Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
File:                     UAWWzmBz6O3txRBfgU7JcZG14dU.mft (raw, json)
Hash identifier:          9RFIo043AOBrYZGoMoEbso4ETVQ7MLn90GjNoRfznoU=
Subject key identifier:   D5:D2:F4:6A:37:FE:C2:B9:20:93:6B:E0:9E:1E:EF:D3:51:04:83:0C
Authority key identifier: 50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5
Certificate issuer:       /CN=500596ce6073e8ededc5105f814ec97191b5e1d5
Certificate serial:       018F87B63BA1E6883F2DD854FC3A775A18CF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
Manifest number:          0AA2
Signing time:             Fri 17 May 2024 18:00:17 +0000
Manifest this update:     Fri 17 May 2024 18:00:17 +0000
Manifest next update:     Sat 18 May 2024 18:00:17 +0000
Files and hashes:         1: IQqbZ50k4tqId4-Gt0FYolMv9tY.roa (hash: Z3OM+bmXzzVV5Notn1NpB4WZ/QqmqGEGuouF3XtYV0E=)
                          2: UAWWzmBz6O3txRBfgU7JcZG14dU.crl (hash: scyeXcEuumfcCQwJjuDTxT8uOH+ZHGV92XjDiRseZNM=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:3b:a1:e6:88:3f:2d:d8:54:fc:3a:77:5a:18:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500596ce6073e8ededc5105f814ec97191b5e1d5
        Validity
            Not Before: May 17 18:00:17 2024 GMT
            Not After : May 18 18:00:17 2024 GMT
        Subject: CN=d5d2f46a37fec2b920936be09e1eefd35104830c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a7:61:60:ae:25:60:99:24:b0:b8:91:6f:c7:
                    00:af:37:f8:d3:a8:41:a3:b1:8e:52:f5:de:c5:d4:
                    a4:df:98:93:ef:96:1e:01:a6:04:a9:f9:25:c2:d3:
                    f4:71:ba:7d:56:90:35:17:8f:cd:2d:f5:7f:44:01:
                    b2:72:58:d5:9a:e9:da:52:0c:64:73:98:02:09:db:
                    7b:87:15:26:be:50:a3:6c:2a:88:61:44:99:a2:09:
                    2f:1e:2b:af:fe:4e:84:d8:05:df:7c:a6:a7:c9:fe:
                    5d:1a:01:8f:f5:6e:37:46:eb:74:f7:c8:09:d2:d8:
                    e2:10:c7:e6:3a:8a:80:46:2f:88:81:26:11:17:54:
                    ca:23:a6:02:ea:5a:0a:62:eb:09:aa:b0:fe:d0:f9:
                    ba:bb:34:9d:94:4a:b2:f6:8f:70:d7:ab:ca:8b:5f:
                    d6:2c:d3:ae:d4:f8:69:6e:5a:33:8a:81:39:00:be:
                    b6:fe:ed:d5:0e:5c:cf:4f:d7:28:12:41:84:01:39:
                    e4:6d:55:9c:bc:37:77:af:41:2e:60:26:92:4b:0f:
                    74:be:85:69:a5:71:e7:6c:68:d3:3e:2a:4e:31:1c:
                    51:5e:d3:f8:58:4d:99:0c:ad:03:50:b1:62:ca:d8:
                    96:75:64:a6:99:65:1a:47:b1:8a:bb:7b:fc:12:8d:
                    ff:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D2:F4:6A:37:FE:C2:B9:20:93:6B:E0:9E:1E:EF:D3:51:04:83:0C
            X509v3 Authority Key Identifier:
                keyid:50:05:96:CE:60:73:E8:ED:ED:C5:10:5F:81:4E:C9:71:91:B5:E1:D5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UAWWzmBz6O3txRBfgU7JcZG14dU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/4a2604-66b6-4cb0-9d1e-1e167fa113b2/1/UAWWzmBz6O3txRBfgU7JcZG14dU.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:09:2b:bc:f0:9e:92:4f:37:4a:95:a5:30:a6:94:95:cb:05:
         43:d9:df:a8:61:15:d8:87:c2:a6:be:c8:7d:f0:70:c3:53:30:
         5d:fd:d6:b8:1e:0c:eb:74:92:7b:a5:d5:c2:14:52:db:b1:70:
         38:21:4c:b2:66:4a:01:6e:df:24:95:01:1e:e1:70:10:82:5c:
         16:c8:26:29:ad:3c:8e:a5:55:de:17:0f:47:7f:8d:aa:3d:df:
         f9:92:0e:52:86:ac:3d:36:0a:41:d6:20:38:ea:68:22:80:cc:
         6c:03:de:8c:75:1c:ea:68:da:0a:59:4d:3e:0f:ef:a1:db:2a:
         2d:8c:3d:fb:65:02:2b:04:e6:6e:00:3e:f3:64:9c:cc:a6:71:
         ce:ac:e7:3b:78:8d:95:b9:f4:11:dd:41:34:8d:2c:55:37:31:
         5f:eb:98:f9:cf:c2:77:8e:68:57:b4:a2:bc:a3:e5:fe:ef:13:
         29:56:9d:43:c9:01:0e:ef:62:86:a2:4e:7f:f3:d4:ac:79:c6:
         7a:d0:03:c7:a9:d3:db:f1:a5:36:57:23:32:50:a6:5e:6e:49:
         ba:69:2b:eb:09:d2:73:8e:7a:e9:93:01:0e:82:05:56:9d:b4:
         9a:60:e4:f7:2b:7f:ff:dc:42:4a:26:2c:f6:bb:32:29:c9:05:
         fe:21:31:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAY+Htjuh5og/LdhU/Dp3WhjPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwMDU5NmNlNjA3M2U4ZWRlZGM1MTA1ZjgxNGVjOTcxOTFi
NWUxZDUwHhcNMjQwNTE3MTgwMDE3WhcNMjQwNTE4MTgwMDE3WjAzMTEwLwYDVQQD
EyhkNWQyZjQ2YTM3ZmVjMmI5MjA5MzZiZTA5ZTFlZWZkMzUxMDQ4MzBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyKdhYK4lYJkksLiRb8cArzf406hB
o7GOUvXexdSk35iT75YeAaYEqfklwtP0cbp9VpA1F4/NLfV/RAGycljVmunaUgxk
c5gCCdt7hxUmvlCjbCqIYUSZogkvHiuv/k6E2AXffKanyf5dGgGP9W43Rut098gJ
0tjiEMfmOoqARi+IgSYRF1TKI6YC6loKYusJqrD+0Pm6uzSdlEqy9o9w16vKi1/W
LNOu1PhpblozioE5AL62/u3VDlzPT9coEkGEATnkbVWcvDd3r0EuYCaSSw90voVp
pXHnbGjTPipOMRxRXtP4WE2ZDK0DULFiytiWdWSmmWUaR7GKu3v8Eo3/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNXS9Go3/sK5IJNr4J4e79NRBIMMMB8GA1UdIwQY
MBaAFFAFls5gc+jt7cUQX4FOyXGRteHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUt
MWUxNjdmYTExM2IyLzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZi80YTI2MDQtNjZiNi00Y2IwLTlkMWUtMWUxNjdmYTExM2Iy
LzEvVUFXV3ptQno2TzN0eFJCZmdVN0pjWkcxNGRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlgkrvPCe
kk83SpWlMKaUlcsFQ9nfqGEV2IfCpr7IffBww1MwXf3WuB4M63SSe6XVwhRS27Fw
OCFMsmZKAW7fJJUBHuFwEIJcFsgmKa08jqVV3hcPR3+Nqj3f+ZIOUoasPTYKQdYg
OOpoIoDMbAPejHUc6mjaCllNPg/vodsqLYw9+2UCKwTmbgA+82SczKZxzqznO3iN
lbn0Ed1BNI0sVTcxX+uY+c/Cd45oV7SivKPl/u8TKVadQ8kBDu9ihqJOf/PUrHnG
etADx6nT2/GlNlcjMlCmXm5Jumkr6wnSc4566ZMBDoIFVp20mmDk9yt//9xCSiYs
9rsyKckF/iEx+g==
-----END CERTIFICATE-----
Generated at Sat May 18 01:58:13 2024 by rpki-client on console-fra.rpki-client.org