$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: rdpHJ1WEJo/tX/TGfYukVMf46Y2dJI084GrPBQ3BDmg= Subject key identifier: 2D:BB:1F:6D:3A:B2:F2:2C:0E:4B:39:3A:29:66:FD:AE:74:32:1F:F4 Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 018F65993EE6C982F43A6B058A2310FC3719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 0B2F Signing time: Sat 11 May 2024 03:01:32 +0000 Manifest this update: Sat 11 May 2024 03:01:32 +0000 Manifest next update: Sun 12 May 2024 03:01:32 +0000 Files and hashes: 1: 1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa (hash: ZCM8IsKkXM5hxyavnTWPjTbiHEYG7akRI1xhRdgbwQU=) 2: 9i4SBcAQbbxJJ7-ujFUmRgPdqhg.roa (hash: Q4N/uMpu8S735DeNgBOoqsl5y6vL8d/og7CpNy+rFbI=) 3: CFz2Wk2b0mhBpexEd43LdPyh-pY.roa (hash: kDFXisowkfq8D2XsEouvlxIV+qNAOy4KjwoUTm24Aiw=) 4: HDnPjlAOb-hMtdfTgLqUSIAUXbs.roa (hash: xMNqMTHd7OITgi5sWrYWN3Wv0EI6PBGK7h3f2V01nyc=) 5: cWGh-YeqJJ15a1wMYDPbFLsgtE4.roa (hash: tsqhpY3TmYQ2Z5Huu0WnwydjgN4ESIcZnUW7PEAbDO0=) 6: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: ZhtLFB1Ij+hLPAvoNpEHJ6VXEvCzW4PMRqEEh7THrf0=) 7: le2nvzNB36tyoI2uE4ylhscAzxY.roa (hash: To7gM9OgMe1NloGliS2ida8+Qp0wtngmB0529u42wK0=) 8: tsNrq3-_rTg36aaTcbtEyEt5t-Q.roa (hash: zEE0lY+LgAdjz2XtweUdsBTZuFTs4x4yuRjE0GtdhCk=) 9: ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa (hash: PgfIBlacCimNH8jP4CzbtNpPpmPG8JkE0iSjwFeqDT0=) 10: xPALUfluhc3M1pU60G36RtHocpA.roa (hash: wRwFSHaQORk1ykv79GhYTCI3NoOPBL8jK/cotxCEkRo=) 11: zVbXzI-UPMkwGTXNir_RXndD_f4.roa (hash: MjYQ6ywejwH4Sh9xenn14d9jTdhqTv1lV7PDpz2ptA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 22:26:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:65:99:3e:e6:c9:82:f4:3a:6b:05:8a:23:10:fc:37:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: May 11 03:01:32 2024 GMT Not After : May 12 03:01:32 2024 GMT Subject: CN=2dbb1f6d3ab2f22c0e4b393a2966fdae74321ff4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:14:9f:98:56:5b:e2:f0:2a:49:0e:06:03:4f: 51:be:3b:9c:19:ca:71:ef:7c:54:07:da:31:6e:35: e1:1b:e1:31:a6:06:9b:90:45:8f:07:b9:1a:10:1a: 4c:6a:eb:9f:fe:d8:13:37:c6:e5:4b:64:42:f9:3f: f0:53:22:7d:81:d9:2d:0b:37:d8:01:55:43:f0:07: 51:b0:96:ef:12:c7:50:66:2d:b4:b8:0a:ab:8d:8b: 1b:6f:b1:bc:83:7b:57:fd:e5:ba:41:6a:fc:a4:03: 40:3a:e2:d7:e5:7e:45:fd:c0:86:7e:be:21:e5:65: 6b:31:f7:01:e6:2e:2c:83:64:81:08:40:a9:12:aa: 64:44:53:ab:2e:ce:13:f1:eb:76:49:72:bc:b9:d3: 8d:71:0e:0b:20:59:30:cb:b7:05:a3:83:88:93:08: 33:fc:e2:f5:45:81:93:33:3d:f0:73:22:59:eb:c4: 04:75:5f:a5:e8:5c:48:04:31:a1:f4:ba:41:81:80: 5f:a5:2e:b0:a4:94:85:71:0b:99:a4:3a:67:3c:65: 29:b3:47:a1:53:63:a1:41:39:65:df:62:d3:60:f9: 17:8b:e3:a2:f4:ad:6c:48:b9:d5:57:c8:89:4a:bf: d1:08:85:8e:9f:19:15:eb:b9:ce:26:c1:81:d5:de: b2:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:BB:1F:6D:3A:B2:F2:2C:0E:4B:39:3A:29:66:FD:AE:74:32:1F:F4 X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2a:b2:bf:49:c7:e7:0a:0d:7c:54:51:4f:44:05:7d:dd:fe:c0: 3f:86:90:fa:0d:a7:cb:14:b4:ff:9c:6a:e2:00:8d:14:d3:3b: a3:8d:84:12:4d:1b:9e:1a:a0:79:89:18:08:43:bd:7a:fc:c7: c7:11:2d:00:b3:9b:69:c1:07:f9:00:e1:b9:b2:e7:2c:bc:08: 13:69:9a:4b:c1:81:b4:5f:4b:b9:aa:5b:78:cc:aa:ae:98:ba: b2:12:2c:e7:a5:c5:22:42:df:e4:79:06:67:7c:d7:31:02:3e: a1:e9:a5:6a:64:08:ee:e6:f0:ca:49:c9:6c:99:90:44:de:b5: 6b:49:35:97:97:9d:b5:08:c1:0e:5d:b5:d6:18:ee:55:50:51: 28:d6:e3:8d:1b:26:45:66:a6:c8:ef:e6:af:99:be:f5:de:53: 12:39:e5:9d:e3:79:26:a2:d7:d7:9b:59:ab:f7:30:02:19:e4: ad:17:24:4d:60:26:06:48:a9:f8:68:24:39:53:b3:50:46:c8: 34:af:99:b5:f2:87:bd:dd:50:bc:60:13:62:bc:f3:36:c4:3c: 2d:eb:d0:ad:3b:e5:cd:76:08:7f:9a:ce:cf:7a:ca:1f:5e:f6: b6:1c:2c:fe:29:3c:1a:97:a6:ea:22:37:72:fe:5a:86:c3:74: 8b:8b:13:26 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9lmT7myYL0OmsFiiMQ/DcZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjQwNTExMDMwMTMyWhcNMjQwNTEyMDMwMTMyWjAzMTEwLwYDVQQD EygyZGJiMWY2ZDNhYjJmMjJjMGU0YjM5M2EyOTY2ZmRhZTc0MzIxZmY0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlxSfmFZb4vAqSQ4GA09RvjucGcpx 73xUB9oxbjXhG+ExpgabkEWPB7kaEBpMauuf/tgTN8blS2RC+T/wUyJ9gdktCzfY AVVD8AdRsJbvEsdQZi20uAqrjYsbb7G8g3tX/eW6QWr8pANAOuLX5X5F/cCGfr4h 5WVrMfcB5i4sg2SBCECpEqpkRFOrLs4T8et2SXK8udONcQ4LIFkwy7cFo4OIkwgz /OL1RYGTMz3wcyJZ68QEdV+l6FxIBDGh9LpBgYBfpS6wpJSFcQuZpDpnPGUps0eh U2OhQTll32LTYPkXi+Oi9K1sSLnVV8iJSr/RCIWOnxkV67nOJsGB1d6yEwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC27H206svIsDks5Oilm/a50Mh/0MB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKrK/Scfn Cg18VFFPRAV93f7AP4aQ+g2nyxS0/5xq4gCNFNM7o42EEk0bnhqgeYkYCEO9evzH xxEtALObacEH+QDhubLnLLwIE2maS8GBtF9LuapbeMyqrpi6shIs56XFIkLf5HkG Z3zXMQI+oemlamQI7ubwyknJbJmQRN61a0k1l5edtQjBDl211hjuVVBRKNbjjRsm RWamyO/mr5m+9d5TEjnlneN5JqLX15tZq/cwAhnkrRckTWAmBkip+GgkOVOzUEbI NK+ZtfKHvd1QvGATYrzzNsQ8LevQrTvlzXYIf5rOz3rKH172thws/ik8Gpem6iI3 cv5ahsN0i4sTJg== -----END CERTIFICATE-----Generated at Sat May 11 03:54:17 2024 by rpki-client on console-ams.rpki-client.org