$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft File: pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft (raw, json) Hash identifier: tJ1WQ64TGDRXh/9lLvPl6KeKL0aceElsjBVUQjWSRv0= Subject key identifier: E5:D5:1E:0F:11:98:FF:03:D8:67:A9:33:C1:51:02:5E:D9:A1:1A:6D Authority key identifier: A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 Certificate issuer: /CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Certificate serial: 01901E90260B54E623795F2DFD536F5B57FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft Manifest number: 11CA Signing time: Sun 16 Jun 2024 01:01:21 +0000 Manifest this update: Sun 16 Jun 2024 01:01:21 +0000 Manifest next update: Mon 17 Jun 2024 01:01:21 +0000 Files and hashes: 1: 1qm3Mf0sxLsm_3eFprF7b8EXIRs.roa (hash: 3LfqRVXKyl3+Y7d3t9hKEGcLEPbZlfpC1NsjE8HFirw=) 2: 2DwpblydvurCgJdGvPjTJGchERc.roa (hash: 3YfuOvB0LbZ9KybmwXWTR6ICRKkKlU63df+dlAKrAgs=) 3: ARfwWn0rX9xLD1jDW4BpMM69WzM.roa (hash: U6BAgEGc51zFRDlRgNGbi4a2JY+uVix71Zg55CfkJVg=) 4: Hjny0sgET9oELwpATK6U1gtl8kg.roa (hash: C9e0cp+OY9QSbTu5yRSPmJqbtzoolqj3l4osQKfuHzM=) 5: Ym0exnGJC_HyhpNrRQhuGwBNk2o.roa (hash: HJ+pDvprSuqsr3eHtnp8DGJqvbIifRSKM+pKt2vpKVg=) 6: Zbv8yhed5e7hsc-Zaj0mMDRwlg8.roa (hash: IQcaMNpA1ro/+PtoDgI8j6x3uT5FzRioOdgU0o16Jp4=) 7: c6NlzaPaJjE9d3Upl1SsnnDAVKs.roa (hash: Lo7EcrrAGADtVHFg0U7vmMDBN/ZmmjcXFXoFYIdLRiU=) 8: cCMlm41ratuRvJx2G7TErBhnBjo.roa (hash: KQlV1baL0MntuEDWVB37jSjm2Om6g3ArRiE5Nu3pQDI=) 9: fIxFQ1oGk2QNBupFI-kaZghISug.roa (hash: p9VCHv9sK8swWZ+qPR+Nh2NdwLixpSvsRLRxzHvBj6U=) 10: gdP_WlXtUNlvre71GXo3uuWHW68.roa (hash: SfslHbYe33TNHmAgcnEo1HmOZsdugu2sTg/p4Kw73GA=) 11: pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl (hash: qCL5VhFXjqYIzRmrdgBZDt0qmZhElIx+Ln0lgBASDw4=) 12: rqAXkP67WG94KcVzcs1G3qBCxzQ.roa (hash: K/srJeeYxETfDAQdpL7AD233zBih+qbr30uMn6qQchI=) 13: sE_LZ9078WqL3-jBlgqBtwsyd_0.roa (hash: DEdPhB+RWS0+TI429R93DS9M2kG1jh2vMKn7gQhokmw=) 14: sGNLBQRjtkOo8pcj6cPCi5vOKBU.roa (hash: j0RxiNNiLYCzSg+buBzjowVIjaENN1yyG8uMiSOeIJI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 16 Jun 2024 19:09:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:1e:90:26:0b:54:e6:23:79:5f:2d:fd:53:6f:5b:57:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a4bcc12afa4f05739f45f605e221c64c3c0d2ed6 Validity Not Before: Jun 16 01:01:21 2024 GMT Not After : Jun 17 01:01:21 2024 GMT Subject: CN=e5d51e0f1198ff03d867a933c151025ed9a11a6d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:8b:7a:6f:64:8e:05:5b:86:f8:20:3a:78:89: 89:a6:58:e0:fc:36:8b:4c:e0:a2:39:fd:4d:6d:21: c8:db:cf:9d:b5:1d:e2:83:6a:e7:ab:e3:a1:83:a8: 88:49:f8:d5:7f:96:80:85:45:d8:c8:9a:22:34:bd: 8d:18:ee:80:d9:63:d3:b0:b0:2d:90:80:b0:ad:b5: a1:5a:b9:e6:b2:3b:d1:ad:a1:94:ff:66:13:9b:e6: ed:5e:f9:b0:ca:48:33:2a:ed:02:59:9b:db:93:89: 8c:8a:04:c9:87:b3:90:5a:0b:3e:8f:d1:cb:39:74: 30:93:92:68:d9:26:35:bd:cc:82:de:09:9f:3c:7f: ca:59:1d:4a:05:59:f2:b3:ed:cf:52:00:19:16:a6: a6:45:ec:79:69:00:ca:a1:13:9a:6c:46:e4:3e:60: b1:86:04:ee:74:32:41:66:9b:56:b0:a1:a3:81:61: f9:0f:ae:aa:f7:73:aa:56:d6:ae:79:06:e0:81:f8: a8:92:a9:c8:53:68:25:1e:9c:99:f2:93:11:6e:16: 07:25:a6:7e:e5:43:84:e0:ef:31:bf:eb:e4:27:10: 08:2e:a2:1d:75:8f:c5:03:00:04:71:ab:67:25:d7: 58:94:5b:6a:76:30:4b:af:fd:4d:ea:f0:01:36:40: a2:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:D5:1E:0F:11:98:FF:03:D8:67:A9:33:C1:51:02:5E:D9:A1:1A:6D X509v3 Authority Key Identifier: keyid:A4:BC:C1:2A:FA:4F:05:73:9F:45:F6:05:E2:21:C6:4C:3C:0D:2E:D6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pLzBKvpPBXOfRfYF4iHGTDwNLtY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bb140a-2a21-4f5f-bdcc-88b016bbd581/1/pLzBKvpPBXOfRfYF4iHGTDwNLtY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:89:14:4b:25:b3:5d:a7:53:ec:30:91:dd:44:e3:be:88:e7: 50:95:84:48:f9:85:3c:bc:3e:7d:5f:29:d2:b6:b5:82:d2:fb: f4:4b:5b:93:74:f7:79:3f:65:1a:8b:79:00:74:e1:ab:fc:70: dc:75:8c:67:3a:3c:04:1b:a8:d8:f4:e7:60:c5:b6:e7:82:0e: 22:67:a3:6e:e0:9a:c5:66:49:6e:8c:e3:1c:92:9d:41:ea:8b: b0:27:25:9d:8d:d8:ed:ce:b1:e4:37:2f:23:02:4a:34:e3:55: 08:70:99:2a:54:31:a5:86:26:c4:a3:ab:6f:3d:ce:86:e5:cb: 6d:50:16:32:e5:f2:04:36:37:1e:8c:dd:90:da:51:5a:e2:73: 6e:5a:d8:9a:1c:07:42:c6:0e:de:6d:72:28:29:10:57:79:dc: 69:13:24:65:70:92:a2:e2:9f:0c:4e:7c:d0:00:ee:52:88:e5: 4c:f6:99:de:f8:27:20:1c:cb:34:02:8f:61:9e:fc:29:c9:4b: 8b:9d:09:2a:ed:5f:73:c2:fc:78:2c:1e:5f:5d:dc:a0:8a:f9: c1:8a:d5:cf:71:dc:47:74:22:1a:cf:26:2b:09:a2:f8:8e:53: ed:9d:64:70:d8:5f:d6:a8:26:37:b5:2d:bf:51:82:96:65:07: 3e:ae:07:db -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZAekCYLVOYjeV8t/VNvW1f8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE0YmNjMTJhZmE0ZjA1NzM5ZjQ1ZjYwNWUyMjFjNjRjM2Mw ZDJlZDYwHhcNMjQwNjE2MDEwMTIxWhcNMjQwNjE3MDEwMTIxWjAzMTEwLwYDVQQD EyhlNWQ1MWUwZjExOThmZjAzZDg2N2E5MzNjMTUxMDI1ZWQ5YTExYTZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIt6b2SOBVuG+CA6eImJpljg/DaL TOCiOf1NbSHI28+dtR3ig2rnq+Ohg6iISfjVf5aAhUXYyJoiNL2NGO6A2WPTsLAt kICwrbWhWrnmsjvRraGU/2YTm+btXvmwykgzKu0CWZvbk4mMigTJh7OQWgs+j9HL OXQwk5Jo2SY1vcyC3gmfPH/KWR1KBVnys+3PUgAZFqamRex5aQDKoROabEbkPmCx hgTudDJBZptWsKGjgWH5D66q93OqVtaueQbggfiokqnIU2glHpyZ8pMRbhYHJaZ+ 5UOE4O8xv+vkJxAILqIddY/FAwAEcatnJddYlFtqdjBLr/1N6vABNkCieQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOXVHg8RmP8D2GepM8FRAl7ZoRptMB8GA1UdIwQY MBaAFKS8wSr6TwVzn0X2BeIhxkw8DS7WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2Mt ODhiMDE2YmJkNTgxLzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82ZC9iYjE0MGEtMmEyMS00ZjVmLWJkY2MtODhiMDE2YmJkNTgx LzEvcEx6Qkt2cFBCWE9mUmZZRjRpSEdURHdOTHRZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvIkUSyWz XadT7DCR3UTjvojnUJWESPmFPLw+fV8p0ra1gtL79Etbk3T3eT9lGot5AHThq/xw 3HWMZzo8BBuo2PTnYMW254IOImejbuCaxWZJbozjHJKdQeqLsCclnY3Y7c6x5Dcv IwJKNONVCHCZKlQxpYYmxKOrbz3OhuXLbVAWMuXyBDY3HozdkNpRWuJzblrYmhwH QsYO3m1yKCkQV3ncaRMkZXCSouKfDE580ADuUojlTPaZ3vgnIBzLNAKPYZ78KclL i50JKu1fc8L8eCweX13coIr5wYrVz3HcR3QiGs8mKwmi+I5T7Z1kcNhf1qgmN7Ut v1GClmUHPq4H2w== -----END CERTIFICATE-----Generated at Sun Jun 16 02:02:21 2024 by rpki-client on console-fra.rpki-client.org