$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft File: BMvltGI9q0LxWpBQAtt85i6FTyk.mft (raw, json) Hash identifier: jWzgYFUR+MCpH+LJKZqmdyb+ukfw206PEW6lMQQjxGg= Subject key identifier: 98:CF:4F:21:71:89:2D:93:A5:BE:48:01:DE:0C:9E:94:B3:65:67:1C Authority key identifier: 04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 Certificate issuer: /CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Certificate serial: 018F9EABCE32A49CFDFFCECF4FAE5684A315 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft Manifest number: 0EDC Signing time: Wed 22 May 2024 05:00:10 +0000 Manifest this update: Wed 22 May 2024 05:00:10 +0000 Manifest next update: Thu 23 May 2024 05:00:10 +0000 Files and hashes: 1: 2pAru1Er-omNMzjpXxXX5QCu9dw.roa (hash: jzotIQOGmOcfuIo5BOobmbaMoQA+VeTDZv3ZUSQumFI=) 2: 4ATeCpuXYO0_0kFf5t4Tti-keJI.roa (hash: UBKwsNQHXObFvH+c/pXBaATBl7AAtwKTAaK4AIQ5AgA=) 3: 4yHr9-l1CbbxANcIh06x6HIOj4Y.roa (hash: wJoBDBsZruQvi4J4ZdZlqe6D3koco/lpPC119krFeDc=) 4: 8GNymxHgYzccC_OsVx4IAE7pHO0.roa (hash: D3F0FEtAh7EdwIFp/EpUMnSLvFYvS2z3xfeuipEM80Y=) 5: 8aeSVpJcfSJW1iwHzpRPoAA-tHE.roa (hash: Bsh4miGhcJxpY4NMOANMMKb7Z2277tqDJiujXgXQ+6c=) 6: 8yqU5YTNWMTQpmMCHvZGuWfFtYw.roa (hash: Z0f7wsRfXNqqadxnRsY88EJegn+HRljfSWRDxAqUD40=) 7: BMvltGI9q0LxWpBQAtt85i6FTyk.crl (hash: GIKE9hMWp5ttRDrYMSSn8nTJNiVqXkD3GcaG0I4zoLg=) 8: RdSnPYQL0uYwqHq2ewQyyxK1N-g.roa (hash: Pw3RuljdTsOUFO3NE6KQ5M+CO3FjhV43p+jtCot1epE=) 9: fv8DPIKcV9KWATTd5NiBa4sIFeA.roa (hash: DtHO6DcjQ3Mw0G84EqtI0Tm9SOS3H58zDAj1TTnGUuk=) 10: k9kwUTMXRJRJwV5ANx6-vBRPH9g.roa (hash: oh7hI2qshP1WbOOwit0yZUI5/HfQ+4tcS3emdIxxJuc=) 11: lseQebEqUeW4TSi3gnmG5RYKSPg.roa (hash: +pRHTW+s5O1G80eLUfbL/xA6esXdjoYzdv9NcbI+uRM=) 12: nQnAnlPJebG7244qFFDuRF2JQfE.roa (hash: XcMHujCUb0tO9VnBSEqYuGtxUeuSywhoznOkTWsw1a0=) 13: sTKsT3yqB5aV5OZc5oftIMxxBaw.roa (hash: iD0wDrja6LQp1VVVA5RxlkPuofU0N1dcsTrc8hyWVas=) 14: uzjqgeIkSDIv2l0aY4cVREn3y_c.roa (hash: 2GlFHRGoqzueizD/BdGkrX2fb2LG6+CJdLbJIaFQ8js=) 15: vXND_x7skyTvt7ZsSyPIENyMNR4.roa (hash: dbx/+n9QBAyqXHuZB5TrNksmeXPfw8rZibK3OeMiU6Y=) 16: x6v3kOVm35aJLKVKmsFciEubcOo.roa (hash: f5Va+EA30+4q2K7ooRQU4yObo27+gd22mhk4V/OuWYQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 05:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:9e:ab:ce:32:a4:9c:fd:ff:ce:cf:4f:ae:56:84:a3:15 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=04cbe5b4623dab42f15a905002db7ce62e854f29 Validity Not Before: May 22 05:00:10 2024 GMT Not After : May 23 05:00:10 2024 GMT Subject: CN=98cf4f2171892d93a5be4801de0c9e94b365671c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ee:b2:c5:83:61:2f:8a:dc:28:88:07:9a:56: e5:21:11:6c:85:55:fd:7c:63:7a:27:6b:40:cc:89: 9b:0f:60:f8:50:03:08:bb:1c:4d:be:e7:2c:4c:a7: 66:9d:f8:36:64:20:af:21:e6:28:c6:30:6b:c9:1d: 98:99:d8:3a:72:1d:e2:6c:49:58:a4:87:a0:b8:45: 9c:14:50:66:05:e1:98:b0:c6:77:60:7f:e7:82:48: 7f:97:d1:88:31:a3:87:de:96:89:7c:7d:02:d2:ba: 96:45:e4:36:0b:69:0a:6b:a2:f7:c7:12:29:67:d4: c1:e8:c6:df:89:d6:ff:45:08:81:20:57:be:50:4d: 77:33:0e:63:0f:40:f6:dd:1f:90:1a:4b:0d:df:ed: af:c0:52:38:d9:69:27:4a:38:bf:fc:ad:b8:a8:77: 0e:61:77:55:1e:2e:eb:6a:62:29:6f:7a:33:b2:4b: 57:88:bd:be:60:cc:15:84:de:be:ba:12:b6:e2:a5: 87:76:7c:f4:db:b1:6c:80:b8:f9:6e:2e:bc:e9:30: 2c:77:39:1b:82:a1:98:97:30:db:3b:cd:a8:58:1d: d1:93:32:cf:a4:b7:ba:f1:7a:46:da:dd:9e:2b:62: b4:21:f7:be:f3:cc:c6:f7:1e:55:81:4c:0a:d9:9a: ee:85 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:CF:4F:21:71:89:2D:93:A5:BE:48:01:DE:0C:9E:94:B3:65:67:1C X509v3 Authority Key Identifier: keyid:04:CB:E5:B4:62:3D:AB:42:F1:5A:90:50:02:DB:7C:E6:2E:85:4F:29 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BMvltGI9q0LxWpBQAtt85i6FTyk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/3d3a2d-a039-46f4-8687-057817ba9fb7/1/BMvltGI9q0LxWpBQAtt85i6FTyk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:b4:62:7a:36:03:8a:e3:72:d8:34:ee:07:b1:42:76:e3:c2: ac:9d:f1:60:cd:73:07:6f:69:1c:91:16:e1:58:12:ba:04:57: 9f:7b:2d:7c:2a:56:a7:d4:a9:18:04:58:61:fd:a8:9f:6a:b5: 67:8d:01:f1:1a:ac:2a:68:c1:fb:6d:97:dc:3b:84:b2:9e:e2: 49:af:02:07:b6:80:2f:fc:db:55:70:b6:3b:33:6e:46:56:c3: 4d:79:ea:37:a0:78:53:7e:3d:68:29:1b:09:47:77:01:c2:41: 99:fe:d5:60:93:ba:1a:98:f0:4b:2c:b2:f2:e2:18:c5:8e:4a: 9f:b3:97:3e:bd:a3:e8:73:ab:16:b6:f1:3c:a8:b1:12:c2:da: 18:36:79:82:8b:bb:15:02:a2:14:dc:a5:f4:35:a1:04:66:fd: 6b:b8:03:84:6d:cd:16:3a:c6:19:e8:97:2e:e0:ec:e4:87:ec: 67:66:39:1c:85:e2:8c:4c:46:60:3a:02:f2:9d:e5:c0:31:0b: 9c:a8:c8:4a:c5:19:8a:72:a2:d9:7f:54:d3:91:4d:2b:ca:1c: b2:56:f0:22:0b:30:2a:ab:c9:0b:86:38:e6:a2:f1:8b:2e:2b: 34:7e:a6:42:26:07:3b:5a:ea:1f:98:f3:1a:0e:45:63:97:c4: 83:9d:fa:4a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+eq84ypJz9/87PT65WhKMVMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA0Y2JlNWI0NjIzZGFiNDJmMTVhOTA1MDAyZGI3Y2U2MmU4 NTRmMjkwHhcNMjQwNTIyMDUwMDEwWhcNMjQwNTIzMDUwMDEwWjAzMTEwLwYDVQQD Eyg5OGNmNGYyMTcxODkyZDkzYTViZTQ4MDFkZTBjOWU5NGIzNjU2NzFjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzu6yxYNhL4rcKIgHmlblIRFshVX9 fGN6J2tAzImbD2D4UAMIuxxNvucsTKdmnfg2ZCCvIeYoxjBryR2Ymdg6ch3ibElY pIeguEWcFFBmBeGYsMZ3YH/ngkh/l9GIMaOH3paJfH0C0rqWReQ2C2kKa6L3xxIp Z9TB6Mbfidb/RQiBIFe+UE13Mw5jD0D23R+QGksN3+2vwFI42WknSji//K24qHcO YXdVHi7ramIpb3ozsktXiL2+YMwVhN6+uhK24qWHdnz027FsgLj5bi686TAsdzkb gqGYlzDbO82oWB3RkzLPpLe68XpG2t2eK2K0Ife+88zG9x5VgUwK2ZruhQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJjPTyFxiS2Tpb5IAd4MnpSzZWccMB8GA1UdIwQY MBaAFATL5bRiPatC8VqQUALbfOYuhU8pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODct MDU3ODE3YmE5ZmI3LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS8zZDNhMmQtYTAzOS00NmY0LTg2ODctMDU3ODE3YmE5ZmI3 LzEvQk12bHRHSTlxMEx4V3BCUUF0dDg1aTZGVHlrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARrRiejYD iuNy2DTuB7FCduPCrJ3xYM1zB29pHJEW4VgSugRXn3stfCpWp9SpGARYYf2on2q1 Z40B8RqsKmjB+22X3DuEsp7iSa8CB7aAL/zbVXC2OzNuRlbDTXnqN6B4U349aCkb CUd3AcJBmf7VYJO6GpjwSyyy8uIYxY5Kn7OXPr2j6HOrFrbxPKixEsLaGDZ5gou7 FQKiFNyl9DWhBGb9a7gDhG3NFjrGGeiXLuDs5IfsZ2Y5HIXijExGYDoC8p3lwDEL nKjISsUZinKi2X9U05FNK8ocslbwIgswKqvJC4Y45qLxiy4rNH6mQiYHO1rqH5jz Gg5FY5fEg536Sg== -----END CERTIFICATE-----Generated at Wed May 22 12:52:10 2024 by rpki-client on console-fra.rpki-client.org