Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
File:                     uveRJ-40o67pB5yOl5nEDw3I3KI.mft (raw, json)
Hash identifier:          MirGDX5Fu3rPnMvRGspudclQiHOerpnq9QxjfMdNYzE=
Subject key identifier:   40:6C:9D:F6:D3:55:8B:4D:C8:E9:AC:23:57:3C:96:67:C2:CD:85:06
Authority key identifier: BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2
Certificate issuer:       /CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
Certificate serial:       018F8748BE54567DA79FAD784FD7BFBEE827
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
Manifest number:          0590
Signing time:             Fri 17 May 2024 16:00:42 +0000
Manifest this update:     Fri 17 May 2024 16:00:42 +0000
Manifest next update:     Sat 18 May 2024 16:00:42 +0000
Files and hashes:         1: XvYEymfLHUwNH0iBPmqE88uvmiQ.roa (hash: y7RaL/I5pjFYhTCvSQ4B2HtjXTXwxD1wl5O0X1kgShk=)
                          2: uveRJ-40o67pB5yOl5nEDw3I3KI.crl (hash: AxPQr1Etc0jt30iWbjg9lrMrYDQxr+Td6lCJqVEG55U=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 16:00:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:48:be:54:56:7d:a7:9f:ad:78:4f:d7:bf:be:e8:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baf79127ee34a3aee9079c8e9799c40f0dc8dca2
        Validity
            Not Before: May 17 16:00:42 2024 GMT
            Not After : May 18 16:00:42 2024 GMT
        Subject: CN=406c9df6d3558b4dc8e9ac23573c9667c2cd8506
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a1:2a:8b:35:5c:e0:68:d5:35:54:d7:3b:92:
                    13:45:54:d5:6e:e0:42:fa:a9:5f:44:c3:07:c5:f5:
                    c6:05:20:90:28:4e:7e:1b:a0:3d:06:12:fd:b3:02:
                    75:0f:8c:a0:e0:83:e7:24:75:e5:b1:4d:81:62:ea:
                    d7:c0:eb:0c:17:66:ee:a8:37:b4:38:a1:b0:76:de:
                    4b:8c:1b:80:16:36:8e:ee:eb:0b:39:0c:27:81:d9:
                    87:c2:44:e1:37:76:75:c2:b9:b6:44:ed:9c:72:d6:
                    c5:a1:df:2c:db:d0:cb:e5:d6:e9:f4:31:8f:27:83:
                    07:ec:60:6e:72:01:10:97:8f:6a:26:85:d6:44:8a:
                    f1:60:57:78:c0:43:c4:f4:13:e5:1f:46:d6:20:d0:
                    5d:f4:e4:75:08:e6:8f:a4:3f:bb:71:f8:ca:1f:a5:
                    d8:e0:22:de:3d:78:aa:f2:0d:4f:0e:04:23:3f:be:
                    87:fb:b3:18:22:dc:64:60:ea:9d:86:2a:7b:74:6c:
                    8e:67:65:b0:42:d8:8e:39:3b:08:5b:1a:30:21:35:
                    50:9f:a9:96:2c:0b:da:e2:db:2d:4c:de:13:9f:f6:
                    7e:e3:78:8b:66:76:1c:16:15:3b:a9:a3:cb:45:e5:
                    76:aa:d7:21:4c:74:1d:51:0c:c7:14:44:1c:06:07:
                    e8:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:6C:9D:F6:D3:55:8B:4D:C8:E9:AC:23:57:3C:96:67:C2:CD:85:06
            X509v3 Authority Key Identifier:
                keyid:BA:F7:91:27:EE:34:A3:AE:E9:07:9C:8E:97:99:C4:0F:0D:C8:DC:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uveRJ-40o67pB5yOl5nEDw3I3KI.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/94/a5fc11-72b4-4f9d-aa45-a2a5a8d99db8/1/uveRJ-40o67pB5yOl5nEDw3I3KI.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:43:eb:20:40:c4:4f:8d:03:da:76:f5:0e:56:b1:ed:2e:d0:
         96:30:b6:14:f5:89:1b:26:85:ee:56:87:cb:a7:d4:a9:db:94:
         c4:02:18:e4:c9:79:4d:e0:87:a0:e3:de:93:28:ff:0d:48:71:
         af:d5:8c:4e:f7:3f:19:f1:3e:4e:4b:24:c8:54:3e:dc:07:71:
         01:8c:97:cc:7a:9a:b4:10:6e:7c:04:28:09:12:86:06:d2:11:
         27:e3:86:9e:93:73:2c:b8:50:83:04:0f:91:aa:45:c7:bc:07:
         cb:e2:07:60:e6:90:58:05:f9:95:36:49:2c:77:09:7c:54:03:
         14:e8:2b:40:99:87:54:6e:91:19:e1:04:4c:e3:1d:85:d6:37:
         f4:89:e9:56:d0:6f:fc:14:90:56:af:47:bc:9b:9e:ef:d8:49:
         75:ba:b6:5b:d8:d8:90:c3:c9:a1:84:f9:fc:9f:60:20:df:5b:
         4e:77:02:b8:81:bb:9e:f4:88:61:b3:b6:72:78:e3:bc:14:64:
         19:b8:21:9e:e5:80:54:67:1f:fe:06:c9:0a:87:1f:ed:d2:c0:
         3a:0c:78:5e:cb:56:f8:50:fd:31:43:3d:39:98:8f:db:f3:eb:
         29:31:c9:f7:ee:ee:ad:47:86:04:81:3a:28:bb:c5:67:6d:c4:
         3a:aa:49:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 00:08:14 2024 by rpki-client on console-ams.rpki-client.org