$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft File: Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft (raw, json) Hash identifier: 9pFlkrcq6x+EYBBtnNRVdorFbMHydD01gbuKK7O6log= Subject key identifier: F0:06:04:06:27:D0:24:AA:DD:6F:49:AF:01:5A:FD:64:3F:B6:E0:A4 Authority key identifier: 5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 Certificate issuer: /CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Certificate serial: 018FA0D22D9F85ECB2CC210096C3922A8899 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft Manifest number: 1199 Signing time: Wed 22 May 2024 15:01:19 +0000 Manifest this update: Wed 22 May 2024 15:01:19 +0000 Manifest next update: Thu 23 May 2024 15:01:19 +0000 Files and hashes: 1: ExozHks5CJvUQIOuVqkHLgq8tlg.roa (hash: WhjQwEYHF/h9PbrP5uaVgKXsmOzRaD0+D3zjkioDA9c=) 2: F2Wo1pOD6_7EBx-UN77hPi4ucag.roa (hash: KU7w7x22Wmqr+mp9EPVHcZRX/4wpKr7zb49VenPl8Wo=) 3: K-EGJgUk_S4vTdbwk_KxOImM7Yg.roa (hash: +VISPEKbyDnR7EayuNO6GrWDjnqVJ1G8JME7YBn/H8I=) 4: QhGtzG-L7j2wK88rMz6pqT94rJI.roa (hash: 2PiUe6p+HOprKhkb7qkGKjEKDAE5QjxHFkwixTwK+7Y=) 5: Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl (hash: oqwXmj0bx6SOAu1gAYuGOa/Tqjy5wDBLVU6BGDMGGh8=) 6: _hTYaHq0bG36PVfpUYO_Iu1VM4k.roa (hash: UbCtcvYuCocDLa9jKkENqfK7ggiJQ1VoCCI9xi2w+uA=) 7: bb0lf7RWeLTfINZid0gIhB1hmGk.roa (hash: Imz7VWYHl3RdMlfLLxurbrfNeTdwdEnPfyp4xPiY6j8=) 8: jOInmPr3xpOK7P2BqZGkyht_j2k.roa (hash: 8avW4t10lzEhUDGS668heW/dwMwL8twYGHA/aDP44sk=) 9: kTrWfNa3msz-3R4wvNCqeCiwafY.roa (hash: RYFW5b1IJiwgaww26M4wU4/o8vXk3HEi7i6+GDtnuDI=) 10: t832DGNWHlGgZRG39ZEV_T3_Nj4.roa (hash: 2yzpJuMrYb2rwEhGq2/4kOhST/gEcP1c1XpuqoXcuwk=) 11: yCl_5K-7dutZfpVBsTRTujDdDI4.roa (hash: wOvw68YTFtg6h7cumH0+PL9juPbklsF6uxvg0G5lsJg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 23 May 2024 14:15:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:a0:d2:2d:9f:85:ec:b2:cc:21:00:96:c3:92:2a:88:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5eee0d7e73084a42e4c7f7118f2383fcff369ba4 Validity Not Before: May 22 15:01:19 2024 GMT Not After : May 23 15:01:19 2024 GMT Subject: CN=f006040627d024aadd6f49af015afd643fb6e0a4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:bc:d6:53:0f:ef:a9:25:98:6b:63:81:69:19: 23:9c:5e:60:fb:4a:95:1f:85:78:e5:b1:c2:b8:fd: 6e:72:97:71:c9:07:c3:08:c6:75:16:5c:46:d0:4c: 6b:46:d6:e2:a2:f7:b3:64:c7:ea:70:f7:e9:7e:0f: 3a:23:4e:56:15:fd:97:42:9a:56:e6:3a:95:20:57: 74:3f:c1:85:88:9c:8e:4b:dc:23:f6:68:27:07:ff: 55:09:c9:85:8e:df:a5:2a:d1:f1:5d:fa:9e:65:a3: 45:34:6c:a1:c7:79:c0:20:4a:41:c7:a7:d7:97:8f: 26:5d:c8:37:14:24:b4:a8:af:d9:f7:26:b4:8e:59: 0c:c9:8e:c0:f1:d5:ca:37:6b:9d:36:e3:0d:40:3b: 2c:04:d0:03:a8:92:75:06:24:40:38:23:d9:9f:b3: 58:48:8d:2d:92:f7:78:14:bb:6b:a4:44:e8:b8:07: 27:74:f5:f0:da:ef:00:32:fd:81:e3:32:d3:e2:2d: 31:bc:11:4f:aa:c9:0a:95:a8:55:f2:6d:5b:16:0e: bb:ea:95:78:5a:f8:2f:62:8d:78:46:1d:8a:b9:5b: fc:e5:3f:2b:be:b0:1c:fa:25:5f:63:c0:cd:39:cd: ab:68:16:2f:65:25:18:dc:19:19:b7:02:7d:f0:74: 8e:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F0:06:04:06:27:D0:24:AA:DD:6F:49:AF:01:5A:FD:64:3F:B6:E0:A4 X509v3 Authority Key Identifier: keyid:5E:EE:0D:7E:73:08:4A:42:E4:C7:F7:11:8F:23:83:FC:FF:36:9B:A4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xu4NfnMISkLkx_cRjyOD_P82m6Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/46/784321-99dd-4754-b208-ddc2665646cc/1/Xu4NfnMISkLkx_cRjyOD_P82m6Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:a0:1d:c3:3b:f0:bd:e7:ed:86:b3:4f:5a:b6:e6:cd:d2:72: 17:5b:72:77:6f:bb:98:5d:6c:6f:7a:3b:79:65:ab:c2:73:f2: 7c:ec:a9:ca:bd:25:19:53:c3:66:fd:cb:18:1a:e8:85:8c:f4: 70:29:22:4f:b2:98:5d:d0:84:0e:4d:2d:27:07:36:97:9f:e9: eb:52:52:56:a9:01:4f:d3:b2:a8:f4:a6:f1:4e:69:ce:59:bf: a1:40:db:06:5e:bd:8a:26:49:57:6f:79:39:be:83:10:bc:fa: 02:3d:85:fa:8b:53:ad:4e:3a:13:a9:e7:28:75:7f:df:01:5f: c0:78:25:c8:a3:90:f5:04:79:9f:10:c4:89:f7:31:f0:b2:3b: a2:a9:ca:a6:d6:89:f8:f3:78:03:4a:fb:47:0b:71:c9:51:23: c8:cb:08:b0:81:24:70:e0:68:d6:c2:bb:c7:be:bd:f4:a1:a6: e3:0c:9e:d0:fc:1a:c2:dd:15:70:ba:94:ba:7a:88:9f:64:0b: 5c:72:17:0e:f8:b3:c0:5c:e1:99:d7:f0:dc:ab:63:89:6f:f0: c9:d0:2e:29:ba:b7:32:af:5b:78:a4:42:b8:3f:eb:f2:82:ca: 55:53:8b:8f:96:7e:6b:49:db:39:1b:d6:58:e6:3e:1a:6f:cc: e7:c2:b0:a5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+g0i2fheyyzCEAlsOSKoiZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlZWUwZDdlNzMwODRhNDJlNGM3ZjcxMThmMjM4M2ZjZmYz NjliYTQwHhcNMjQwNTIyMTUwMTE5WhcNMjQwNTIzMTUwMTE5WjAzMTEwLwYDVQQD EyhmMDA2MDQwNjI3ZDAyNGFhZGQ2ZjQ5YWYwMTVhZmQ2NDNmYjZlMGE0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtrzWUw/vqSWYa2OBaRkjnF5g+0qV H4V45bHCuP1ucpdxyQfDCMZ1FlxG0ExrRtbiovezZMfqcPfpfg86I05WFf2XQppW 5jqVIFd0P8GFiJyOS9wj9mgnB/9VCcmFjt+lKtHxXfqeZaNFNGyhx3nAIEpBx6fX l48mXcg3FCS0qK/Z9ya0jlkMyY7A8dXKN2udNuMNQDssBNADqJJ1BiRAOCPZn7NY SI0tkvd4FLtrpETouAcndPXw2u8AMv2B4zLT4i0xvBFPqskKlahV8m1bFg676pV4 WvgvYo14Rh2KuVv85T8rvrAc+iVfY8DNOc2raBYvZSUY3BkZtwJ98HSOLQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPAGBAYn0CSq3W9JrwFa/WQ/tuCkMB8GA1UdIwQY MBaAFF7uDX5zCEpC5Mf3EY8jg/z/NpukMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgt ZGRjMjY2NTY0NmNjLzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ni83ODQzMjEtOTlkZC00NzU0LWIyMDgtZGRjMjY2NTY0NmNj LzEvWHU0TmZuTUlTa0xreF9jUmp5T0RfUDgybTZRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa6Adwzvw vefthrNPWrbmzdJyF1tyd2+7mF1sb3o7eWWrwnPyfOypyr0lGVPDZv3LGBrohYz0 cCkiT7KYXdCEDk0tJwc2l5/p61JSVqkBT9OyqPSm8U5pzlm/oUDbBl69iiZJV295 Ob6DELz6Aj2F+otTrU46E6nnKHV/3wFfwHglyKOQ9QR5nxDEifcx8LI7oqnKptaJ +PN4A0r7RwtxyVEjyMsIsIEkcOBo1sK7x7699KGm4wye0Pwawt0VcLqUunqIn2QL XHIXDvizwFzhmdfw3KtjiW/wydAuKbq3Mq9beKRCuD/r8oLKVVOLj5Z+a0nbORvW WOY+Gm/M58KwpQ== -----END CERTIFICATE-----Generated at Wed May 22 20:38:58 2024 by rpki-client on console-ams.rpki-client.org