Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
File:                     KLD_eZjKiFTOfEdaly7R1SpcYM0.mft (raw, json)
Hash identifier:          8+83lRQYyFzuDIvfVQS50MtixIz6iE7RvQuPAhp+hx0=
Subject key identifier:   9D:15:A5:FB:26:35:C9:6A:E0:95:62:5C:EA:62:05:DA:63:A4:46:49
Authority key identifier: 28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD
Certificate issuer:       /CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
Certificate serial:       018F67873EC6AF02977CE6912A10C65BD9AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
Manifest number:          0E71
Signing time:             Sat 11 May 2024 12:01:07 +0000
Manifest this update:     Sat 11 May 2024 12:01:07 +0000
Manifest next update:     Sun 12 May 2024 12:01:07 +0000
Files and hashes:         1: 2UGjFYmm9BDm33oRiBL6vojxtD4.roa (hash: bgaIVUqvRvEIqyg1rHE5kcVvel+mkhIbTkLOYbz9u2g=)
                          2: Dn4pmDyTEk71iTwWt1FslcoBmyE.roa (hash: Wrq9goq2ggGK0Jjks3kuzpCj/c4karWQ/wmp9x+/Cmo=)
                          3: H_wKMrZCfMNEFL4aLlkosGXk9nY.roa (hash: aMPUuo2J1ob4OE4vk7zBOjNMfuIxenAp+Y8PUcId388=)
                          4: KLD_eZjKiFTOfEdaly7R1SpcYM0.crl (hash: K0J3muu+L9eEpHK/QwEQA2K3aRcSiil6crRXLKp5wyo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 12 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:67:87:3e:c6:af:02:97:7c:e6:91:2a:10:c6:5b:d9:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28b0ff7998ca8854ce7c475a972ed1d52a5c60cd
        Validity
            Not Before: May 11 12:01:07 2024 GMT
            Not After : May 12 12:01:07 2024 GMT
        Subject: CN=9d15a5fb2635c96ae095625cea6205da63a44649
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2a:45:25:81:de:eb:5f:d1:c3:06:4e:e3:df:
                    15:1d:3b:74:ae:49:5d:5a:90:00:59:d0:bb:ea:62:
                    0c:96:4e:d7:9f:f8:60:e9:ca:2c:50:25:4a:20:62:
                    b7:e1:88:cd:1b:65:85:ae:a6:25:41:45:35:3b:93:
                    71:bb:c5:fc:7a:56:b0:fa:da:59:92:a9:ff:3e:37:
                    d0:03:6f:c6:6c:fa:f0:37:9f:06:2d:ef:85:4e:b6:
                    0e:da:b5:3e:81:d2:eb:97:f4:f5:86:bc:ce:e1:96:
                    41:35:9e:76:81:18:a9:75:97:95:34:7a:85:6b:18:
                    4b:d9:d3:46:2b:44:17:45:b1:2d:dc:5b:9f:d7:c1:
                    2b:69:88:49:95:53:b9:db:22:59:ab:28:0f:9e:34:
                    67:76:65:d7:13:24:01:34:f3:dd:d6:c7:3b:99:f3:
                    5c:8d:a7:02:12:14:aa:b3:94:98:2b:fa:f8:40:aa:
                    2f:47:26:89:65:1c:83:2f:d6:35:71:96:b0:88:18:
                    ba:18:4a:c4:b9:34:ba:49:03:fa:eb:eb:31:8c:6c:
                    99:f7:2d:8e:cb:da:ab:7e:00:aa:20:65:a1:84:32:
                    3a:0b:3f:86:f4:b1:78:4a:c2:5a:ab:af:64:0e:60:
                    2f:6d:a9:30:26:1a:69:70:70:26:03:46:b2:b7:d8:
                    16:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:15:A5:FB:26:35:C9:6A:E0:95:62:5C:EA:62:05:DA:63:A4:46:49
            X509v3 Authority Key Identifier:
                keyid:28:B0:FF:79:98:CA:88:54:CE:7C:47:5A:97:2E:D1:D5:2A:5C:60:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KLD_eZjKiFTOfEdaly7R1SpcYM0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/a0d674-87b6-4318-bed2-267547ea1e35/1/KLD_eZjKiFTOfEdaly7R1SpcYM0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:40:26:99:9e:cc:94:dc:df:fb:3d:fc:48:34:b5:6b:b7:00:
         2f:d4:21:78:17:38:75:26:a6:11:b7:64:dc:bc:16:73:72:a9:
         58:55:f2:f7:b0:db:16:41:65:13:4a:60:f0:91:13:0d:c1:bc:
         7a:75:be:bd:9c:c7:6c:28:01:a7:bf:ae:80:63:b6:16:b1:51:
         e0:1c:f9:b5:37:70:c3:30:74:bc:69:2f:0b:cd:59:52:e5:d2:
         18:57:43:b7:84:e5:01:cf:58:d8:11:79:3b:3e:a1:d9:58:a5:
         0a:dd:5f:bd:39:0f:f5:59:29:8e:1e:98:a4:5d:b0:54:9b:06:
         71:98:3a:f5:a4:1a:f2:73:5f:0e:62:b2:7c:71:ce:09:aa:a4:
         05:bf:7f:44:93:19:ad:56:e8:5d:ec:2a:c2:70:08:13:00:1c:
         d5:b9:a1:9b:b9:c0:d7:ec:b5:79:61:20:16:12:ba:d8:61:77:
         c7:89:c0:9b:07:66:c8:23:5a:67:92:6b:25:82:9d:4a:b8:dd:
         fa:8b:30:df:c0:a7:68:d4:3e:06:25:86:ee:1c:0d:83:af:a2:
         9c:08:ec:a2:5d:e5:b3:65:c2:e3:4d:99:d2:d8:cc:5e:eb:9f:
         ba:1c:8e:65:d6:80:30:de:a5:dd:33:8c:3d:e6:e3:ba:a1:54:
         dc:d3:5b:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY9nhz7GrwKXfOaRKhDGW9mqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI4YjBmZjc5OThjYTg4NTRjZTdjNDc1YTk3MmVkMWQ1MmE1
YzYwY2QwHhcNMjQwNTExMTIwMTA3WhcNMjQwNTEyMTIwMTA3WjAzMTEwLwYDVQQD
Eyg5ZDE1YTVmYjI2MzVjOTZhZTA5NTYyNWNlYTYyMDVkYTYzYTQ0NjQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnipFJYHe61/RwwZO498VHTt0rkld
WpAAWdC76mIMlk7Xn/hg6cosUCVKIGK34YjNG2WFrqYlQUU1O5Nxu8X8elaw+tpZ
kqn/PjfQA2/GbPrwN58GLe+FTrYO2rU+gdLrl/T1hrzO4ZZBNZ52gRipdZeVNHqF
axhL2dNGK0QXRbEt3Fuf18EraYhJlVO52yJZqygPnjRndmXXEyQBNPPd1sc7mfNc
jacCEhSqs5SYK/r4QKovRyaJZRyDL9Y1cZawiBi6GErEuTS6SQP66+sxjGyZ9y2O
y9qrfgCqIGWhhDI6Cz+G9LF4SsJaq69kDmAvbakwJhppcHAmA0ayt9gWvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ0VpfsmNclq4JViXOpiBdpjpEZJMB8GA1UdIwQY
MBaAFCiw/3mYyohUznxHWpcu0dUqXGDNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDIt
MjY3NTQ3ZWExZTM1LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9hMGQ2NzQtODdiNi00MzE4LWJlZDItMjY3NTQ3ZWExZTM1
LzEvS0xEX2VaaktpRlRPZkVkYWx5N1IxU3BjWU0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsEAmmZ7M
lNzf+z38SDS1a7cAL9QheBc4dSamEbdk3LwWc3KpWFXy97DbFkFlE0pg8JETDcG8
enW+vZzHbCgBp7+ugGO2FrFR4Bz5tTdwwzB0vGkvC81ZUuXSGFdDt4TlAc9Y2BF5
Oz6h2VilCt1fvTkP9Vkpjh6YpF2wVJsGcZg69aQa8nNfDmKyfHHOCaqkBb9/RJMZ
rVboXewqwnAIEwAc1bmhm7nA1+y1eWEgFhK62GF3x4nAmwdmyCNaZ5JrJYKdSrjd
+osw38CnaNQ+BiWG7hwNg6+inAjsol3ls2XC402Z0tjMXuufuhyOZdaAMN6l3TOM
PebjuqFU3NNb0Q==
-----END CERTIFICATE-----
Generated at Sat May 11 16:19:18 2024 by rpki-client on console-fra.rpki-client.org