$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: SvJZL0jDdyT65Kx/M29KSX1o+E4izlyMHc314NzK1Jw= Subject key identifier: E3:8C:66:C2:6A:69:58:A8:D4:33:08:4A:EC:4E:DC:6F:7A:F3:25:F3 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 018F8C380F9F0223706BA0066D148DACCE37 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 0C8E Signing time: Sat 18 May 2024 15:00:35 +0000 Manifest this update: Sat 18 May 2024 15:00:35 +0000 Manifest next update: Sun 19 May 2024 15:00:35 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: j5gB7FoQvPVcXhoBH2T9w1Gd9xznOxbErrldDOiB3W8=) 2: 6Cei3N3EIJK-UOjtNLBdBl41h0M.roa (hash: +rQ1LcKQpgiYZYD7P30B3ISKy+AmL+KCkTWH3FacAAc=) 3: RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa (hash: NS15tOaWYhYTknAT3SqxYYWRSRmWeDH3pgaoR86ohWg=) 4: S9W59O5vFGtLr22z984JcUprRVw.roa (hash: 0B6H3spMSATc1SmNzf0vcV2AAIvAzYS7hS2hMgMj8aA=) 5: UCnug3VKUD3FXa61R4sRX5Hq1h4.roa (hash: D2As3QN2SMI79Nc8MlGCxrk9sjZ9F7Rn4L0GBEFykWM=) 6: _oeU2AXD9MP7JmNoNP1XLbEJOmo.roa (hash: ft+YL7TdR8vP2mgCFPVLiKXd9sGY96tWTyUW/2o2dDE=) 7: axmao9c91WhnDc1U4oVL67WCRhk.roa (hash: 2fcECHGE0jOkyK+wifFkygHd1q5QnrKHXGGLTXEx3VE=) 8: b51aHn1b6WUHuYiRy1qncnMHeCs.roa (hash: cZ/VIYvMA+X4Dw0vuM/jt4H8DyAihep4MvQc4YRAfqo=) 9: coMIAUfsxKtGYE-hzn5HVJu7tXM.roa (hash: R4wvLEhddnWcKFgR/aVleZh28x06YSwWAmeYhMI/ouQ=) 10: lmlWx1Ko99chUANlRGPxPreTwRI.roa (hash: MQLZFlLp4Nw7Qi7YCH6/+vYfJ5NRUfI9PznkZ+AW+7Q=) 11: oEQMBHsB9wQoDdfdluhkF-eSZ7k.roa (hash: yvfvkhyYtA7cAP7Qm2CVUycBAj9sshP3P81oEPk4ozA=) 12: vb4Mu2CSpnF2YvquxSqZSslH91I.roa (hash: RLgsf5PmnPOhylQALfe1U+K+2qJ2yvgM/xFA+Z25kBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 15:00:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8c:38:0f:9f:02:23:70:6b:a0:06:6d:14:8d:ac:ce:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: May 18 15:00:35 2024 GMT Not After : May 19 15:00:35 2024 GMT Subject: CN=e38c66c26a6958a8d433084aec4edc6f7af325f3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:67:65:1e:74:58:e2:6e:bc:6a:3e:57:d7:72: 21:6c:92:d1:60:86:cf:2b:22:16:97:0b:f7:8f:77: dd:f1:f7:3c:c5:3f:40:a3:45:db:e7:9a:2d:66:4c: c0:90:44:f8:90:b9:fe:49:df:66:7c:61:af:28:74: 17:8e:99:8a:99:02:2a:6b:00:e4:c6:bf:a2:a8:73: 43:34:8c:cf:13:9e:5f:00:22:58:0f:b7:65:29:cd: 31:01:f8:6c:56:4e:ad:e3:62:eb:1a:f6:5c:17:7a: f4:fa:b6:c3:a1:d3:31:3c:34:80:4f:37:1c:14:f4: 83:bb:29:83:04:5c:81:cc:41:a4:38:50:ef:c5:6c: 98:95:f0:ac:5a:ea:98:9b:90:78:41:d0:a7:b3:ce: 85:7d:88:44:db:b0:49:57:aa:b2:5b:35:00:b3:6d: ce:d1:e1:ec:6b:7e:d1:cd:bc:92:3c:44:9f:ab:29: 79:7f:0b:97:0c:98:1f:31:18:ab:53:9e:6c:e6:74: 4f:91:76:f2:9d:e5:b6:51:9b:35:33:5f:d8:fe:bd: e5:92:c7:84:83:c1:f2:d7:35:fd:14:cf:da:d6:16: 36:87:32:62:00:e0:31:c7:22:4e:63:7b:0b:3c:e6: c1:5f:74:ee:5f:48:1c:50:ec:54:d3:35:eb:e9:20: ac:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:8C:66:C2:6A:69:58:A8:D4:33:08:4A:EC:4E:DC:6F:7A:F3:25:F3 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d4:dd:8f:5c:d3:4c:26:b0:c1:e9:19:02:37:c8:75:14:ae:d9: 4a:df:03:db:72:c2:a0:5f:6d:7a:f5:2e:e1:1a:0d:39:b5:98: 11:75:e1:b3:b1:9a:74:ce:13:36:b2:0b:62:b3:1e:d2:97:35: f0:2f:f4:1a:5e:44:c8:b8:d5:ed:0c:c2:58:eb:7e:c2:e8:ec: bf:0c:20:00:d3:a6:f0:bc:66:0d:78:6f:c7:b8:8d:47:ae:d2: 79:c6:9d:66:9a:7f:c7:bd:5a:57:de:0c:b4:be:1f:d5:3c:2b: 4f:26:e2:c6:68:a0:d2:cf:0c:ab:ba:a4:c8:53:2d:89:a0:c6: 28:e4:91:72:8f:6d:03:8d:15:31:87:1e:ed:68:2e:3e:62:51: 25:fd:37:8d:6b:de:a1:0a:7b:94:d0:0b:5e:e7:33:54:1a:f6: 65:4f:23:7d:0b:97:55:78:d6:d9:b5:73:8c:05:53:4c:fd:61: 05:31:d3:26:27:7b:24:ed:e9:f4:2a:86:ed:22:12:88:b3:7a: d9:97:1e:b8:f0:cf:0c:ad:c9:96:76:a9:f4:9f:be:52:d4:53: e2:fd:a1:f2:0c:7f:73:10:f3:3f:fe:7c:f3:0c:37:a1:54:08: ca:ee:33:ef:0b:e2:ea:90:fd:3a:59:19:5b:da:56:83:e4:b8: ef:a3:31:b5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+MOA+fAiNwa6AGbRSNrM43MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjQwNTE4MTUwMDM1WhcNMjQwNTE5MTUwMDM1WjAzMTEwLwYDVQQD EyhlMzhjNjZjMjZhNjk1OGE4ZDQzMzA4NGFlYzRlZGM2ZjdhZjMyNWYzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu2dlHnRY4m68aj5X13IhbJLRYIbP KyIWlwv3j3fd8fc8xT9Ao0Xb55otZkzAkET4kLn+Sd9mfGGvKHQXjpmKmQIqawDk xr+iqHNDNIzPE55fACJYD7dlKc0xAfhsVk6t42LrGvZcF3r0+rbDodMxPDSATzcc FPSDuymDBFyBzEGkOFDvxWyYlfCsWuqYm5B4QdCns86FfYhE27BJV6qyWzUAs23O 0eHsa37RzbySPESfqyl5fwuXDJgfMRirU55s5nRPkXbyneW2UZs1M1/Y/r3lkseE g8Hy1zX9FM/a1hY2hzJiAOAxxyJOY3sLPObBX3TuX0gcUOxU0zXr6SCsVwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOOMZsJqaVio1DMISuxO3G968yXzMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA1N2PXNNM JrDB6RkCN8h1FK7ZSt8D23LCoF9tevUu4RoNObWYEXXhs7GadM4TNrILYrMe0pc1 8C/0Gl5EyLjV7QzCWOt+wujsvwwgANOm8LxmDXhvx7iNR67SecadZpp/x71aV94M tL4f1TwrTybixmig0s8Mq7qkyFMtiaDGKOSRco9tA40VMYce7WguPmJRJf03jWve oQp7lNALXuczVBr2ZU8jfQuXVXjW2bVzjAVTTP1hBTHTJid7JO3p9CqG7SISiLN6 2ZceuPDPDK3Jlnap9J++UtRT4v2h8gx/cxDzP/588ww3oVQIyu4z7wvi6pD9OlkZ W9pWg+S476MxtQ== -----END CERTIFICATE-----Generated at Sat May 18 22:25:49 2024 by rpki-client on console-fra.rpki-client.org