Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
File:                     taxpm1SgKHKkLwwJkmxHBuceMgM.mft (raw, json)
Hash identifier:          eEjEE1Ng+2YYYgs4Df9HRSOimZl6pvacejVtc1JQMiU=
Subject key identifier:   2D:C5:C6:A3:18:A9:2B:ED:88:08:09:97:6F:73:34:74:D3:8A:F4:1E
Authority key identifier: B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03
Certificate issuer:       /CN=b5ac699b54a02872a42f0c09926c4706e71e3203
Certificate serial:       0192EFF73C4CE87723A61B1C161380BCEA33
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
Manifest number:          01DA
Signing time:             Sun 03 Nov 2024 03:00:10 +0000
Manifest this update:     Sun 03 Nov 2024 03:00:10 +0000
Manifest next update:     Mon 04 Nov 2024 03:00:10 +0000
Files and hashes:         1: ibbuUi-ydV0Wq3Tqpbqp3wbmRBM.roa (hash: bXBcqFNyxgWuRhfNzzpOFAu1ixVD3ASEkhUnn0BzRRU=)
                          2: taxpm1SgKHKkLwwJkmxHBuceMgM.crl (hash: /0RojVOnMqs4XasO+Jt8bKfqIT/fDkcL9BN9j/YvNSg=)

Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 04 Nov 2024 03:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:92:ef:f7:3c:4c:e8:77:23:a6:1b:1c:16:13:80:bc:ea:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5ac699b54a02872a42f0c09926c4706e71e3203
        Validity
            Not Before: Nov  3 03:00:10 2024 GMT
            Not After : Nov  4 03:00:10 2024 GMT
        Subject: CN=2dc5c6a318a92bed880809976f733474d38af41e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:bf:d0:0b:e4:3d:22:0a:62:6b:0b:33:fb:96:
                    0e:29:ce:cf:21:ba:e4:cb:e0:23:7a:46:c5:db:2b:
                    f5:53:1c:51:a3:41:7e:fc:c5:22:ed:f3:e8:4c:1b:
                    4b:7e:60:85:fc:d0:ea:24:f9:b8:04:00:84:fa:34:
                    e4:db:28:b0:1f:97:c2:25:77:15:d8:7b:95:06:90:
                    f5:e9:49:6b:1a:72:2a:0d:ec:12:ad:b6:24:15:88:
                    d0:1b:76:17:cb:4b:9b:9f:01:c3:2c:74:f9:e0:95:
                    17:8d:6d:5e:b8:28:7b:cf:71:08:24:55:37:ec:12:
                    25:63:c2:c8:26:20:e3:94:84:8d:4c:31:28:7e:d7:
                    ab:1d:11:03:d2:f5:b8:68:db:c0:82:95:ef:fe:0f:
                    19:61:aa:c5:27:24:21:54:87:bf:58:55:86:45:c8:
                    66:4a:04:c4:2f:08:0c:08:2b:9c:ec:01:eb:2f:46:
                    9b:1f:ad:c7:ec:e5:16:c2:6b:ec:66:76:f1:e8:a6:
                    0e:a1:a3:26:d1:93:79:31:1e:77:e2:09:28:cb:f5:
                    12:48:45:db:35:89:e6:8d:0d:75:13:db:69:1b:fa:
                    2a:60:f1:19:ef:3d:f7:7a:b3:07:5d:5c:a2:a1:6a:
                    ca:25:ed:ac:48:c4:2d:33:58:2a:59:5d:5d:62:3a:
                    8d:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:C5:C6:A3:18:A9:2B:ED:88:08:09:97:6F:73:34:74:D3:8A:F4:1E
            X509v3 Authority Key Identifier:
                keyid:B5:AC:69:9B:54:A0:28:72:A4:2F:0C:09:92:6C:47:06:E7:1E:32:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/taxpm1SgKHKkLwwJkmxHBuceMgM.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/9b1f86-0f30-4bb9-8309-9837bc22c705/1/taxpm1SgKHKkLwwJkmxHBuceMgM.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:5a:3e:21:3f:5f:34:0f:29:86:e2:b5:01:02:7c:df:0f:2d:
         e6:e3:43:da:b6:79:fa:02:c9:1b:14:9d:85:98:f6:20:1d:fb:
         2e:af:8b:a9:2d:96:9b:b8:3c:46:28:94:47:7c:a4:29:4a:7a:
         d4:51:77:4b:14:1b:ad:9a:7f:b5:84:22:5e:67:ad:81:dd:f5:
         f2:94:25:41:bd:4a:e7:24:36:05:4d:39:e3:e3:0e:b3:c8:b7:
         0d:80:39:c3:df:70:ea:b3:aa:0c:8f:40:5a:c2:bc:7d:a9:32:
         d5:10:d0:3b:4f:6f:29:68:fa:bb:bf:0d:05:a9:01:79:51:33:
         3b:be:f5:7d:48:1b:a4:c1:53:66:1b:f9:b5:5e:b0:d5:5e:b2:
         0f:34:3d:94:cc:39:83:96:9d:b2:b9:48:52:87:44:ae:d3:20:
         cc:f3:cf:3e:1c:35:17:25:a0:46:3e:23:f9:ea:05:1c:ad:54:
         ac:7f:9b:23:f7:ca:5e:83:2d:7e:ab:8f:7d:b7:08:94:e4:f7:
         9c:d2:62:b9:2e:a1:66:ff:9d:94:37:30:1f:8a:59:d4:e9:3c:
         b0:5b:42:49:e2:3f:4a:03:96:54:e3:bd:ef:fd:cd:5a:7e:13:
         e0:2a:33:e7:1d:8a:0e:e1:33:26:1a:7b:76:92:50:6b:0d:38:
         63:b4:b5:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 3 10:40:58 2024 by rpki-client on console-ams.rpki-client.org