Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
File:                     IPX_B2cEUj_2vogrh-76gHsYiqk.mft (raw, json)
Hash identifier:          T2Bcy1O5eZahThT1pmLw3aZ4tlaMw1alwBBcABNh3gI=
Subject key identifier:   A1:EF:A5:07:F9:F4:8F:F3:D9:4B:37:B0:2A:BE:BA:18:7B:FF:2F:AC
Authority key identifier: 20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9
Certificate issuer:       /CN=20f5ff076704523ff6be882b87eefa807b188aa9
Certificate serial:       01935952E63FE4D2B6A576ADAC3AA7AAE9C2
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
Manifest number:          1373
Signing time:             Sat 23 Nov 2024 14:00:25 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:25 +0000
Manifest next update:     Sun 24 Nov 2024 14:00:25 +0000
Files and hashes:         1: IPX_B2cEUj_2vogrh-76gHsYiqk.crl (hash: Y+cahGt0mLpAVJrT3CFcWmJvP2odZwYKr6GpG0Y5A8w=)
                          2: Iay0-OGZzflPvqE_pvewZ_raarc.roa (hash: J3S8NzUaHlONkZBbS0j0AdVl3mAoME7+Co4C6QcTapY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 09:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:59:52:e6:3f:e4:d2:b6:a5:76:ad:ac:3a:a7:aa:e9:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20f5ff076704523ff6be882b87eefa807b188aa9
        Validity
            Not Before: Nov 23 14:00:25 2024 GMT
            Not After : Nov 24 14:00:25 2024 GMT
        Subject: CN=a1efa507f9f48ff3d94b37b02abeba187bff2fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:55:76:49:82:b8:39:f0:f3:f8:5a:97:b8:05:
                    1c:54:43:e2:06:2f:46:6d:59:ed:90:d8:79:20:18:
                    49:79:a8:4c:90:c1:95:61:20:67:7b:53:1a:40:bd:
                    63:da:a1:12:0e:ca:1e:4a:c1:ac:6d:4a:6c:92:9b:
                    03:eb:f3:34:28:a9:85:40:60:23:70:9c:f4:a0:fe:
                    95:88:14:5e:5d:7a:39:12:1c:b6:ff:c3:42:c9:8c:
                    d4:3d:d4:96:67:60:23:78:0c:2c:49:de:28:7b:d2:
                    47:c4:12:af:14:17:cf:ea:e7:50:04:52:97:ac:2b:
                    22:fd:68:4d:e1:2a:72:69:06:f2:bb:1e:4f:63:4d:
                    e0:b5:26:c8:bc:7e:19:ed:18:29:95:d3:67:1c:3a:
                    fd:b7:5d:97:17:51:a1:46:fd:89:5d:6b:45:83:eb:
                    b4:06:6c:1a:21:4e:4d:53:15:f5:16:2f:9f:1b:39:
                    5b:31:36:ea:dc:95:e4:04:fe:b8:0c:1b:b2:ea:ce:
                    16:41:0c:e1:cd:f5:18:c5:7b:c1:60:b7:6c:bc:0f:
                    c8:91:89:f2:f2:b0:7b:52:6e:8e:5a:44:6c:87:da:
                    06:85:2c:e0:57:66:5c:cd:0f:91:a9:b3:94:f0:78:
                    80:87:1e:3d:3a:1e:c8:4f:2f:27:80:3c:52:3e:c5:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:EF:A5:07:F9:F4:8F:F3:D9:4B:37:B0:2A:BE:BA:18:7B:FF:2F:AC
            X509v3 Authority Key Identifier:
                keyid:20:F5:FF:07:67:04:52:3F:F6:BE:88:2B:87:EE:FA:80:7B:18:8A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IPX_B2cEUj_2vogrh-76gHsYiqk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/20/727296-2ebc-4dfc-a547-f6a7b49f981a/1/IPX_B2cEUj_2vogrh-76gHsYiqk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:e7:5d:0a:99:e3:53:f8:79:a1:15:ce:16:dc:c2:43:bc:be:
         0c:57:52:2f:7f:4c:a4:e8:b0:ae:b9:b9:74:9e:16:8b:32:51:
         13:22:72:04:3b:97:ac:15:c8:81:ce:59:e7:26:45:ee:5f:dc:
         6f:fc:f5:06:70:f5:20:69:9d:94:bd:0f:71:3b:40:34:53:07:
         43:05:f3:b5:84:2d:96:2b:43:7f:dd:c1:9e:f2:2c:2c:a9:16:
         e6:8c:31:d9:d2:7a:8a:2a:18:84:42:68:84:ce:e6:73:6b:bc:
         e6:b4:f1:9a:ac:0d:0a:10:3f:53:8e:82:b7:0d:61:0c:d1:95:
         39:6e:d0:6c:b6:5c:86:ed:f3:8b:7c:57:5e:e3:07:53:bd:13:
         9d:36:32:52:a5:29:41:20:a9:a6:87:d5:8d:97:b9:3e:5e:fb:
         03:38:30:c8:ef:1e:85:48:18:b1:ae:fe:f3:8d:e2:ec:9f:47:
         58:66:37:22:4a:b1:58:3f:bc:ef:86:2b:e1:ec:d7:7b:b8:b7:
         29:dd:04:72:58:61:0d:39:7e:64:3d:41:4f:c4:b8:28:5f:2c:
         a7:e8:58:cf:f4:2e:ea:90:e8:59:10:3d:07:3d:8d:c1:e9:48:
         f5:ee:d3:c7:bb:09:ff:35:8b:5d:45:25:e8:9c:87:5b:2c:6e:
         fa:7d:68:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 17:10:32 2024 by rpki-client on console-ams.rpki-client.org