$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: yObQi6tBhH+yBWOEz5TftsCs1SRdot4naIq33EQxSfE= Subject key identifier: 7A:EB:7C:8E:39:E3:9D:95:CC:FB:6E:35:74:45:C4:F1:4B:8F:58:4F Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 018F9239C13854D5BB0D9603FC0F8D49A9D5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 0ABB Signing time: Sun 19 May 2024 19:00:09 +0000 Manifest this update: Sun 19 May 2024 19:00:09 +0000 Manifest next update: Mon 20 May 2024 19:00:09 +0000 Files and hashes: 1: 06lBf6eCb_YiUokSZGBKGW6XyCU.roa (hash: dTUeSqK/nOA3qCd6y/9E7v2aujggQW+n6OCv4RhgGkM=) 2: 3M4pfb9w_Ih8Um-7dDYb749XofI.roa (hash: CI1/gWetxm/dmFK2wzXzeALW+di8gLgAFQT6cFnlGtY=) 3: 5pg_93qnaR-AYjTKJ9nzmq2APJw.roa (hash: PQACg8S509/7L2Da5K8T8zd9h+wkXSAplu6/AuHlw6g=) 4: EjoRTmXZPogeMLnq4ICj13QYj7A.roa (hash: OvD7i8Zl26+i9FUL4ZqZ/VO7EmmdT74UH3HZYnZTyGM=) 5: RGRQyycScMgIaEkVRTTYZcBbshE.roa (hash: R251uuvyYJsnRk6nXvAjAQeOdiywSG9AQKpl1Hd9UZs=) 6: VSKaxahZF2K-DIR3WFefzrGQR54.roa (hash: rz9D2ovG2mx7pSKDAJ0a/qytt3zNMII6FMrlYzL7ygE=) 7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: HLSeXGbohKwdWSHpEUzJfAaCBkn1XF7AxQ5YmrlCIUM=) 8: bTBH0Ey8mfNclPT8nJHOIGhxkZc.roa (hash: 75dIjuGrNJrGWF16H7RJVXVTUYqAHnsLxy0NJFria2Y=) 9: bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa (hash: MiJ8tC8UZ9aq0pDkC3uP60NhzC5wfelidzzeAY/qlJI=) 10: h1JhC3pj6L5H4u9v4rYKFNZZ_DM.roa (hash: F/V4CulY/M2rxE7v3eX5GIvTTpmAfWAXMllEF5O80h4=) 11: keSNqW0HmxHuMl2TAvvSyKAOilE.roa (hash: 1aj0NjG3HFkz/OnLitnZdRIuNvi5Ol8QieHArNMGG1E=) 12: m5wxxPLcNH8N5y_KCLQOLIE612U.roa (hash: x9uefpJ6pz7v8ILgP3vcqpps/Am4lQakGs0woQqebS4=) 13: mmhUC8yDo3GA_xcX-H0dxAwTUv8.roa (hash: PVdCfJGBdzSz9vsVphkWbhS9nKzXeLf0DSm46BWLv7Y=) 14: nTvm7CMJvHXt3QLnX4gIxcKtVzE.roa (hash: 6geIl+0+4sleg/k2+XsFC1T4ArfuiUpA+bCiJ77RdLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 20 May 2024 13:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:92:39:c1:38:54:d5:bb:0d:96:03:fc:0f:8d:49:a9:d5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: May 19 19:00:09 2024 GMT Not After : May 20 19:00:09 2024 GMT Subject: CN=7aeb7c8e39e39d95ccfb6e357445c4f14b8f584f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:a3:1f:d2:71:e9:25:59:60:70:fd:fa:28:42: 26:22:2e:5e:5e:f7:26:ce:63:11:11:8a:0b:34:2f: e9:2d:a8:d6:d1:4c:9d:94:90:b6:67:a3:5f:0f:7a: 69:72:07:ff:64:9a:73:d2:9b:d5:e8:14:59:12:da: dd:a4:ae:03:d9:9d:3c:e5:04:59:8c:1f:11:bd:9f: 70:49:a7:2e:21:7f:69:c0:6f:a8:80:cd:e4:b8:3b: 3b:52:03:77:8d:8d:59:1a:ed:b7:10:97:bb:5a:93: c2:68:32:c8:f7:3a:ac:ea:66:23:94:37:89:fb:ec: 5d:71:63:75:f8:b8:67:96:e9:60:f9:1c:e0:4a:b9: 37:25:c2:29:83:8b:ce:4e:7e:a5:2f:0f:c2:3b:6c: 9f:21:a2:38:fc:76:21:d5:e4:fa:3d:74:a0:98:1e: 2d:8b:3e:3a:53:d9:b6:db:69:2c:cd:96:8f:aa:cd: 9f:14:c8:28:c8:2c:fc:5b:30:b6:7e:0d:ec:8c:fa: e1:0a:49:f3:b5:aa:7a:93:72:04:d6:0d:54:46:5a: 63:3f:f2:e2:aa:0c:7d:55:86:4f:0f:f7:72:7b:d3: 0d:2c:4c:6f:1f:5f:e7:97:47:02:46:8b:5c:72:9c: 25:1b:68:d3:0c:aa:a5:83:1e:41:8f:df:b5:c5:4d: 32:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:EB:7C:8E:39:E3:9D:95:CC:FB:6E:35:74:45:C4:F1:4B:8F:58:4F X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 63:9e:e9:69:c1:0e:35:2a:87:6c:94:d5:27:5d:f7:89:e7:51: 08:99:76:2e:67:2b:b2:e0:a1:ba:12:58:4e:45:37:c2:2e:3b: 5c:d9:bf:cd:c4:49:da:59:08:d3:66:63:d0:4b:ff:10:a9:31: 7a:54:73:45:09:22:61:fe:81:8b:6d:3c:59:2d:a4:38:79:7f: d4:7a:e7:38:65:9d:b1:5e:23:60:71:45:15:ba:ce:ea:c6:c6: b5:9a:ff:b3:af:6e:56:6e:c7:52:2a:44:7c:c7:d2:16:4e:63: 1d:06:27:3b:85:3e:15:38:0a:05:5a:e1:01:38:48:55:61:a5: 13:47:82:70:f6:25:7d:0e:9c:61:1c:bd:37:80:03:45:8b:26: 23:15:26:ce:ff:fd:82:9b:f8:e5:ab:aa:2b:7c:43:21:22:49: f8:52:2f:a1:4d:84:3a:b2:04:87:1e:a9:d5:f2:c8:5e:ea:33: d2:22:41:1b:01:06:4d:7b:f9:1f:95:2b:f4:f7:c2:44:8e:8b: b6:aa:64:da:b9:fa:ff:9b:94:c5:4e:c7:de:39:77:ad:7c:c5: 22:38:db:ff:14:e4:b8:68:47:b0:a4:98:6b:9c:b0:92:01:93: cf:12:0d:2f:2c:71:9f:4b:c3:f0:7f:24:1d:d2:fa:c6:aa:e0: 47:8e:66:43 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+SOcE4VNW7DZYD/A+NSanVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjQwNTE5MTkwMDA5WhcNMjQwNTIwMTkwMDA5WjAzMTEwLwYDVQQD Eyg3YWViN2M4ZTM5ZTM5ZDk1Y2NmYjZlMzU3NDQ1YzRmMTRiOGY1ODRmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl6Mf0nHpJVlgcP36KEImIi5eXvcm zmMREYoLNC/pLajW0UydlJC2Z6NfD3ppcgf/ZJpz0pvV6BRZEtrdpK4D2Z085QRZ jB8RvZ9wSacuIX9pwG+ogM3kuDs7UgN3jY1ZGu23EJe7WpPCaDLI9zqs6mYjlDeJ ++xdcWN1+Lhnlulg+RzgSrk3JcIpg4vOTn6lLw/CO2yfIaI4/HYh1eT6PXSgmB4t iz46U9m222kszZaPqs2fFMgoyCz8WzC2fg3sjPrhCknztap6k3IE1g1URlpjP/Li qgx9VYZPD/dye9MNLExvH1/nl0cCRotccpwlG2jTDKqlgx5Bj9+1xU0yXwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHrrfI45452VzPtuNXRFxPFLj1hPMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY57pacEO NSqHbJTVJ133iedRCJl2LmcrsuChuhJYTkU3wi47XNm/zcRJ2lkI02Zj0Ev/EKkx elRzRQkiYf6Bi208WS2kOHl/1HrnOGWdsV4jYHFFFbrO6sbGtZr/s69uVm7HUipE fMfSFk5jHQYnO4U+FTgKBVrhAThIVWGlE0eCcPYlfQ6cYRy9N4ADRYsmIxUmzv/9 gpv45auqK3xDISJJ+FIvoU2EOrIEhx6p1fLIXuoz0iJBGwEGTXv5H5Ur9PfCRI6L tqpk2rn6/5uUxU7H3jl3rXzFIjjb/xTkuGhHsKSYa5ywkgGTzxINLyxxn0vD8H8k HdL6xqrgR45mQw== -----END CERTIFICATE-----Generated at Sun May 19 19:42:46 2024 by rpki-client on console-fra.rpki-client.org