Manifest

$ rpki-client -vvf 0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
File:                     137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft (raw, json)
Hash identifier:          mnFulrI97HY7AoE4BUBs3zDmRzyuopxA90+vNq9B09k=
Subject key identifier:   E3:E8:D5:89:69:EC:1C:7D:FF:78:EC:64:6B:58:98:B1:E7:F9:C6:09
Authority key identifier: 13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23
Certificate issuer:       /CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
Certificate serial:       68EC36AD0BB56A770E271034C1D11E3FCD8137A5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
Subject info access:      rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
Manifest number:          064B
Signing time:             Mon 05 May 2025 23:57:17 +0000
Manifest this update:     Mon 05 May 2025 23:52:17 +0000
Manifest next update:     Wed 07 May 2025 00:02:17 +0000
Files and hashes:         1: 137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl (hash: F58k4iG19T+BDbgD+UNvCwtFutDhlRgypr1nWt+e4lU=)
                          2: 326131323a653163303a3a2f32392d3438203d3e20323130343239.roa (hash: KNyaa8mDudI2kYlMfbKvT19xmFpRWHn44NSy6dfAbHc=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl
                          rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 07 May 2025 00:02:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:ec:36:ad:0b:b5:6a:77:0e:27:10:34:c1:d1:1e:3f:cd:81:37:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137cb8d5c661a1c15ff2ad210196b6b62a75b623
        Validity
            Not Before: May  5 23:52:17 2025 GMT
            Not After : May  7 00:02:17 2025 GMT
        Subject: CN=E3E8D58969EC1C7DFF78EC646B5898B1E7F9C609
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:bb:44:6a:c4:1b:84:0a:3c:4f:a1:20:81:
                    6d:e0:b6:2c:40:14:02:b8:28:14:b9:62:7d:34:6c:
                    04:43:c0:18:e3:7c:e0:98:ad:41:32:ee:61:98:1f:
                    5c:7d:50:4d:ab:b8:68:9f:d3:d4:b0:ae:d1:d9:39:
                    47:cf:0c:00:53:24:c1:f9:b2:ac:22:10:05:3d:65:
                    28:6a:4e:f0:33:c7:e4:52:7d:03:33:d1:0e:49:99:
                    78:88:20:35:41:6c:23:b5:34:31:70:dd:9f:1d:6c:
                    66:a7:2a:67:16:52:a4:9c:51:b4:fa:32:49:2a:69:
                    16:a3:ad:e5:3c:46:a0:cc:21:11:5e:84:a0:7b:b8:
                    bb:3c:a4:4b:f9:09:58:17:90:63:10:12:e3:b2:9d:
                    16:2a:3d:28:e5:1e:d8:78:44:7c:42:d1:8f:c3:4e:
                    92:d5:99:6b:65:82:04:ef:ba:cd:96:91:1a:fb:6b:
                    7f:c9:f0:21:5f:15:a5:2b:6e:45:50:26:be:20:c3:
                    fc:94:8a:30:04:a4:0d:e2:00:09:d2:51:53:7e:61:
                    b0:4b:d5:c2:97:b7:a6:af:fd:0e:64:0d:fe:88:7b:
                    ac:c8:f2:53:ee:f0:62:b4:ce:2d:82:1c:47:d9:a9:
                    b1:3d:18:c5:a7:94:75:ab:8e:be:0a:9a:fb:0f:a8:
                    2e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:E8:D5:89:69:EC:1C:7D:FF:78:EC:64:6B:58:98:B1:E7:F9:C6:09
            X509v3 Authority Key Identifier:
                keyid:13:7C:B8:D5:C6:61:A1:C1:5F:F2:AD:21:01:96:B6:B6:2A:75:B6:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E3y41cZhocFf8q0hAZa2tip1tiM.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/32/137CB8D5C661A1C15FF2AD210196B6B62A75B623.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:4a:a3:ba:b7:b2:1f:a3:c2:68:ae:59:c0:31:7d:bd:32:38:
         aa:17:c9:7f:8c:52:b6:12:1e:d1:1d:73:66:9f:01:7a:fa:73:
         63:d0:37:b4:fe:ea:af:aa:13:f5:57:8c:a8:13:e4:2c:43:dc:
         1e:bf:e6:ee:0a:b9:65:57:a8:d4:5d:dd:09:94:f3:1a:ab:42:
         09:4b:3c:09:a2:69:94:d8:e6:8f:40:91:8e:5f:5e:a4:1c:04:
         32:12:7b:7e:ef:57:49:54:2e:93:f4:a0:7d:a6:53:0f:2a:2a:
         12:54:70:07:89:56:de:6d:a9:b3:1b:2a:fd:9f:71:1e:76:1c:
         9e:42:e6:20:3e:93:f4:5d:0e:87:a4:39:b3:6e:16:5c:f9:f6:
         4b:b6:07:24:7a:71:5e:99:9c:9e:63:bc:63:9f:cf:20:8e:fc:
         6d:37:df:d9:fd:3e:90:f3:0d:5f:42:e1:d9:58:24:d6:2f:1c:
         10:ca:56:1e:1a:b6:b8:60:de:bc:4d:09:e2:52:89:60:7e:f8:
         83:e7:eb:ba:e9:48:52:72:11:43:27:26:85:a0:20:92:78:f8:
         bf:0b:1a:71:63:19:d0:a0:05:42:5c:3b:b3:3e:45:46:3e:5b:
         69:dc:b2:23:c5:2b:1e:61:91:e5:5f:eb:e1:81:af:0a:2c:93:
         5b:2d:ad:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 6 09:38:36 2025 by rpki-client