Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
File:                     ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft (raw, json)
Hash identifier:          xUJGEA/wKMjWuPsf6MosO8QCInHFDLjCDamSPicDhec=
Subject key identifier:   C2:F7:0F:17:4B:F4:C0:F5:25:10:D6:65:3D:4E:DF:B7:99:61:0A:67
Authority key identifier: 65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B
Certificate issuer:       /CN=65fa270083376517168285f97c2f0de43dc1763b
Certificate serial:       01903706E005E2734A18B6963BD2813EA5C1
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
Manifest number:          0828
Signing time:             Thu 20 Jun 2024 19:01:55 +0000
Manifest this update:     Thu 20 Jun 2024 19:01:55 +0000
Manifest next update:     Fri 21 Jun 2024 19:01:55 +0000
Files and hashes:         1: ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl (hash: mUE9Votl2uKd8yuuXbn7JxIO419px4tAqI8ze6lQmTo=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 21 Jun 2024 19:01:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:37:06:e0:05:e2:73:4a:18:b6:96:3b:d2:81:3e:a5:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65fa270083376517168285f97c2f0de43dc1763b
        Validity
            Not Before: Jun 20 19:01:55 2024 GMT
            Not After : Jun 21 19:01:55 2024 GMT
        Subject: CN=c2f70f174bf4c0f52510d6653d4edfb799610a67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7a:a3:ba:7e:6f:03:f6:5e:1a:40:a0:43:cf:
                    9f:8d:5b:4e:98:b4:b1:2c:d4:c3:cd:05:8f:bc:0b:
                    42:03:43:67:06:2d:b7:12:4c:17:f6:48:80:61:33:
                    18:28:15:85:ac:5b:07:40:ad:c1:58:9c:6a:d2:84:
                    e9:25:76:c6:20:55:f0:3d:f3:62:d7:ac:86:b5:67:
                    da:2d:b8:a0:ec:aa:a6:d6:87:37:b1:7f:0c:c9:4d:
                    6d:ea:48:78:4c:41:3b:40:23:bc:15:88:65:f0:e5:
                    4a:2b:9a:9b:1e:50:2a:3c:b8:7f:33:70:8e:3f:99:
                    50:66:f0:30:e9:e5:ee:d0:4e:d1:21:87:c8:1b:4a:
                    14:90:5e:cb:96:1b:3f:f1:78:dc:b8:96:54:4d:8b:
                    09:ed:4f:e8:ff:2e:1d:c7:56:37:4b:ba:3e:c8:cb:
                    05:38:29:f2:bc:f2:a1:9c:ff:4b:77:1f:1d:3a:90:
                    db:9e:3b:ad:cd:7a:30:42:bc:e8:c5:1b:f6:d6:ed:
                    16:25:40:f9:dc:e7:9b:f5:2f:a0:2f:ee:46:b1:84:
                    c7:56:f5:f5:4e:51:2d:a7:19:f7:10:99:f4:14:e9:
                    82:cb:15:0e:07:8c:46:2f:06:aa:81:d8:02:83:18:
                    29:42:f2:8e:b9:ed:f7:b8:65:7b:47:41:4d:c1:5d:
                    2d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F7:0F:17:4B:F4:C0:F5:25:10:D6:65:3D:4E:DF:B7:99:61:0A:67
            X509v3 Authority Key Identifier:
                keyid:65:FA:27:00:83:37:65:17:16:82:85:F9:7C:2F:0D:E4:3D:C1:76:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/f6ba7f-dc68-4074-86a0-d7834e5b14b4/1/ZfonAIM3ZRcWgoX5fC8N5D3Bdjs.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:d1:35:07:79:a3:3f:85:de:3c:04:0c:e5:ee:a3:91:c9:1a:
         3e:bd:67:dd:7d:c7:f5:c5:43:74:cb:9b:e3:3b:3d:69:94:db:
         dd:89:32:a6:a8:65:1c:69:49:45:82:ba:9f:7a:83:0d:40:ff:
         81:e0:36:15:d9:29:3c:f4:17:27:45:50:04:a0:ec:31:3e:ec:
         eb:16:ea:df:8b:2b:36:56:2f:bb:78:35:10:57:a1:a8:68:e5:
         64:dd:f2:34:05:f0:59:86:89:ce:2a:a1:a2:16:67:3a:ea:6c:
         b1:02:95:97:8b:1c:bb:3f:55:2e:41:34:5c:6f:20:6c:7f:2f:
         16:df:37:c0:55:de:15:74:99:0d:9a:ad:69:8b:fe:00:93:4c:
         04:16:c9:bf:27:6b:68:09:02:aa:c8:07:44:f3:ae:c1:b8:7e:
         a2:66:58:88:71:17:c0:47:b6:f3:d4:7e:0e:56:83:45:46:05:
         cf:98:40:f0:cd:85:ba:d9:90:06:bb:63:19:af:9c:a1:43:cf:
         b2:67:43:01:78:84:6c:b9:d2:6b:ca:37:61:66:9b:76:bc:75:
         b0:f6:96:bd:b7:f1:05:8d:22:7d:97:71:c9:cd:6f:4d:c5:54:
         83:2e:f9:5d:15:55:92:d5:40:f8:c3:29:51:71:d1:5e:5a:e8:
         3d:c0:ae:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 21 04:39:21 2024 by rpki-client on console-ams.rpki-client.org