Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
File:                     VUNDfunFqMhPjTSD3F4PpLqJzD0.mft (raw, json)
Hash identifier:          h2fbLkGPWxoMLg1krRzj/pUQZeTYoxQtKOUZM97nDK4=
Subject key identifier:   3F:6A:D1:4A:75:79:29:5F:7F:9F:5F:C5:05:34:03:51:9F:88:33:D4
Authority key identifier: 55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D
Certificate issuer:       /CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
Certificate serial:       018F866C7585F4095FB092F2D69D4A87133E
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
Manifest number:          1177
Signing time:             Fri 17 May 2024 12:00:05 +0000
Manifest this update:     Fri 17 May 2024 12:00:05 +0000
Manifest next update:     Sat 18 May 2024 12:00:05 +0000
Files and hashes:         1: DoBOspS47tAWWoVyrzdkFKGZhBQ.roa (hash: 6Ll4h+7/jZyYNrKd5O1SokixDtBGBityeWJu60S8EwM=)
                          2: VUNDfunFqMhPjTSD3F4PpLqJzD0.crl (hash: GACyLQDjwmxKCAdQc4KrPwz+wg0azAztEKYIdmjFupk=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sat 18 May 2024 12:00:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8f:86:6c:75:85:f4:09:5f:b0:92:f2:d6:9d:4a:87:13:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5543437ee9c5a8c84f8d3483dc5e0fa4ba89cc3d
        Validity
            Not Before: May 17 12:00:05 2024 GMT
            Not After : May 18 12:00:05 2024 GMT
        Subject: CN=3f6ad14a7579295f7f9f5fc5053403519f8833d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:a0:63:03:49:60:69:b5:f5:8f:ea:ca:ab:6d:
                    88:25:51:62:c4:54:98:33:22:b2:d7:02:b2:e2:2d:
                    69:36:9d:f1:25:a2:64:10:ee:6f:22:1b:2e:12:e8:
                    89:6d:1b:ed:2d:fa:8a:bb:fd:85:bd:a2:1d:98:d1:
                    17:55:b8:19:2b:c7:74:c7:36:a5:d9:fe:5e:f6:3a:
                    92:32:0f:a2:99:68:b9:9a:76:0b:a5:f2:04:45:0d:
                    49:ef:7d:f4:8b:f9:f3:69:5a:5f:60:15:cb:ac:a1:
                    ca:40:c1:44:d8:4e:46:c0:53:c3:31:01:f8:b2:c0:
                    3b:86:ec:79:ed:46:61:5e:30:bb:e4:67:3f:5f:96:
                    17:9d:ff:43:46:ab:2a:ce:25:9d:2e:5d:8e:f3:b5:
                    54:c4:8c:d0:44:e5:ab:06:ae:0c:42:ee:b4:38:cf:
                    36:a2:e8:05:57:ed:b1:95:ec:3f:da:2b:d9:17:59:
                    46:cb:ba:cb:6d:e4:61:11:22:23:c4:a5:ac:d6:b4:
                    33:ae:43:4f:61:68:6d:fc:1f:52:f4:99:f7:7f:5f:
                    12:ed:a7:69:68:14:c3:da:13:1f:df:56:ee:12:34:
                    f7:da:b1:e8:db:81:4e:4f:fa:04:df:32:f7:18:7f:
                    58:a1:b7:ca:ae:53:03:e8:3f:05:0a:55:83:d8:04:
                    7a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:6A:D1:4A:75:79:29:5F:7F:9F:5F:C5:05:34:03:51:9F:88:33:D4
            X509v3 Authority Key Identifier:
                keyid:55:43:43:7E:E9:C5:A8:C8:4F:8D:34:83:DC:5E:0F:A4:BA:89:CC:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VUNDfunFqMhPjTSD3F4PpLqJzD0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0b2524-fc7b-4ecf-a813-4a5f92e5bde2/1/VUNDfunFqMhPjTSD3F4PpLqJzD0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:20:5a:fe:8b:30:a7:70:af:6e:91:c9:55:ff:cd:34:8a:
         b6:80:77:b5:86:cc:9f:ae:2a:1f:f3:eb:e9:6a:fe:45:97:8c:
         7f:0a:b7:ea:9c:23:51:f7:fd:6c:9d:45:2c:0a:c6:19:00:c8:
         83:83:90:c0:d3:98:3e:a8:f6:83:4f:75:cf:99:f4:a3:f4:cd:
         c7:57:54:cb:6b:aa:7c:92:5f:2d:78:d0:05:47:cc:da:f8:35:
         21:95:53:7b:88:12:03:13:0f:2f:fe:07:a6:a6:f8:77:72:cb:
         96:5a:85:30:25:23:5a:2b:13:18:71:c6:65:1d:9d:10:06:db:
         13:21:b6:f3:f5:68:33:0a:45:60:aa:74:a7:95:d4:a9:c1:b4:
         5e:ef:07:70:0a:36:1d:d7:01:6d:8a:aa:58:be:78:e7:d2:5a:
         09:32:f9:f1:c6:a2:9f:62:38:a6:68:64:27:2d:72:cf:8d:8b:
         a0:82:db:87:f8:af:77:42:17:22:b5:a4:17:4f:2b:57:bb:0e:
         20:a7:8a:95:cd:72:05:66:95:ed:87:78:44:3e:4a:05:ca:d1:
         22:cb:89:3b:a7:90:cc:3b:f8:6c:73:6b:06:9b:dd:a4:7b:f7:
         de:86:c2:f0:9d:4e:a6:cd:22:95:6e:4b:62:ab:87:11:9c:cf:
         ee:40:2a:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 18:11:24 2024 by rpki-client on console-ams.rpki-client.org