Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
File:                     Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft (raw, json)
Hash identifier:          uJK0+b8HStlRQh8k2WBko9eeMdBgTrtadAQXTZa/3bw=
Subject key identifier:   C2:F0:E7:05:E9:27:1D:98:66:11:EF:55:4C:40:D9:43:81:1D:7B:01
Authority key identifier: 51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32
Certificate issuer:       /CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
Certificate serial:       01901FD9B548EC68B474E21A123F2C712D5A
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
Manifest number:          0AF1
Signing time:             Sun 16 Jun 2024 07:01:19 +0000
Manifest this update:     Sun 16 Jun 2024 07:01:19 +0000
Manifest next update:     Mon 17 Jun 2024 07:01:19 +0000
Files and hashes:         1: Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl (hash: cHeG3hJXD6ttAzWEJ4Oc+z6kJjL2J1YOr/94QXaLw4w=)
                          2: ujjA7gAhSggI_fju13FkKMGr8ZQ.roa (hash: 5o16JCI3AjgrYKAqSTaLlOHXMvqC/4mSBxI6EUbGSq0=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1f:d9:b5:48:ec:68:b4:74:e2:1a:12:3f:2c:71:2d:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51ac7e33744c248f87de2dc63aabf19f6c84b032
        Validity
            Not Before: Jun 16 07:01:19 2024 GMT
            Not After : Jun 17 07:01:19 2024 GMT
        Subject: CN=c2f0e705e9271d986611ef554c40d943811d7b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:74:33:f0:91:bf:4e:d3:d1:1d:ce:a2:e4:37:
                    11:fe:68:41:b0:3b:1d:d5:84:22:03:fa:f7:e5:5e:
                    9d:cd:02:50:c4:3d:97:b1:e6:af:1f:33:77:87:1c:
                    f2:17:79:29:c6:46:4b:e0:08:80:cd:48:1a:65:45:
                    97:f3:aa:60:e6:0f:11:41:25:11:3e:89:4e:87:9a:
                    b7:32:73:9d:1a:6d:a1:bc:14:bd:be:e7:0e:de:c2:
                    13:b6:43:5d:f5:bf:f3:a5:fa:ca:0b:4a:f8:7e:4d:
                    7a:d1:cd:1e:d2:66:4c:c9:2c:e8:c9:db:28:b4:f4:
                    04:d8:07:de:61:34:68:df:be:e6:01:55:32:32:0e:
                    4e:cb:b1:3c:92:ec:a9:3d:d9:25:01:ff:f9:37:44:
                    a8:e6:67:26:ec:f5:70:b3:3a:1a:2f:77:73:03:98:
                    19:61:73:44:69:95:51:57:15:9f:3b:dc:cb:64:91:
                    90:26:dd:c8:aa:90:fa:bd:c0:f3:d1:eb:cd:de:31:
                    26:95:cb:c2:85:c9:d5:29:48:d8:b4:70:f4:72:86:
                    6a:e3:58:08:02:e1:5a:16:6c:5a:c5:70:cb:75:b6:
                    10:f0:69:b0:ef:29:0b:a6:2a:9b:1f:6d:38:1d:a6:
                    5a:ef:7a:06:4e:31:bd:7f:ce:89:55:59:01:3c:c9:
                    38:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:E7:05:E9:27:1D:98:66:11:EF:55:4C:40:D9:43:81:1D:7B:01
            X509v3 Authority Key Identifier:
                keyid:51:AC:7E:33:74:4C:24:8F:87:DE:2D:C6:3A:AB:F1:9F:6C:84:B0:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Uax-M3RMJI-H3i3GOqvxn2yEsDI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/df3c61-78ae-4d1c-a756-6348649774a2/1/Uax-M3RMJI-H3i3GOqvxn2yEsDI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:95:0a:7e:de:71:92:c0:e2:83:d3:f2:13:c6:fc:5f:f9:f9:
         e2:90:f2:59:8c:e2:98:ae:21:4c:d7:c3:7c:96:80:0e:66:20:
         44:bb:64:5b:58:d9:93:ab:44:df:a8:96:5c:e0:07:b9:6e:d2:
         54:cc:18:ca:d7:09:21:19:f3:c8:2a:e0:21:b6:d0:37:9b:c2:
         28:a4:a4:3e:bb:c2:cf:fe:ce:fd:8f:b5:03:b5:96:00:9b:82:
         5b:ea:44:2c:7e:63:5f:4d:fa:83:f5:4e:28:1a:01:28:7f:92:
         29:25:3c:29:86:2b:5f:49:9d:db:35:33:1c:a4:7c:d3:9e:7f:
         16:86:de:65:93:73:20:71:6b:6a:1d:a6:9a:3a:a7:db:af:c5:
         24:40:6e:65:1d:1c:3b:0e:f5:3d:bb:d0:0f:d8:88:93:71:ec:
         ec:bf:67:2e:ce:4f:3e:ff:29:53:2b:06:22:2c:08:32:a7:e8:
         4d:66:14:16:b5:2e:f7:68:c7:24:da:78:21:25:70:6a:09:3c:
         c1:54:33:0e:24:b7:9e:15:30:4f:a0:d3:f4:c4:72:85:07:4c:
         ee:86:10:c6:cc:50:96:78:38:d2:36:f7:25:7e:e1:d4:9f:ed:
         c8:32:84:af:6c:36:67:a6:18:aa:84:ef:67:e5:04:de:46:e3:
         79:ea:1e:c7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAf2bVI7Gi0dOIaEj8scS1aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUxYWM3ZTMzNzQ0YzI0OGY4N2RlMmRjNjNhYWJmMTlmNmM4
NGIwMzIwHhcNMjQwNjE2MDcwMTE5WhcNMjQwNjE3MDcwMTE5WjAzMTEwLwYDVQQD
EyhjMmYwZTcwNWU5MjcxZDk4NjYxMWVmNTU0YzQwZDk0MzgxMWQ3YjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnQz8JG/TtPRHc6i5DcR/mhBsDsd
1YQiA/r35V6dzQJQxD2XseavHzN3hxzyF3kpxkZL4AiAzUgaZUWX86pg5g8RQSUR
PolOh5q3MnOdGm2hvBS9vucO3sITtkNd9b/zpfrKC0r4fk160c0e0mZMySzoydso
tPQE2AfeYTRo377mAVUyMg5Oy7E8kuypPdklAf/5N0So5mcm7PVwszoaL3dzA5gZ
YXNEaZVRVxWfO9zLZJGQJt3IqpD6vcDz0evN3jEmlcvChcnVKUjYtHD0coZq41gI
AuFaFmxaxXDLdbYQ8Gmw7ykLpiqbH204HaZa73oGTjG9f86JVVkBPMk4oQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMLw5wXpJx2YZhHvVUxA2UOBHXsBMB8GA1UdIwQY
MBaAFFGsfjN0TCSPh94txjqr8Z9shLAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYt
NjM0ODY0OTc3NGEyLzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZjNjNjEtNzhhZS00ZDFjLWE3NTYtNjM0ODY0OTc3NGEy
LzEvVWF4LU0zUk1KSS1IM2kzR09xdnhuMnlFc0RJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAipUKft5x
ksDig9PyE8b8X/n54pDyWYzimK4hTNfDfJaADmYgRLtkW1jZk6tE36iWXOAHuW7S
VMwYytcJIRnzyCrgIbbQN5vCKKSkPrvCz/7O/Y+1A7WWAJuCW+pELH5jX036g/VO
KBoBKH+SKSU8KYYrX0md2zUzHKR8055/FobeZZNzIHFrah2mmjqn26/FJEBuZR0c
Ow71PbvQD9iIk3Hs7L9nLs5PPv8pUysGIiwIMqfoTWYUFrUu92jHJNp4ISVwagk8
wVQzDiS3nhUwT6DT9MRyhQdM7oYQxsxQlng40jb3JX7h1J/tyDKEr2w2Z6YYqoTv
Z+UE3kbjeeoexw==
-----END CERTIFICATE-----
Generated at Sun Jun 16 08:01:19 2024 by rpki-client on console-ams.rpki-client.org