$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft File: iawKy_23onTvNsFvWGCtoqJHBpc.mft (raw, json) Hash identifier: oFcHis7OWk3VRdwy80mvDutkLWQyhumIBBI+6h9nP2I= Subject key identifier: E7:CD:DC:89:4D:D8:3B:80:A2:51:21:05:6E:54:BF:A8:B2:F0:13:10 Authority key identifier: 89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 Certificate issuer: /CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Certificate serial: 018F8D81C5DE5ADF605CA7917CFA366E02C1 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft Manifest number: 114B Signing time: Sat 18 May 2024 21:00:43 +0000 Manifest this update: Sat 18 May 2024 21:00:43 +0000 Manifest next update: Sun 19 May 2024 21:00:43 +0000 Files and hashes: 1: 6OqCmnhjs8nHpEFsYmpLOTlLlKw.roa (hash: BwhOn9eN2weN5wxRt5fWFuznfQCYbMxJLRCMBNadWDk=) 2: 6sDkXv4tpYKDCT8lAyXzSyVFclE.roa (hash: UGL1rDQDc0biYnNt05Gxt0b1jXnBmOwg1Im7Me3H+jM=) 3: DZjCx5tlGtxdBugrTXCCMMcZt9o.roa (hash: 91jc66rHRo6GzinXguT2Zoki9gP8c4Zep29Hz3ZCHZ8=) 4: FnipWAxgDIxSuQm5P5hzNP12-mY.roa (hash: t+OMJob96KlL3YU+qEwXFkP9QT72mU9XudVxOtFiKfM=) 5: KoEHWh4EstDd2WPAEllIa8fPoHo.roa (hash: Uo8oyiFBUKuibz+1ZvSXU4nOA3R0B86QEbE3/epupCI=) 6: L-kthgTBdvPbo-EgxQp15GJknDc.roa (hash: QWnlzcQp4eqNBq6shJd04dRGpvY7EsmECW1CaaHggGw=) 7: L3MmH9uph5lDRrzDKIDDPgWixyQ.roa (hash: Cf67BopvDF2HiZu7o1Lsq5jbSj1SjDI0LnKZRZ/ensw=) 8: Pbv756LHzPmGbhBkbATnvLIX2cg.roa (hash: ok9z2DgSAhdYKNFuQ76+ox+y/2Z1LOJoBK06Ciuki7M=) 9: cOwBMiCO_xIK-B6paxrHVGj3YBw.roa (hash: FoxvSfJyrnolbEF9JMujTEGxhcgKr+7V2j8UOaAiWR8=) 10: emFBVx0phcG38zCcOLQAbSlKycU.roa (hash: yPTvCbQDmSLh9G/WE6Ya90/rIvI2A5k4xXacEyqoQ/Q=) 11: iawKy_23onTvNsFvWGCtoqJHBpc.crl (hash: uYFzdquDjnUs0W1JE2Fl/Uc6BBFiZFCx6rYUNfV/uTY=) 12: qxqLMEGsZJfWMBK8ECDgEEWSBHs.roa (hash: fqZJNlfuTvkplKzOeUxqabuGuq2Wpcp0pkQxwEFcRI4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8d:81:c5:de:5a:df:60:5c:a7:91:7c:fa:36:6e:02:c1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=89ac0acbfdb7a274ef36c16f5860ada2a2470697 Validity Not Before: May 18 21:00:43 2024 GMT Not After : May 19 21:00:43 2024 GMT Subject: CN=e7cddc894dd83b80a25121056e54bfa8b2f01310 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:a6:20:80:4c:55:0c:fe:e4:ce:6a:e7:f5:37: 8d:07:30:6a:7a:d4:1c:22:99:3d:7e:a8:24:d1:24: c2:48:59:7c:78:38:2e:e8:f3:60:75:79:98:65:10: 0e:f4:46:2b:fb:3d:1d:ff:b8:b3:e0:60:51:c4:a9: c0:09:db:87:ca:81:16:2c:b1:c6:6e:8d:40:06:7d: 82:75:54:8e:a0:2a:bf:f8:8c:c0:35:1f:c3:1f:5c: 48:ee:81:f6:e7:e4:32:9e:c7:7a:20:31:6f:51:7d: 71:87:07:ad:39:c4:e1:c7:0a:0b:bf:12:47:d6:70: a7:dc:f9:7c:c5:2b:f8:aa:53:a4:eb:39:ea:90:1b: 47:ac:b8:1a:24:ea:cc:6c:6b:28:b6:c5:0b:60:da: e5:f9:5a:6e:b2:32:e8:ab:4d:ad:fb:f9:3d:95:09: 45:0f:de:53:38:9b:1d:bc:07:e5:42:86:0e:93:81: ec:d7:19:c9:67:60:59:3e:17:01:6c:22:1d:88:f2: e7:e0:cc:00:6c:a5:78:39:b1:34:93:73:b8:36:7a: cc:2e:73:52:fb:cc:8d:eb:08:e6:80:27:e5:cc:c5: dd:b6:31:42:3a:18:df:c7:69:27:04:99:a5:3b:b1: 81:2d:46:bd:4a:1b:9d:89:f8:14:2a:07:ee:ab:87: 97:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E7:CD:DC:89:4D:D8:3B:80:A2:51:21:05:6E:54:BF:A8:B2:F0:13:10 X509v3 Authority Key Identifier: keyid:89:AC:0A:CB:FD:B7:A2:74:EF:36:C1:6F:58:60:AD:A2:A2:47:06:97 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iawKy_23onTvNsFvWGCtoqJHBpc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/31/93a768-2677-48d6-914c-d4dbf7066fd3/1/iawKy_23onTvNsFvWGCtoqJHBpc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0c:7b:5e:6b:75:5d:60:89:d9:d5:99:87:e8:3a:be:d5:fc:28: 79:23:ec:eb:79:c3:cd:29:04:c9:2e:5d:ce:d4:10:ec:12:5b: 8b:8a:fd:ea:16:03:fd:6e:a8:30:43:a2:2c:9d:17:4d:4c:3a: 66:ed:cd:5c:5c:82:19:c4:2b:7f:41:8a:14:89:91:52:d4:6e: 91:03:8b:da:d8:d6:82:60:f6:2c:78:0c:84:3a:4c:c3:28:a2: 27:d5:ca:4d:59:f4:38:b9:1b:65:3a:48:b8:20:40:86:85:45: a3:c6:e8:75:4c:31:ae:22:52:3f:e4:6a:43:77:a9:6d:c4:cd: fe:e4:3e:3e:e0:b8:31:f9:50:98:84:29:15:72:55:80:18:01: 6f:57:b7:e7:28:e6:c0:24:a4:fc:30:81:81:11:80:16:dd:fe: 56:6c:25:d3:bc:b4:57:fe:9a:14:07:b4:9d:7f:84:33:6a:58: e6:8c:1b:70:ff:d6:ed:48:f0:6f:9b:95:78:85:2e:dd:ff:07: 06:2a:cc:01:a9:e4:2e:c7:1f:ca:05:e5:a4:e7:5a:d5:cd:30: f8:69:bd:d5:d9:c2:39:9b:74:82:1e:04:18:bd:3b:61:c9:72: 34:dc:10:14:2d:9a:ff:e5:f4:06:0f:71:5a:46:12:70:37:1a: c6:72:58:2b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+NgcXeWt9gXKeRfPo2bgLBMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg5YWMwYWNiZmRiN2EyNzRlZjM2YzE2ZjU4NjBhZGEyYTI0 NzA2OTcwHhcNMjQwNTE4MjEwMDQzWhcNMjQwNTE5MjEwMDQzWjAzMTEwLwYDVQQD EyhlN2NkZGM4OTRkZDgzYjgwYTI1MTIxMDU2ZTU0YmZhOGIyZjAxMzEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKYggExVDP7kzmrn9TeNBzBqetQc Ipk9fqgk0STCSFl8eDgu6PNgdXmYZRAO9EYr+z0d/7iz4GBRxKnACduHyoEWLLHG bo1ABn2CdVSOoCq/+IzANR/DH1xI7oH25+Qynsd6IDFvUX1xhwetOcThxwoLvxJH 1nCn3Pl8xSv4qlOk6znqkBtHrLgaJOrMbGsotsULYNrl+VpusjLoq02t+/k9lQlF D95TOJsdvAflQoYOk4Hs1xnJZ2BZPhcBbCIdiPLn4MwAbKV4ObE0k3O4NnrMLnNS +8yN6wjmgCflzMXdtjFCOhjfx2knBJmlO7GBLUa9ShudifgUKgfuq4eXoQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOfN3IlN2DuAolEhBW5Uv6iy8BMQMB8GA1UdIwQY MBaAFImsCsv9t6J07zbBb1hgraKiRwaXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMt ZDRkYmY3MDY2ZmQzLzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zMS85M2E3NjgtMjY3Ny00OGQ2LTkxNGMtZDRkYmY3MDY2ZmQz LzEvaWF3S3lfMjNvblR2TnNGdldHQ3RvcUpIQnBjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADHtea3Vd YInZ1ZmH6Dq+1fwoeSPs63nDzSkEyS5dztQQ7BJbi4r96hYD/W6oMEOiLJ0XTUw6 Zu3NXFyCGcQrf0GKFImRUtRukQOL2tjWgmD2LHgMhDpMwyiiJ9XKTVn0OLkbZTpI uCBAhoVFo8bodUwxriJSP+RqQ3epbcTN/uQ+PuC4MflQmIQpFXJVgBgBb1e35yjm wCSk/DCBgRGAFt3+Vmwl07y0V/6aFAe0nX+EM2pY5owbcP/W7Ujwb5uVeIUu3f8H BirMAankLscfygXlpOda1c0w+Gm91dnCOZt0gh4EGL07YclyNNwQFC2a/+X0Bg9x WkYScDcaxnJYKw== -----END CERTIFICATE-----Generated at Sat May 18 22:24:04 2024 by rpki-client on console-fra.rpki-client.org