjAeFw0yNDExMjIyMDMzMDNaFw0yNDExMjQwMDI5MDNaMDMxMTAvBgNV
BAMTKDk0RDczOTc2OEIxNUZEQzU4MkIwQkRCMENFQTc0ODk1NTk1MzM3MzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdLCMQIc0xWUuTGUN+d4RP6nsh
5fAEl/GNonctoElB2AjXUPlBqZA/qIqDI53GzO84Fb7HopQ8HLAHex7PiiyFobF9
PnhI2yK0selG5zTb1TeuePpg34aYeDNRu3B2pyKcfxKs350lgzHRyYNDEM1FB1Q5
9aYjZNjkzS3gx3xWNqYRbjm4HDWLEAOYDAtRUJbSdTKC84ZlDg+xoa+pC43ySIdp
fYMikdSSveQmMeLHl2ogkNqQxNIYGdGAhopxKyI5n25wKB7ifpoTAiGZZ9GvRDd2
eXXeJV0jKci3Hb5o7TERPuJ3pu69Qnqp4UM9yzaUjhf7ER7KIoTJP/Wftp85AgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQUlNc5dosV/cWCsL2wzqdIlVlTNzAwHwYDVR0j
BBgwFoAUNQfUfuTpf2v9OsTOB7+ZwFVMmkswDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM1LzM1MDdENDdFRTRF
OTdGNkJGRDNBQzRDRTA3QkY5OUMwNTU0QzlBNEIuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9OUWZVZnVUcGYydjlPc1RPQjctWndGVk1ta3MuY2VyMGAGCCsGAQUF
BwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzUvMzUw
N0Q0N0VFNEU5N0Y2QkZEM0FDNENFMDdCRjk5QzA1NTRDOUE0Qi5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AMBboApmnpo800GoYgCSB9U9NYo3WjSSAYJQfAetTWVr2ueZe+MHAsQQTxm9huQO
1SIWAMxezxZWj36kHrrHBg3ch1jpHvTyDqdIa24JRC9rtyEnykaBlTK2GkQhQAmJ
byHWSYnRWWRLtHr0cJ+6XdhJsmI4+OnD3OZ37aypqM6yYfMgcAm8n4oa0TZWPCHf
5AgHhqKae12RxjMk9F8hri1H5Z9exsXlmmqghgpqDmm6Qz4M05OVm1clxTR55ipw
WC2BCxthT3yNPOszZAZyQYjG80/UkNy7lAoGKq8XiMiPMKC/XX1iiJKi6G7Iious
z/ANUgxZK24aAcpKkZf2U1k=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:20:39 2024 by rpki-client on console-fra.rpki-client.org