$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft File: KdLa_xxbthoKyLPK6tS4ofooTQ8.mft (raw, json) Hash identifier: CR33cDZTRzhPeMYaMLkgvKsGeeDlS5z2eFdznr//Vh8= Subject key identifier: DD:C5:8E:16:BA:91:05:D7:5F:97:38:0C:E2:4A:7D:58:1F:EF:C9:BA Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Certificate serial: 0193523DFC5BD99723C019B886FA4385226C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft Manifest number: 1102 Signing time: Fri 22 Nov 2024 05:00:14 +0000 Manifest this update: Fri 22 Nov 2024 05:00:14 +0000 Manifest next update: Sat 23 Nov 2024 05:00:14 +0000 Files and hashes: 1: 0POLPyGh8X6gsCr_Wk8vU9kyTCc.roa (hash: meXkx0tk2+2Z74IpkYHsOxvZy1wu+eWD+9v6AvLyA50=) 2: 9MEwf44Dyq6ZMCI9E1XgljCF_aY.roa (hash: I7zFLjBokOhYE2XUSMuTT577FeYwXZHHYM3x3xHgb+0=) 3: AdxM9ZKkKPKR7EjA2YBYrTec8bg.roa (hash: 1HBe1ouNMa2yvgRc/WzrRWR3XWQK4AiJ68uOCqwE+Pw=) 4: EcQCDbKpfuAEqcBHhK13TayuLJw.roa (hash: HlsqzNaRiCXTTPqF7VgKSa6/G36tsJZvFcA5O7nz6Bc=) 5: KdLa_xxbthoKyLPK6tS4ofooTQ8.crl (hash: fBe0dmlEevQsusTxIP1v23vpOcSaeqcEVt90fkXl0T0=) 6: M4GEJKjgavQtnF96rCATgPuzg3A.roa (hash: Rj2wmDBxv8t7qCAhCgAxwV/oZ9QuRDWkuSAznm5MC34=) 7: PnRsENOA45xwHTCa_zV7_xB873Q.roa (hash: H1FMWwHYcmRjZLSsimItPH7jpvnRY+HgvEClm43/u70=) 8: QCXTUG3eerVtOiEmL38Jx8M_RSs.roa (hash: w0UBcH+wksFH8XO7NzAW4fTOcYFnvlNyjffqNhzzYnw=) 9: YMHctJC6wJ_jf-ssAiTCKTZcETE.roa (hash: Umb4KNfCbjZZKAfzjISSupIYr/uKgM7zzQhUvGoJYHc=) 10: Z3y7kh6LRHfabES7XVIT46ty5uc.roa (hash: 2kZRCGX3rEl/RjddAM74/Rha0jM283/2OKIIv7h+x6U=) 11: cwwMsBQmt2dSzB3OXM--el6uqFw.roa (hash: f6hqMPjXek9jX4nemiOBC8Ph9Z9g+3IduQ/lM811QOE=) 12: sYgBlVxRGU0_jLn26MbkQRDKnyg.roa (hash: K3gkw8A60MaDwI9rUYYJrkFJX0rXDtIAsZCAuaSWgeE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:3d:fc:5b:d9:97:23:c0:19:b8:86:fa:43:85:22:6c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f Validity Not Before: Nov 22 05:00:14 2024 GMT Not After : Nov 23 05:00:14 2024 GMT Subject: CN=ddc58e16ba9105d75f97380ce24a7d581fefc9ba Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:fd:21:c5:ab:64:a0:21:64:6a:6f:46:02:43: d4:97:f7:57:df:44:25:27:79:3e:e1:d9:f5:3d:31: f4:9b:c8:d1:c7:23:fb:14:92:f7:b9:93:03:03:b1: ae:d8:01:08:58:5d:32:db:bb:56:2a:e1:47:5c:c0: 72:61:e5:44:9d:b7:9c:85:9a:09:64:1d:a3:33:9d: 06:3b:28:90:6b:a5:41:59:78:a6:39:0d:c6:b3:a1: 09:c8:a1:b5:1b:20:29:ee:25:54:93:c4:b7:2e:4d: 8a:37:d9:17:87:3b:a6:35:bf:82:70:86:e2:e8:57: 38:10:2b:5f:0d:ec:1d:64:b3:26:fa:19:89:b8:c0: a1:4e:b3:56:cf:84:0e:45:e1:db:d1:37:72:7a:e0: a0:85:e4:cb:fb:d3:e7:49:8a:12:65:8d:08:6b:67: 04:69:40:a5:25:6e:75:32:66:58:36:6c:20:a0:63: 09:60:99:6a:a1:57:04:24:49:55:ae:af:43:2e:93: fc:9e:33:f6:a9:30:a1:84:9e:7b:ee:52:1a:e1:d1: d2:49:6a:c4:f7:98:dd:e9:9d:d2:21:bc:15:b0:03: f8:c4:9e:95:24:ca:83:b6:77:ed:2b:45:6b:da:00: 7e:73:06:d9:1b:25:c4:d4:05:3d:b6:f3:9e:0f:68: 1e:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:C5:8E:16:BA:91:05:D7:5F:97:38:0C:E2:4A:7D:58:1F:EF:C9:BA X509v3 Authority Key Identifier: keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption cc:3c:bf:51:d9:e2:d9:4b:cb:cb:af:1d:3a:95:89:73:02:ac: e4:f7:60:58:5f:49:09:12:f4:e9:8d:94:34:40:0f:8b:5a:20: 88:9b:89:2e:e0:21:da:aa:72:6f:17:fa:b7:f5:22:0d:75:40: bc:b9:af:37:ab:f7:78:e8:58:eb:66:0f:81:fb:19:d8:c4:ba: 6a:92:23:0a:79:d7:19:48:b7:d8:06:3f:47:f2:fc:05:46:fa: 93:8f:cf:8e:65:1a:d3:ce:ec:29:43:6c:9e:ac:ab:75:8f:ed: 77:37:43:9d:bd:42:23:c5:31:1c:4c:75:37:53:fb:94:5e:54: 7b:63:8b:a0:34:96:b4:7f:2e:e6:91:0b:5b:9e:6f:29:7c:c7: 09:2b:96:be:16:ce:f1:e0:c6:b8:e2:f5:7b:c3:13:0a:36:6f: f3:be:a8:8a:39:9f:d9:56:ed:8f:77:af:9f:33:2e:18:f3:53: 71:a3:55:5b:6d:73:ed:8a:f1:ce:9e:31:1a:09:ad:6e:98:a7: 9c:89:34:d5:f5:a9:58:a3:c0:54:a6:64:4d:55:f9:22:7a:01: eb:cf:5e:72:05:aa:9a:27:39:7d:65:d4:89:8d:79:58:cd:d7: ac:b0:4f:8c:9f:d8:62:74:6e:0c:7d:9e:37:a7:16:71:ac:af: b5:08:7a:8c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSPfxb2ZcjwBm4hvpDhSJsMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy ODRkMGYwHhcNMjQxMTIyMDUwMDE0WhcNMjQxMTIzMDUwMDE0WjAzMTEwLwYDVQQD EyhkZGM1OGUxNmJhOTEwNWQ3NWY5NzM4MGNlMjRhN2Q1ODFmZWZjOWJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkf0hxatkoCFkam9GAkPUl/dX30Ql J3k+4dn1PTH0m8jRxyP7FJL3uZMDA7Gu2AEIWF0y27tWKuFHXMByYeVEnbechZoJ ZB2jM50GOyiQa6VBWXimOQ3Gs6EJyKG1GyAp7iVUk8S3Lk2KN9kXhzumNb+CcIbi 6Fc4ECtfDewdZLMm+hmJuMChTrNWz4QOReHb0TdyeuCgheTL+9PnSYoSZY0Ia2cE aUClJW51MmZYNmwgoGMJYJlqoVcEJElVrq9DLpP8njP2qTChhJ577lIa4dHSSWrE 95jd6Z3SIbwVsAP4xJ6VJMqDtnftK0Vr2gB+cwbZGyXE1AU9tvOeD2geCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Fjha6kQXXX5c4DOJKfVgf78m6MB8GA1UdIwQY MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt NGY1N2Q5Y2Y1Y2FhLzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzDy/Udni 2UvLy68dOpWJcwKs5PdgWF9JCRL06Y2UNEAPi1ogiJuJLuAh2qpybxf6t/UiDXVA vLmvN6v3eOhY62YPgfsZ2MS6apIjCnnXGUi32AY/R/L8BUb6k4/PjmUa087sKUNs nqyrdY/tdzdDnb1CI8UxHEx1N1P7lF5Ue2OLoDSWtH8u5pELW55vKXzHCSuWvhbO 8eDGuOL1e8MTCjZv876oijmf2Vbtj3evnzMuGPNTcaNVW21z7Yrxzp4xGgmtbpin nIk01fWpWKPAVKZkTVX5InoB689ecgWqmic5fWXUiY15WM3XrLBPjJ/YYnRuDH2e N6cWcayvtQh6jA== -----END CERTIFICATE-----Generated at Fri Nov 22 06:38:21 2024 by rpki-client on console-ams.rpki-client.org