Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
File:                     pg0SlAGyaTo41bQ3Pcdge_hbim4.mft (raw, json)
Hash identifier:          tdUQDNKj/jLajAkyNF6cwRVEu6YYcagON2FmZDxLfHM=
Subject key identifier:   B4:70:B1:06:E8:E2:AB:FB:0E:7C:9D:5E:C1:8D:82:6B:E6:FB:64:E1
Authority key identifier: A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E
Certificate issuer:       /CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
Certificate serial:       01906C05BED2B97E6E623111EE205156DF05
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
Manifest number:          10A5
Signing time:             Mon 01 Jul 2024 02:00:34 +0000
Manifest this update:     Mon 01 Jul 2024 02:00:34 +0000
Manifest next update:     Tue 02 Jul 2024 02:00:34 +0000
Files and hashes:         1: IgXkgnmYJlfuBHPF4JQu3E-mOS0.roa (hash: 6nI8LcNp527fV/fO/65m4tuXp1lvf0eXtsIwxnB9fNc=)
                          2: pg0SlAGyaTo41bQ3Pcdge_hbim4.crl (hash: RpmAgSoDG78vAduEp/941OkBrmdcBTQrsp9qtiJPLPU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 02 Jul 2024 02:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:6c:05:be:d2:b9:7e:6e:62:31:11:ee:20:51:56:df:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60d129401b2693a38d5b4373dc7607bf85b8a6e
        Validity
            Not Before: Jul  1 02:00:34 2024 GMT
            Not After : Jul  2 02:00:34 2024 GMT
        Subject: CN=b470b106e8e2abfb0e7c9d5ec18d826be6fb64e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:13:44:ef:13:9a:cf:81:9b:23:e5:68:3a:ce:
                    84:43:c7:68:53:a0:21:b3:12:84:20:e4:0e:fe:5a:
                    49:3b:e8:11:30:8f:cc:4d:6a:71:b2:9f:63:b7:e6:
                    88:a0:9c:55:64:8f:fe:32:30:95:fe:90:78:c7:10:
                    b2:98:c2:26:eb:c2:43:40:32:80:76:43:b6:71:16:
                    d7:ee:05:1b:d2:3b:a5:ac:cd:4d:ac:ae:0f:29:d9:
                    ab:64:f1:fb:80:46:23:b9:df:da:9e:5f:e9:01:c1:
                    7f:ee:44:96:cd:9e:34:c7:d3:93:6c:e7:f9:fb:c2:
                    ac:a4:b4:5c:88:43:79:1a:c7:85:15:7a:49:e3:7d:
                    b4:e4:2e:8c:fa:1a:a0:f9:89:20:ab:b2:b9:46:d0:
                    10:fe:3c:c7:51:c3:05:52:af:d4:af:75:b7:66:1b:
                    59:d8:cd:5f:e3:f2:9b:89:81:49:0c:04:1d:c2:1a:
                    fe:ad:d4:89:50:c9:6f:7f:74:48:50:2c:e8:de:07:
                    08:7e:9c:f1:89:a3:2e:ae:e7:75:f6:2e:1e:73:a5:
                    13:c7:cd:48:20:cd:a2:26:d6:89:61:68:f0:c4:d0:
                    df:4b:ea:4a:8a:36:1b:c4:72:d8:b5:ba:87:4f:f9:
                    13:7d:05:bb:c0:82:a4:94:38:e8:a3:08:27:7d:67:
                    54:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:70:B1:06:E8:E2:AB:FB:0E:7C:9D:5E:C1:8D:82:6B:E6:FB:64:E1
            X509v3 Authority Key Identifier:
                keyid:A6:0D:12:94:01:B2:69:3A:38:D5:B4:37:3D:C7:60:7B:F8:5B:8A:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pg0SlAGyaTo41bQ3Pcdge_hbim4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/45/3d11d8-fae0-4b97-afdf-9c2bbd8c9496/1/pg0SlAGyaTo41bQ3Pcdge_hbim4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5a:00:95:60:0f:e2:c7:27:d0:cf:85:42:f0:e6:f2:8e:8b:c5:
         c5:1e:91:94:7e:a6:97:68:11:1b:df:7e:ec:48:1e:8d:ae:38:
         2a:bc:3c:09:df:80:90:dc:51:66:27:7a:ae:ce:0a:cb:a9:af:
         b5:ec:4f:c9:19:ac:0a:0f:76:e0:90:84:a6:7d:71:9d:fa:19:
         85:a4:55:4e:7d:0b:ca:52:46:c5:68:39:59:5e:5e:a9:2d:72:
         54:d2:34:31:4a:84:2d:91:61:5a:5d:69:dc:13:1f:34:3a:ae:
         0f:0b:d4:2e:b2:ad:38:07:fc:04:69:3e:b2:ed:34:58:5a:ab:
         63:bd:ce:ed:bf:e8:41:01:b9:c7:61:6a:25:d4:52:6f:66:31:
         01:1d:62:3f:78:1b:9d:19:63:d5:11:24:a4:0e:4f:f7:f7:f2:
         29:31:26:a2:91:55:83:cd:a6:f7:08:3f:3d:eb:31:b9:49:0e:
         8a:de:fa:45:e7:b7:be:a1:4c:b4:2d:28:65:16:13:92:ff:a5:
         a0:af:1e:8a:d1:91:3d:3f:c9:81:f3:f8:41:d5:10:f7:6d:fe:
         6e:50:69:0d:4b:84:d9:ca:c2:80:f0:c8:9e:ad:74:17:f4:88:
         79:99:0d:69:25:a5:ab:fa:4e:8e:8e:d8:c5:01:7a:04:61:fb:
         c2:23:dc:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 1 10:33:53 2024 by rpki-client on console-ams.rpki-client.org