Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
File:                     2SEUWCD-zu889VJwMmxeEkPyQ1U.mft (raw, json)
Hash identifier:          okFlTIvhuH6xDWd+FgJXRCShh03wMbCTlpozfs8Szr8=
Subject key identifier:   D4:24:7C:FC:0B:80:06:4A:BF:1B:F4:FD:27:AF:B3:72:7C:C1:0A:B4
Authority key identifier: D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55
Certificate issuer:       /CN=d921145820feceef3cf55270326c5e1243f24355
Certificate serial:       018F4A587EA263A261DD12DB7DBAEDD62066
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
Manifest number:          0CAA
Signing time:             Sun 05 May 2024 20:01:04 +0000
Manifest this update:     Sun 05 May 2024 20:01:04 +0000
Manifest next update:     Mon 06 May 2024 20:01:04 +0000
Files and hashes:         1: 2SEUWCD-zu889VJwMmxeEkPyQ1U.crl (hash: fCuKvjTfBXMkkYPmoOaWtn9XBDBg42IxPoyLRmagouI=)
                          2: MUr6gTjA6-BQivcCyJsFve_QPM0.roa (hash: njpCU5cvBrzF0OEFHFrLLIxfaIGCBlemkpM5Yd/dabY=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 06 May 2024 17:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:4a:58:7e:a2:63:a2:61:dd:12:db:7d:ba:ed:d6:20:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d921145820feceef3cf55270326c5e1243f24355
        Validity
            Not Before: May  5 20:01:04 2024 GMT
            Not After : May  6 20:01:04 2024 GMT
        Subject: CN=d4247cfc0b80064abf1bf4fd27afb3727cc10ab4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7d:b9:30:e3:e0:5d:ad:4d:25:64:12:a5:46:
                    30:e1:7e:f7:b5:67:57:b5:b2:9b:91:f6:88:16:6a:
                    cb:aa:89:d7:34:d1:ee:bb:ec:00:fd:5f:47:55:b9:
                    b6:50:5b:7a:cb:e0:ef:d7:d5:68:9c:55:eb:41:7a:
                    2a:47:14:57:f5:63:25:ea:6a:66:3e:9e:38:f9:90:
                    d3:f7:1c:b9:d4:88:14:13:8b:26:6f:5d:96:5b:28:
                    20:e8:1a:ba:00:4e:59:f1:fb:ac:ca:17:96:80:07:
                    73:ed:68:44:cf:03:39:40:6d:8a:61:80:02:e8:b2:
                    2f:e4:40:4f:8b:00:84:49:6d:f5:9c:24:86:8d:5e:
                    64:46:b1:78:bc:6e:8e:3d:5e:ec:db:a3:27:ba:8d:
                    e9:27:64:f7:f5:b2:c0:f3:d7:45:2d:8d:14:1e:45:
                    f9:09:94:9e:06:53:19:db:d0:27:35:4e:e5:05:06:
                    2d:00:2a:c5:60:70:dd:81:90:81:55:8b:d3:12:d7:
                    14:b0:a4:fe:59:b3:c7:ba:09:ce:a5:44:7a:b9:66:
                    c4:17:88:70:f7:53:52:89:bf:2d:9e:de:4d:e3:fb:
                    6b:8b:e8:ee:ae:34:17:c6:ab:ea:d2:9f:a6:42:61:
                    a7:6e:01:8c:7d:fd:36:7f:8a:71:d2:0f:16:70:5e:
                    3c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:7C:FC:0B:80:06:4A:BF:1B:F4:FD:27:AF:B3:72:7C:C1:0A:B4
            X509v3 Authority Key Identifier:
                keyid:D9:21:14:58:20:FE:CE:EF:3C:F5:52:70:32:6C:5E:12:43:F2:43:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2SEUWCD-zu889VJwMmxeEkPyQ1U.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/33/31a7d4-49a4-4d6f-8c8d-d8152b5157d8/1/2SEUWCD-zu889VJwMmxeEkPyQ1U.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:6c:3f:d9:3e:1f:f6:c6:81:ef:9b:15:19:b7:bd:cd:a1:8f:
         b7:b2:e8:f4:ab:44:4a:22:7e:24:7f:64:3c:7c:7f:2d:89:62:
         e8:65:d5:30:85:0e:67:23:b0:19:c1:0c:67:39:12:d3:0a:ef:
         ba:58:d1:ce:65:5a:08:fa:71:e7:89:53:cb:2a:cc:12:c0:e8:
         c8:67:af:e2:60:ca:91:2c:49:29:6d:13:3e:b6:db:85:e5:49:
         6c:83:e0:83:1d:6d:c2:87:36:af:7f:08:8e:69:4a:43:8e:f9:
         9c:31:8c:f7:03:6a:51:2d:2d:df:3c:04:28:fc:43:d3:63:34:
         05:c9:5c:3b:57:91:85:22:c0:2d:6b:46:55:43:31:30:7a:16:
         c3:c1:91:7f:f2:a3:10:72:af:d0:22:ab:8c:af:68:de:7d:a8:
         db:3d:92:c8:e5:9c:c8:9e:48:84:72:e6:c5:ef:d1:48:d5:dc:
         a0:4b:69:80:24:8c:4a:04:0d:4b:6d:ff:f9:a3:fc:8a:cb:fd:
         3b:75:12:a3:a2:65:e2:1c:4e:97:cf:72:e1:d1:25:3c:bc:d3:
         16:26:99:6d:7c:66:7e:52:e3:81:ce:e0:03:f7:d8:97:c8:30:
         4c:57:e4:34:84:d3:a3:2a:34:52:f0:0b:0c:19:80:81:e4:aa:
         df:26:3c:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 5 21:23:19 2024 by rpki-client on console-ams.rpki-client.org