Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
File:                     38JgNDfvdBF_oSJy7ELCUn2oAMc.mft (raw, json)
Hash identifier:          wvJHgoaSnw4fTBGKK/UZpn3WL+hvcuiS6DWH7nB2OAc=
Subject key identifier:   E4:D3:26:9C:4E:91:DD:99:55:6F:86:C1:E2:30:E1:AE:3A:6D:23:15
Authority key identifier: DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7
Certificate issuer:       /CN=dfc2603437ef74117fa12272ec42c2527da800c7
Certificate serial:       018F4B6CC9881ACB07BBB4039F1F22272838
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
Manifest number:          0A5D
Signing time:             Mon 06 May 2024 01:02:51 +0000
Manifest this update:     Mon 06 May 2024 01:02:51 +0000
Manifest next update:     Tue 07 May 2024 01:02:51 +0000
Files and hashes:         1: 38JgNDfvdBF_oSJy7ELCUn2oAMc.crl (hash: QeNLJJvuNWJrxqk6JFZq2ke7TXFtP7Qp+N4JWMau5Cg=)
                          2: Aqfvrgcim_AmEDfcJ0JlS1ksQEY.roa (hash: 2y1XorFN9cUWCPCuefdwl/sFl/1ALk0ULG79qAd78B4=)
                          3: R4YSHGhuzK_G5U8vSF_xzDsMtVI.roa (hash: AnhHOVIDxFyIXKMl6BMFlx7acWVvzuJU2zAHMzV5/bE=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 07 May 2024 01:02:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4b:6c:c9:88:1a:cb:07:bb:b4:03:9f:1f:22:27:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfc2603437ef74117fa12272ec42c2527da800c7
        Validity
            Not Before: May  6 01:02:51 2024 GMT
            Not After : May  7 01:02:51 2024 GMT
        Subject: CN=e4d3269c4e91dd99556f86c1e230e1ae3a6d2315
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:b8:4c:3c:67:66:ff:4a:20:0e:f4:b2:e9:
                    ab:7c:8a:9a:14:3a:a9:7c:85:df:4a:49:0a:c4:4d:
                    30:f8:f3:f5:40:bb:df:c4:c3:84:44:7f:4c:bd:88:
                    f4:06:3d:ba:eb:05:0c:81:96:99:e4:be:16:07:d6:
                    c6:c4:50:fb:90:81:d2:c6:18:f0:de:14:05:aa:50:
                    e2:e9:e5:f5:e3:3c:11:47:2b:a0:25:c8:c2:02:51:
                    0d:d5:b8:a7:d7:eb:9b:f0:a9:96:4e:6f:0b:1d:8b:
                    61:0d:1d:4c:2b:fd:de:8c:d8:0d:57:7a:bc:b1:71:
                    23:07:74:59:dc:08:f5:db:06:58:69:5c:4f:56:e4:
                    24:3e:63:0d:e9:ae:13:77:d4:cc:ee:1e:d3:51:89:
                    14:46:81:73:ef:48:ce:27:09:cf:40:49:31:b0:07:
                    80:b7:fa:7a:e3:d7:6b:8d:2d:92:76:f6:01:dd:94:
                    1f:88:a6:13:0c:bd:7b:80:4a:51:52:32:1b:9e:77:
                    a0:f7:1c:a3:ea:3c:33:7d:e1:a8:f3:fe:1d:a2:d1:
                    e7:e9:1f:ee:62:de:ea:62:b9:58:45:61:85:d7:7e:
                    12:73:ba:6b:ef:82:d4:be:53:d4:ab:b6:f3:bb:d6:
                    3c:c2:e1:10:e9:4f:cf:a2:63:76:b2:75:4a:47:70:
                    a3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:D3:26:9C:4E:91:DD:99:55:6F:86:C1:E2:30:E1:AE:3A:6D:23:15
            X509v3 Authority Key Identifier:
                keyid:DF:C2:60:34:37:EF:74:11:7F:A1:22:72:EC:42:C2:52:7D:A8:00:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/38JgNDfvdBF_oSJy7ELCUn2oAMc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/b55e40-d8be-48d9-bd55-c83007327449/1/38JgNDfvdBF_oSJy7ELCUn2oAMc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:0a:95:d7:30:14:08:c9:6a:6b:23:ef:4e:db:11:b2:05:
         f6:ce:f5:0e:7f:cd:6a:1b:56:65:ef:83:c0:a3:6f:21:8c:3f:
         4b:4f:87:a1:d6:9d:df:9e:f4:8d:1f:37:c6:d7:a1:83:22:e2:
         80:5b:90:6a:d3:72:3d:99:90:87:1b:12:25:eb:4b:cd:b3:97:
         97:c3:31:35:6b:c0:db:45:a3:45:b4:fd:5c:e3:20:25:8a:58:
         47:06:e8:9c:2b:10:15:35:fe:9d:42:82:58:09:17:ff:6d:4a:
         3a:ba:af:19:82:7a:76:2b:39:25:a5:b5:6b:16:54:8a:53:b0:
         33:96:f7:11:1c:7f:73:41:27:11:43:92:c4:95:4e:c2:a4:19:
         7b:ff:a7:c7:a7:af:72:5f:9f:8b:af:8e:0e:b5:9d:ee:6b:a1:
         9d:ef:9e:d4:bd:4d:fa:5f:0b:61:7d:b3:50:fb:76:f3:b9:63:
         8c:96:70:c3:b0:14:8a:75:74:40:84:91:72:4e:4f:8e:a2:b7:
         fe:82:0e:f4:bd:99:d9:fc:ae:16:8d:67:4b:53:66:88:10:69:
         80:e2:5b:79:6f:bb:34:fa:08:0a:1d:15:1c:09:ee:35:f9:5c:
         59:5b:d3:90:f4:a1:a8:6a:9d:f7:77:c6:2e:af:9a:32:31:a9:
         1b:ff:f7:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 6 10:29:52 2024 by rpki-client on console-ams.rpki-client.org