Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
File:                     YT1eE3n-qdHQ9yVu0PyRg750_vs.mft (raw, json)
Hash identifier:          biLU06PIe8I7bURVYDYjS2TDbBicG+HLTmNJZQq0j7A=
Subject key identifier:   D1:A1:99:80:28:C8:C4:88:CF:CE:47:5A:39:10:77:0B:86:70:A8:7A
Authority key identifier: 61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB
Certificate issuer:       /CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
Certificate serial:       01905321D464FE17F39CD51C6050164A70FA
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
Manifest number:          10C0
Signing time:             Wed 26 Jun 2024 06:00:44 +0000
Manifest this update:     Wed 26 Jun 2024 06:00:44 +0000
Manifest next update:     Thu 27 Jun 2024 06:00:44 +0000
Files and hashes:         1: YT1eE3n-qdHQ9yVu0PyRg750_vs.crl (hash: lq3TluWzRq/rmCnh1pfovehWyfZ9v1MraPwauhaLAIs=)
                          2: sokPXsQjqakTtocG5TR2TfBlkkc.roa (hash: Bwd3W6JTpDkJhn7hNs5BBypXqW4HUDq5FUSwer4+uFc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Wed 26 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:53:21:d4:64:fe:17:f3:9c:d5:1c:60:50:16:4a:70:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=613d5e1379fea9d1d0f7256ed0fc9183be74fefb
        Validity
            Not Before: Jun 26 06:00:44 2024 GMT
            Not After : Jun 27 06:00:44 2024 GMT
        Subject: CN=d1a1998028c8c488cfce475a3910770b8670a87a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1e:70:40:ab:f9:84:c9:84:f6:0e:38:09:68:
                    89:55:9d:bd:1e:b3:f7:19:d9:19:42:0f:ee:8c:3d:
                    86:ea:90:8d:b6:a5:57:8c:e7:03:d2:6f:09:c0:04:
                    a2:c8:ea:dc:e1:ab:e3:30:3e:75:22:ab:5b:09:4a:
                    2f:a2:a6:64:6e:97:8a:5b:21:42:ad:1d:5a:85:ac:
                    28:b0:3a:1e:14:8f:4a:6a:3f:84:6f:5b:20:b9:79:
                    bb:85:30:09:87:67:a9:58:56:30:b5:da:ad:ce:73:
                    2a:0a:1d:1a:7f:86:b2:55:30:17:0f:38:e5:1c:97:
                    0e:c0:92:ac:73:1e:42:1c:bf:b2:68:f8:1b:e8:d7:
                    21:e3:79:9c:d5:25:87:d0:af:80:83:96:27:90:48:
                    46:b6:37:32:8a:4d:19:77:53:06:bf:ee:96:74:a3:
                    f5:41:4e:46:a3:1b:db:ae:5c:dc:82:62:f7:2f:00:
                    4d:fb:db:90:4d:cb:77:52:01:9e:c2:28:6d:c6:44:
                    59:72:61:89:fc:01:46:c7:62:70:56:20:18:23:a7:
                    12:a7:55:48:a2:2c:c8:c4:27:d5:96:d8:1a:85:46:
                    af:09:68:d8:f9:40:2c:0c:e9:f1:da:c2:04:6b:c6:
                    16:2d:fd:72:63:f7:d7:ac:4b:d4:c1:04:93:c7:0a:
                    f5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A1:99:80:28:C8:C4:88:CF:CE:47:5A:39:10:77:0B:86:70:A8:7A
            X509v3 Authority Key Identifier:
                keyid:61:3D:5E:13:79:FE:A9:D1:D0:F7:25:6E:D0:FC:91:83:BE:74:FE:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YT1eE3n-qdHQ9yVu0PyRg750_vs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/fd6070-9e0b-433a-8a75-7f73a4671a1e/1/YT1eE3n-qdHQ9yVu0PyRg750_vs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:df:ce:60:22:3e:e0:85:09:09:8b:5f:8f:75:3c:5f:ab:bf:
         75:08:cf:e9:a1:f1:a5:4e:bb:50:fc:97:c2:99:b7:cb:ed:55:
         2a:c0:a1:82:a8:8f:9b:69:f3:44:4c:e4:9c:08:b8:ac:b1:27:
         10:a0:74:16:fd:00:ad:6e:ef:b1:74:63:6d:76:bc:6b:0b:1a:
         61:c7:58:62:ee:9d:b7:a9:77:e0:6d:54:55:f8:1e:72:95:9c:
         84:9d:21:31:5f:ca:58:fe:37:d3:4a:51:a3:76:44:c9:f5:18:
         d9:be:9c:63:bf:ec:c4:59:80:2b:51:17:af:56:3b:43:cf:4d:
         15:c0:11:7d:cb:2c:8a:cc:54:8d:6f:ea:ff:78:a0:00:c8:de:
         9b:dd:eb:85:67:b2:1e:ee:cf:09:a2:3c:77:59:76:5d:36:11:
         cb:f0:ee:97:e3:31:da:4a:5e:47:ba:b5:2f:c9:c0:9e:48:a3:
         42:7d:22:67:a6:c4:7b:7f:e7:e6:69:a2:e7:ec:35:cc:a6:14:
         c7:60:b7:ec:34:47:08:cb:72:47:91:61:f9:59:46:c5:3f:25:
         64:d9:ee:71:10:e3:51:59:90:d8:86:6e:2e:57:c4:14:ea:31:
         a3:ce:68:fd:50:61:28:da:a6:60:cb:23:a0:b3:86:ee:12:53:
         17:1d:92:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 10:02:40 2024 by rpki-client on console-ams.rpki-client.org