Manifest

$ rpki-client -vvf 0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft
File:                     AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft (raw, json)
Hash identifier:          lzsQl1Hi8nWiE4zA4ruDt2VFEczVp62tma8cMlfCgHw=
Subject key identifier:   DB:1A:7A:9B:CA:03:A9:CD:5C:84:90:74:4D:1B:09:E8:5A:23:65:F8
Authority key identifier: AC:5B:BA:86:B1:77:4A:4E:57:F4:7F:C2:FE:0B:37:8D:46:5D:23:44
Certificate issuer:       /CN=ac5bba86b1774a4e57f47fc2fe0b378d465d2344
Certificate serial:       1CF4C21BEEF661398BB8F9552053D3ED3CEC6260
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/rFu6hrF3Sk5X9H_C_gs3jUZdI0Q.cer
Subject info access:      rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft
Manifest number:          0558
Signing time:             Fri 22 Nov 2024 19:53:03 +0000
Manifest this update:     Fri 22 Nov 2024 19:48:03 +0000
Manifest next update:     Sat 23 Nov 2024 19:53:03 +0000
Files and hashes:         1: AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.crl (hash: ONpZ9Dapa2ZcuInV3kJ/4IezvsowC9NQaom3wWyE1yg=)
                          2: 3139342e3134372e3232312e302f32342d3234203d3e20323130343239.roa (hash: 70PBrxq6AMNHr+7pOkFxHSOWkH18eivt70brzKv4hBM=)
                          3: 326130303a383334303a3a2f32392d3438203d3e20323130343239.roa (hash: NsOVeyyX9QbvBkrCiAsSM4KfLV/I6Cm6Ec3RvP3b8XY=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.crl
                          rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/rFu6hrF3Sk5X9H_C_gs3jUZdI0Q.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 17:02:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:f4:c2:1b:ee:f6:61:39:8b:b8:f9:55:20:53:d3:ed:3c:ec:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5bba86b1774a4e57f47fc2fe0b378d465d2344
        Validity
            Not Before: Nov 22 19:48:03 2024 GMT
            Not After : Nov 23 19:53:03 2024 GMT
        Subject: CN=DB1A7A9BCA03A9CD5C8490744D1B09E85A2365F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ee:2e:73:21:35:c5:96:e9:05:c3:d9:9c:85:
                    df:8e:b0:8f:09:0f:09:37:74:19:01:c3:0c:36:e7:
                    0f:77:69:4f:6a:ad:b5:68:bb:e9:1f:e7:e2:cb:ec:
                    3c:60:f8:19:d8:0d:2b:99:6e:e2:13:5a:c9:2a:1c:
                    ff:af:4e:8e:5a:f9:ec:b8:8a:14:e9:7c:8f:e9:61:
                    0c:e9:9b:b0:a2:3c:7e:05:8c:d5:6a:79:32:f9:0a:
                    9b:1e:e2:22:ff:bc:aa:a2:56:59:35:6b:d4:c9:71:
                    05:d5:49:a0:80:89:d4:6c:05:44:d7:df:a2:f0:a9:
                    b6:3e:c3:84:ee:54:e7:44:8b:c4:a8:b2:75:18:b5:
                    76:8d:f0:da:87:f6:07:3d:ad:4d:90:2f:91:80:49:
                    47:03:c8:d3:58:1a:81:8d:55:f9:d6:b1:d4:62:1f:
                    e6:b4:85:54:ed:e4:30:79:0e:d7:c6:6e:e3:d7:f5:
                    da:0e:6f:b7:9d:80:fe:35:be:28:80:60:a9:17:e2:
                    44:d9:5e:53:25:1b:a2:56:d4:59:35:0c:e8:a4:fd:
                    34:b7:72:b0:c5:5c:86:a7:82:87:9a:26:d9:c0:b1:
                    f1:3c:b7:48:7a:6f:b7:cd:b2:3d:d1:1a:5b:17:04:
                    26:28:ab:17:09:32:24:6e:61:80:bf:b4:c0:6c:ae:
                    fe:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:1A:7A:9B:CA:03:A9:CD:5C:84:90:74:4D:1B:09:E8:5A:23:65:F8
            X509v3 Authority Key Identifier:
                keyid:AC:5B:BA:86:B1:77:4A:4E:57:F4:7F:C2:FE:0B:37:8D:46:5D:23:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rFu6hrF3Sk5X9H_C_gs3jUZdI0Q.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/36/AC5BBA86B1774A4E57F47FC2FE0B378D465D2344.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:ec:af:24:2f:04:94:93:80:d3:bc:38:d9:09:f5:ed:28:c9:
         c5:0d:4a:09:d8:9e:ee:c9:f6:f4:5e:43:ef:82:a5:10:56:7d:
         6a:d0:0d:cf:92:6f:c0:e8:8f:b7:f6:55:6d:9f:ed:f9:e4:c3:
         23:fa:d3:99:68:cc:a0:4e:19:8a:a6:32:61:87:7c:89:d1:79:
         e0:72:89:02:91:ae:a5:4d:eb:a8:af:1e:b8:87:87:61:1d:c7:
         86:ae:9a:60:1e:dc:ca:56:a6:80:82:51:ed:d4:9b:f3:bc:4e:
         dd:7d:88:68:a2:0b:f8:65:0a:c4:b4:31:79:d9:e7:e8:5b:97:
         de:b9:65:f5:d2:39:88:33:83:86:11:16:d2:1a:39:5f:8a:af:
         b4:b4:5f:a2:2d:52:e0:0c:63:23:42:14:ca:9e:a1:e4:4e:6c:
         f6:c7:cb:72:94:6e:65:38:73:cb:a1:c9:ea:f0:0a:5e:6a:b4:
         c3:77:f9:4a:c7:db:f6:e9:a8:fe:cf:5f:28:81:5f:0b:c5:ad:
         8d:b7:96:5d:fb:12:5a:fc:60:59:d7:1a:09:a0:2a:b2:28:19:
         2c:d9:b0:06:a9:20:9d:cd:00:8e:ea:63:59:ee:9a:90:3a:86:
         f0:43:a1:ab:cc:42:12:d2:8a:e5:14:4d:27:90:f4:84:5d:12:
         93:e6:df:e2
-----BEGIN CERTIFICATE-----
MIIEvTCCA6WgAwIBAgIUHPTCG+72YTmLuPlVIFPT7TzsYmAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoYWM1YmJhODZiMTc3NGE0ZTU3ZjQ3ZmMyZmUwYjM3OGQ0
NjVkMjM0NDAeFw0yNDExMjIxOTQ4MDNaFw0yNDExMjMxOTUzMDNaMDMxMTAvBgNV
BAMTKERCMUE3QTlCQ0EwM0E5Q0Q1Qzg0OTA3NDREMUIwOUU4NUEyMzY1RjgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDr7i5zITXFlukFw9mchd+OsI8J
Dwk3dBkBwww25w93aU9qrbVou+kf5+LL7Dxg+BnYDSuZbuITWskqHP+vTo5a+ey4
ihTpfI/pYQzpm7CiPH4FjNVqeTL5Cpse4iL/vKqiVlk1a9TJcQXVSaCAidRsBUTX
36LwqbY+w4TuVOdEi8SosnUYtXaN8NqH9gc9rU2QL5GASUcDyNNYGoGNVfnWsdRi
H+a0hVTt5DB5DtfGbuPX9doOb7edgP41viiAYKkX4kTZXlMlG6JW1Fk1DOik/TS3
crDFXIangoeaJtnAsfE8t0h6b7fNsj3RGlsXBCYoqxcJMiRuYYC/tMBsrv57AgMB
AAGjggHHMIIBwzAdBgNVHQ4EFgQU2xp6m8oDqc1chJB0TRsJ6FojZfgwHwYDVR0j
BBgwFoAUrFu6hrF3Sk5X9H/C/gs3jUZdI0QwDgYDVR0PAQH/BAQDAgeAMFUGA1Ud
HwROMEwwSqBIoEaGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM2L0FDNUJCQTg2QjE3
NzRBNEU1N0Y0N0ZDMkZFMEIzNzhENDY1RDIzNDQuY3JsMGQGCCsGAQUFBwEBBFgw
VjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv
REVGQVVMVC9yRnU2aHJGM1NrNVg5SF9DX2dzM2pVWmRJMFEuY2VyMGAGCCsGAQUF
BwELBFQwUjBQBggrBgEFBQcwC4ZEcnN5bmM6Ly8wLnNiL3JlcG8vc2IvMzYvQUM1
QkJBODZCMTc3NEE0RTU3RjQ3RkMyRkUwQjM3OEQ0NjVEMjM0NC5tZnQwGAYDVR0g
AQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAG
BAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEB
AIzsryQvBJSTgNO8ONkJ9e0oycUNSgnYnu7J9vReQ++CpRBWfWrQDc+Sb8Doj7f2
VW2f7fnkwyP605lozKBOGYqmMmGHfInReeByiQKRrqVN66ivHriHh2Edx4aummAe
3MpWpoCCUe3Um/O8Tt19iGiiC/hlCsS0MXnZ5+hbl965ZfXSOYgzg4YRFtIaOV+K
r7S0X6ItUuAMYyNCFMqeoeRObPbHy3KUbmU4c8uhyerwCl5qtMN3+UrH2/bpqP7P
XyiBXwvFrY23ll37Elr8YFnXGgmgKrIoGSzZsAapIJ3NAI7qY1numpA6hvBDoavM
QhLSiuUUTSeQ9IRdEpPm3+I=
-----END CERTIFICATE-----
Generated at Fri Nov 22 22:09:26 2024 by rpki-client on console-ams.rpki-client.org