Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
File:                     YbBXiaToJL6BA953DcJcWT7z_co.mft (raw, json)
Hash identifier:          uwV7dcxaWRp18HTeG5+d5LcjiyuNum6B/i0sh1z56Bk=
Subject key identifier:   98:8C:59:4B:B1:2B:9F:99:05:CD:43:DC:A7:54:10:64:B5:54:08:83
Authority key identifier: 61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA
Certificate issuer:       /CN=61b05789a4e824be8103de770dc25c593ef3fdca
Certificate serial:       019040B026E7FEA6B316B7B29E6ACDF16884
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
Manifest number:          0D85
Signing time:             Sat 22 Jun 2024 16:03:24 +0000
Manifest this update:     Sat 22 Jun 2024 16:03:24 +0000
Manifest next update:     Sun 23 Jun 2024 16:03:24 +0000
Files and hashes:         1: 4d7URlsPThpx94PAkh4Zmx5XDAs.roa (hash: nJlfuHBMRR+edrYrEC8KmpRmd+W9mcZnUoivhzhO7BY=)
                          2: YbBXiaToJL6BA953DcJcWT7z_co.crl (hash: juupkhQi05IBnMETwuERBfz2mGoxE7SfWevhP2jyUqo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 23 Jun 2024 16:03:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:40:b0:26:e7:fe:a6:b3:16:b7:b2:9e:6a:cd:f1:68:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61b05789a4e824be8103de770dc25c593ef3fdca
        Validity
            Not Before: Jun 22 16:03:24 2024 GMT
            Not After : Jun 23 16:03:24 2024 GMT
        Subject: CN=988c594bb12b9f9905cd43dca7541064b5540883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:26:a5:b6:b7:d3:b2:0c:52:64:50:f4:17:5c:
                    77:8b:43:3a:b1:1f:bc:97:a4:94:ca:68:19:b1:b1:
                    0b:55:88:bf:82:c8:3f:f6:c4:00:9b:67:a8:2f:c9:
                    8c:4d:4d:60:b3:03:99:a8:3e:c0:af:5d:a0:55:10:
                    ec:a2:21:e9:8a:25:61:ff:eb:40:d0:49:34:84:9e:
                    9f:52:a3:69:b5:c2:e3:e0:2a:9d:65:5e:5e:95:da:
                    16:5c:15:de:f8:2c:ef:3e:1c:2c:dd:30:f2:7f:7e:
                    38:14:6a:c2:39:d4:0b:9e:2a:22:92:3b:da:67:54:
                    2d:af:58:47:e5:ae:af:d6:d3:39:79:e6:36:3e:ae:
                    2f:57:0b:b4:a1:33:58:2d:c0:93:ca:26:68:f2:7e:
                    e9:31:16:bb:20:7b:d0:e8:9a:d3:5c:22:31:54:fa:
                    fe:4d:72:a9:0a:a4:60:7f:22:be:17:fd:68:21:ec:
                    f5:85:43:2d:06:1c:49:b5:c8:b1:4b:27:4e:cf:1d:
                    e8:f5:1e:63:2e:df:60:f0:7b:60:b3:cc:1f:5e:b0:
                    de:96:b6:98:5f:15:b4:1e:c5:2d:ad:ee:96:ed:28:
                    28:ab:ef:e6:e9:8a:1d:93:a0:75:eb:b5:c4:89:bc:
                    25:27:1b:f0:54:5a:aa:68:b4:51:eb:23:b7:85:f2:
                    ce:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8C:59:4B:B1:2B:9F:99:05:CD:43:DC:A7:54:10:64:B5:54:08:83
            X509v3 Authority Key Identifier:
                keyid:61:B0:57:89:A4:E8:24:BE:81:03:DE:77:0D:C2:5C:59:3E:F3:FD:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YbBXiaToJL6BA953DcJcWT7z_co.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7f2c07-cef5-42f4-8f32-8631fbf5c620/1/YbBXiaToJL6BA953DcJcWT7z_co.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:2d:c7:1a:c7:79:c6:e7:f5:a8:8a:fe:9d:45:5f:c0:f6:ce:
         8c:a4:4b:89:20:8b:bf:35:2b:ee:a0:12:f8:bc:6c:c1:28:b4:
         6b:b3:72:26:3a:76:f1:e2:2e:73:c7:06:e8:2e:21:cf:61:e6:
         70:de:ef:33:24:12:3f:0e:68:97:1a:41:cd:b0:23:73:a1:b1:
         60:72:68:7d:3c:20:ec:f8:ab:bd:49:35:35:50:3f:38:0a:fc:
         4e:92:f0:78:10:0f:d1:79:d3:77:74:d7:2e:a5:08:be:11:89:
         5a:34:58:d5:e4:4b:90:33:7e:3d:5d:d8:a8:c2:d0:73:70:de:
         26:ac:0f:88:8e:df:37:50:b8:36:14:d7:a2:80:56:4d:9a:65:
         fa:b0:3b:4b:44:27:42:8b:96:21:b5:c9:8b:58:da:8c:62:e0:
         0c:62:9f:f0:3e:72:86:e9:1b:00:a5:a5:10:cf:ab:0e:30:61:
         3a:9f:37:ab:6c:8f:19:a6:e5:3a:37:5b:78:a6:cf:16:a0:02:
         3f:da:2d:bf:2f:48:b8:8e:3e:9b:12:ea:79:2b:6c:21:b2:fb:
         39:1c:d7:ef:f3:ea:63:b2:85:06:2c:2a:71:e3:10:e2:d4:8d:
         4f:dd:99:66:af:67:73:7f:0a:63:bb:13:bc:0a:89:cd:0f:c5:
         05:0a:a1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 23 01:33:29 2024 by rpki-client on console-ams.rpki-client.org