$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: IBGgIq6htlZW4TiIhfTwra9X7RHcYJCGeRJBcoPrG34= Subject key identifier: 30:7F:7C:2E:BA:05:C3:6E:AE:26:80:4C:42:1B:32:44:41:6E:B4:5F Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 018FB86C484F937C16F30FB355BB6EED754A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 0EDF Signing time: Mon 27 May 2024 05:00:55 +0000 Manifest this update: Mon 27 May 2024 05:00:55 +0000 Manifest next update: Tue 28 May 2024 05:00:55 +0000 Files and hashes: 1: CZHhAV2krkEDqW4m67HRTIvcas4.roa (hash: G7C2GZ1/XSXeEq1uCuRxtCsq4rzVqO7dHsni3cl+9jo=) 2: O-__0NXDzQFVCd8cuIy_brDwwSA.roa (hash: D5DpCD68QKAkLi3h5PCtGLZiXnduo7g6LYQTLUdg08s=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: IjoiCnFRDiQHjW7T6YNO45ACmOZRwuvzgWfV2ffet8Y=) 4: ZF9449-41UhJXmrXFkaxGnmMBxo.roa (hash: NbupFgZ400cBwsoaeMYQOGAWszg917QM3WiEMbkjn8g=) 5: ZZHTrcZtMyPT5Zn8uRN-UvF2pl8.roa (hash: IVW9PIGkrTyLPNC5ByOXCkOGUUEYZpsuzzpmGF46dlk=) 6: aH2wXa57pNMxu0vSAzEAdH2GLCU.roa (hash: iLTh6H/fg7jKkVITNzGwR/DsAhzxYJal5UdIDzBWR6g=) 7: or4JqpUqVfuyDErnrAkinjF0LRU.roa (hash: MAkxgFBeaSG5HNGqaCtBIWDGTwRhTD+aOYyxBsnrbBE=) 8: pd3mdOT8agiACSepSs9mrkMBjb0.roa (hash: jqUdQcoKLTm4rxSGiLxF/uMtXKISzq6uTnjKhbm/bG4=) 9: tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa (hash: ZXotWny2AIx11o7E6So+NW89Pv4fMzvhWH6Qcn3Wvmc=) 10: wC2CIDmq7XPKcBvPGFiPRucATOw.roa (hash: 2HpbHTFpj0DvUZsG87H8lcThDqRm6rWFqT0+IxWyTfY=) 11: xatcrhFoun4L5mgNf4fubWFHTZk.roa (hash: BslNuDSr3pZx4kYGbe1xX8/Qmx8dvXuE2v/g6HGJkIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 28 May 2024 02:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:b8:6c:48:4f:93:7c:16:f3:0f:b3:55:bb:6e:ed:75:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: May 27 05:00:55 2024 GMT Not After : May 28 05:00:55 2024 GMT Subject: CN=307f7c2eba05c36eae26804c421b3244416eb45f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a5:5b:2b:68:94:58:77:45:91:08:76:83:8b: cb:79:59:d2:ad:f1:85:23:f3:d2:6f:c9:3d:07:14: 70:14:81:03:0d:ab:e0:c1:33:2c:d4:d0:e1:5a:5a: db:0e:1f:e0:cf:49:eb:f0:55:b8:77:e9:d4:3c:28: 9a:d4:d9:0e:05:fa:bc:1c:df:4b:15:89:79:2c:62: 65:66:a8:0e:cc:8e:1c:ce:a3:9d:04:b9:62:7f:e1: 49:4b:3b:a2:cb:58:14:a2:b1:14:46:77:fe:f0:8f: 20:90:b2:cf:0e:f9:bc:12:01:d2:ad:14:e6:34:b8: 7c:54:b8:38:6b:c0:de:93:e7:a8:6b:65:2f:71:34: ed:57:1a:e4:8d:5d:d6:56:57:54:97:09:a7:4a:f4: ea:19:0d:0f:82:94:57:90:b8:37:a5:82:ef:fe:b0: 99:39:c8:6b:a9:80:b7:6f:2e:fd:56:20:2d:d3:67: 22:76:e9:c0:76:27:a4:5d:e7:cc:9a:e0:a2:22:b7: 02:64:da:46:85:6a:c0:a0:d1:1a:42:61:d9:bf:62: 2e:57:65:1f:20:27:e7:30:3b:ee:54:ee:48:72:8d: 8a:c6:e3:8c:25:23:e1:e9:74:db:4d:7a:7f:65:fb: e4:55:8c:3b:f9:e3:f0:4b:4e:38:b4:0c:c6:62:53: 37:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 30:7F:7C:2E:BA:05:C3:6E:AE:26:80:4C:42:1B:32:44:41:6E:B4:5F X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:8c:a3:79:bb:ac:29:fc:45:79:0c:f5:12:db:82:b6:71:13: a6:44:89:ff:c3:5b:19:17:88:b2:f1:e3:a8:9b:e5:55:d6:59: 62:10:48:21:fb:ed:80:81:1f:64:c2:98:fa:bf:cf:0d:85:83: 80:c2:80:c1:09:b2:28:15:48:bf:fa:c3:76:53:11:6b:5a:ac: f5:de:74:65:08:0a:2b:83:6f:82:48:b4:1e:f7:27:92:d3:a2: f1:83:10:3a:d6:96:a1:3d:23:b6:7d:d2:45:e2:b4:e8:83:43: 47:65:5f:64:8f:28:23:66:5e:d5:16:fc:ce:6a:b6:35:fb:63: f5:2a:e8:2d:1e:ed:86:8d:a8:ed:ab:b0:a1:fc:e5:80:42:dd: 8e:75:8d:8f:f3:29:ea:14:56:c8:5a:d4:43:05:9e:46:69:60: 79:e0:d9:ac:73:c4:fe:0d:7b:ae:dd:29:6c:63:fb:75:6b:f6: fb:5d:2f:f6:14:34:35:2f:52:4a:3b:40:4e:d4:d3:d9:c5:89: eb:68:a9:d2:83:cc:3f:83:ee:c6:49:a7:7c:cd:37:50:bb:f1: f1:74:1a:dd:43:cf:20:1c:ea:18:5e:a2:63:e7:e3:e6:a8:21: 68:f4:d6:d0:5b:00:97:95:b9:e9:77:14:44:62:fa:a8:66:60: cd:1d:55:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+4bEhPk3wW8w+zVbtu7XVKMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjQwNTI3MDUwMDU1WhcNMjQwNTI4MDUwMDU1WjAzMTEwLwYDVQQD EygzMDdmN2MyZWJhMDVjMzZlYWUyNjgwNGM0MjFiMzI0NDQxNmViNDVmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKVbK2iUWHdFkQh2g4vLeVnSrfGF I/PSb8k9BxRwFIEDDavgwTMs1NDhWlrbDh/gz0nr8FW4d+nUPCia1NkOBfq8HN9L FYl5LGJlZqgOzI4czqOdBLlif+FJSzuiy1gUorEURnf+8I8gkLLPDvm8EgHSrRTm NLh8VLg4a8Dek+eoa2UvcTTtVxrkjV3WVldUlwmnSvTqGQ0PgpRXkLg3pYLv/rCZ OchrqYC3by79ViAt02cidunAdiekXefMmuCiIrcCZNpGhWrAoNEaQmHZv2IuV2Uf ICfnMDvuVO5Ico2KxuOMJSPh6XTbTXp/ZfvkVYw7+ePwS044tAzGYlM3SQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDB/fC66BcNuriaATEIbMkRBbrRfMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK4yjebus KfxFeQz1EtuCtnETpkSJ/8NbGReIsvHjqJvlVdZZYhBIIfvtgIEfZMKY+r/PDYWD gMKAwQmyKBVIv/rDdlMRa1qs9d50ZQgKK4Nvgki0HvcnktOi8YMQOtaWoT0jtn3S ReK06INDR2VfZI8oI2Ze1Rb8zmq2Nftj9SroLR7tho2o7auwofzlgELdjnWNj/Mp 6hRWyFrUQwWeRmlgeeDZrHPE/g17rt0pbGP7dWv2+10v9hQ0NS9SSjtATtTT2cWJ 62ip0oPMP4PuxkmnfM03ULvx8XQa3UPPIBzqGF6iY+fj5qghaPTW0FsAl5W56XcU RGL6qGZgzR1Vkg== -----END CERTIFICATE-----Generated at Mon May 27 09:16:23 2024 by rpki-client on console-fra.rpki-client.org