Manifest

$ rpki-client -vvf rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
File:                     2D72E7D6FDABD303C499DB2904070A42E39AC887.mft (raw, json)
Hash identifier:          R19cNyAcxDBsuxe2UaepemgnV0D21vGouT9Fv/k3H5o=
Subject key identifier:   69:BD:7E:27:2B:38:D5:5B:1E:8F:D2:A0:AC:A0:6D:8F:C5:A8:44:09
Authority key identifier: 2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87
Certificate issuer:       /CN=2d72e7d6fdabd303c499db2904070a42e39ac887
Certificate serial:       33597AC6D775982565C28CB2C4D6839E7FEA4B7B
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer
Subject info access:      rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
Manifest number:          05
Signing time:             Sat 28 Jun 2025 06:36:58 +0000
Manifest this update:     Sat 28 Jun 2025 06:31:58 +0000
Manifest next update:     Sun 29 Jun 2025 07:53:58 +0000
Files and hashes:         1: AS214402.asa (hash: qQhFZqXDfQXvHD+i411hASjmgGZ0y2+qrmVMT4hjU7s=)
                          2: 2D72E7D6FDABD303C499DB2904070A42E39AC887.crl (hash: eaZzhHzjgo95/Y+vcwrdMIUwSGFMfzN8vUjAtxVPSKA=)
Validation:               OK
Signature path:           rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.crl
                          rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 29 Jun 2025 07:53:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:59:7a:c6:d7:75:98:25:65:c2:8c:b2:c4:d6:83:9e:7f:ea:4b:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d72e7d6fdabd303c499db2904070a42e39ac887
        Validity
            Not Before: Jun 28 06:31:58 2025 GMT
            Not After : Jun 29 07:53:58 2025 GMT
        Subject: CN=69BD7E272B38D55B1E8FD2A0ACA06D8FC5A84409
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:e5:f4:0a:61:7b:d2:5f:03:5f:04:a4:00:
                    96:44:6b:07:9b:17:f0:a2:24:f3:0d:29:4c:08:b7:
                    08:4a:16:3b:e6:4d:f0:4e:a7:82:c3:8e:c0:25:d8:
                    4b:87:98:76:9d:f3:96:6f:e8:10:dc:db:70:e3:b1:
                    6a:1d:14:60:3e:d2:06:d2:84:e7:a2:d7:32:46:65:
                    a4:a0:5d:e4:2f:9b:51:60:78:44:19:e5:dd:08:d7:
                    ea:ed:61:df:7d:a9:99:cf:a6:7d:1d:ca:5e:49:c9:
                    8f:34:f9:27:35:e2:e3:f9:55:d9:05:34:34:27:6a:
                    af:e2:9e:97:97:6d:57:5d:b4:33:85:9b:44:6b:07:
                    3e:2a:58:92:08:12:63:99:37:86:50:f2:85:8f:e2:
                    da:cb:3b:fe:3c:6a:5a:74:0b:22:a3:fe:55:b6:89:
                    0a:3f:4e:88:e7:71:c9:4a:b8:35:b2:fb:e6:3b:d5:
                    f1:e0:3b:4e:a3:b3:8a:bf:c5:25:fb:1a:ae:b5:2f:
                    43:5d:c5:1f:64:d7:a4:30:e9:1d:6e:79:88:c4:81:
                    02:92:83:ba:fd:88:23:f2:e0:ee:25:ed:e2:59:2f:
                    a8:73:60:c5:15:3d:8b:10:67:66:cd:d7:d9:ce:92:
                    2a:e8:c7:3a:e2:0a:f3:73:d7:c9:6b:fe:b6:b0:88:
                    be:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:BD:7E:27:2B:38:D5:5B:1E:8F:D2:A0:AC:A0:6D:8F:C5:A8:44:09
            X509v3 Authority Key Identifier:
                keyid:2D:72:E7:D6:FD:AB:D3:03:C4:99:DB:29:04:07:0A:42:E3:9A:C8:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LXLn1v2r0wPEmdspBAcKQuOayIc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.signalx.ro/repo/signalx-rpki/1/2D72E7D6FDABD303C499DB2904070A42E39AC887.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:32:4e:7b:7b:91:0b:27:9d:b8:f1:fe:fa:e5:c4:28:80:cf:
         27:8c:6a:31:50:8c:f2:8f:9e:84:70:9b:d0:cc:56:d5:06:53:
         24:8b:ae:30:a7:5f:3e:42:98:e2:24:7c:bb:12:d8:c6:b3:26:
         b9:aa:82:7a:f4:15:43:fa:e1:ac:3f:48:c7:84:bb:36:21:00:
         d3:c1:7e:7b:dd:1a:a9:a9:1a:d1:74:5d:9a:22:00:ea:e1:9d:
         cd:d0:df:e2:d5:f7:b8:e4:6f:b7:27:38:6d:ed:61:c5:f1:0b:
         38:b1:c2:89:42:9f:65:c4:92:c7:9d:77:2b:c2:42:6e:a9:19:
         45:e2:9a:31:0c:19:94:2b:72:d1:c1:70:7b:c9:77:3a:29:fe:
         d0:89:8d:32:50:a6:51:31:4c:11:19:d7:03:aa:11:0a:b0:90:
         71:c1:1c:d9:0f:2c:69:61:a4:a7:a7:d9:50:a2:c1:c3:cf:a6:
         23:02:40:e9:07:a9:78:4f:93:6b:6c:05:5d:84:88:c5:96:7b:
         36:22:b3:74:4e:a2:b1:69:82:04:3e:99:64:5a:12:b9:ec:e8:
         f9:bb:74:7f:35:00:ac:e7:5b:43:ce:6f:c5:86:16:35:07:ce:
         ae:3b:91:4f:29:34:fb:e3:9c:99:f7:b4:aa:c6:38:d7:c3:63:
         23:41:b2:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:48 2025 by rpki-client