Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File:                     KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier:          qyuIOoi9acOr+/VptH9OAZWJniePajs7z3P7CSvvdPc=
Subject key identifier:   BC:43:A1:8C:5C:3A:23:22:97:B9:59:30:BB:E9:0D:A6:93:D3:71:C1
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer:       /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial:       018FB6B5446E20F445AF74491FDE0D98FE75
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number:          0E9A
Signing time:             Sun 26 May 2024 21:01:23 +0000
Manifest this update:     Sun 26 May 2024 21:01:23 +0000
Manifest next update:     Mon 27 May 2024 21:01:23 +0000
Files and hashes:         1: 2UGjFYmm9BDm33oRiBL6vojxtD4.roa (hash: bgaIVUqvRvEIqyg1rHE5kcVvel+mkhIbTkLOYbz9u2g=)
                          2: Dn4pmDyTEk71iTwWt1FslcoBmyE.roa (hash: Wrq9goq2ggGK0Jjks3kuzpCj/c4karWQ/wmp9x+/Cmo=)
                          3: H_wKMrZCfMNEFL4aLlkosGXk9nY.roa (hash: aMPUuo2J1ob4OE4vk7zBOjNMfuIxenAp+Y8PUcId388=)
                          4: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: U9cp22FetM/ugqKYZJZMg/wL0vwubKTj8Q0v82S5dAE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 27 May 2024 17:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:b6:b5:44:6e:20:f4:45:af:74:49:1f:de:0d:98:fe:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
        Validity
            Not Before: May 26 21:01:23 2024 GMT
            Not After : May 27 21:01:23 2024 GMT
        Subject: CN=bc43a18c5c3a232297b95930bbe90da693d371c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:56:1a:16:58:bb:85:9c:39:f7:1e:26:54:9c:
                    3f:f9:f9:84:2a:31:fb:52:a5:af:34:be:c0:a7:f0:
                    24:7d:ed:05:a3:89:de:44:13:35:f9:0b:8f:73:a4:
                    e7:8f:e2:47:3e:c9:57:ad:c0:7a:cf:73:f0:fe:d0:
                    68:63:e7:1e:7a:5a:7f:db:f1:28:f9:71:21:5c:3b:
                    e0:5c:08:e4:6b:b8:21:c1:17:da:98:49:27:5d:d8:
                    03:99:37:9c:35:37:9d:c8:36:35:55:59:e0:b5:5a:
                    92:59:f1:4c:0f:96:a3:52:a2:00:59:e9:f4:f4:27:
                    5f:90:e7:60:19:73:8f:23:ca:e7:45:a9:99:43:2c:
                    19:91:f6:74:05:17:b1:ba:0d:be:17:10:fa:24:4e:
                    f5:b2:d2:4e:79:b1:5d:59:37:7c:e9:f4:06:30:52:
                    33:f6:bc:32:b4:56:35:bb:ec:f4:ba:b8:67:e8:ea:
                    0c:01:d1:cd:a2:8d:6a:33:71:f7:f8:5c:a9:58:71:
                    9d:12:78:e3:21:bc:ac:e1:eb:4b:80:02:e5:32:37:
                    e4:1a:6e:61:be:c3:86:42:a2:9e:de:87:20:27:48:
                    7a:46:18:a1:bf:68:29:bd:f9:5e:16:93:9c:c7:33:
                    d6:3e:30:60:4a:05:e4:69:90:82:15:cb:fa:f9:af:
                    e2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:43:A1:8C:5C:3A:23:22:97:B9:59:30:BB:E9:0D:A6:93:D3:71:C1
            X509v3 Authority Key Identifier:
                keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:26:28:c9:6b:bb:b0:77:86:9f:0c:e1:2c:c7:f1:d8:17:e6:
         cb:c8:42:2a:cc:49:77:ff:94:d6:6c:51:f6:9b:d9:93:3e:ee:
         17:04:4c:e9:28:9d:95:a0:c0:24:e1:5e:f7:10:df:09:c6:66:
         69:c9:85:49:99:a9:58:c5:92:a7:0e:7b:43:b8:aa:04:3a:d3:
         82:aa:72:0e:55:d5:07:24:a2:ef:61:e8:ef:fb:74:cb:68:87:
         87:15:db:aa:74:d4:e1:cf:d1:c3:6a:45:47:3d:65:11:5a:84:
         55:0e:fa:33:1a:46:5d:9a:52:93:64:1b:ab:76:de:bb:4e:f8:
         13:32:c6:24:31:8f:5d:da:22:15:46:91:0a:6a:f6:a9:4c:52:
         7c:c9:b4:35:7c:2e:02:9a:83:6c:51:ed:a5:17:bf:73:8b:7d:
         06:da:76:31:ea:fe:c0:55:a5:b0:74:0d:48:54:5d:61:6e:ce:
         e0:7c:5c:74:93:c5:94:45:19:59:74:11:33:e8:b1:d1:ba:99:
         5f:f9:56:8e:b8:a3:fd:a4:2e:9b:2c:da:c3:8b:ec:0e:16:48:
         b1:b9:26:28:ad:d0:88:03:1d:26:34:20:9d:e2:7b:b2:af:80:
         9f:ac:da:cd:ec:f6:4b:a3:5a:12:04:99:bb:8e:e4:62:da:5d:
         79:cf:9a:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 22:06:38 2024 by rpki-client on console-fra.rpki-client.org