Manifest

$ rpki-client -vvf 0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
File:                     C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft (raw, json)
Hash identifier:          kE/q/foVjwKD7mc7KwDiJirG8SMKWKvAZGSrp7K2IME=
Subject key identifier:   35:CF:F7:CD:8E:B8:D6:A8:E2:A2:99:3D:15:00:FF:01:C0:17:DF:3C
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Certificate issuer:       /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial:       60866F8736DBABE405C004EBA6EB6EC3D4AAA000
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access:      rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
Manifest number:          055D
Signing time:             Sat 23 Nov 2024 01:38:03 +0000
Manifest this update:     Sat 23 Nov 2024 01:33:03 +0000
Manifest next update:     Sun 24 Nov 2024 01:47:03 +0000
Files and hashes:         1: 38352e3139332e37382e302f32342d3234203d3e20313937373330.roa (hash: +uQwS2sIiIw5Nag1eIOK6jhQ8L/KtwZkpaaxkqKEIhI=)
                          2: C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl (hash: in4EwytcOwaakoDm5ggRtVR3LAVio6Oy/xCaS2CEY0o=)
                          3: 38352e3139332e37382e302f32342d3234203d3e203134363138.roa (hash: qeUBNqX0cdTuUUSXV2MePCJ8eS8Tr53k1jxkWSOVxMQ=)
                          4: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (hash: VxApuIDEnwTqQ6WGnUzRodDciZZkhdWtDDb5ZPWEs7g=)
                          5: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (hash: HhN3ELLZe66TJ+fij1LtP0zX5dGcB65eWUhaxPnm+ok=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
                          rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Nov 2024 21:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:86:6f:87:36:db:ab:e4:05:c0:04:eb:a6:eb:6e:c3:d4:aa:a0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
        Validity
            Not Before: Nov 23 01:33:03 2024 GMT
            Not After : Nov 24 01:47:03 2024 GMT
        Subject: CN=35CFF7CD8EB8D6A8E2A2993D1500FF01C017DF3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:11:b8:97:1c:b6:76:9d:7b:3f:ff:8b:c2:4b:
                    57:e2:48:2a:a7:b1:de:cf:d0:80:f0:c2:3c:8f:37:
                    bb:43:f7:a6:be:2a:cd:53:8c:bc:ae:be:1a:71:f9:
                    8e:3e:2b:95:65:f7:2a:cc:20:ba:dd:9c:36:d0:9b:
                    97:2c:c2:38:16:b6:43:c7:f8:ab:df:0c:67:e5:e4:
                    51:75:a6:1d:25:8c:fc:5c:c9:11:33:3e:97:4a:5e:
                    da:96:92:64:0b:56:10:de:d1:fe:fc:e4:8b:5e:2a:
                    6a:1c:72:4c:9c:40:2f:89:df:d2:43:56:84:d8:0d:
                    6f:61:dd:4c:dd:b2:46:fb:6c:04:79:b8:c1:9d:f0:
                    58:55:75:b6:0d:30:45:2d:c6:42:73:76:60:8a:14:
                    e9:85:84:b2:46:9c:d8:d0:42:7d:50:b1:92:a2:c1:
                    67:5b:64:c4:e3:88:94:18:bf:24:39:f4:77:52:c5:
                    45:02:c6:53:63:65:40:03:46:95:63:19:21:20:51:
                    35:0e:fe:71:4f:f0:d8:29:e8:ad:a6:24:f1:d5:58:
                    ff:ad:7c:ae:2d:2b:b9:8c:c2:b9:75:19:bc:64:5a:
                    03:43:61:36:a5:43:c6:0a:72:9c:90:26:58:b8:c5:
                    55:3e:0f:ff:61:b2:ef:f7:18:34:9f:a6:82:3e:e5:
                    e5:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:CF:F7:CD:8E:B8:D6:A8:E2:A2:99:3D:15:00:FF:01:C0:17:DF:3C
            X509v3 Authority Key Identifier:
                keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:a5:87:f4:f9:e5:87:5c:0d:16:05:91:71:ef:66:41:b3:
         99:02:7e:d2:60:00:3a:66:e9:5d:dc:0e:32:58:b4:5c:53:5e:
         d4:85:2f:e7:a0:af:b9:ca:79:b1:55:e2:8b:4b:8f:c9:83:83:
         25:7b:56:d5:0b:a1:1f:73:44:7b:42:08:78:e4:3c:3a:4a:f7:
         fa:5f:37:08:da:8d:29:3e:d6:69:a5:fa:7b:4d:7d:02:05:9e:
         62:ab:45:19:23:2c:1c:8c:af:a7:0d:1a:68:41:cc:33:33:7a:
         c3:bb:5e:57:63:a8:d3:ac:be:4c:f8:26:ce:db:99:65:20:e6:
         16:6b:4c:90:69:5a:ac:f1:28:57:31:77:9c:bb:fb:81:72:53:
         7b:cc:3d:14:c3:da:62:0e:2a:e8:77:3f:ce:8f:16:7b:d6:89:
         91:fb:8e:19:01:c7:02:47:b3:60:13:1b:f8:70:0c:23:ed:20:
         51:a0:5b:5d:07:e1:e3:e9:10:fd:64:49:51:60:7a:a8:0f:fd:
         d5:4b:67:aa:6b:27:4c:9c:66:4f:e0:65:9b:b5:ca:3e:b8:d1:
         17:e4:9e:90:8d:4a:2c:28:e7:89:11:5a:13:9a:74:55:0f:e7:
         f4:bc:78:55:42:8d:96:6d:4c:d3:5f:8f:25:db:6c:33:18:08:
         41:fc:6e:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 03:54:04 2024 by rpki-client on console-ams.rpki-client.org