Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          MljOPaTsgMFRMTWjDFi4k3GNqb3MhaQnmGEH+HsWCuM=
Subject key identifier:   9A:AE:4D:C7:57:6D:C4:F5:7D:A1:27:63:D3:07:9D:53:57:09:D3:E5
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       01935764DDF7975B0C18768961B4637BE54D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          0EC3
Signing time:             Sat 23 Nov 2024 05:00:48 +0000
Manifest this update:     Sat 23 Nov 2024 05:00:48 +0000
Manifest next update:     Sun 24 Nov 2024 05:00:48 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: 2hHNKy5VxxoTb8NdF2zJUMqdO8qdOsuzkmT5aEFCFbE=)
                          2: MUr6gTjA6-BQivcCyJsFve_QPM0.roa (hash: njpCU5cvBrzF0OEFHFrLLIxfaIGCBlemkpM5Yd/dabY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 24 Nov 2024 05:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:93:57:64:dd:f7:97:5b:0c:18:76:89:61:b4:63:7b:e5:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: Nov 23 05:00:48 2024 GMT
            Not After : Nov 24 05:00:48 2024 GMT
        Subject: CN=9aae4dc7576dc4f57da12763d3079d535709d3e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:b3:13:36:30:a8:b6:ed:9e:64:5e:aa:cc:1e:
                    dd:19:b9:96:1b:4a:d1:e1:4a:10:b6:89:aa:b1:c9:
                    49:bb:a2:89:a8:0a:ca:4a:b0:8a:05:26:14:07:06:
                    0b:fa:53:a9:33:66:d8:11:f1:1e:3e:08:11:f3:cd:
                    2e:06:1c:fe:a9:51:79:00:2f:4f:ab:4c:98:65:16:
                    f8:e3:6b:b8:fc:e6:03:ca:f1:d5:73:35:69:bb:0b:
                    6a:59:f2:fb:99:34:37:38:38:45:b6:18:ef:9c:fe:
                    da:71:8c:32:12:32:ad:97:e7:2e:7f:3b:e3:ff:f3:
                    a2:a0:dd:d5:07:19:e8:79:27:cf:3b:90:08:aa:ba:
                    21:47:cc:54:64:c3:4c:32:bf:ff:c3:14:a7:f3:e9:
                    1d:b0:cd:d9:78:e6:01:38:1d:98:f6:2b:5a:40:5a:
                    1d:43:af:6b:5f:0c:b6:98:6c:5b:5c:2b:53:83:e5:
                    eb:47:75:5b:68:79:09:00:29:8b:53:43:de:e3:36:
                    eb:52:b3:6a:87:ba:a0:07:cf:9c:c7:86:d2:a6:2e:
                    33:6f:53:1d:73:37:7d:97:ca:4d:0d:e0:e2:15:38:
                    27:ac:53:7e:0a:fe:c3:52:95:9d:92:bd:4e:65:93:
                    47:84:b4:95:1d:80:1f:83:aa:a0:97:b7:56:4a:0a:
                    1f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:AE:4D:C7:57:6D:C4:F5:7D:A1:27:63:D3:07:9D:53:57:09:D3:E5
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:0e:19:cd:e2:49:db:32:14:26:a8:99:68:95:33:f4:fa:10:
         b0:bf:e8:49:1a:c3:81:5a:32:b5:44:06:01:cc:c5:79:c3:80:
         c6:dd:9b:16:93:9e:e1:22:4b:f0:9e:a0:b8:7e:dd:0b:53:72:
         d8:c9:04:82:dc:50:d0:e7:db:4a:8a:9c:af:b8:31:36:5a:7f:
         38:5b:fa:7b:d5:0c:98:d1:2d:c6:85:ba:f6:b5:8d:32:65:64:
         10:90:1b:f3:b7:bd:29:61:1e:36:39:30:ea:6e:56:bd:c6:39:
         65:91:9b:a8:a9:0f:a7:20:23:75:61:1b:c1:4f:10:d0:dd:cf:
         ed:49:c6:22:fa:4f:b1:d7:53:fc:91:ab:73:1e:d1:12:d2:ea:
         44:b7:d1:88:52:fb:db:65:cb:04:84:85:d4:14:a4:ea:fa:4b:
         b7:8e:f9:07:a9:8c:b6:6d:d5:71:01:14:8c:48:e1:62:5f:4a:
         01:a6:2d:44:96:c4:c3:f0:49:8c:2f:2e:c1:ca:31:09:6a:e6:
         41:44:41:1b:05:25:45:ec:ce:57:e7:96:ec:91:bd:1b:28:64:
         0d:79:2d:fb:ce:bc:0f:66:ed:02:9f:08:94:ed:ef:88:fd:b1:
         1c:57:2d:97:67:32:c5:c3:9c:a6:f4:f9:48:8e:21:08:02:4a:
         ab:7d:3a:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZNXZN33l1sMGHaJYbRje+VNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5MjExNDU4MjBmZWNlZWYzY2Y1NTI3MDMyNmM1ZTEyNDNm
MjQzNTUwHhcNMjQxMTIzMDUwMDQ4WhcNMjQxMTI0MDUwMDQ4WjAzMTEwLwYDVQQD
Eyg5YWFlNGRjNzU3NmRjNGY1N2RhMTI3NjNkMzA3OWQ1MzU3MDlkM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApLMTNjCotu2eZF6qzB7dGbmWG0rR
4UoQtomqsclJu6KJqArKSrCKBSYUBwYL+lOpM2bYEfEePggR880uBhz+qVF5AC9P
q0yYZRb442u4/OYDyvHVczVpuwtqWfL7mTQ3ODhFthjvnP7acYwyEjKtl+cufzvj
//OioN3VBxnoeSfPO5AIqrohR8xUZMNMMr//wxSn8+kdsM3ZeOYBOB2Y9itaQFod
Q69rXwy2mGxbXCtTg+XrR3VbaHkJACmLU0Pe4zbrUrNqh7qgB8+cx4bSpi4zb1Md
czd9l8pNDeDiFTgnrFN+Cv7DUpWdkr1OZZNHhLSVHYAfg6qgl7dWSgofNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJquTcdXbcT1faEnY9MHnVNXCdPlMB8GA1UdIwQY
MBaAFNkhFFgg/s7vPPVScDJsXhJD8kNVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQt
ZDgxNTJiNTE1N2Q4LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zMWE3ZDQtNDlhNC00ZDZmLThjOGQtZDgxNTJiNTE1N2Q4
LzEvMlNFVVdDRC16dTg4OVZKd01teGVFa1B5UTFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOg4ZzeJJ
2zIUJqiZaJUz9PoQsL/oSRrDgVoytUQGAczFecOAxt2bFpOe4SJL8J6guH7dC1Ny
2MkEgtxQ0OfbSoqcr7gxNlp/OFv6e9UMmNEtxoW69rWNMmVkEJAb87e9KWEeNjkw
6m5WvcY5ZZGbqKkPpyAjdWEbwU8Q0N3P7UnGIvpPsddT/JGrcx7REtLqRLfRiFL7
22XLBISF1BSk6vpLt475B6mMtm3VcQEUjEjhYl9KAaYtRJbEw/BJjC8uwcoxCWrm
QURBGwUlRezOV+eW7JG9GyhkDXkt+868D2btAp8IlO3viP2xHFctl2cyxcOcpvT5
SI4hCAJKq306Nw==
-----END CERTIFICATE-----
Generated at Sat Nov 23 09:55:26 2024 by rpki-client on console-fra.rpki-client.org