Manifest

$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
File:                     656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json)
Hash identifier:          M0RjCCyKl4Ac476t+hfUOl9C0GiOkqvwQOSTSrJnD2g=
Subject key identifier:   02:52:7B:8D:4A:3D:5C:D5:66:3F:DD:86:76:EA:F6:A0:52:82:08:08
Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92
Certificate issuer:       /CN=656E4422ABF129649200EB019A815F2B12236E92
Certificate serial:       55624FD8421E7F18300C86A10A499EC8E3A05E1A
Authority info access:    rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
Subject info access:      rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
Manifest number:          ED
Signing time:             Mon 05 May 2025 01:45:00 +0000
Manifest this update:     Mon 05 May 2025 01:40:00 +0000
Manifest next update:     Tue 06 May 2025 04:26:00 +0000
Files and hashes:         1: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (hash: ZvFIRI5Y2rVZcFk84QTgqRybDF5ljbI4FjwVY0yfJVE=)
                          2: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: e+M1TJpCmhb3fj5XLbE5fviu8PReydr29bEUuFL6L2U=)
                          3: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=)
                          4: 34352e3133322e3139312e302f32342d3234203d3e2030.roa (hash: eOQL6KtS/fp/gIl2Pd8Tq6HVnPxMLD1miARzzAEJtqE=)
                          5: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=)

Validation:               OK
Signature path:           rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl
                          rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft
                          rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl
                          rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 09:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:62:4f:d8:42:1e:7f:18:30:0c:86:a1:0a:49:9e:c8:e3:a0:5e:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92
        Validity
            Not Before: May  5 01:40:00 2025 GMT
            Not After : May  6 04:26:00 2025 GMT
        Subject: CN=02527B8D4A3D5CD5663FDD8676EAF6A052820808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:2b:24:ee:93:92:61:05:b7:f7:4b:60:31:0c:
                    43:70:77:8b:b3:88:97:8b:24:ea:9a:16:ec:4d:4f:
                    8b:5a:87:42:10:d9:13:94:41:ef:71:7b:f7:96:bd:
                    7c:be:18:cb:f9:3d:67:a1:68:b6:cd:d5:00:36:8e:
                    55:a6:b2:0e:3f:ee:2b:c2:56:70:2e:fc:d9:a5:f6:
                    ea:c3:4a:1b:42:e9:51:01:76:cf:cb:1f:29:5a:b5:
                    2f:06:ce:50:c3:f8:ac:64:1f:6e:34:91:f9:8d:86:
                    b1:2a:8a:90:20:af:e5:4a:07:25:3f:1e:15:2c:ab:
                    ca:55:42:b7:d6:1d:e1:8d:7e:e1:95:2b:ec:2b:d0:
                    cd:de:b5:91:f7:c2:24:39:3a:8b:25:c9:a6:e6:c4:
                    d7:2d:49:59:52:88:86:b1:56:e0:04:e3:16:50:de:
                    76:13:b2:d1:06:40:4a:ad:6e:72:d9:df:4a:46:01:
                    2c:84:a1:a3:7e:29:c4:91:00:d5:d3:97:23:32:a1:
                    3d:61:6d:3a:76:83:ae:c9:a3:d2:39:c3:e0:6d:2d:
                    1b:38:55:8a:58:90:e4:16:72:68:36:44:36:a4:79:
                    30:3b:54:cc:41:79:df:54:04:3c:5a:e4:65:cf:72:
                    7a:84:92:cc:f0:35:80:76:9e:4a:ce:77:50:52:bb:
                    02:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:7B:8D:4A:3D:5C:D5:66:3F:DD:86:76:EA:F6:A0:52:82:08:08
            X509v3 Authority Key Identifier:
                keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:31:09:86:fb:b1:ff:05:4c:3c:b2:55:67:2e:8b:f4:be:c0:
         ae:80:98:52:90:15:f6:e1:42:f9:50:f2:e8:fb:0f:e8:7d:ec:
         14:61:04:2f:e1:80:10:e3:b7:48:2d:82:f7:38:e6:d7:a7:bb:
         d6:e5:a2:a5:5e:34:76:12:64:73:26:0c:30:cd:1e:8e:b7:6e:
         ea:0b:bb:0a:0a:65:2d:3b:97:08:03:67:7b:92:e9:b1:a4:fc:
         e3:fb:69:82:c1:e4:db:d8:73:2a:33:e9:21:37:f0:4b:c9:e2:
         1d:df:00:bd:63:15:fa:07:15:62:5d:4b:b5:f4:c9:46:18:3c:
         81:ad:6e:31:73:cd:1e:6e:e0:e2:58:63:98:fc:be:59:bb:64:
         bc:57:e6:07:3c:af:40:27:a7:22:db:5f:7c:da:c7:ca:36:42:
         f3:61:8a:59:ee:95:95:0d:3e:3c:8a:9a:23:6a:ea:eb:12:67:
         09:50:2e:40:7a:5f:b8:4f:b7:81:16:4f:b3:ff:79:9b:aa:e7:
         72:b4:f4:b6:bb:d7:bb:a8:41:c2:52:c2:da:d0:ed:58:63:87:
         24:cc:5d:dd:79:6f:f8:11:42:13:d1:09:b1:91:c7:ac:8a:7e:
         c2:4f:6f:78:10:c7:3e:68:60:6d:5a:70:16:90:09:ce:ec:af:
         89:cc:84:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:15:38 2025 by rpki-client on console.sobornost.net