Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
File:                     n68L-T_EOB__fnqoa0B2wDMkL_o.mft (raw, json)
Hash identifier:          B2+isQF89N/Xq3J/zQe6qSM6QkGZF49GJqtvYxyEuso=
Subject key identifier:   91:65:40:9E:B2:2B:55:2F:43:04:6D:76:A1:8C:CA:E5:33:32:B6:76
Authority key identifier: 9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA
Certificate issuer:       /CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
Certificate serial:       018F87B60C20763B0D0FBEDD51A7D769DF48
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
Manifest number:          117D
Signing time:             Fri 17 May 2024 18:00:05 +0000
Manifest this update:     Fri 17 May 2024 18:00:05 +0000
Manifest next update:     Sat 18 May 2024 18:00:05 +0000
Files and hashes:         1: 3OTTV74v7zK6wv8gewZrtPfRyjA.roa (hash: 3+j1cmZmXcXTG6FjhxUoaUNzrXJw30tvNlp1PJXuKo0=)
                          2: n68L-T_EOB__fnqoa0B2wDMkL_o.crl (hash: srastVtk6/6AU8VqTkUcdELqDBCQKijPIwuky4jBECw=)
                          3: qPE4-mcK7YoEVWMGOxpukG3pNM8.roa (hash: lXAUsDgq+B5n7obmBKm3z3LPEKLdxVSAGgB9RtDsnsQ=)
                          4: v6EUXv9TAt1eZakJ_8jbVUFetkA.roa (hash: FNC2qXXbIEXshAhWLi243F5JQJ085xwtgEoVXSLlYdw=)
                          5: xVEHhrExMV27MVUqK0MH7O3Wk9Q.roa (hash: LoltQhe4mGE6VSJ1O5SUq+ApjnW7RFROwXUjy+TQnmc=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 17:00:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:87:b6:0c:20:76:3b:0d:0f:be:dd:51:a7:d7:69:df:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9faf0bf93fc4381fff7e7aa86b4076c033242ffa
        Validity
            Not Before: May 17 18:00:05 2024 GMT
            Not After : May 18 18:00:05 2024 GMT
        Subject: CN=9165409eb22b552f43046d76a18ccae53332b676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:91:c9:db:b6:af:58:ef:29:7d:07:5a:eb:ff:
                    35:03:c4:e3:d1:70:16:65:ae:ee:3d:96:58:d6:a6:
                    13:ea:e1:5e:ec:cc:1c:4e:0c:09:f0:31:06:2b:83:
                    ea:8c:27:f3:c0:5d:c4:d3:81:88:2e:9b:85:f8:45:
                    cf:3d:c4:70:16:f6:84:42:e1:aa:ab:11:74:95:7e:
                    37:1a:2a:c1:83:61:52:00:48:54:3e:36:8d:70:33:
                    0c:94:d3:26:6a:63:ec:01:c8:56:7a:67:f9:eb:8f:
                    c5:d6:10:6c:7a:26:98:e9:ae:93:71:2f:e9:3d:0f:
                    2a:58:79:7d:01:d2:27:62:18:4d:bb:fe:bc:e3:8c:
                    3e:9e:9f:ca:0c:7b:17:40:8c:50:36:d3:9d:d8:44:
                    1d:e7:3a:d7:40:5a:d6:0d:d4:6d:0f:0d:62:62:3b:
                    0c:76:33:e6:83:fc:7a:81:09:54:cd:f9:d9:6e:08:
                    5f:72:3f:0b:a2:93:32:53:9b:c8:0f:e0:63:36:62:
                    f0:52:ee:66:bd:63:1e:1a:bf:5f:82:b4:8c:15:18:
                    f8:fb:e3:b7:67:96:2a:8d:eb:04:a7:1b:1d:bd:0a:
                    a5:e5:7e:1d:ff:c4:66:8b:95:13:a2:bf:52:8b:d9:
                    80:e1:0e:b9:eb:31:8d:cb:9f:04:f5:c7:f9:f3:5f:
                    2e:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:65:40:9E:B2:2B:55:2F:43:04:6D:76:A1:8C:CA:E5:33:32:B6:76
            X509v3 Authority Key Identifier:
                keyid:9F:AF:0B:F9:3F:C4:38:1F:FF:7E:7A:A8:6B:40:76:C0:33:24:2F:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n68L-T_EOB__fnqoa0B2wDMkL_o.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/a4ff33-b290-4307-afc8-f520a7d71ef5/1/n68L-T_EOB__fnqoa0B2wDMkL_o.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:33:0a:da:29:fd:90:e0:a9:b2:9e:bb:f1:8f:2d:d2:36:da:
         7e:5f:9b:ec:8b:ec:42:64:7f:3d:53:07:24:f6:20:c5:33:24:
         43:53:d8:0b:e3:cb:75:b0:e6:39:02:c2:de:40:18:1c:fc:7b:
         78:8e:0e:3f:89:72:27:df:79:75:42:12:3c:56:2e:9d:a2:11:
         c4:c3:70:dd:c9:a4:04:37:90:b6:c6:c7:1e:b0:c3:bd:04:82:
         39:1f:1d:bd:87:20:8b:4a:93:ee:9a:69:4f:c3:ca:a4:ab:cf:
         ee:e9:54:3a:b7:94:4f:d0:3b:55:82:b5:5f:3f:73:2e:2f:55:
         9f:fb:18:2b:b7:2a:d8:bd:49:4f:45:d4:48:90:06:fa:46:42:
         7c:a1:91:38:f0:4c:b7:64:7a:08:33:bc:19:04:6c:55:63:63:
         af:61:49:62:27:ee:cf:8c:a6:96:88:21:e0:ae:7d:25:0b:10:
         e4:58:e4:71:da:e2:68:5d:9f:7b:75:20:17:0b:b1:9e:56:73:
         d6:08:de:57:d3:7c:a0:23:55:a6:c4:cb:b6:cc:ff:bf:fc:b6:
         ed:0e:f8:8f:1d:8f:fe:04:57:30:95:4c:a0:e9:b0:81:54:38:
         e9:76:e3:ea:c1:23:db:89:0d:1b:1e:dd:f9:96:4a:68:74:be:
         42:25:3a:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 02:13:31 2024 by rpki-client on console-fra.rpki-client.org