Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File:                     IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier:          SV/wWrLVNzVAYMQVUbCSRnHIe2Wc2SH/V3R1ZCWjUDc=
Subject key identifier:   05:56:89:EB:8A:8A:F0:4B:90:17:01:93:67:D7:2C:A6:D4:D9:C3:EE
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer:       /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial:       018F448D9B9E6E91E5DDAD35AB7CEEB03FC5
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number:          1156
Signing time:             Sat 04 May 2024 17:01:22 +0000
Manifest this update:     Sat 04 May 2024 17:01:22 +0000
Manifest next update:     Sun 05 May 2024 17:01:22 +0000
Files and hashes:         1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: ptANLOkEoYUfWRmBrDbggpJnp8gA+LFEYjMmKaZ4+Fo=)
                          2: Iay0-OGZzflPvqE_pvewZ_raarc.roa (hash: J3S8NzUaHlONkZBbS0j0AdVl3mAoME7+Co4C6QcTapY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 14:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:44:8d:9b:9e:6e:91:e5:dd:ad:35:ab:7c:ee:b0:3f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
        Validity
            Not Before: May  4 17:01:22 2024 GMT
            Not After : May  5 17:01:22 2024 GMT
        Subject: CN=055689eb8a8af04b9017019367d72ca6d4d9c3ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:2c:4f:d2:3c:0b:19:5d:e6:8d:d9:55:e7:
                    8c:09:d2:2f:91:de:69:2a:34:73:97:2b:3c:48:5b:
                    bb:fa:63:92:03:79:b2:8f:51:e1:56:45:c2:22:af:
                    af:3d:f8:ce:ab:5a:4c:f9:3f:64:7a:16:47:d4:0c:
                    da:19:92:78:45:d0:be:c1:23:a5:85:88:64:e9:f9:
                    86:02:3f:19:27:5e:1b:18:9f:dc:f3:f2:7d:79:bc:
                    f8:2b:cb:bc:74:d2:e6:a3:b6:d3:b3:4f:a8:7f:63:
                    61:07:f3:0e:ec:f0:b4:0f:0f:09:66:80:41:d3:5f:
                    07:69:cd:5c:6a:ad:c8:a7:93:93:6d:ff:1b:2e:32:
                    c0:dd:c8:74:d4:df:46:39:9a:d5:a8:eb:52:c0:16:
                    ce:27:9c:d2:3e:50:88:98:b4:d1:54:c2:5b:1a:5c:
                    60:d5:c1:7a:0c:ac:e4:19:6e:97:c8:c5:b7:42:28:
                    c5:e7:da:b4:ca:cb:a5:d7:50:12:9a:e8:a9:4d:cd:
                    d9:fd:95:9e:ba:91:dd:e3:87:85:d6:90:bc:2d:46:
                    ff:df:f9:d0:f1:ea:72:3c:f4:da:a2:5b:93:67:9a:
                    28:60:ab:07:b3:59:bb:87:30:33:27:5f:9b:5d:b2:
                    45:78:c3:19:8a:f3:d5:bb:dc:f0:80:8a:37:af:cd:
                    1f:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:56:89:EB:8A:8A:F0:4B:90:17:01:93:67:D7:2C:A6:D4:D9:C3:EE
            X509v3 Authority Key Identifier:
                keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:1c:44:d7:93:75:c7:6c:d7:92:30:28:7f:04:a2:62:c6:58:
         c6:83:dd:47:23:1f:5d:bc:f6:ba:85:da:68:c1:ec:2a:2d:65:
         7a:70:0b:ff:2a:00:35:45:88:0d:8e:c1:5f:48:d6:39:ea:6f:
         64:6c:2c:2a:bf:0b:31:53:5c:6c:18:55:11:5d:be:69:4f:37:
         ee:03:82:85:cc:04:6f:a6:6c:bd:6c:58:de:13:17:51:a7:24:
         41:08:9d:23:fe:9e:75:36:e4:e0:c0:2d:a9:0a:96:60:56:d9:
         67:4e:96:8d:03:0f:73:d4:a5:61:75:39:bf:45:03:16:aa:04:
         f5:da:77:61:da:0d:c5:7b:82:6e:29:f5:a2:5a:0f:8a:73:ce:
         72:66:32:d6:ec:83:bb:5f:a6:c2:1f:61:9b:b9:25:2e:5a:62:
         dc:0e:5f:05:12:47:11:55:bc:ab:87:f2:0c:3a:fe:84:50:d6:
         a3:40:dc:88:3e:3a:f4:a0:27:64:4a:ab:60:1e:07:38:a7:d5:
         4b:1f:f2:dd:06:3b:bd:62:03:d7:0d:83:02:e5:f2:28:7f:af:
         14:12:65:46:eb:a2:be:2c:f2:22:44:f2:b3:db:cf:99:16:d6:
         66:6d:89:2c:c9:f4:80:22:fd:09:ec:c8:9f:4b:fa:71:66:3c:
         4d:71:73:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 21:46:04 2024 by rpki-client on console-fra.rpki-client.org