$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft File: lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft (raw, json) Hash identifier: OkqJ1SYep7bkO9BRQGqtmStr3EdvIXBh06EwEQTEwaM= Subject key identifier: 57:A9:BD:97:A9:96:83:BD:04:1C:8B:11:57:C0:DC:D3:98:21:48:4E Authority key identifier: 94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7 Certificate issuer: /CN=94e59d245d150dc38c4896263dcbdcbbd67470a7 Certificate serial: 018F8DB84E4AE657E2432A7DBEBCFBEECEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft Manifest number: 0C67 Signing time: Sat 18 May 2024 22:00:17 +0000 Manifest this update: Sat 18 May 2024 22:00:17 +0000 Manifest next update: Sun 19 May 2024 22:00:17 +0000 Files and hashes: 1: 7HE6VFnxNrxsGEl0Cc9SwzGx7eE.roa (hash: D4VKUz51nPOAqP8jpwvX6nIoEcNB/kytOgLIJeYESzE=) 2: 8KlmU1_x3882Vn0fLnpZTtx5htA.roa (hash: d4pYpKXKYtPlv6B5XaBl54cI8QV0V+3VdgwSpGNnsoA=) 3: 9YSMFiMlRZwV7h05Ma0v0N760ek.roa (hash: d9/tk6apx1v04behTcTeiIJfHvXUawhNcQI7h/Wb+OY=) 4: C-tI8Ctvd-QFItp1DaSb1mwJecI.roa (hash: znLJRQbCJCGOhqryNfybsbkyj7XEhyzjj8narua6Qc0=) 5: JkVxT7rc0_ZfLC2z23EVFM4FBhw.roa (hash: YFJO2y7UHoXA0w1BHc+abQ9nMbHgPZWA7Ax5GKuxYHU=) 6: MxLHYKG8ALqiNIkQkd8HYgBqI7w.roa (hash: RffIZ+7NuRyGihm5ZdP1RJx1BbyL6lJQnGGIK/EHCqA=) 7: _XCQOMznwFR8_y9f73avkQJ2UwY.roa (hash: 64c3+YcD2mF4ykcyM57gZ+H7gUCHI9PDEVnUg4LQdiU=) 8: l6hrK_DDc93gig5rS-6eCwAdtKs.roa (hash: zU2dccGoAgAfwb5fQg6JTVHxHrP4EOL/fnO4kZ5cGDE=) 9: lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl (hash: Ia5VMc55Gr+Wd542o5qLXfzLDCYydtyMUyVNxJ1G1mM=) 10: p-e5GeJ2GYGginiuedMVq05GQwI.roa (hash: Q5+gbCrlITSZ7YIV+funm97Giz6I31FEJciFyMKUJDM=) 11: uk9UqWATpqXTmj7gXyCcWFewXwo.roa (hash: ALm7sAh2fVOlRWnlcNPEVLqFozMWoPzBQUfwIWEdY6Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 20:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8d:b8:4e:4a:e6:57:e2:43:2a:7d:be:bc:fb:ee:ce:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=94e59d245d150dc38c4896263dcbdcbbd67470a7 Validity Not Before: May 18 22:00:17 2024 GMT Not After : May 19 22:00:17 2024 GMT Subject: CN=57a9bd97a99683bd041c8b1157c0dcd39821484e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2b:49:a0:67:9f:d4:ca:af:d5:6e:80:2c:f6: a3:01:71:53:e4:37:2e:e3:65:66:15:46:e9:77:b3: e6:b8:9c:34:56:b1:04:e9:b0:2b:2e:f4:5f:9c:17: 69:8e:81:87:0b:86:17:6d:64:11:7e:06:5f:16:c4: 99:ad:df:2e:22:8f:44:f6:14:35:bb:63:e5:b5:9a: 16:7b:8a:04:79:be:6b:80:25:c4:15:21:25:ec:7c: 0b:38:4f:f1:d5:0a:1e:40:f3:54:5a:a2:0d:62:bd: 61:f1:c4:0c:cd:06:02:91:b3:aa:db:07:0d:ff:2a: 28:1b:33:80:ee:17:7f:f2:07:c1:00:0a:aa:1e:10: 14:8f:c9:68:b3:28:17:8b:c6:1d:4c:dc:89:cb:97: 75:b8:c7:66:51:4d:e0:87:bb:ec:30:b1:50:0b:92: 6b:0d:dd:3a:2c:66:65:a9:8d:79:77:45:63:85:7f: 22:3b:32:33:b1:b9:02:82:24:c3:ff:e9:dc:96:32: d9:e8:04:ec:5c:76:dd:7c:40:a1:b0:bc:a4:a0:b5: 88:9e:7c:12:16:68:0a:0c:09:c3:79:70:f5:34:ae: ec:6f:69:d8:31:a1:24:07:0f:8c:e7:69:1f:73:a5: 8c:97:b2:f9:eb:df:67:76:e0:c5:16:32:a1:17:fb: d4:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:A9:BD:97:A9:96:83:BD:04:1C:8B:11:57:C0:DC:D3:98:21:48:4E X509v3 Authority Key Identifier: keyid:94:E5:9D:24:5D:15:0D:C3:8C:48:96:26:3D:CB:DC:BB:D6:74:70:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/50/287cd2-f1d8-44a9-bed2-ee95b6cc3474/1/lOWdJF0VDcOMSJYmPcvcu9Z0cKc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:6c:d7:fd:65:04:09:da:50:17:f3:64:1b:67:33:1f:2b:bb: 33:91:6f:c8:65:b7:28:de:42:03:60:1c:e8:57:41:cf:2e:64: b5:bc:d7:1c:7b:11:74:0c:cf:ae:ba:4a:d1:bf:99:ed:c0:e0: 70:8c:f2:b3:13:5c:8c:d8:7a:9a:b9:5d:e8:3d:64:3b:34:6f: 7f:c8:65:34:81:a2:7b:09:09:f7:80:7b:a2:0f:0d:55:be:91: eb:bc:ff:b6:0f:fb:0d:b6:f4:9c:2d:a5:f3:85:ab:4b:67:c7: db:71:41:f0:bf:8b:f8:91:c3:f6:9b:37:b5:c7:38:7d:1d:ae: 2d:1f:1d:0b:cb:32:9e:f0:66:10:bd:51:0e:c0:7c:32:b3:22: ba:a3:9a:ce:2e:d7:94:b5:26:8a:d4:32:af:9b:c2:47:7b:7c: 92:e5:1f:c6:93:3f:77:5a:30:d4:36:d4:45:e0:89:86:b7:40: 10:59:d7:be:eb:15:c7:c7:d8:f8:fc:37:52:f1:5c:85:de:22: 0e:1f:67:eb:37:73:f7:0a:9f:c4:2d:6d:df:17:c4:6c:46:d8: 02:73:6c:29:3b:f0:5d:f4:e5:e2:1a:8b:9d:ab:72:a7:19:33: 39:4e:dd:f6:4f:99:fc:26:ba:1d:91:91:4e:b4:3d:7f:99:46: 51:cb:d4:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+NuE5K5lfiQyp9vrz77s7eMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDk0ZTU5ZDI0NWQxNTBkYzM4YzQ4OTYyNjNkY2JkY2JiZDY3 NDcwYTcwHhcNMjQwNTE4MjIwMDE3WhcNMjQwNTE5MjIwMDE3WjAzMTEwLwYDVQQD Eyg1N2E5YmQ5N2E5OTY4M2JkMDQxYzhiMTE1N2MwZGNkMzk4MjE0ODRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCtJoGef1Mqv1W6ALPajAXFT5Dcu 42VmFUbpd7PmuJw0VrEE6bArLvRfnBdpjoGHC4YXbWQRfgZfFsSZrd8uIo9E9hQ1 u2PltZoWe4oEeb5rgCXEFSEl7HwLOE/x1QoeQPNUWqINYr1h8cQMzQYCkbOq2wcN /yooGzOA7hd/8gfBAAqqHhAUj8losygXi8YdTNyJy5d1uMdmUU3gh7vsMLFQC5Jr Dd06LGZlqY15d0VjhX8iOzIzsbkCgiTD/+ncljLZ6ATsXHbdfEChsLykoLWInnwS FmgKDAnDeXD1NK7sb2nYMaEkBw+M52kfc6WMl7L5699nduDFFjKhF/vUtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFepvZeploO9BByLEVfA3NOYIUhOMB8GA1UdIwQY MBaAFJTlnSRdFQ3DjEiWJj3L3LvWdHCnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDIt ZWU5NWI2Y2MzNDc0LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81MC8yODdjZDItZjFkOC00NGE5LWJlZDItZWU5NWI2Y2MzNDc0 LzEvbE9XZEpGMFZEY09NU0pZbVBjdmN1OVowY0tjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2zX/WUE CdpQF/NkG2czHyu7M5FvyGW3KN5CA2Ac6FdBzy5ktbzXHHsRdAzPrrpK0b+Z7cDg cIzysxNcjNh6mrld6D1kOzRvf8hlNIGiewkJ94B7og8NVb6R67z/tg/7Dbb0nC2l 84WrS2fH23FB8L+L+JHD9ps3tcc4fR2uLR8dC8synvBmEL1RDsB8MrMiuqOazi7X lLUmitQyr5vCR3t8kuUfxpM/d1ow1DbUReCJhrdAEFnXvusVx8fY+Pw3UvFchd4i Dh9n6zdz9wqfxC1t3xfEbEbYAnNsKTvwXfTl4hqLnatypxkzOU7d9k+Z/Ca6HZGR TrQ9f5lGUcvUOA== -----END CERTIFICATE-----Generated at Sun May 19 00:19:20 2024 by rpki-client on console-fra.rpki-client.org