Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
File:                     uFIT35cylVbWCLFQ8DxO51-9mME.mft (raw, json)
Hash identifier:          2vFWLQAUgxft17Pqz0e9SUCAocRZm1O1JahgvZIN7Nc=
Subject key identifier:   E2:3A:12:0A:B8:9C:3D:80:3A:35:5B:D3:60:22:36:B8:A2:72:C8:93
Authority key identifier: B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1
Certificate issuer:       /CN=b85213df97329556d608b150f03c4ee75fbd98c1
Certificate serial:       01901E58FD21E6280EDEF5344A17A9E3CB35
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
Manifest number:          09D1
Signing time:             Sun 16 Jun 2024 00:01:06 +0000
Manifest this update:     Sun 16 Jun 2024 00:01:06 +0000
Manifest next update:     Mon 17 Jun 2024 00:01:06 +0000
Files and hashes:         1: DtONX9UVwFjc0qsps5U1KFAgnEo.roa (hash: Tg1Ho7qg84nk6VuUK0q/5xVMBE8ufhTzbTe6nyjUdys=)
                          2: q3vPnjAkoHvi-wIWgjLo7EH5H0w.roa (hash: YI1H5pft0lJBSSBkLYEMJvyBye36CSc7iHae2MU7/80=)
                          3: uFIT35cylVbWCLFQ8DxO51-9mME.crl (hash: IthZS8h2crGcdl9RWulUMYzTSpCiFTehdT209VSdCaU=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 16 Jun 2024 23:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:90:1e:58:fd:21:e6:28:0e:de:f5:34:4a:17:a9:e3:cb:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b85213df97329556d608b150f03c4ee75fbd98c1
        Validity
            Not Before: Jun 16 00:01:06 2024 GMT
            Not After : Jun 17 00:01:06 2024 GMT
        Subject: CN=e23a120ab89c3d803a355bd3602236b8a272c893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:94:c0:5b:0e:f3:2a:a4:e4:d6:df:07:71:b2:
                    38:e5:1e:13:20:42:b9:5b:c5:f7:69:71:13:3d:12:
                    66:ed:5c:90:5a:bf:59:c2:52:2f:e3:ab:9e:2a:1c:
                    dc:cc:7c:c9:f4:ba:05:ff:0b:52:ca:82:2a:01:9c:
                    85:4e:b9:7a:5e:5e:6b:f1:d7:1b:ab:5c:7b:bb:91:
                    23:fb:5c:e8:89:5d:b0:de:37:e4:63:f2:0b:aa:80:
                    bb:e7:47:62:c1:a7:09:18:54:ee:f2:e1:e3:67:25:
                    10:ec:5b:54:73:35:4e:a7:79:2a:37:c7:56:68:fe:
                    df:c0:22:45:4e:b9:52:bc:b4:ca:91:0e:71:af:ac:
                    90:80:6a:a6:7b:b0:e3:69:13:ce:ef:5a:6e:98:34:
                    5a:db:b1:50:e4:01:50:10:82:18:9a:ef:2a:78:35:
                    0a:33:50:69:83:66:a6:37:a6:3c:5a:a0:c2:de:84:
                    1d:f8:0c:08:73:3d:83:ea:cc:64:76:72:f2:b4:8a:
                    06:42:f9:ae:dd:7c:6a:a6:a1:87:04:60:71:06:e9:
                    2e:1b:71:1d:5e:c6:85:11:1c:5b:4d:33:2b:7a:83:
                    0e:73:84:d0:a4:71:44:c0:fe:73:e7:8d:bb:1b:1b:
                    9e:f2:36:b4:29:4b:20:d8:96:2f:ad:a0:44:fd:31:
                    cd:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3A:12:0A:B8:9C:3D:80:3A:35:5B:D3:60:22:36:B8:A2:72:C8:93
            X509v3 Authority Key Identifier:
                keyid:B8:52:13:DF:97:32:95:56:D6:08:B1:50:F0:3C:4E:E7:5F:BD:98:C1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uFIT35cylVbWCLFQ8DxO51-9mME.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/82/dd8098-7fe0-422f-92e9-1fb1e9c86b53/1/uFIT35cylVbWCLFQ8DxO51-9mME.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         b1:71:f0:ce:ce:69:a2:ab:31:da:11:0a:79:20:ca:56:ef:77:
         56:62:bd:2e:86:58:41:99:d1:bf:19:c3:b3:18:8b:61:7c:f6:
         2b:ad:ce:5b:9d:16:28:c7:7f:bf:11:68:12:d5:46:d7:d5:3c:
         20:41:ac:e6:20:cb:69:03:ee:6e:06:68:fe:dd:32:00:0b:65:
         11:9a:04:8b:3b:db:0c:bc:58:7c:45:b5:a9:5a:da:6f:a0:3c:
         d9:db:60:dd:16:4e:5c:7a:17:c2:a5:4b:9f:55:81:e8:5b:c0:
         d6:a4:d5:9c:17:f7:3a:ae:7b:33:eb:cf:67:c7:98:f0:13:65:
         77:86:f9:73:7b:ee:92:fb:f1:6d:a7:d9:9a:4d:1a:94:95:9b:
         58:17:dc:fe:c8:73:68:c5:6e:6b:d0:e3:2e:7f:4d:06:95:14:
         ae:36:58:72:f5:08:b9:92:47:80:d3:94:90:6d:14:70:24:97:
         1a:e6:61:4c:96:7c:49:46:81:a2:1b:10:c0:f9:d8:54:8f:56:
         7f:a1:d8:aa:2a:f1:c5:31:6a:93:4a:9e:5e:0d:1a:f7:85:53:
         45:e6:16:0f:66:ea:f5:ca:57:fd:d7:da:5b:a9:f0:6f:14:4a:
         cf:9a:c1:3b:95:5c:c4:ef:29:32:0e:06:cd:ba:48:0e:3b:fb:
         f3:af:38:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 04:13:18 2024 by rpki-client on console-ams.rpki-client.org