Manifest

$ rpki-client -vvf rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
File:                     51BC3C4BFD57122B09A51172274C36314C54EB8D.mft (raw, json)
Hash identifier:          ybU0uPAmaJTa5/hrjBfa/hk/OtkY0uQFiT40NfyO4Q0=
Subject key identifier:   19:29:3A:AE:2D:6B:17:5C:98:70:7B:FC:55:02:C5:2B:28:F4:C2:A2
Authority key identifier: 51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D
Certificate issuer:       /CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
Certificate serial:       0526B8C89938A470DD9EF28E9587A2390CC7B501
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
Subject info access:      rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
Manifest number:          09
Signing time:             Sat 12 Jul 2025 08:00:23 +0000
Manifest this update:     Sat 12 Jul 2025 07:55:23 +0000
Manifest next update:     Sun 13 Jul 2025 09:34:23 +0000
Files and hashes:         1: AS47778.asa (hash: r7x168jc/t4kC2CKt3ERONBsUJWICgaP/67P2/IU3Wc=)
                          2: 51BC3C4BFD57122B09A51172274C36314C54EB8D.crl (hash: oKnghyRdOW0OdxSyPQOkdlXlcrkiQ3KR7CAcL3P5f/c=)
Validation:               OK
Signature path:           rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl
                          rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 13 Jul 2025 05:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:26:b8:c8:99:38:a4:70:dd:9e:f2:8e:95:87:a2:39:0c:c7:b5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51bc3c4bfd57122b09a51172274c36314c54eb8d
        Validity
            Not Before: Jul 12 07:55:23 2025 GMT
            Not After : Jul 13 09:34:23 2025 GMT
        Subject: CN=19293AAE2D6B175C98707BFC5502C52B28F4C2A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:59:6e:d0:f9:5a:e1:17:09:6a:01:83:de:3a:
                    1c:26:64:25:26:dc:b4:88:92:46:e0:a0:5f:f9:c4:
                    48:83:d6:c5:b3:e0:1e:30:da:c3:8b:7a:4c:56:6f:
                    98:29:8b:da:32:c8:9f:d9:8d:79:f6:2a:3a:64:4a:
                    65:19:6f:58:f3:58:88:3a:c4:80:a0:24:5f:dd:71:
                    0e:93:b2:12:95:99:1f:3e:57:2a:d7:5f:80:7e:3a:
                    ec:c0:b9:93:74:b7:9a:13:8b:e3:5e:2c:e6:f4:73:
                    e3:82:28:15:a9:49:8b:a2:dd:11:60:36:2f:b4:33:
                    22:20:39:01:94:04:24:68:af:b1:10:7e:71:8c:c5:
                    c4:bd:a9:d5:16:c8:6a:50:6a:0e:d2:36:9b:a3:2b:
                    28:b7:d0:57:c5:04:96:12:8d:66:0b:33:e3:10:d2:
                    93:e4:c5:42:0d:d6:80:10:c1:2f:33:ad:e3:1d:ef:
                    49:d2:cd:36:be:51:22:f1:ac:81:2e:c6:da:f3:8e:
                    0a:4b:fa:ed:85:51:62:a5:99:26:df:e6:05:88:28:
                    fc:4a:df:35:83:c4:49:b9:8c:51:77:a5:fd:f7:33:
                    4b:ae:e2:86:3d:c4:e7:8a:f5:d8:77:b8:23:47:90:
                    5c:76:c8:ad:8c:4c:c4:5c:3b:94:33:82:8f:35:a2:
                    11:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:29:3A:AE:2D:6B:17:5C:98:70:7B:FC:55:02:C5:2B:28:F4:C2:A2
            X509v3 Authority Key Identifier:
                keyid:51:BC:3C:4B:FD:57:12:2B:09:A5:11:72:27:4C:36:31:4C:54:EB:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ubw8S_1XEisJpRFyJ0w2MUxU640.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sunoaki.net/repo/SUNOAKI/1/51BC3C4BFD57122B09A51172274C36314C54EB8D.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:8d:2a:52:67:c3:bb:57:16:f6:58:f6:a4:a0:50:29:4e:b5:
         cb:4e:b5:1a:b7:c1:6f:02:85:90:a9:70:a3:35:38:a1:05:44:
         5f:ea:ca:92:e6:53:c4:b8:7b:65:a8:48:22:3a:c9:d8:8d:8f:
         7d:9d:2a:1f:09:0f:5f:83:ae:a9:1b:da:cb:52:6c:95:6a:ed:
         1e:5c:12:c1:90:af:f0:cc:72:50:fb:a9:d1:dc:d7:39:67:97:
         77:a4:39:4d:92:f3:d9:2b:50:65:9e:db:23:68:60:92:66:e6:
         94:af:aa:b3:ee:a1:2f:03:a5:86:59:a6:d8:d9:e4:d2:78:d2:
         bd:ad:4d:af:16:74:63:0b:33:ef:90:28:45:b2:72:10:2f:dd:
         2d:b6:90:16:50:14:37:eb:6c:80:62:83:85:a5:e5:e2:80:b9:
         8a:e8:dd:f3:44:58:1a:2f:5b:96:bf:8b:f3:38:c1:f8:2a:ac:
         89:e4:fd:4a:ce:98:46:d5:b6:9e:cc:be:38:63:2a:43:34:99:
         9e:2b:8e:d1:b4:d8:c3:bd:a6:65:91:5c:b1:72:b8:bf:49:cd:
         0e:eb:ad:5e:36:ec:a0:e2:3b:b3:80:b7:95:0a:56:b5:eb:1b:
         89:b7:4b:d2:be:b5:81:60:2d:10:a2:21:b9:6d:83:78:72:1f:
         15:d0:d1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 12 12:43:57 2025 by rpki-client