$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft File: bNmMLFSwy-oTTiepgc_d5zI24FU.mft (raw, json) Hash identifier: 12TTKVi4utihEOhbWr9+HGeuJbbwA/qo+QZdHJ5glXc= Subject key identifier: 0B:25:D4:3C:CA:BE:D8:F8:79:B9:5A:CA:80:2B:A9:91:1E:EC:6B:CE Authority key identifier: 6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 Certificate issuer: /CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Certificate serial: 018F8CDC7CF5819F09A6D72712006CC8F388 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft Manifest number: 0E30 Signing time: Sat 18 May 2024 18:00:11 +0000 Manifest this update: Sat 18 May 2024 18:00:11 +0000 Manifest next update: Sun 19 May 2024 18:00:11 +0000 Files and hashes: 1: 4U3QLEtSKXeLQ_0k-u3f8g5tRMQ.roa (hash: YLB3rlW24cf0fiu1S1oDRs75F35XTtB9/xtuyl+DC+w=) 2: D-Ai-BP23d7XRZW21qg9U6SK1Qo.roa (hash: 2mteIgzBd/LZJk6wOFhqvv8sdVqaXPAdV+ofiYeLbiU=) 3: DPQ4lobYeO0VP08NT9GHfgxOhSY.roa (hash: 2RKoD6fwgQ1seMh+yQ3jt5FfnFXmWPkDu+JFGWwpf6c=) 4: HpSsS9oTGcryjVlXzs1iVA7wlS0.roa (hash: N6leFNt29ZYPWsMZYSAJZAq72uI+HSzVBdQsRd6qt6A=) 5: JiOkyUROZ04T3-1zzbwph-3kACQ.roa (hash: gvHwZfuLT4N4RKjQBknXYmvyjcyp7jodP9+WCGOoLVY=) 6: Vw8BcVLWd6Lw_oVjf_viu8i3MLE.roa (hash: N84k/ceenoSIO3tWCvtZDJlVCBJMxt8O2b2U6++mkZ4=) 7: bNmMLFSwy-oTTiepgc_d5zI24FU.crl (hash: BS9/edNDWFIx+XsW9Ul18v90Rj9z1jpxmeiAcOr7Juo=) 8: n6O5_xyiwHBzRq3T31qtxNIgez4.roa (hash: ZfdKdUc5WmWGx+RbTe3ElfV2Obld7AHufUk8nol+Rbk=) 9: pXJOlhv9zZYCd5LrmfyJ6C12daA.roa (hash: BysxWph7l3Y6HsVVVfdukxlo1YYagsJx3rFBwhuWLFM=) 10: s5EC7AHkvceoRkWAQt_dFA3VUhQ.roa (hash: GaNkGcUWgwo54m5AfNqgKpd6K16/xjyHWX1yl/8EtQM=) 11: zJd3z7yj1UMI3HsfOzDFOFajoMU.roa (hash: lNwH2TDbfd59FunYQUXicuLKpPwBO1QgbfPDYCj6vCo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 19 May 2024 18:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:8c:dc:7c:f5:81:9f:09:a6:d7:27:12:00:6c:c8:f3:88 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6cd98c2c54b0cbea134e27a981cfdde73236e055 Validity Not Before: May 18 18:00:11 2024 GMT Not After : May 19 18:00:11 2024 GMT Subject: CN=0b25d43ccabed8f879b95aca802ba9911eec6bce Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ca:5d:d7:c6:de:32:dc:c9:12:c2:3b:5b:32:37: 76:f3:2a:f3:9f:6e:8a:45:80:72:7c:6b:fe:7d:2f: 8b:b4:03:29:ec:df:5e:0e:c2:32:6f:05:a0:54:2d: 90:a4:4e:b2:29:09:9d:8d:be:db:15:49:b0:04:d4: 44:75:1d:f3:fd:a3:0c:1b:54:7e:0b:47:23:c3:8d: 3c:f5:be:6b:d2:e7:f1:79:88:9f:19:1d:03:09:82: 45:17:4f:06:d1:30:c9:ad:11:71:60:05:50:23:7c: 5d:ee:a9:02:46:fa:36:81:f7:53:22:7e:a7:4c:f7: 46:02:7f:f6:0f:ac:28:e0:3d:9b:63:09:3f:67:91: cb:1c:a5:9a:9a:a3:d8:ea:cd:e2:4f:95:06:58:6a: 9c:c2:09:c0:87:08:8b:44:83:6e:b3:a4:cd:cf:82: 44:1f:49:49:11:f9:b4:58:25:e8:65:31:68:73:81: f2:71:0c:8c:75:77:e6:80:16:2a:a9:e5:bc:33:09: 1b:67:af:99:d8:7a:ed:14:53:23:0f:0a:bb:a4:c4: 47:38:1f:21:6c:cd:3b:28:38:0a:e1:47:50:6d:e4: a9:db:30:41:b1:e7:57:c6:6c:d9:fb:d9:2f:be:c5: 77:ca:1c:44:bf:aa:ae:e8:91:79:1a:36:c3:64:bc: 49:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:25:D4:3C:CA:BE:D8:F8:79:B9:5A:CA:80:2B:A9:91:1E:EC:6B:CE X509v3 Authority Key Identifier: keyid:6C:D9:8C:2C:54:B0:CB:EA:13:4E:27:A9:81:CF:DD:E7:32:36:E0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bNmMLFSwy-oTTiepgc_d5zI24FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/01638c-6cb9-4589-909b-d37df634a929/1/bNmMLFSwy-oTTiepgc_d5zI24FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:55:39:ff:d0:61:e7:74:fe:cd:a8:39:72:2f:d9:4f:e3:1d: 8e:94:1d:c4:c4:90:18:15:f1:2f:b2:7b:71:e3:3c:49:1a:9d: 0b:f2:3b:fe:f5:69:3b:85:fd:07:d8:da:28:41:b8:e2:5d:39: 7d:5b:80:f2:da:36:2e:dd:6c:2d:85:2f:4f:02:8d:ec:ff:14: 4b:45:eb:06:f8:4f:a6:25:ce:53:c6:80:f4:85:d9:44:fc:a9: 50:ed:d3:5e:b8:7d:85:46:b4:69:75:de:79:70:49:2c:55:69: 09:f7:3a:3d:79:82:23:02:03:c0:cb:1c:4a:14:70:0d:7f:a7: a3:a5:da:60:6a:1b:00:c2:79:82:f8:4f:de:b7:fd:06:d4:2e: 4c:c7:7f:b6:c4:4b:3f:c4:df:b2:f1:63:04:ea:54:22:a7:a5: 5a:a1:e9:f8:0c:fb:34:03:c9:d2:22:52:78:60:a6:6e:91:49: ab:81:72:32:8b:4e:e5:08:c9:49:82:5e:fb:6f:37:60:48:f3: 5a:4c:ba:42:c3:42:77:a7:53:64:a4:15:64:0d:6e:39:70:c3: e3:d8:30:58:d3:14:78:01:1e:93:ce:31:ab:94:48:3a:f2:5e: 7d:23:13:4a:77:35:22:f6:13:e0:b7:dd:9e:9c:98:5b:86:cd: 71:16:81:7c -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+M3Hz1gZ8JptcnEgBsyPOIMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZjZDk4YzJjNTRiMGNiZWExMzRlMjdhOTgxY2ZkZGU3MzIz NmUwNTUwHhcNMjQwNTE4MTgwMDExWhcNMjQwNTE5MTgwMDExWjAzMTEwLwYDVQQD EygwYjI1ZDQzY2NhYmVkOGY4NzliOTVhY2E4MDJiYTk5MTFlZWM2YmNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl3Xxt4y3MkSwjtbMjd28yrzn26K RYByfGv+fS+LtAMp7N9eDsIybwWgVC2QpE6yKQmdjb7bFUmwBNREdR3z/aMMG1R+ C0cjw4089b5r0ufxeYifGR0DCYJFF08G0TDJrRFxYAVQI3xd7qkCRvo2gfdTIn6n TPdGAn/2D6wo4D2bYwk/Z5HLHKWamqPY6s3iT5UGWGqcwgnAhwiLRINus6TNz4JE H0lJEfm0WCXoZTFoc4HycQyMdXfmgBYqqeW8MwkbZ6+Z2HrtFFMjDwq7pMRHOB8h bM07KDgK4UdQbeSp2zBBsedXxmzZ+9kvvsV3yhxEv6qu6JF5GjbDZLxJ9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAsl1DzKvtj4eblayoArqZEe7GvOMB8GA1UdIwQY MBaAFGzZjCxUsMvqE04nqYHP3ecyNuBVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWIt ZDM3ZGY2MzRhOTI5LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lMS8wMTYzOGMtNmNiOS00NTg5LTkwOWItZDM3ZGY2MzRhOTI5 LzEvYk5tTUxGU3d5LW9UVGllcGdjX2Q1ekkyNEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg1U5/9Bh 53T+zag5ci/ZT+MdjpQdxMSQGBXxL7J7ceM8SRqdC/I7/vVpO4X9B9jaKEG44l05 fVuA8to2Lt1sLYUvTwKN7P8US0XrBvhPpiXOU8aA9IXZRPypUO3TXrh9hUa0aXXe eXBJLFVpCfc6PXmCIwIDwMscShRwDX+no6XaYGobAMJ5gvhP3rf9BtQuTMd/tsRL P8TfsvFjBOpUIqelWqHp+Az7NAPJ0iJSeGCmbpFJq4FyMotO5QjJSYJe+283YEjz Wky6QsNCd6dTZKQVZA1uOXDD49gwWNMUeAEek84xq5RIOvJefSMTSnc1IvYT4Lfd npyYW4bNcRaBfA== -----END CERTIFICATE-----Generated at Sat May 18 23:27:38 2024 by rpki-client on console-ams.rpki-client.org