Manifest

$ rpki-client -vvf 0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
File:                     C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft (raw, json)
Hash identifier:          CySxpmZR1ms1RympaHhMlrS0edaxjBA/GnP8Igyp5Ng=
Subject key identifier:   CF:70:98:8C:6A:C9:1C:0C:C1:E8:27:31:9A:32:C3:84:AE:D8:41:FD
Authority key identifier: C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51
Certificate issuer:       /CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
Certificate serial:       0A6A7DB584C37687CD5EF89BFC95F541B4F152EF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
Subject info access:      rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
Manifest number:          0640
Signing time:             Mon 05 May 2025 09:42:17 +0000
Manifest this update:     Mon 05 May 2025 09:37:17 +0000
Manifest next update:     Tue 06 May 2025 13:20:17 +0000
Files and hashes:         1: 38352e3139332e37382e302f32342d3234203d3e20313937373330.roa (hash: +uQwS2sIiIw5Nag1eIOK6jhQ8L/KtwZkpaaxkqKEIhI=)
                          2: 38352e3139332e37382e302f32342d3234203d3e203136353039.roa (hash: VxApuIDEnwTqQ6WGnUzRodDciZZkhdWtDDb5ZPWEs7g=)
                          3: 38352e3139332e37382e302f32342d3234203d3e203134363138.roa (hash: qeUBNqX0cdTuUUSXV2MePCJ8eS8Tr53k1jxkWSOVxMQ=)
                          4: 326131323a663463303a3a2f32392d3438203d3e20323130343334.roa (hash: HhN3ELLZe66TJ+fij1LtP0zX5dGcB65eWUhaxPnm+ok=)
                          5: C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl (hash: Db47iCZwY0K0EhuRU0PEg/g01krPbo4QhG3My62x2sQ=)
Validation:               OK
Signature path:           rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl
                          rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 06 May 2025 13:20:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6a:7d:b5:84:c3:76:87:cd:5e:f8:9b:fc:95:f5:41:b4:f1:52:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c8af62a54d23ce118fceb4a95e614c0b1df60351
        Validity
            Not Before: May  5 09:37:17 2025 GMT
            Not After : May  6 13:20:17 2025 GMT
        Subject: CN=CF70988C6AC91C0CC1E827319A32C384AED841FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:6d:b7:0d:f5:d0:dd:28:ed:c8:ea:77:8d:f0:
                    3f:c9:d0:8c:b0:cd:63:0a:9e:71:87:cb:5a:a3:30:
                    b9:ac:fb:e5:21:22:a9:d6:e1:d2:17:c8:4f:8d:94:
                    ff:48:b3:25:d3:99:1a:04:d4:dc:7a:cb:4e:b7:d7:
                    d4:fe:c5:7e:01:cc:46:2d:4b:a7:a4:5a:1d:28:fd:
                    0b:61:79:a6:c5:cf:3f:2f:55:e6:8d:aa:aa:a0:62:
                    7f:9f:75:df:45:49:f1:7c:66:b0:c2:6b:cf:0e:1c:
                    94:cb:16:ad:6a:1f:6e:8b:ec:d1:49:90:89:6e:2c:
                    5e:e7:54:3c:fe:be:e1:91:19:6e:e0:41:ff:58:ca:
                    70:cc:0c:87:20:0d:cd:a6:d3:6f:38:85:df:22:80:
                    91:44:e2:58:d1:35:df:ab:c0:42:c3:a1:1d:f9:f6:
                    5b:4c:e5:97:2b:6e:81:32:9e:74:52:82:80:58:fb:
                    23:fb:91:a5:97:82:f8:86:b4:d6:fe:5a:49:1c:cf:
                    b0:06:85:21:58:b6:3c:f5:f7:82:ab:12:60:82:87:
                    2e:da:b2:97:13:e9:5a:e2:0f:90:df:18:4a:17:ad:
                    d6:8d:62:60:48:96:32:5a:f3:2d:4f:66:ca:9f:dd:
                    73:18:f1:ca:d1:18:68:9c:c2:f0:dc:ed:15:53:40:
                    d4:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:70:98:8C:6A:C9:1C:0C:C1:E8:27:31:9A:32:C3:84:AE:D8:41:FD
            X509v3 Authority Key Identifier:
                keyid:C8:AF:62:A5:4D:23:CE:11:8F:CE:B4:A9:5E:61:4C:0B:1D:F6:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yK9ipU0jzhGPzrSpXmFMCx32A1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/37/C8AF62A54D23CE118FCEB4A95E614C0B1DF60351.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:56:af:cc:1f:0a:52:2e:98:d8:5e:df:7d:6c:57:fd:ee:79:
         57:41:ab:f5:0b:91:dd:1d:6f:2e:a1:44:ee:be:d9:6a:d6:5d:
         7c:70:b9:cb:d7:65:96:e9:b1:24:90:61:03:09:c3:0b:29:c4:
         b2:e0:3e:6e:9f:c4:c2:99:5d:99:fa:87:17:41:cf:85:ca:b7:
         b0:ca:01:93:3a:7c:78:cf:49:11:ff:66:fe:45:32:15:a8:9b:
         1d:17:34:85:c3:19:d5:60:4c:55:3b:6f:5c:af:46:92:e1:06:
         1b:b3:c1:57:f2:7b:0a:1d:9c:eb:83:a6:55:b9:ed:ac:63:14:
         66:14:e2:5a:5d:5e:4e:b1:33:f7:3b:69:8a:d7:f4:da:02:8e:
         bf:b9:64:70:8b:b7:62:6a:ab:23:9f:38:c6:e9:0c:53:98:e9:
         9a:cd:fb:31:0b:9c:5d:24:f8:9a:cc:ab:01:60:6b:17:cf:8a:
         85:8b:79:63:d9:a3:34:cb:c8:13:6a:b1:36:9b:89:db:4b:c7:
         4d:f2:58:d0:70:69:9f:09:44:d1:3c:f2:9a:8b:fb:48:ed:ea:
         83:12:a3:d2:a5:67:f9:2a:a5:2e:5d:6a:79:e5:64:03:f2:ae:
         de:c4:09:8b:03:50:8d:35:d4:8e:f1:cd:a9:f0:10:10:20:ad:
         c0:97:63:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 23:51:39 2025 by rpki-client