$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft File: Us2aZRLb8lpfGbgn16LH4iou6N0.mft (raw, json) Hash identifier: zYrZd6aGDPb4fmF2ME+EodtaOpDExLyTwkrjx6NTacI= Subject key identifier: 54:34:06:70:F2:D9:C2:C9:C8:DF:32:AC:13:64:CD:28:7E:D9:9F:99 Authority key identifier: 52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD Certificate issuer: /CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Certificate serial: 019354D163E88A7DFDD4340B329A6DB12F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft Manifest number: 0625 Signing time: Fri 22 Nov 2024 17:00:28 +0000 Manifest this update: Fri 22 Nov 2024 17:00:28 +0000 Manifest next update: Sat 23 Nov 2024 17:00:28 +0000 Files and hashes: 1: 1Sf10YTiXRCeRfDUk_3io_PKeXo.roa (hash: Rc688EaXtWvVnenVaIRq0l+Oe+9XByOLCRMSKOdyoqQ=) 2: 6EgY-EeWCDJoaITajWJgDE0zMSE.roa (hash: HOQx1ZeM5ecNQn5yAaiDEspQTcjOKrs9FBdUxXQuUpA=) 3: A9EVdxbewM1FM1Si3aM_f_IrqLI.roa (hash: +IOkIxiMfkVKxTerqHeKZXRfGdE3tRAaVK9LfdaFiR4=) 4: J-DnkDIBAAnZHEXfuyKZXQAkW2A.roa (hash: UZ4Z7ovEg4zCFzWOwbxIFKRvRl5HTXuwEPNAH9nbHg8=) 5: KRaIctUE-rZitETInW9pUZA5-JI.roa (hash: F0LpdD3Jm6RWBP30zYmM2I/78703f43RisZN4Wq/qOk=) 6: Mb1bkxqCUyVEHUyjNXhFFJQzL-o.roa (hash: /ZKZSuexa8O8H8TunUKYFqIZ+SWpHK6UFIFolrBfphM=) 7: StDs-hkAXwHhbqUAGhUXReM95Ng.roa (hash: lriLAlQbHnvMxYzOb0GPx5vHDz/kKjjgD9j6LTQBXSE=) 8: Us2aZRLb8lpfGbgn16LH4iou6N0.crl (hash: NQD43ooY7OtUI6TWdOqJEu3mzUeaNi0+ju8+fS46tt8=) 9: _Zl3RIgF1MTfp9OivbM2P67TD68.roa (hash: HDjmdS6gWOdFNcac5Yx8clUzUXlhap6nsHS3e/TobS8=) 10: bF_AztaW8uBxIScLJr4ynDQT-VE.roa (hash: VUI15Pc9TEmSppS1E2A5QgubXBtBsWbSEbPDZpgnwsQ=) 11: dg3DvqX4fv_b7dA_McuPip09OYA.roa (hash: n1zdAkHrm69leyk6LB7n5DRQSEOLrNMianChVw6OnMs=) 12: gve5I7jiiP4hciAScoEuohZjnYQ.roa (hash: 8PYECfdcCLN0VoJvbnHA0HtP3yUTC615+KVIX49AkdQ=) 13: l43uZC20RxHvL203pIUVfCcvhJg.roa (hash: gB4TzAMY6INvaE8AUkC0Lqt4evemz+/WxQAbmVHbxH0=) 14: x9Uu-Vzax50NvBBzlnTQbRn6ySQ.roa (hash: 1U4h2uHZiOIAx/Er3+KP3I/7Zo26gdc551kp6Zeqj4U=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 17:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:54:d1:63:e8:8a:7d:fd:d4:34:0b:32:9a:6d:b1:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52cd9a6512dbf25a5f19b827d7a2c7e22a2ee8dd Validity Not Before: Nov 22 17:00:28 2024 GMT Not After : Nov 23 17:00:28 2024 GMT Subject: CN=54340670f2d9c2c9c8df32ac1364cd287ed99f99 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:6b:60:65:35:b2:5d:65:47:7a:bc:0c:c7:aa: d8:ea:b9:a6:87:7f:f7:f8:0f:30:5d:28:5e:f8:fc: 75:28:88:d1:27:65:1c:80:ae:0b:48:53:f5:a0:d0: 97:97:8b:f8:61:aa:6f:b5:50:59:49:15:03:7b:f8: 2a:95:8e:c9:64:f1:13:21:67:b5:fe:c2:ff:4f:4f: 54:46:b2:ba:9b:d1:21:a4:1c:a5:db:9b:29:2e:5f: a1:63:e6:73:bb:83:ca:e3:e2:1a:59:48:74:08:50: ab:af:51:11:02:97:c0:ec:02:27:8f:e6:86:35:df: 58:b5:67:b2:0b:af:82:f0:1a:a8:63:e0:fe:9a:0f: a5:c2:e0:01:61:3e:10:33:96:15:d4:aa:35:e7:73: 52:f3:39:8c:0a:01:2f:1c:8d:9f:8b:41:aa:5a:16: e2:3e:5c:e2:a2:60:b0:f5:8c:16:c0:fc:4b:31:38: 7d:62:71:2c:16:5e:39:df:d7:25:c5:b9:5c:b1:2d: a9:95:70:6b:0f:49:cc:e8:cc:31:c5:a9:a5:e3:db: 3f:47:fb:d7:ff:e5:1f:9f:bc:e0:cf:ff:c6:b5:81: ee:19:18:ac:ee:25:10:09:d2:1a:2c:5a:a9:c4:3a: 1b:54:10:53:d7:0b:41:73:83:08:19:30:3f:6c:05: 4d:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:34:06:70:F2:D9:C2:C9:C8:DF:32:AC:13:64:CD:28:7E:D9:9F:99 X509v3 Authority Key Identifier: keyid:52:CD:9A:65:12:DB:F2:5A:5F:19:B8:27:D7:A2:C7:E2:2A:2E:E8:DD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us2aZRLb8lpfGbgn16LH4iou6N0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/af/2223ca-ce38-49bb-b125-cca37606bf18/1/Us2aZRLb8lpfGbgn16LH4iou6N0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:bb:ca:db:a6:ec:4e:7c:fa:4a:84:33:59:e8:22:0e:45:24: cc:d7:0f:44:9c:1b:92:fe:6d:f8:15:a2:39:77:f1:3a:e8:9f: 62:fc:dc:4f:54:1f:7d:85:e0:e4:3e:cc:4c:4c:f2:fb:a9:f3: 49:00:e7:c6:45:ad:53:ea:8e:1b:12:d5:ab:9b:cc:fe:80:8c: e2:70:c0:c6:83:af:3b:75:f5:6b:3f:5c:c6:ad:5d:07:41:34: d8:e2:34:b1:d1:92:75:ef:be:0f:df:3d:cd:64:fb:81:d2:ab: d8:d6:2f:79:f7:39:6a:e1:43:6c:31:94:3a:59:76:53:2a:29: 2e:0f:2d:b9:1d:f7:2a:48:3f:67:14:0f:94:55:a8:e5:b3:c1: 5d:32:0a:88:b9:79:e1:c6:61:b3:b6:bd:32:2d:f1:81:cc:17: b7:76:58:48:39:50:12:a3:e0:99:38:67:1d:da:21:30:8c:1b: 60:e8:58:48:1f:73:dc:24:3a:07:78:96:44:43:88:1c:75:aa: 73:83:de:e9:e4:4b:45:fc:d7:72:28:dc:69:ab:bd:51:c0:84: 4b:b7:3b:04:1e:2e:38:65:94:72:09:b4:24:d9:27:2c:98:53: 57:3e:aa:29:75:bf:d2:14:68:fd:4a:2a:ea:8f:70:29:50:ac: b9:e0:ad:36 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNU0WPoin391DQLMpptsS9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyY2Q5YTY1MTJkYmYyNWE1ZjE5YjgyN2Q3YTJjN2UyMmEy ZWU4ZGQwHhcNMjQxMTIyMTcwMDI4WhcNMjQxMTIzMTcwMDI4WjAzMTEwLwYDVQQD Eyg1NDM0MDY3MGYyZDljMmM5YzhkZjMyYWMxMzY0Y2QyODdlZDk5Zjk5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGtgZTWyXWVHerwMx6rY6rmmh3/3 +A8wXShe+Px1KIjRJ2UcgK4LSFP1oNCXl4v4YapvtVBZSRUDe/gqlY7JZPETIWe1 /sL/T09URrK6m9EhpByl25spLl+hY+Zzu4PK4+IaWUh0CFCrr1ERApfA7AInj+aG Nd9YtWeyC6+C8BqoY+D+mg+lwuABYT4QM5YV1Ko153NS8zmMCgEvHI2fi0GqWhbi PlziomCw9YwWwPxLMTh9YnEsFl4539clxblcsS2plXBrD0nM6Mwxxaml49s/R/vX /+Ufn7zgz//GtYHuGRis7iUQCdIaLFqpxDobVBBT1wtBc4MIGTA/bAVNowIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFQ0BnDy2cLJyN8yrBNkzSh+2Z+ZMB8GA1UdIwQY MBaAFFLNmmUS2/JaXxm4J9eix+IqLujdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUt Y2NhMzc2MDZiZjE4LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hZi8yMjIzY2EtY2UzOC00OWJiLWIxMjUtY2NhMzc2MDZiZjE4 LzEvVXMyYVpSTGI4bHBmR2JnbjE2TEg0aW91Nk4wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf7vK26bs Tnz6SoQzWegiDkUkzNcPRJwbkv5t+BWiOXfxOuifYvzcT1QffYXg5D7MTEzy+6nz SQDnxkWtU+qOGxLVq5vM/oCM4nDAxoOvO3X1az9cxq1dB0E02OI0sdGSde++D989 zWT7gdKr2NYvefc5auFDbDGUOll2UyopLg8tuR33Kkg/ZxQPlFWo5bPBXTIKiLl5 4cZhs7a9Mi3xgcwXt3ZYSDlQEqPgmThnHdohMIwbYOhYSB9z3CQ6B3iWREOIHHWq c4Pe6eRLRfzXcijcaau9UcCES7c7BB4uOGWUcgm0JNknLJhTVz6qKXW/0hRo/Uoq 6o9wKVCsueCtNg== -----END CERTIFICATE-----Generated at Sat Nov 23 02:19:43 2024 by rpki-client on console-ams.rpki-client.org