Manifest

$ rpki-client -vvf krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
File:                     4ADD5466723084490EF491C619B8BC61A328A8B6.mft (raw, json)
Hash identifier:          lLZl2649LUF+F3Kx/iE/uirX0xHnPt+uVQalO1xGPrc=
Subject key identifier:   20:D5:0B:C4:23:EC:33:6E:D3:5A:3D:A9:D3:34:69:4C:60:7E:E4:80
Authority key identifier: 4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6
Certificate issuer:       /CN=4add5466723084490ef491c619b8bc61a328a8b6
Certificate serial:       2D85B5727CB83D8C8050A80E1BE63BB90025B848
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
Subject info access:      rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
Manifest number:          0273
Signing time:             Fri 22 Aug 2025 19:22:12 +0000
Manifest this update:     Fri 22 Aug 2025 19:17:12 +0000
Manifest next update:     Sat 23 Aug 2025 20:02:12 +0000
Files and hashes:         1: AS47272.asa (hash: m6MxM75pnFx8qRKJe2+EWSiAuBqUJOwcXektZ8iEiSo=)
                          2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: WqnPhejGIpkZ0xjXVvvod9Bjx2w1OURfMjc0Q0hE0uQ=)
                          3: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: +0GPXjQoS+N412w6ofV8eg2e5UX1asnUPxI6dYS84sA=)
                          4: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: k1L2Of8QfV2MIN/B39N63nTwZ7dvoxi+6OPXT00R6qo=)
                          5: 4ADD5466723084490EF491C619B8BC61A328A8B6.crl (hash: 3BlkbB461X01Kj7OuiwTxRJyG1hhvY4bsEGPHyh/cGs=)
                          6: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: 5FkiKEMEsvRMc75EhhhqzQGAWBAp/vUFv5o2r+QS74o=)
Validation:               OK
Signature path:           rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl
                          rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 23 Aug 2025 20:02:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:85:b5:72:7c:b8:3d:8c:80:50:a8:0e:1b:e6:3b:b9:00:25:b8:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4add5466723084490ef491c619b8bc61a328a8b6
        Validity
            Not Before: Aug 22 19:17:12 2025 GMT
            Not After : Aug 23 20:02:12 2025 GMT
        Subject: CN=20D50BC423EC336ED35A3DA9D334694C607EE480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:37:f7:72:78:d0:66:6a:d0:64:ee:62:c7:
                    cf:5d:32:64:02:66:10:e6:43:9c:f3:be:a4:4b:1f:
                    a6:ee:31:46:de:59:ed:1c:35:d6:e7:3c:a1:0f:3a:
                    fb:6e:9e:36:8c:af:80:ea:3a:f3:58:a4:7a:19:ad:
                    0d:8b:ab:99:de:31:6e:cb:02:f2:05:ef:47:ea:87:
                    8c:b0:57:4c:26:40:ef:05:31:16:c0:a5:03:ec:bf:
                    43:99:7a:35:6d:7e:e0:4f:27:8c:df:b2:90:b2:4f:
                    6f:e7:b0:c5:fe:6d:f9:a3:b6:27:dd:15:eb:60:cb:
                    6e:86:59:58:0b:5d:3d:20:18:0f:fb:a1:aa:15:e9:
                    ca:ca:b6:88:5a:27:f9:98:a3:b4:00:43:a0:73:49:
                    96:28:0c:3d:44:85:c1:ce:6d:19:fa:76:52:5a:7b:
                    29:bc:c2:bd:c6:14:dc:10:31:59:63:42:53:40:74:
                    85:49:2e:30:1f:85:d4:76:78:6f:90:8a:bf:1b:8e:
                    11:01:3d:0e:78:c3:e2:b8:2f:ba:06:ad:7b:eb:48:
                    e9:37:46:b1:8c:96:2d:df:7f:f5:4c:b1:30:1f:c9:
                    15:31:45:2f:bc:a2:5f:ae:fd:f4:fb:8f:52:c9:60:
                    b3:94:fe:5f:6e:e6:02:87:88:2b:89:9c:27:d6:0f:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D5:0B:C4:23:EC:33:6E:D3:5A:3D:A9:D3:34:69:4C:60:7E:E4:80
            X509v3 Authority Key Identifier:
                keyid:4A:DD:54:66:72:30:84:49:0E:F4:91:C6:19:B8:BC:61:A3:28:A8:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/St1UZnIwhEkO9JHGGbi8YaMoqLY.cer

            Subject Information Access:
                Signed Object - URI:rsync://krill.47272.net/repo/HYEHOST/0/4ADD5466723084490EF491C619B8BC61A328A8B6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:d6:8d:ca:cc:06:9f:06:0e:7d:5b:6d:37:3a:9f:8b:06:8e:
         a4:ac:65:1c:97:e4:52:34:5c:a3:23:1c:bd:9b:09:31:e4:0f:
         8a:38:2d:9e:44:7f:af:e1:f8:ad:12:0a:ce:e2:0a:c7:06:16:
         92:6f:c4:be:3f:88:93:38:5d:02:34:47:6f:e8:56:70:ec:ff:
         87:3f:aa:9d:a1:da:d8:65:6b:22:62:ba:fd:00:c0:92:ec:d3:
         9c:2a:1c:36:03:4a:ef:d7:69:9b:b2:d4:d8:f7:16:69:30:49:
         84:8a:0b:b6:90:be:df:a8:72:0a:00:34:58:49:ff:88:3b:35:
         4b:65:71:be:43:70:1e:57:2d:c8:7f:f8:d3:6d:fa:d8:44:d1:
         bb:cd:d2:63:c7:09:ac:f2:da:e2:e7:35:c6:30:12:d6:3a:a4:
         40:18:09:ae:07:1f:9a:10:24:16:3f:29:e8:88:a5:51:35:e0:
         a4:66:b7:ad:55:30:ed:1a:9a:bc:ea:54:03:cd:81:66:8b:4d:
         5a:00:57:cd:e5:e8:1d:ca:95:cb:d6:83:34:72:73:25:14:da:
         7d:cb:58:f9:de:c1:e9:2d:2e:a2:2b:5c:4b:71:2a:d7:8c:27:
         b9:c4:8c:2d:a2:e1:c3:4b:fd:12:d8:fc:6c:6b:72:7d:4a:77:
         db:58:5a:77
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:41:23 2025 by rpki-client