$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft File: AK_2tO_-fDY-8gD28-WIi5FbpoE.mft (raw, json) Hash identifier: 6YetsdnT3Mz8/a5UutVtk6MktVj97Sz3r9IIyxDMdwA= Subject key identifier: DE:5C:CF:9F:CE:68:D0:BE:5D:59:B6:B8:49:7C:34:BA:55:15:90:C4 Authority key identifier: 00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 Certificate issuer: /CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Certificate serial: 018F667571420FE05C7147C4578457CF7E0D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft Manifest number: 0C79 Signing time: Sat 11 May 2024 07:02:03 +0000 Manifest this update: Sat 11 May 2024 07:02:03 +0000 Manifest next update: Sun 12 May 2024 07:02:03 +0000 Files and hashes: 1: 8fOhyEA-UyuO0GMB7bEfNd5KDBM.roa (hash: dpRCdYuBU8qZNOlbDe8pNJAbH1/NMkPTZmEMmbNR5Tw=) 2: AK_2tO_-fDY-8gD28-WIi5FbpoE.crl (hash: hirypRJFvlmwiGcfoKz1g/PmeM8NJW3cCkJMeP4AyXk=) 3: CE410YHTiWjpclgoum6jlenan3w.roa (hash: X0KYcA07Prq2R9kOClIRDqCiv6ZocQY8cg9oSka7f9Y=) 4: M8dU0darXhx0iRhLHEw_a8YmlIg.roa (hash: 11FQ8j9jSlpmMVTXNukD4D/l4E8jd5W6+2eeVuOh86g=) 5: OuvDgU7CizNf_704nPi1apdGCY8.roa (hash: l324yjv2/fqRpWvF9+xbU9SZWZ7NSACe745SdwNgGyg=) 6: VOG9BAroC8F_yWJZbJ27M4Sza78.roa (hash: 89ddDhwuV/uXS7d6XnpCgkBlkiq3A47MQoYXxnyR0J4=) 7: ZTdbWE89UfdhaeKsQdQCCLeYtAw.roa (hash: Wd+FXVA3kRTjYGOB0F1mksAv7avqALgZrd59YrwnQhc=) 8: cZv1bqt_airwz_TJ2odHOzgvDjc.roa (hash: D8Rd9oNTUvrnALckle2sTh5eLCk+quYGDQTl94VXy94=) 9: fSzNTzE-6tgh7T8nTM6HsWBow-w.roa (hash: fwnJE0iO6vuxCpoCemQsfWUuz9O2f0QwZSSwlwfbKsA=) 10: gH-AnmUu2J0sSjm7MCMsyYQ9jik.roa (hash: uSkw+UyplBeItOTuy1YkdqtiSzfnh7uK0J/Fq9IderQ=) 11: oUf3XZYQKKuUMRhRUgiVSv9JyGQ.roa (hash: E10q5+iIOHFKWv80jp2miijHhuKprrYoOrowRq3V7/c=) 12: sz41sl944gA7nc3ftfEabEbKfzA.roa (hash: wEeQh2XWAPuKHpWujjLVJ6riJEtOHAoaBunxaQy6Zik=) 13: v2rwoS7yHsFbJ5cMnwXWzLwyhsY.roa (hash: 3EcXIUAH7WoExbmCLv7hnAwJquUxPlesN5bkpZ0X934=) 14: vrDbAJdP8mVX1BMd6HBUmMGwHZE.roa (hash: B6PLU5IsvyBpCwKQ7OOa5EKam/m+er7jApaI9hBf8u8=) 15: xVvDn0m0fXeWwpEduF8Zr5KQy28.roa (hash: B9DRRPtKbaexpxD65Wl+9gnEDLdZEAmYhn71t7uYyuo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:66:75:71:42:0f:e0:5c:71:47:c4:57:84:57:cf:7e:0d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=00aff6b4effe7c363ef200f6f3e5888b915ba681 Validity Not Before: May 11 07:02:03 2024 GMT Not After : May 12 07:02:03 2024 GMT Subject: CN=de5ccf9fce68d0be5d59b6b8497c34ba551590c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:ef:a5:07:41:7a:3c:5a:49:7f:b4:c0:f3:2d: ca:e7:94:9d:12:1a:1d:9c:19:35:67:4e:45:7d:3c: 2e:b5:cb:7a:d2:75:77:02:07:30:29:6c:92:c9:f2: 62:53:ad:9e:ff:a6:32:7f:3f:3c:f3:d1:a9:66:bd: f0:a2:2a:fa:39:9a:3d:04:b1:1e:f3:b7:65:78:12: 84:67:fa:2b:b8:9d:0d:da:b6:b2:bc:be:e9:92:5d: 31:c3:fa:6d:c4:ef:51:e0:9b:83:3e:c1:64:ff:a4: 46:16:ce:22:cb:cd:45:f7:44:9c:5f:63:af:e3:ba: 82:f4:59:a8:55:c1:5a:3d:b0:2b:cd:a1:7f:ba:e1: d9:2b:2b:eb:d3:6e:86:b5:8c:42:48:ff:58:ee:33: 83:c3:c8:ee:7a:d0:c3:c8:73:7f:32:e0:43:ca:3e: 6f:1b:81:7f:ca:72:72:84:41:9b:4d:49:2f:8c:9d: 1c:20:d2:30:69:70:04:a1:18:e5:47:0f:f6:13:c3: 5e:51:37:21:b7:f5:6d:a9:30:f9:72:90:e0:04:23: 7b:ee:4d:82:e0:e4:e2:74:db:4e:75:f0:91:7c:41: 7d:3b:91:af:00:12:cc:e4:73:ee:63:f7:f7:65:18: 39:83:97:ae:e3:6b:b1:70:8d:b4:d7:6a:cb:42:6b: 09:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:5C:CF:9F:CE:68:D0:BE:5D:59:B6:B8:49:7C:34:BA:55:15:90:C4 X509v3 Authority Key Identifier: keyid:00:AF:F6:B4:EF:FE:7C:36:3E:F2:00:F6:F3:E5:88:8B:91:5B:A6:81 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AK_2tO_-fDY-8gD28-WIi5FbpoE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/098d13-6d6d-4294-9753-a8773de768f7/1/AK_2tO_-fDY-8gD28-WIi5FbpoE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c8:db:b9:80:aa:c5:49:b5:4d:d8:ef:e0:77:b6:5b:8c:d1: 24:5a:18:23:01:86:1c:32:06:7c:80:2d:8d:50:8a:13:67:1f: 26:99:f7:f4:83:02:f1:79:f6:bf:d6:32:6a:04:b5:1f:57:ed: 14:fa:38:aa:6f:9d:1b:b3:1e:39:9d:80:6b:ea:ab:31:be:d7: d0:d7:25:02:b4:5a:f6:28:71:ed:71:7c:35:48:b2:5a:e4:de: d3:b4:04:c4:51:95:ca:cf:a2:09:b1:1a:9d:68:56:7b:b4:dd: e3:28:66:ea:f1:ba:21:30:4d:e3:47:d7:63:4b:5c:65:87:89: 9c:60:92:a6:17:2d:d1:3b:ea:01:ca:36:ba:54:c0:63:f3:63: 1b:6e:bf:72:fa:02:87:eb:29:16:1d:7d:43:fa:3d:50:39:0b: e8:6c:a6:b3:df:f8:b8:4f:ff:60:09:48:32:84:a9:db:7b:a1: 63:d0:c6:b3:a4:fe:1b:46:c2:a7:51:f6:49:6e:10:9f:d9:a6: 24:40:2c:a6:25:fa:70:d0:fa:9e:30:91:33:d4:a1:73:2b:86: c6:b1:6a:a0:0a:74:db:13:ba:54:55:72:a0:18:93:f3:e9:be: 7b:d1:31:81:f9:64:96:1f:19:0a:3f:fc:a2:87:a3:cc:c6:5d: c6:a1:2f:74 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9mdXFCD+BccUfEV4RXz34NMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDAwYWZmNmI0ZWZmZTdjMzYzZWYyMDBmNmYzZTU4ODhiOTE1 YmE2ODEwHhcNMjQwNTExMDcwMjAzWhcNMjQwNTEyMDcwMjAzWjAzMTEwLwYDVQQD EyhkZTVjY2Y5ZmNlNjhkMGJlNWQ1OWI2Yjg0OTdjMzRiYTU1MTU5MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv++lB0F6PFpJf7TA8y3K55SdEhod nBk1Z05FfTwutct60nV3AgcwKWySyfJiU62e/6Yyfz8889GpZr3woir6OZo9BLEe 87dleBKEZ/oruJ0N2rayvL7pkl0xw/ptxO9R4JuDPsFk/6RGFs4iy81F90ScX2Ov 47qC9FmoVcFaPbArzaF/uuHZKyvr026GtYxCSP9Y7jODw8juetDDyHN/MuBDyj5v G4F/ynJyhEGbTUkvjJ0cINIwaXAEoRjlRw/2E8NeUTcht/VtqTD5cpDgBCN77k2C 4OTidNtOdfCRfEF9O5GvABLM5HPuY/f3ZRg5g5eu42uxcI2012rLQmsJ/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN5cz5/OaNC+XVm2uEl8NLpVFZDEMB8GA1UdIwQY MBaAFACv9rTv/nw2PvIA9vPliIuRW6aBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMt YTg3NzNkZTc2OGY3LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC8wOThkMTMtNmQ2ZC00Mjk0LTk3NTMtYTg3NzNkZTc2OGY3 LzEvQUtfMnRPXy1mRFktOGdEMjgtV0lpNUZicG9FLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMjbuYCq xUm1Tdjv4He2W4zRJFoYIwGGHDIGfIAtjVCKE2cfJpn39IMC8Xn2v9YyagS1H1ft FPo4qm+dG7MeOZ2Aa+qrMb7X0NclArRa9ihx7XF8NUiyWuTe07QExFGVys+iCbEa nWhWe7Td4yhm6vG6ITBN40fXY0tcZYeJnGCSphct0TvqAco2ulTAY/NjG26/cvoC h+spFh19Q/o9UDkL6Gyms9/4uE//YAlIMoSp23uhY9DGs6T+G0bCp1H2SW4Qn9mm JEAspiX6cND6njCRM9ShcyuGxrFqoAp02xO6VFVyoBiT8+m+e9Exgflklh8ZCj/8 ooejzMZdxqEvdA== -----END CERTIFICATE-----Generated at Sat May 11 08:12:36 2024 by rpki-client on console-fra.rpki-client.org