$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: YL4AXgMvA+/Berr+yqX5JOD/gH0ArjV6j9B9KlKSnS4= Subject key identifier: 90:02:72:67:12:A4:7E:56:FA:04:E8:3B:F7:3A:9F:36:C5:42:DA:5E Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 01901DEB81B47605E0BABF8C0B3C8D783921 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 11D1 Signing time: Sat 15 Jun 2024 22:01:31 +0000 Manifest this update: Sat 15 Jun 2024 22:01:31 +0000 Manifest next update: Sun 16 Jun 2024 22:01:31 +0000 Files and hashes: 1: 7ajqWVvOuGHR-70-l7Uih-iT2bg.roa (hash: AXH3/yb00a0ec7waRYc4pLl/CljJDI9teB4r12iFMnE=) 2: 8rvVVOxo8s_BguyYt-gyqDmKYns.roa (hash: 0feQ+kMUF1kDno8x+H2CYPeRz3tpDEbMHQOzJ5YQz+M=) 3: 9a_OLlXZeLbXmkr5ffkIHE4daLI.roa (hash: rQ56Cvmxx8PUYiBYD/tBgHUgrRvLFS8E886K39SJfmI=) 4: GNqt9s805yU3Z8BjeixIc0Scxro.roa (hash: DBdp3f6BtaFS1Z6iwVW9Al3thOmZaCoPcGhnBQiZt1Q=) 5: JjgLVYD_xJAzQgEsxv704RTJtEI.roa (hash: 2h1ogcGPMQ3n2z1740U/v3v9A4z+IsHVRGyjZ8cmBOk=) 6: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: f/3GGX9m1edzd9/icOs0uoqHcNzMROVcmQgQ6FjdYzk=) 7: Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa (hash: z1kcbtHeiXC1YqOD9mGfLnM0qBdsjxe8MY5vg1dMbLQ=) 8: aDEfeqV98-NL5_Pd-REnBjHb07g.roa (hash: yDsnt0nyfuFlB7TcgKXI3Utjfu44wMy1d+jzUrdSPqA=) 9: krjDxfU590GjTH49GE4EgTMh2SQ.roa (hash: hrSYcdx5kxvJA5HJ5ilgciv45kJOsUoLeAOkrImHdPw=) 10: ohEhWZeM5ipCdzdIAyZjO84tBXs.roa (hash: I3ej3sloqeUpSOuP5z3N57MY9/cai1QhDgMbNOq+RTY=) 11: plIWhdWmSN_HPprPfGzrstLiRGc.roa (hash: rcPQl+e9lys4SH8WmGy3w7vednjctnxNpHaBM2BO8n4=) 12: tff3n2uoHwgUSRAFoOtxGXRIYis.roa (hash: NEjSwFtworZYaH3yGQD9jG8+DlvyxWNQvZHRUJ+Bzh0=) 13: twy4DH5KOj6ndHW9ts0yYZ8i7MA.roa (hash: gpqHW2FmraRjh0+mLj9LmJ4NXifMW0Wv+a6zthp/TNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 22:01:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1d:eb:81:b4:76:05:e0:ba:bf:8c:0b:3c:8d:78:39:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Jun 15 22:01:31 2024 GMT Not After : Jun 16 22:01:31 2024 GMT Subject: CN=9002726712a47e56fa04e83bf73a9f36c542da5e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:96:5c:5f:a2:5f:51:62:1f:fd:93:59:80:cd: 8b:d6:bc:94:16:3d:09:a0:96:aa:67:ff:55:9e:1d: 62:38:ec:7d:be:7a:d6:4b:af:1f:a1:2e:ce:cf:e6: 1a:59:97:0e:83:58:8d:f6:08:ec:53:2b:cb:d0:52: 11:e6:c1:3a:2b:11:a3:f8:5f:33:ca:4a:12:a0:8b: 7b:b1:b8:7d:12:15:f5:62:ce:3f:cd:de:e6:c2:2c: 73:46:e9:bf:a3:8e:78:b0:af:c8:32:a5:28:09:a6: 01:42:25:37:65:7c:05:44:5e:d3:5e:cb:64:76:4f: c1:31:78:b5:93:82:1a:e3:e1:ec:f2:75:8a:fa:a2: b9:f1:42:97:57:6f:9f:e2:92:27:23:51:84:ca:07: 82:d8:7b:19:3f:ec:f5:6e:ba:f4:b0:a2:11:08:3c: 51:56:ae:76:44:d6:41:5c:cd:ae:d6:ca:2a:d1:bf: 3c:6b:58:20:f2:50:9b:d5:68:e5:6e:27:b1:d1:87: 61:73:eb:b6:c4:48:dd:0a:94:e8:3a:12:3b:2e:1e: cf:06:7c:2b:7c:2f:74:ea:fa:69:bb:15:31:72:41: d8:4a:7e:61:2b:e6:fe:7a:7d:ae:22:ca:83:e3:12: 29:82:eb:75:2f:38:b8:66:3c:c9:b1:b7:72:6e:71: 36:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:02:72:67:12:A4:7E:56:FA:04:E8:3B:F7:3A:9F:36:C5:42:DA:5E X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:2c:2f:c9:5b:a7:2e:c9:b5:46:c9:b4:6a:99:3c:5e:bf:18: 54:82:e6:dc:69:21:4c:8b:1a:26:e1:3f:32:62:73:56:cd:26: a4:b4:e3:fa:97:9c:69:3a:39:e0:fb:61:56:56:a2:1d:55:62: a3:cd:53:94:ef:79:c5:f0:d1:b5:12:f3:30:ee:1a:a1:70:9b: 68:9a:e6:fe:9c:d3:15:f9:ea:b9:07:45:59:89:92:5f:7d:0b: 55:23:b7:6c:8d:84:c0:a5:8c:db:7f:62:bf:00:63:2e:ed:f5: 1f:87:e9:fb:f8:4b:e4:d4:7b:54:a0:39:d4:e7:4a:b1:81:1f: 31:06:c0:8f:d1:4a:2e:08:e9:9a:9b:2e:21:ad:32:c9:af:01: 5a:32:60:ef:00:4a:07:80:f9:6f:ef:a6:92:78:bf:87:32:3e: b7:2b:98:5d:a4:78:74:70:00:e0:51:99:7f:aa:50:a8:fa:3d: aa:ec:ba:f4:64:1d:77:ba:49:f4:a2:7a:3b:ff:a1:0a:3b:cf: 7d:be:1f:5c:d8:19:ef:28:02:17:f8:d0:da:ef:16:b1:95:2e: e2:20:6f:87:60:73:db:bb:67:dc:20:8c:bf:a9:ff:b5:5a:ce: 7c:c9:53:9d:cd:af:3c:13:6f:0c:58:d3:a4:9a:3b:7a:48:9a: e7:54:a3:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAd64G0dgXgur+MCzyNeDkhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjQwNjE1MjIwMTMxWhcNMjQwNjE2MjIwMTMxWjAzMTEwLwYDVQQD Eyg5MDAyNzI2NzEyYTQ3ZTU2ZmEwNGU4M2JmNzNhOWYzNmM1NDJkYTVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr5ZcX6JfUWIf/ZNZgM2L1ryUFj0J oJaqZ/9Vnh1iOOx9vnrWS68foS7Oz+YaWZcOg1iN9gjsUyvL0FIR5sE6KxGj+F8z ykoSoIt7sbh9EhX1Ys4/zd7mwixzRum/o454sK/IMqUoCaYBQiU3ZXwFRF7TXstk dk/BMXi1k4Ia4+Hs8nWK+qK58UKXV2+f4pInI1GEygeC2HsZP+z1brr0sKIRCDxR Vq52RNZBXM2u1soq0b88a1gg8lCb1Wjlbiex0Ydhc+u2xEjdCpToOhI7Lh7PBnwr fC906vppuxUxckHYSn5hK+b+en2uIsqD4xIpgut1Lzi4ZjzJsbdybnE2iQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJACcmcSpH5W+gToO/c6nzbFQtpeMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhiwvyVun Lsm1Rsm0apk8Xr8YVILm3GkhTIsaJuE/MmJzVs0mpLTj+pecaTo54PthVlaiHVVi o81TlO95xfDRtRLzMO4aoXCbaJrm/pzTFfnquQdFWYmSX30LVSO3bI2EwKWM239i vwBjLu31H4fp+/hL5NR7VKA51OdKsYEfMQbAj9FKLgjpmpsuIa0yya8BWjJg7wBK B4D5b++mkni/hzI+tyuYXaR4dHAA4FGZf6pQqPo9quy69GQdd7pJ9KJ6O/+hCjvP fb4fXNgZ7ygCF/jQ2u8WsZUu4iBvh2Bz27tn3CCMv6n/tVrOfMlTnc2vPBNvDFjT pJo7ekia51SjEw== -----END CERTIFICATE-----Generated at Sun Jun 16 03:45:17 2024 by rpki-client on console-ams.rpki-client.org