$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft File: 52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json) Hash identifier: inLY5oBObSxiGHwAgEC6ax4zwlc32aCMVA6reOA683Y= Subject key identifier: 94:C5:B7:7A:FF:4C:EA:93:4B:5C:80:9D:F3:38:52:F2:1A:6B:53:39 Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 Certificate issuer: /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Certificate serial: 048A34261934B731AF32A484A6F34AE22772FACD Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject info access: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft Manifest number: 0464 Signing time: Mon 25 Nov 2024 09:13:25 +0000 Manifest this update: Mon 25 Nov 2024 09:08:25 +0000 Manifest next update: Tue 26 Nov 2024 10:27:25 +0000 Files and hashes: 1: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=) 2: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=) 3: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: MhQMqrG8cEnCPrLnglixv/HmmxxBsAfEUuptocDDLlU=) 4: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=) 5: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=) 6: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: AzaohjYaSSIV1Q6fmRXncx9iaadRmaHUjWlMQBGdnBA=) Validation: OK Signature path: rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 26 Nov 2024 10:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:8a:34:26:19:34:b7:31:af:32:a4:84:a6:f3:4a:e2:27:72:fa:cd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4 Validity Not Before: Nov 25 09:08:25 2024 GMT Not After : Nov 26 10:27:25 2024 GMT Subject: CN=94C5B77AFF4CEA934B5C809DF33852F21A6B5339 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:be:31:f3:47:1f:ee:1b:98:b2:dd:27:c7:10: 11:79:9f:0c:e0:9d:c6:fb:c1:3b:a1:85:f3:d9:c7: 6e:16:fa:b9:b1:2b:41:4c:9d:af:f3:f3:b5:83:f8: 43:3a:42:4b:82:ce:96:f1:b1:18:28:36:12:a8:8f: 1a:be:2d:25:3e:26:8a:54:c3:55:74:3d:85:e9:34: b3:6b:38:44:d2:17:14:f6:0d:2c:2d:45:ed:0c:fb: eb:4c:94:33:bf:fb:ef:40:0d:5a:8d:31:58:be:42: af:1a:de:3f:27:54:79:54:8b:7f:34:0b:17:fd:c9: 36:99:3e:74:04:0e:2e:07:4b:37:bb:5c:fb:6d:a8: 45:66:43:ca:a6:c9:b1:8f:d6:88:8f:af:48:39:e7: ab:48:62:b3:72:fb:d1:9d:e3:a4:0b:28:9c:26:25: cd:86:69:3d:13:5e:c6:2c:bd:9f:9a:bb:c3:2f:01: 5b:83:91:2d:f0:8a:59:3d:c2:56:55:b2:57:f7:2c: 73:ed:f6:21:15:da:df:65:45:cf:1a:22:71:d2:cc: 67:d2:e7:1e:10:45:c1:58:ba:3b:c8:07:cb:f6:a2: 45:5c:72:ae:79:1c:82:8c:e9:1d:ea:f1:76:f8:52: 1a:1e:7c:0b:2b:7f:71:3b:95:bb:94:bc:80:3d:4b: 41:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:C5:B7:7A:FF:4C:EA:93:4B:5C:80:9D:F3:38:52:F2:1A:6B:53:39 X509v3 Authority Key Identifier: keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:41:f8:70:ce:dd:c4:ff:94:3c:2c:bb:7c:86:5d:77:33:1e: ee:70:fa:d8:d6:ab:f6:39:cc:83:9c:26:c0:d3:01:3e:16:cc: 4a:ea:66:bc:45:f3:aa:83:f3:80:cb:15:e4:2f:54:54:06:3d: fc:97:15:80:40:b6:d0:3d:b5:2b:08:50:7f:4d:08:43:c3:d5: 3f:90:fa:e6:43:26:71:dd:18:6f:69:5f:eb:38:d8:1e:5c:08: 8a:6d:07:0f:69:af:62:21:1a:a2:86:64:05:f8:eb:a0:2b:66: 04:a7:9f:cc:8a:b1:c7:9a:de:f8:18:1d:22:3d:47:64:65:52: 94:b5:af:a2:e2:74:08:9c:60:a1:7d:fd:20:96:22:98:44:ee: 23:69:54:63:5a:1d:7a:0d:a4:ae:99:28:31:3a:47:1a:9b:11: b9:08:ff:49:ef:79:05:c1:5c:5d:56:f8:b0:ea:d4:a3:f4:38: 42:66:41:8b:05:92:d4:d3:61:60:65:a2:a1:62:bf:dc:2d:3e: be:6d:3d:e6:99:d5:26:80:0b:5f:32:12:74:93:98:b7:d7:e5: 9c:c9:2f:d7:6a:2e:6f:63:c3:2d:d1:b5:a3:3f:19:fc:ca:7e: 9f:d0:d7:79:02:33:7a:05:94:2c:08:e2:80:ff:5c:9c:8e:d3: 87:6c:cc:f7 -----BEGIN CERTIFICATE----- MIIE7jCCA9agAwIBAgIUBIo0Jhk0tzGvMqSEpvNK4idy+s0wDQYJKoZIhvcNAQEL BQAwSjEVMBMGA1UEAxMMQTkxRkZFM0YwMDAwMTEwLwYDVQQFEyg1Mjg0MDQyMkQw QjcyQkE5OTI3REUwRkY3MzUzNUZERjE2MzUyMUE0MB4XDTI0MTEyNTA5MDgyNVoX DTI0MTEyNjEwMjcyNVowMzExMC8GA1UEAxMoOTRDNUI3N0FGRjRDRUE5MzRCNUM4 MDlERjMzODUyRjIxQTZCNTMzOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoC ggEBAL++MfNHH+4bmLLdJ8cQEXmfDOCdxvvBO6GF89nHbhb6ubErQUydr/PztYP4 QzpCS4LOlvGxGCg2EqiPGr4tJT4milTDVXQ9hek0s2s4RNIXFPYNLC1F7Qz760yU M7/770ANWo0xWL5CrxrePydUeVSLfzQLF/3JNpk+dAQOLgdLN7tc+22oRWZDyqbJ sY/WiI+vSDnnq0his3L70Z3jpAsonCYlzYZpPRNexiy9n5q7wy8BW4ORLfCKWT3C VlWyV/csc+32IRXa32VFzxoicdLMZ9LnHhBFwVi6O8gHy/aiRVxyrnkcgozpHerx dvhSGh58Cyt/cTuVu5S8gD1LQVUCAwEAAaOCAeEwggHdMB0GA1UdDgQWBBSUxbd6 /0zqk0tcgJ3zOFLyGmtTOTAfBgNVHSMEGDAWgBRShAQi0LcrqZJ94P9zU1/fFjUh pDAOBgNVHQ8BAf8EBAMCB4AwVQYDVR0fBE4wTDBKoEigRoZEcnN5bmM6Ly8wLnNi L3JlcG8vc2IvMzkvNTI4NDA0MjJEMEI3MkJBOTkyN0RFMEZGNzM1MzVGREYxNjM1 MjFBNC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD NzJGRDFGRjIvVW9RRUl0QzNLNm1TZmVEX2MxTmYzeFkxSWFRLmNlcjBgBggrBgEF BQcBCwRUMFIwUAYIKwYBBQUHMAuGRHJzeW5jOi8vMC5zYi9yZXBvL3NiLzM5LzUy ODQwNDIyRDBCNzJCQTk5MjdERTBGRjczNTM1RkRGMTYzNTIxQTQubWZ0MBgGA1Ud IAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAw BgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IB AQCOQfhwzt3E/5Q8LLt8hl13Mx7ucPrY1qv2OcyDnCbA0wE+FsxK6ma8RfOqg/OA yxXkL1RUBj38lxWAQLbQPbUrCFB/TQhDw9U/kPrmQyZx3RhvaV/rONgeXAiKbQcP aa9iIRqihmQF+OugK2YEp5/MirHHmt74GB0iPUdkZVKUta+i4nQInGChff0gliKY RO4jaVRjWh16DaSumSgxOkcamxG5CP9J73kFwVxdVviw6tSj9DhCZkGLBZLU02Fg ZaKhYr/cLT6+bT3mmdUmgAtfMhJ0k5i31+WcyS/Xai5vY8Mt0bWjPxn8yn6f0Nd5 AjN6BZQsCOKA/1ycjtOHbMz3 -----END CERTIFICATE-----Generated at Mon Nov 25 10:49:14 2024 by rpki-client on console-fra.rpki-client.org