Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File:                     ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier:          gPgahMy7pDGOsEN1dmj2kGEyAsvR1zTJQdbh2mB3R24=
Subject key identifier:   95:EE:47:FA:AC:B5:7D:DB:91:D7:DB:7F:68:C5:74:11:27:91:DA:D6
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer:       /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial:       01901BFE0AA8056216E16D0BF5A313A11310
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number:          081A
Signing time:             Sat 15 Jun 2024 13:02:31 +0000
Manifest this update:     Sat 15 Jun 2024 13:02:31 +0000
Manifest next update:     Sun 16 Jun 2024 13:02:31 +0000
Files and hashes:         1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: 8jCECe6l1dAAnH2EC3rxSfHPtbAwElVAhEAMmCEYwUw=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 05:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1b:fe:0a:a8:05:62:16:e1:6d:0b:f5:a3:13:a1:13:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
        Validity
            Not Before: Jun 15 13:02:31 2024 GMT
            Not After : Jun 16 13:02:31 2024 GMT
        Subject: CN=95ee47faacb57ddb91d7db7f68c574112791dad6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:f8:7b:26:7e:8f:b5:d8:03:72:cd:fb:79:
                    d0:33:85:be:8b:b9:78:2c:79:0a:bf:80:ad:d7:ac:
                    d4:cd:f5:d2:60:ae:84:33:02:a4:20:69:c2:d1:d0:
                    a6:06:b0:50:ca:22:f2:86:c4:02:6b:0f:7d:ad:d5:
                    7b:55:89:37:61:0f:26:49:ac:42:f7:1e:ef:03:8a:
                    92:de:4d:ef:da:66:5f:23:af:43:99:1c:e9:04:eb:
                    21:89:c3:5a:64:e0:7e:4b:44:42:10:db:84:cf:7f:
                    a2:2d:75:63:86:7a:0d:9b:4b:4c:17:3d:25:00:42:
                    0e:ae:31:47:db:3e:3b:39:48:85:53:fc:c8:7d:90:
                    08:92:32:6a:cc:16:75:69:ca:d3:d8:e0:d2:73:67:
                    2d:62:2e:8b:9e:21:eb:07:d9:cb:b5:be:20:84:15:
                    23:53:5c:8c:2c:11:db:b2:83:86:93:37:4e:ed:82:
                    d1:96:65:16:af:3b:e6:7a:69:73:f5:f3:68:b2:1a:
                    11:93:ae:bb:cd:ee:6d:96:b5:e6:d7:cc:0b:6b:ae:
                    67:2f:5e:08:fc:ab:61:47:ed:b3:27:4d:6e:81:21:
                    ad:3a:6d:d8:ad:ad:e7:cb:11:b1:80:27:74:f3:24:
                    e6:3c:ee:c7:50:2c:02:9f:f6:d0:5b:da:3e:54:49:
                    5b:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:EE:47:FA:AC:B5:7D:DB:91:D7:DB:7F:68:C5:74:11:27:91:DA:D6
            X509v3 Authority Key Identifier:
                keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         d2:58:0c:a0:1a:15:2b:31:ca:74:35:2d:d4:d9:31:1f:5c:bd:
         df:1f:97:8b:12:d9:d3:52:b5:33:58:08:fd:da:50:25:98:22:
         ae:d5:4f:82:f9:2c:a7:56:21:f7:a8:4e:b4:d2:73:30:e5:63:
         09:35:de:d4:b1:34:1c:9d:10:ec:7a:25:6b:f3:75:75:88:62:
         b8:3e:b7:8c:16:25:c8:b4:fe:99:c2:10:6c:dc:ec:5c:cd:98:
         5c:3f:8d:c9:99:52:0e:18:82:5d:e4:e4:3d:53:cd:d5:04:4b:
         f8:44:f1:df:62:50:45:03:e2:5e:af:39:83:95:7a:76:b1:30:
         eb:78:59:0a:de:23:08:47:79:e3:3b:f3:ed:65:33:f2:b3:61:
         45:6a:92:34:a3:5a:20:1a:ef:d1:5a:25:2c:61:ad:d5:a5:c3:
         61:f6:7c:6d:ee:e9:7c:06:62:ed:f1:b8:bc:d3:6d:87:8a:cc:
         94:eb:80:b4:17:bf:4e:28:e0:0b:5d:fd:75:bc:c8:de:79:8e:
         45:19:90:84:71:7c:3a:3f:26:fa:34:8d:ab:04:37:d1:16:6b:
         db:0c:a0:b6:6d:ed:57:87:30:47:63:4b:9d:9d:d6:5a:3e:43:
         4a:fb:c9:60:95:c5:a0:7a:2d:69:f2:67:6e:cc:b6:61:a0:46:
         8e:7f:ef:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZAb/gqoBWIW4W0L9aMToRMQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY1ZmEyNzAwODMzNzY1MTcxNjgyODVmOTdjMmYwZGU0M2Rj
MTc2M2IwHhcNMjQwNjE1MTMwMjMxWhcNMjQwNjE2MTMwMjMxWjAzMTEwLwYDVQQD
Eyg5NWVlNDdmYWFjYjU3ZGRiOTFkN2RiN2Y2OGM1NzQxMTI3OTFkYWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Yf4eyZ+j7XYA3LN+3nQM4W+i7l4
LHkKv4Ct16zUzfXSYK6EMwKkIGnC0dCmBrBQyiLyhsQCaw99rdV7VYk3YQ8mSaxC
9x7vA4qS3k3v2mZfI69DmRzpBOshicNaZOB+S0RCENuEz3+iLXVjhnoNm0tMFz0l
AEIOrjFH2z47OUiFU/zIfZAIkjJqzBZ1acrT2ODSc2ctYi6LniHrB9nLtb4ghBUj
U1yMLBHbsoOGkzdO7YLRlmUWrzvmemlz9fNoshoRk667ze5tlrXm18wLa65nL14I
/KthR+2zJ01ugSGtOm3Yra3nyxGxgCd08yTmPO7HUCwCn/bQW9o+VElbHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJXuR/qstX3bkdfbf2jFdBEnkdrWMB8GA1UdIwQY
MBaAFGX6JwCDN2UXFoKF+XwvDeQ9wXY7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAt
ZDc4MzRlNWIxNGI0LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy9mNmJhN2YtZGM2OC00MDc0LTg2YTAtZDc4MzRlNWIxNGI0
LzEvWmZvbkFJTTNaUmNXZ29YNWZDOE41RDNCZGpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA0lgMoBoV
KzHKdDUt1NkxH1y93x+XixLZ01K1M1gI/dpQJZgirtVPgvksp1Yh96hOtNJzMOVj
CTXe1LE0HJ0Q7Hola/N1dYhiuD63jBYlyLT+mcIQbNzsXM2YXD+NyZlSDhiCXeTk
PVPN1QRL+ETx32JQRQPiXq85g5V6drEw63hZCt4jCEd54zvz7WUz8rNhRWqSNKNa
IBrv0VolLGGt1aXDYfZ8be7pfAZi7fG4vNNth4rMlOuAtBe/TijgC139dbzI3nmO
RRmQhHF8Oj8m+jSNqwQ30RZr2wygtm3tV4cwR2NLnZ3WWj5DSvvJYJXFoHotafJn
bsy2YaBGjn/vew==
-----END CERTIFICATE-----
Generated at Sat Jun 15 14:40:34 2024 by rpki-client on console-fra.rpki-client.org