$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft File: Vw-w8di4wZiw3IYVivvLxSnPFr4.mft (raw, json) Hash identifier: DWeOtPE0HJEt4ox4t3QTmsh889c3LVe/UamoIJwDQMQ= Subject key identifier: 4B:29:BF:CD:5E:15:51:D1:5C:6A:4B:E5:F6:BB:F0:FC:B7:9A:0B:02 Authority key identifier: 57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE Certificate issuer: /CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Certificate serial: 018F8590D5C48906550932817CFA16C0C775 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft Manifest number: 0C3F Signing time: Fri 17 May 2024 08:00:12 +0000 Manifest this update: Fri 17 May 2024 08:00:12 +0000 Manifest next update: Sat 18 May 2024 08:00:12 +0000 Files and hashes: 1: 1-7S4RDci-bUtz72kXcHo1qx2A4s.roa (hash: URcrNgNIBKmROVYTJa1B1JbAes9TOZybp2mxgBHH1sg=) 2: FWK6GacTYWZAAypx3VLHoOT4SrU.roa (hash: Rw8/APAHfJW04tiDKNKlJC3jGvuHtJ1BJG8n3Lsx0Fc=) 3: IKbFVeLHSzMQzY8rr7EGrRNj5bo.roa (hash: x3BeOtur65JCi3CHqxUUWa0qb/k4g4P1eVbr0A8E4/w=) 4: NOVczOQ409h2PMpzuvf5oWXO3l0.roa (hash: RzQ9Ao6w1Z1a47DzMVsfGHOEHnSMz6LlIslTdLyOQB0=) 5: TuULWgGaoC3mu_RvIJ9-xj1ghik.roa (hash: Uf/F6030UF+UAOzjs7Ckt140LjcdfM4Jcm04J20zFhQ=) 6: Uze0H9awSqxFNLEhGNM_Kn0ofh0.roa (hash: iFZncEZUTgc6loLXtkqcCDgZYiM0h5jCMrjJWNj7aYM=) 7: Vw-w8di4wZiw3IYVivvLxSnPFr4.crl (hash: 2Pci2SqXFs19yXZayfJq9j8DBnD2y7fsRpuKHrQ2AE4=) 8: q_bFvm8_yyfPPmzpJc8AYpoA7qA.roa (hash: bf3iQnl8+VzznCCd7Gm1JIZFvIadEtKGWDwoaV4tV+o=) 9: sMJZ-kHs12ZwILiHY0nT988iRCI.roa (hash: WLwrm7tP9knOxgXfqqQta9/BqtNxeogiAQDfuEByhcg=) 10: si6ZcdJ-vO-8yrHvX1OWKL2bRRs.roa (hash: zmcxhLRYbvgQYcCuOBPIsmwr1vrrJVN+S6L5jI4cgdw=) 11: wAqunWDrypnJ-F2V84SWEXdL4PQ.roa (hash: IYZ1m2vl2Vj5h3lCjOOrUas1xAX4EIhvf/tCyZ9PWnI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 08:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:85:90:d5:c4:89:06:55:09:32:81:7c:fa:16:c0:c7:75 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=570fb0f1d8b8c198b0dc86158afbcbc529cf16be Validity Not Before: May 17 08:00:12 2024 GMT Not After : May 18 08:00:12 2024 GMT Subject: CN=4b29bfcd5e1551d15c6a4be5f6bbf0fcb79a0b02 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8b:f2:71:74:a1:17:9a:d7:a3:39:e3:fc:c8:1d: e4:3e:86:30:0c:f3:5b:31:d4:f6:55:22:37:66:a6: 8f:d8:b6:1b:cb:ae:97:e5:57:b3:24:92:cf:96:81: 8a:07:8c:ef:d3:f5:c3:65:15:fc:4f:41:10:1c:44: 8e:5a:02:50:61:83:f7:84:75:fa:b4:e1:35:1a:54: 06:e1:11:d2:4b:48:9c:e0:2d:ed:e1:9b:d7:5d:72: 14:28:c5:40:8c:20:7e:c0:3d:b8:3f:5d:2e:a6:03: d2:6d:bc:fc:ca:c7:f6:8e:e9:d2:5d:2c:b9:53:ca: f9:86:08:2b:b9:c1:f7:33:a2:72:a9:f4:ec:ee:78: 58:c4:d2:81:57:76:50:b6:f1:22:7b:f3:bf:ec:ee: 58:c8:b6:ae:8e:4e:96:c8:0c:3c:cf:a6:dc:30:74: ec:a1:33:f5:e0:a9:70:a8:42:a8:5b:9a:b6:75:6a: e3:ab:cd:e1:6f:14:0f:ee:18:39:a9:7e:2b:9e:f9: fd:38:17:e8:e0:5b:78:ca:b9:48:06:22:80:c5:d3: bb:e8:2b:d4:11:54:97:f4:71:7c:f0:33:2a:d7:00: b9:c8:56:02:2c:8e:c7:5b:ae:31:d1:84:75:04:bb: 98:9a:7f:0b:81:89:5f:f5:39:6c:40:83:e0:75:55: d5:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4B:29:BF:CD:5E:15:51:D1:5C:6A:4B:E5:F6:BB:F0:FC:B7:9A:0B:02 X509v3 Authority Key Identifier: keyid:57:0F:B0:F1:D8:B8:C1:98:B0:DC:86:15:8A:FB:CB:C5:29:CF:16:BE X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vw-w8di4wZiw3IYVivvLxSnPFr4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/61/0949fc-accd-471f-a9cd-97243e316272/1/Vw-w8di4wZiw3IYVivvLxSnPFr4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:77:45:27:0e:1a:8f:3c:22:eb:60:5e:b0:3b:4d:ea:c1: ed:60:d0:4e:cb:a0:b0:c4:dd:ee:45:d9:91:91:09:22:83:be: 23:74:82:5b:d3:d8:58:62:67:46:49:ef:59:4b:5a:47:d9:e5: 6a:95:f0:69:36:d4:bf:95:df:9d:0e:28:e0:9c:e8:63:4d:9e: ec:38:57:f0:5d:37:b3:9d:d6:a2:a2:96:85:49:69:8c:ed:73: d5:79:45:3f:a6:95:40:3d:8b:f8:ca:30:a9:34:1d:12:fa:0f: 83:66:ed:a6:d7:bc:9b:6e:44:fe:1e:e5:57:29:cd:7b:df:9f: 55:6b:b2:8b:3c:40:ef:c2:be:e1:41:8f:c8:0f:19:20:ad:da: 3b:3b:d2:41:6a:b2:1d:1a:5e:b8:c6:f6:fc:09:3e:d8:39:57: d6:77:a4:02:6a:4a:ec:18:b3:34:c4:83:49:31:c3:02:f6:86: 23:2b:4d:76:6a:fb:e5:47:02:cf:aa:e1:e6:53:8e:bf:aa:f5: ab:c2:b0:63:4f:ac:e5:8d:89:5e:13:23:cc:59:81:34:33:64: 9e:35:f5:5f:fc:e5:4a:d4:0d:18:1d:8a:87:61:85:a5:4a:11: 5c:07:1e:90:80:57:c1:f7:da:d2:9c:f9:4c:1d:7d:be:36:8a: 2c:80:67:d1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+FkNXEiQZVCTKBfPoWwMd1MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDU3MGZiMGYxZDhiOGMxOThiMGRjODYxNThhZmJjYmM1Mjlj ZjE2YmUwHhcNMjQwNTE3MDgwMDEyWhcNMjQwNTE4MDgwMDEyWjAzMTEwLwYDVQQD Eyg0YjI5YmZjZDVlMTU1MWQxNWM2YTRiZTVmNmJiZjBmY2I3OWEwYjAyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi/JxdKEXmtejOeP8yB3kPoYwDPNb MdT2VSI3ZqaP2LYby66X5VezJJLPloGKB4zv0/XDZRX8T0EQHESOWgJQYYP3hHX6 tOE1GlQG4RHSS0ic4C3t4ZvXXXIUKMVAjCB+wD24P10upgPSbbz8ysf2junSXSy5 U8r5hggrucH3M6JyqfTs7nhYxNKBV3ZQtvEie/O/7O5YyLaujk6WyAw8z6bcMHTs oTP14KlwqEKoW5q2dWrjq83hbxQP7hg5qX4rnvn9OBfo4Ft4yrlIBiKAxdO76CvU EVSX9HF88DMq1wC5yFYCLI7HW64x0YR1BLuYmn8LgYlf9TlsQIPgdVXV8QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFEspv81eFVHRXGpL5fa78Py3mgsCMB8GA1UdIwQY MBaAFFcPsPHYuMGYsNyGFYr7y8Upzxa+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2Qt OTcyNDNlMzE2MjcyLzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82MS8wOTQ5ZmMtYWNjZC00NzFmLWE5Y2QtOTcyNDNlMzE2Mjcy LzEvVnctdzhkaTR3Wml3M0lZVml2dkx4U25QRnI0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5x3RScO Go88IutgXrA7TerB7WDQTsugsMTd7kXZkZEJIoO+I3SCW9PYWGJnRknvWUtaR9nl apXwaTbUv5XfnQ4o4JzoY02e7DhX8F03s53WoqKWhUlpjO1z1XlFP6aVQD2L+Mow qTQdEvoPg2btpte8m25E/h7lVynNe9+fVWuyizxA78K+4UGPyA8ZIK3aOzvSQWqy HRpeuMb2/Ak+2DlX1nekAmpK7BizNMSDSTHDAvaGIytNdmr75UcCz6rh5lOOv6r1 q8KwY0+s5Y2JXhMjzFmBNDNknjX1X/zlStQNGB2Kh2GFpUoRXAcekIBXwffa0pz5 TB19vjaKLIBn0Q== -----END CERTIFICATE-----Generated at Fri May 17 11:28:07 2024 by rpki-client on console-ams.rpki-client.org