Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
File:                     38Cx3w570ABF6-EDAsMg_726BxY.mft (raw, json)
Hash identifier:          4ipOekV2VsDalx/CwMmFYNsegWSWC4sFeql3nvrNTb4=
Subject key identifier:   12:A5:19:70:BB:E7:D1:48:0E:31:44:78:0D:F8:CC:7A:43:1C:14:B5
Authority key identifier: DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16
Certificate issuer:       /CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
Certificate serial:       01901DB3B99B9375D26826C18520F19C08AA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
Manifest number:          11C4
Signing time:             Sat 15 Jun 2024 21:00:36 +0000
Manifest this update:     Sat 15 Jun 2024 21:00:36 +0000
Manifest next update:     Sun 16 Jun 2024 21:00:36 +0000
Files and hashes:         1: 38Cx3w570ABF6-EDAsMg_726BxY.crl (hash: D28qVgYw6cFralVkN1VzyaXJRRN8gycvh8p1Wy7wxn8=)
                          2: Qc09geRlgtdRLb19_SaAWsPiUOQ.roa (hash: 88uIXIIYEODonyARCb1NVvCOv5DUNHxCewUQbq0aI6E=)
                          3: m_yG7-i2APDwzJeaLQ_5thQMGIQ.roa (hash: oVeY1wyhWInb369mDxIPqM60CeNk8C5lKuPeT62qxwg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 21:00:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1d:b3:b9:9b:93:75:d2:68:26:c1:85:20:f1:9c:08:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc0b1df0e7bd00045ebe10302c320ffbdba0716
        Validity
            Not Before: Jun 15 21:00:36 2024 GMT
            Not After : Jun 16 21:00:36 2024 GMT
        Subject: CN=12a51970bbe7d1480e3144780df8cc7a431c14b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5d:71:39:81:e8:c5:f8:db:a5:72:74:56:88:
                    e2:f3:32:c3:9d:83:09:d4:aa:e4:7e:33:38:88:6e:
                    1f:a8:68:31:6c:2a:9d:14:39:13:50:95:b9:5e:48:
                    22:d9:f0:32:31:d1:70:8a:31:bb:d9:a2:9d:07:b0:
                    92:ed:e5:09:2c:36:b7:39:2d:82:88:e8:3c:2f:a3:
                    1c:9c:7c:a1:74:77:8e:55:ce:f3:d8:de:d3:f9:f2:
                    ce:32:c3:bd:57:05:3e:64:66:55:be:7f:7c:57:eb:
                    c1:80:58:3c:24:19:5e:b0:64:25:6e:13:85:cf:bd:
                    8a:4f:cf:57:db:a8:14:39:b8:73:20:be:9c:be:6b:
                    12:7b:ec:56:a7:3d:9b:f1:53:71:04:cc:9b:65:9f:
                    7a:cc:3e:9e:ab:c8:b5:f2:3e:04:db:bf:87:4c:14:
                    5a:9c:0f:dd:08:eb:9b:27:e4:73:c7:18:97:71:65:
                    9f:c9:36:2f:c4:68:c2:ea:2b:04:6a:4b:2d:7b:7d:
                    2b:18:d0:ba:9d:6a:ef:c1:b0:d4:c4:97:ad:7b:e6:
                    3e:4a:c5:e9:d5:4f:10:21:70:d0:36:db:2e:b7:74:
                    2e:d3:65:08:de:d8:8e:22:5c:53:3d:5d:8c:74:12:
                    aa:81:2d:0b:3b:9e:12:dd:d0:fd:ea:df:60:ac:a2:
                    86:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:A5:19:70:BB:E7:D1:48:0E:31:44:78:0D:F8:CC:7A:43:1C:14:B5
            X509v3 Authority Key Identifier:
                keyid:DF:C0:B1:DF:0E:7B:D0:00:45:EB:E1:03:02:C3:20:FF:BD:BA:07:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38Cx3w570ABF6-EDAsMg_726BxY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a3c775-39c5-4bbb-b33e-d929e2b76d68/1/38Cx3w570ABF6-EDAsMg_726BxY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:6e:20:4c:38:52:05:6c:c0:02:6c:32:ec:8d:54:98:73:03:
         eb:02:3b:be:3c:ff:28:72:78:1b:0d:27:85:0c:a2:70:9e:3e:
         24:4c:32:b6:0a:1b:cd:c7:78:e5:a3:96:4f:c4:1f:6d:ab:b5:
         93:51:68:00:a5:7b:93:20:39:82:ea:33:33:e0:29:20:9d:fb:
         92:15:d0:13:12:01:56:82:d7:49:e8:99:c7:24:4a:50:5a:49:
         59:d0:d4:90:05:40:c1:69:ff:99:c0:d6:16:28:33:2c:dd:88:
         fc:05:d3:28:5c:b7:24:fe:d7:da:69:aa:98:49:ed:fc:4b:10:
         5f:25:ed:6e:f7:55:65:12:49:6b:a3:9e:45:4e:ae:40:c3:e4:
         fc:a2:48:44:24:73:8a:39:30:d9:ce:4a:3c:98:53:69:25:66:
         64:2c:af:59:ed:ef:ff:5d:cf:46:50:1a:e5:39:29:6f:8b:0c:
         19:de:df:36:fa:a6:6d:56:a2:ce:20:da:5c:04:d5:a4:53:72:
         f4:72:36:a2:bd:08:42:ca:d1:3f:00:3e:5c:ec:3f:ed:25:68:
         d1:88:8f:6a:f0:d1:ad:30:cc:d4:b7:e8:bc:a8:3b:78:a1:45:
         a3:95:72:89:26:2f:85:c8:ed:08:a9:b7:73:3b:83:e2:13:d8:
         c4:e5:4a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 03:12:19 2024 by rpki-client on console-fra.rpki-client.org