Manifest

$ rpki-client -vvf 0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
File:                     861A9D357D53D5459484A1F5921704E762641A62.mft (raw, json)
Hash identifier:          rV1CFBHzsFE7ujnqgEP0CBHoj+pW1KD8LsPF3AofM5A=
Subject key identifier:   58:C3:E6:D2:3B:3F:48:43:56:C5:35:8F:02:19:42:CD:07:DF:4C:B6
Authority key identifier: 86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62
Certificate issuer:       /CN=861a9d357d53d5459484a1f5921704e762641a62
Certificate serial:       6B2981A056F332DE9700176ADA4B318084F45FC3
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
Subject info access:      rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
Manifest number:          064A
Signing time:             Sat 10 May 2025 18:42:26 +0000
Manifest this update:     Sat 10 May 2025 18:37:26 +0000
Manifest next update:     Sun 11 May 2025 19:47:26 +0000
Files and hashes:         1: 326131323a653934303a3a2f32392d3438203d3e20323130343334.roa (hash: da/aWiBYlY2AoAL4NhG5g4M6oT5GR8pfBIm5pCnjgrA=)
                          2: 38342e33382e3234372e302f32342d3234203d3e203134363138.roa (hash: UzBsJtCwpPW6LpBMpHXT0TN2MbBkNFN5AgkQZGjpf/o=)
                          3: 861A9D357D53D5459484A1F5921704E762641A62.crl (hash: CkKKoo1JYjYu3GjyxruNrbY5QD+n+h2QCoQRoWvH+jU=)
                          4: 38342e33382e3234372e302f32342d3234203d3e203136353039.roa (hash: tKwnQjgrju6YNWMsZluQj8pql6RUUJ7fcvGo9fbcl3Y=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl
                          rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 11 May 2025 13:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:29:81:a0:56:f3:32:de:97:00:17:6a:da:4b:31:80:84:f4:5f:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=861a9d357d53d5459484a1f5921704e762641a62
        Validity
            Not Before: May 10 18:37:26 2025 GMT
            Not After : May 11 19:47:26 2025 GMT
        Subject: CN=58C3E6D23B3F484356C5358F021942CD07DF4CB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:5d:a2:42:f4:5c:d2:17:aa:a3:a7:38:c3:4c:
                    4a:b6:f5:fc:5f:1e:43:ea:a0:5d:2c:18:fd:dd:bf:
                    05:dd:44:36:f0:ff:ce:fa:e7:7e:3f:0e:86:13:43:
                    26:7a:9d:5a:e8:44:96:38:07:4b:79:2e:ce:eb:39:
                    6f:d4:d8:a4:45:f4:fd:5e:1e:dc:b3:bd:d4:2a:9d:
                    92:a4:1e:fe:85:df:d6:05:f4:78:0f:6b:fc:15:94:
                    67:ab:a3:ac:8d:dd:2e:20:a2:4c:45:56:6a:74:6e:
                    7e:03:7d:f5:09:77:4c:22:73:88:88:95:6c:a1:f5:
                    44:b7:d7:57:7e:c9:27:3e:53:68:9d:83:b5:1b:5a:
                    ac:33:7d:5a:39:df:b4:31:51:b0:ea:ce:1d:84:1e:
                    2b:99:0b:b3:08:2a:dc:b5:64:76:3e:2d:d9:1a:ac:
                    ac:61:ab:97:d1:4c:40:31:3f:ca:8e:b0:e5:e5:d1:
                    ff:b0:0a:83:39:15:ea:c6:44:09:7b:64:b7:84:43:
                    7c:59:03:d2:50:7b:63:8b:3f:5d:0f:50:10:02:cd:
                    ed:22:4b:ab:25:11:eb:76:5a:bb:c2:ab:5d:b2:23:
                    9a:3e:27:0a:88:3b:57:04:3e:f0:c6:1c:41:76:19:
                    5b:e9:e7:84:8c:14:00:5f:be:eb:1d:2f:2f:9a:0a:
                    76:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:C3:E6:D2:3B:3F:48:43:56:C5:35:8F:02:19:42:CD:07:DF:4C:B6
            X509v3 Authority Key Identifier:
                keyid:86:1A:9D:35:7D:53:D5:45:94:84:A1:F5:92:17:04:E7:62:64:1A:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhqdNX1T1UWUhKH1khcE52JkGmI.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/33/861A9D357D53D5459484A1F5921704E762641A62.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:c1:6f:63:c7:59:9e:48:31:04:81:43:2e:cb:22:82:64:40:
         c6:17:0e:03:47:bb:7c:53:0a:5e:5e:21:bf:b9:61:c8:c5:af:
         1b:b3:0f:a6:fb:60:8b:0b:3f:4d:76:0e:66:6c:6e:09:72:f4:
         3f:89:12:0e:e9:9f:49:f7:1a:49:0c:8c:3f:5b:a7:6a:fe:1c:
         e8:62:5a:65:af:4c:1a:2d:bf:5d:dc:ad:d8:61:e9:eb:c8:60:
         eb:04:81:3a:c4:c1:f1:4b:45:8e:30:3f:22:77:22:e8:14:ae:
         d8:3a:ac:f2:42:75:82:11:18:76:f7:59:f7:62:c1:03:5e:3b:
         21:49:60:81:ca:1e:d3:a0:8b:07:9a:67:bf:52:35:43:fb:6b:
         89:d7:5f:31:d2:5b:3d:fb:9a:a9:19:57:12:07:3a:4e:2e:55:
         9a:01:17:b1:f9:54:fe:af:e8:17:1d:a5:7f:b6:23:6a:6f:ba:
         24:df:37:72:98:14:b2:4d:a1:33:af:80:10:3d:7e:c9:35:66:
         00:e3:6f:0b:9f:a6:87:30:01:fd:dc:f2:97:18:50:ca:93:88:
         49:78:69:ab:7c:a6:72:e6:d7:89:67:f1:84:7e:45:2d:4e:e6:
         e9:74:2e:b8:0f:4c:78:d9:45:26:28:bf:05:10:6b:2b:b8:40:
         ba:de:89:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 22:30:05 2025 by rpki-client