Manifest

$ rpki-client -vvf 0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft
File:                     52840422D0B72BA9927DE0FF73535FDF163521A4.mft (raw, json)
Hash identifier:          4c7CjCuxxnpR1yvLWEEysboSXZ1Nw4v4KJyhGUHBRbA=
Subject key identifier:   E9:51:95:A9:AF:A8:61:F8:27:B8:47:27:70:C9:3A:AE:41:F6:05:38
Authority key identifier: 52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4
Certificate issuer:       /CN=A91FFE3F0000/serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4
Certificate serial:       1C5217B6875DD25E69F8FF6177E81598619C0128
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer
Subject info access:      rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft
Manifest number:          0538
Signing time:             Sat 26 Apr 2025 11:52:10 +0000
Manifest this update:     Sat 26 Apr 2025 11:47:10 +0000
Manifest next update:     Sun 27 Apr 2025 15:34:10 +0000
Files and hashes:         1: 3130332e3230312e3132382e302f32322d3234203d3e203233393539.roa (hash: BwA+UvEt8rQgMpY6yzoRxeikeIjObyDwDrnQIWxLovQ=)
                          2: 3230322e352e3232302e302f32322d3234203d3e2034373835.roa (hash: uqSnngrGzTZiBUYlKaqToTPF7fFslTgxeJJgiCqsN6M=)
                          3: 3130332e3230312e3132382e302f32322d3234203d3e2034373835.roa (hash: 9Ca/STubA5mtIYiuFQ8WX7AScvQ7uQdxOZpX1VuOAEU=)
                          4: 52840422D0B72BA9927DE0FF73535FDF163521A4.crl (hash: Z4YdnE6ESf/SyAS1J0IFiq4+d9x+Pd8hOhQRb2SJsGg=)
                          5: 3130332e3230312e3132382e302f32322d3234203d3e2033323538.roa (hash: NzvxeOISCBxGqvrzZjBZu0oMo4rqIXiZ91cAneYGZFA=)
                          6: 323430333a616338303a3a2f33322d3438203d3e2034373835.roa (hash: KwOnEN3O7Vdr8ofqxfbKIB2eLGC3zXsf6Pwqq9XZOeE=)

Validation:               OK
Signature path:           rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl
                          rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Apr 2025 15:34:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:52:17:b6:87:5d:d2:5e:69:f8:ff:61:77:e8:15:98:61:9c:01:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FFE3F0000, serialNumber=52840422D0B72BA9927DE0FF73535FDF163521A4
        Validity
            Not Before: Apr 26 11:47:10 2025 GMT
            Not After : Apr 27 15:34:10 2025 GMT
        Subject: CN=E95195A9AFA861F827B8472770C93AAE41F60538
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:67:93:ae:76:5b:cf:46:05:65:e8:75:91:0b:
                    4b:4b:17:73:e1:20:d5:18:0e:82:3a:ca:a0:fa:03:
                    f9:5c:4d:1a:4e:93:68:3e:3b:15:de:52:fc:de:b4:
                    69:60:79:0e:01:83:3b:14:50:6f:fd:64:8e:d0:e8:
                    54:c9:be:c6:a8:08:c0:3e:d7:99:8d:d0:13:56:ab:
                    3c:0c:a9:5b:65:be:b0:a5:56:fc:7c:a4:55:5c:fc:
                    2b:a0:44:21:71:7c:f7:b8:3a:63:b1:fa:4c:df:6e:
                    94:91:2b:1c:70:31:92:c8:5f:87:c4:5c:b3:8b:25:
                    69:29:2d:28:d4:36:5b:1a:64:fd:45:b3:9a:7e:06:
                    98:c8:42:0c:3d:17:c8:54:f2:5a:95:87:ac:23:14:
                    10:76:6d:50:71:90:ef:73:0f:7b:11:df:fe:47:11:
                    d1:a7:ad:9b:41:3b:be:38:87:0b:02:a6:2d:43:01:
                    e1:ad:e1:5b:46:c5:a0:7b:21:44:c7:f9:ef:68:2b:
                    f5:af:e9:82:e2:40:16:f0:08:f8:64:21:93:37:64:
                    5b:ed:82:c0:64:e0:6c:92:05:ef:07:3e:07:87:60:
                    d0:fa:0e:ba:29:ac:53:e9:7b:38:29:88:63:12:96:
                    c4:32:93:81:9c:f2:79:82:6c:41:50:1e:9c:72:da:
                    02:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:51:95:A9:AF:A8:61:F8:27:B8:47:27:70:C9:3A:AE:41:F6:05:38
            X509v3 Authority Key Identifier:
                keyid:52:84:04:22:D0:B7:2B:A9:92:7D:E0:FF:73:53:5F:DF:16:35:21:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UoQEItC3K6mSfeD_c1Nf3xY1IaQ.cer

            Subject Information Access:
                Signed Object - URI:rsync://0.sb/repo/sb/39/52840422D0B72BA9927DE0FF73535FDF163521A4.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:99:5c:f9:72:ff:66:f8:b7:ce:69:af:ef:33:39:d9:47:cf:
         47:0d:94:56:d8:91:87:d8:4c:20:56:04:0e:df:be:2f:bf:07:
         63:42:0e:29:d5:d9:35:f7:03:c7:65:d9:34:9c:e0:46:0e:6e:
         3f:a3:2b:e5:4d:86:28:5e:5a:de:46:f5:e8:68:9e:f3:dc:3b:
         71:72:eb:fe:bb:6c:dd:0e:05:c8:96:8e:10:40:77:fe:8c:8b:
         e1:8a:5a:78:c6:e5:23:fb:2f:a4:e2:b2:68:bc:90:94:fd:94:
         34:7c:ee:d5:c3:85:f5:62:be:62:8e:00:45:38:74:2e:f9:52:
         cc:bd:df:c4:41:cc:a8:3c:89:e6:08:a3:97:4b:81:8f:4b:60:
         28:b2:73:88:65:85:df:90:be:63:6f:cd:1b:71:3f:25:c5:55:
         5e:f9:62:37:d1:ef:3d:c4:00:5f:6a:3d:1a:3a:14:43:3a:45:
         d8:cc:5c:4e:32:c1:b6:89:c9:68:f9:e6:bd:64:41:1b:5c:19:
         8c:b7:19:d2:cd:22:9f:a8:72:2b:42:6c:70:9f:a4:06:c7:d6:
         53:c4:80:8e:22:40:84:2c:95:59:1a:5a:c8:53:dc:af:e5:93:
         db:9c:25:41:13:c7:6c:eb:93:56:68:44:17:68:a4:0c:60:b6:
         ef:11:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 13:37:03 2025 by rpki-client on console.sobornost.net