$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: swbg/GLTMK1L4RtLpwxLQhe8WWHlmKWG6+2Qhote2eg= Subject key identifier: A4:AC:43:29:02:54:E0:CE:4E:A9:BB:07:24:4A:89:04:9A:6A:CF:AE Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01904152C022986A737B4BFBF60E9BEBC931 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 11DC Signing time: Sat 22 Jun 2024 19:01:00 +0000 Manifest this update: Sat 22 Jun 2024 19:01:00 +0000 Manifest next update: Sun 23 Jun 2024 19:01:00 +0000 Files and hashes: 1: 1qm3Mf0sxLsm_3eFprF7b8EXIRs.roa (hash: 3LfqRVXKyl3+Y7d3t9hKEGcLEPbZlfpC1NsjE8HFirw=) 2: 2DwpblydvurCgJdGvPjTJGchERc.roa (hash: 3YfuOvB0LbZ9KybmwXWTR6ICRKkKlU63df+dlAKrAgs=) 3: ARfwWn0rX9xLD1jDW4BpMM69WzM.roa (hash: U6BAgEGc51zFRDlRgNGbi4a2JY+uVix71Zg55CfkJVg=) 4: Hjny0sgET9oELwpATK6U1gtl8kg.roa (hash: C9e0cp+OY9QSbTu5yRSPmJqbtzoolqj3l4osQKfuHzM=) 5: Ym0exnGJC_HyhpNrRQhuGwBNk2o.roa (hash: HJ+pDvprSuqsr3eHtnp8DGJqvbIifRSKM+pKt2vpKVg=) 6: Zbv8yhed5e7hsc-Zaj0mMDRwlg8.roa (hash: IQcaMNpA1ro/+PtoDgI8j6x3uT5FzRioOdgU0o16Jp4=) 7: c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa (hash: Lo7EcrrAGADtVHFg0U7vmMDBN/ZmmjcXFXoFYIdLRiU=) 8: cCMlm41ratuRvJx2G7TErBhnBjo.roa (hash: KQlV1baL0MntuEDWVB37jSjm2Om6g3ArRiE5Nu3pQDI=) 9: fIxFQ1oGk2QNBupFI-kaZghISug.roa (hash: p9VCHv9sK8swWZ+qPR+Nh2NdwLixpSvsRLRxzHvBj6U=) 10: gdP_WlXtUNlvre71GXo3uuWHW68.roa (hash: SfslHbYe33TNHmAgcnEo1HmOZsdugu2sTg/p4Kw73GA=) 11: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: A/cSa1uArJR5udyU9dq4MXrziLkmvBN9HRIfAnEhMHY=) 12: rqAXkP67WG94KcVzcs1G3qBCxzQ.roa (hash: K/srJeeYxETfDAQdpL7AD233zBih+qbr30uMn6qQchI=) 13: sE_LZ9078WqL3-jBlgqBtwsyd_0.roa (hash: DEdPhB+RWS0+TI429R93DS9M2kG1jh2vMKn7gQhokmw=) 14: sGNLBQRjtkOo8pcj6cPCi5vOKBU.roa (hash: j0RxiNNiLYCzSg+buBzjowVIjaENN1yyG8uMiSOeIJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 19:01:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:41:52:c0:22:98:6a:73:7b:4b:fb:f6:0e:9b:eb:c9:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jun 22 19:01:00 2024 GMT Not After : Jun 23 19:01:00 2024 GMT Subject: CN=a4ac43290254e0ce4ea9bb07244a89049a6acfae Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:b0:f7:be:34:64:49:56:26:b6:e9:37:95:e6: 31:e3:6e:83:0b:8a:b2:14:1b:f9:b0:94:a6:4e:08: 1a:36:2e:af:3e:c5:20:92:d1:6d:71:a4:b1:cd:7d: 5e:44:28:37:5b:1e:c5:bc:16:c2:8e:68:93:40:b6: ca:f7:3d:ea:96:e7:51:fc:1a:fa:a5:68:4d:13:79: 0d:0b:7a:94:88:65:c1:cd:da:03:db:47:9a:d2:df: a8:c2:70:47:41:90:bc:24:0c:9b:c3:c5:91:5e:a8: d8:a1:49:42:e1:59:f1:d9:d3:b8:e4:15:66:eb:d5: 66:75:70:c7:48:95:43:8f:69:d3:55:11:50:60:ae: 68:46:5c:26:92:ee:ee:b0:64:06:f2:4b:da:41:c3: 18:8f:9f:a1:21:21:77:8e:9f:88:16:ec:f3:83:8f: e9:f7:5a:e0:64:96:14:45:ce:2a:59:37:7d:06:8c: c6:19:dc:a9:21:47:4d:8a:cb:6d:5a:ac:df:54:7c: e9:3e:8e:9e:e5:20:19:86:9a:97:8e:42:4b:bd:0b: 95:8c:d8:ef:e1:4f:0c:aa:84:d5:a2:fe:bd:01:6a: f0:01:28:2d:65:5c:f2:ae:0b:49:ff:3a:d8:e2:01: 8f:9b:f1:e7:f9:3d:bb:ba:2c:20:5f:43:de:f3:00: dd:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A4:AC:43:29:02:54:E0:CE:4E:A9:BB:07:24:4A:89:04:9A:6A:CF:AE X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:db:39:e6:e5:3d:b1:f9:5c:ea:49:46:43:d3:b7:4f:1b:0e: 63:30:a8:7c:bd:ab:f9:98:26:71:0e:c4:f4:75:12:31:8d:39: a7:06:23:0a:85:c5:6d:cd:df:8a:f5:84:1f:2f:32:c0:ea:19: 22:62:30:89:41:d1:b1:89:29:65:8b:d3:53:e1:68:b3:cc:d3: a4:8e:2a:c2:4f:73:05:df:51:c6:06:0d:f8:6c:16:c3:b3:dc: a8:19:9e:82:e5:30:ce:01:86:e9:11:b1:18:26:4e:c4:94:34: 2e:c9:33:6f:27:f5:c7:d6:46:69:30:c1:4a:f0:a7:19:aa:0b: d4:c4:3e:c9:aa:cc:dd:df:1e:cd:e3:a1:bc:bf:eb:a5:03:40: 6a:95:12:cd:4f:de:cd:1f:cd:5c:b6:44:66:30:92:1c:02:a0: 8f:72:89:0e:ba:48:61:66:55:fa:13:90:b4:27:1a:68:e0:18: b8:0f:51:64:1e:3e:c5:3e:8a:c4:5c:95:d6:1a:44:62:19:6b: bb:fa:f9:b1:09:2e:89:81:54:31:6b:be:bb:54:11:43:a7:56: 60:69:88:1b:26:02:75:a9:21:7b:66:e2:10:57:2b:eb:84:b6: 8d:e9:9e:7e:f2:05:43:7c:25:31:e7:45:59:b7:01:30:bf:cf: 33:26:f5:51 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZBBUsAimGpze0v79g6b68kxMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjQwNjIyMTkwMTAwWhcNMjQwNjIzMTkwMTAwWjAzMTEwLwYDVQQD EyhhNGFjNDMyOTAyNTRlMGNlNGVhOWJiMDcyNDRhODkwNDlhNmFjZmFlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrD3vjRkSVYmtuk3leYx426DC4qy FBv5sJSmTggaNi6vPsUgktFtcaSxzX1eRCg3Wx7FvBbCjmiTQLbK9z3qludR/Br6 pWhNE3kNC3qUiGXBzdoD20ea0t+ownBHQZC8JAybw8WRXqjYoUlC4Vnx2dO45BVm 69VmdXDHSJVDj2nTVRFQYK5oRlwmku7usGQG8kvaQcMYj5+hISF3jp+IFuzzg4/p 91rgZJYURc4qWTd9BozGGdypIUdNisttWqzfVHzpPo6e5SAZhpqXjkJLvQuVjNjv 4U8MqoTVov69AWrwASgtZVzyrgtJ/zrY4gGPm/Hn+T27uiwgX0Pe8wDdmwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKSsQykCVODOTqm7ByRKiQSaas+uMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHds55uU9 sflc6klGQ9O3TxsOYzCofL2r+ZgmcQ7E9HUSMY05pwYjCoXFbc3fivWEHy8ywOoZ ImIwiUHRsYkpZYvTU+Fos8zTpI4qwk9zBd9RxgYN+GwWw7PcqBmeguUwzgGG6RGx GCZOxJQ0Lskzbyf1x9ZGaTDBSvCnGaoL1MQ+yarM3d8ezeOhvL/rpQNAapUSzU/e zR/NXLZEZjCSHAKgj3KJDrpIYWZV+hOQtCcaaOAYuA9RZB4+xT6KxFyV1hpEYhlr u/r5sQkuiYFUMWu+u1QRQ6dWYGmIGyYCdakhe2biEFcr64S2jemefvIFQ3wlMedF WbcBML/PMyb1UQ== -----END CERTIFICATE-----Generated at Sun Jun 23 01:38:09 2024 by rpki-client on console-ams.rpki-client.org