$ rpki-client -vvf 0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft File: 917B088922D0F33FECA164E08554EC992DAA39C5.mft (raw, json) Hash identifier: 6N3vgWvzp57jpYFwqpC/yAXUctzHM3RomRbOqVyXzHU= Subject key identifier: 8C:BB:17:05:AE:49:B5:CC:B7:95:53:FA:6C:AD:2B:B8:57:2F:51:C2 Authority key identifier: 91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5 Certificate issuer: /CN=917b088922d0f33feca164e08554ec992daa39c5 Certificate serial: 33583200677F2FF5E5ABF3A29E6EBC424AAB53CE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer Subject info access: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft Manifest number: 065B Signing time: Fri 22 Nov 2024 11:48:03 +0000 Manifest this update: Fri 22 Nov 2024 11:43:03 +0000 Manifest next update: Sat 23 Nov 2024 12:03:03 +0000 Files and hashes: 1: 3134362e31392e3134352e302f32342d3234203d3e2038383838.roa (hash: UR2be2wKKxV/30zai705hlCSe6fGiL7hYLTIuMgZKKE=) 2: 326131313a363a3a2f33322d3438203d3e2038383838.roa (hash: vBYPJx00qLVv8CtqPb97mpTIIbclUXpVmgNdOsiewnw=) 3: 326131313a383038303a3a2f32392d3438203d3e20323130383037.roa (hash: NVMySe2HLYrg4fFP29MzlOZJ+96ZFUohrNztdj89DEg=) 4: 326131313a353a3a2f33322d3438203d3e2038383838.roa (hash: PBen+R0swS3EqAcXbZpm/npRHePATD8IaAlZax2MqLk=) 5: 3134362e31392e302e302f32342d3234203d3e2038383838.roa (hash: 8M8H7s0+6PEYOPiP+i/A7SxmCn/mfCoc9BgSmxCnWkA=) 6: 326131313a373a3a2f33322d3438203d3e2038383838.roa (hash: CD2wxjYSfRPVv1P3NM9gPcAzfmPv7Txt4DQakbWTg6k=) 7: 326131313a333a3a2f33322d3438203d3e2038383838.roa (hash: f6kqNpaouo4IJLz4+TE1CDF9dBY/IV8Tu4wSfLd1JTA=) 8: 326131313a383038303a3a2f32392d313238203d3e2038383838.roa (hash: Xej8z+5gZdxNbAKSwLJrJQEooL2xxbZTFJWAffAIEa4=) 9: 326131313a343a3a2f33322d3438203d3e2038383838.roa (hash: BYY56AoRrxgnLm9I6DXnIMbVDNZjzGgx+KhPNmJwQo4=) 10: 326131313a3a2f33322d3438203d3e2038383838.roa (hash: 4ZWAmDrwu4Strz0TOAaswKz/Iza6dycEiIEWJH8g4Xw=) 11: 326131313a3a2f34382d3438203d3e2036323333.roa (hash: kI0kbYAdMgWhESDWM0EC5+Mfm3tf/xFT+bxqMRtwQwo=) 12: 39342e3132342e37392e302f32342d3234203d3e2038383838.roa (hash: bL6Q4uoabLOpHTHWM+6wUtWUyVukt3m5H31kYQNU4rA=) 13: 326131313a3a2f34382d313238203d3e203234303133.roa (hash: LfqK4E1LtC4J5UnkfVMOp4IlWXRFUUsE6nc1puWgazU=) 14: 39342e3132342e37392e302f32342d3234203d3e20323130383037.roa (hash: 2DQqDqnDPPhuWOqbbkwncdnBSrKbY3H1++n86G7dNCM=) 15: 326131313a333a3530303a3a2f34302d3438203d3e203433333537.roa (hash: g6rHHtxHEQXiiuR5VApu6yqB6eXHYU4g6Qk/mQzm6Nw=) 16: 326131313a383038303a3a2f32392d313238203d3e203233383538.roa (hash: QeutHCDhf5jeMRXeUc4zxIpNYUK/H2UL/XzDgr6tTxw=) 17: 917B088922D0F33FECA164E08554EC992DAA39C5.crl (hash: 1pEXTuPhQgA6X52AHADvOty7DGlyZi5DT42Hv4ROstE=) 18: 37382e33312e3231312e302f32342d3234203d3e2038383838.roa (hash: mVDQBiKeTGRej0uimZvtrlOeB2PvIMpvZ0UaIiGNKMU=) Validation: OK Signature path: rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:58:32:00:67:7f:2f:f5:e5:ab:f3:a2:9e:6e:bc:42:4a:ab:53:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=917b088922d0f33feca164e08554ec992daa39c5 Validity Not Before: Nov 22 11:43:03 2024 GMT Not After : Nov 23 12:03:03 2024 GMT Subject: CN=8CBB1705AE49B5CCB79553FA6CAD2BB8572F51C2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:d1:5a:7e:92:89:70:51:e5:4b:1e:4a:10:18: 03:a8:c5:7e:55:1b:f5:c9:0d:73:56:15:e8:eb:6b: 62:55:fc:be:f3:9b:0f:2c:fd:0c:0c:46:98:5a:db: ae:8a:ce:9d:97:82:9c:95:f4:6c:8b:50:f1:89:69: f9:da:10:0c:63:8a:38:43:9a:19:b3:5a:03:6b:c4: 3e:0e:17:a6:75:b4:5d:6c:a6:ff:b1:42:82:96:b2: 03:7d:48:9a:dc:7e:59:6f:90:78:f3:48:56:f6:aa: 4d:01:53:10:4a:b6:da:fd:7e:a2:d7:4e:73:aa:be: 57:5a:08:1f:4e:18:4d:38:59:f2:24:05:0a:d1:a4: 05:e2:22:83:97:a4:7a:14:f9:79:6e:bb:30:a4:34: 0c:4c:65:b2:b2:a0:1e:fe:51:f8:67:1a:94:54:83: 67:53:3e:8e:87:45:6b:41:0f:bc:13:16:35:2b:99: a3:a1:11:47:10:c2:67:45:9e:2d:dd:c1:50:2c:d1: bd:64:b3:07:be:22:ba:d0:d1:4b:fc:90:ec:a4:2a: 29:ca:04:ba:ef:29:9c:88:51:f3:64:fd:1e:05:46: 84:9c:a0:8c:75:8d:49:f8:7f:41:8e:b7:a9:7a:1a: 97:8c:e5:11:43:70:7f:de:a5:c2:d4:2b:23:ce:92: 57:f1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:BB:17:05:AE:49:B5:CC:B7:95:53:FA:6C:AD:2B:B8:57:2F:51:C2 X509v3 Authority Key Identifier: keyid:91:7B:08:89:22:D0:F3:3F:EC:A1:64:E0:85:54:EC:99:2D:AA:39:C5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kXsIiSLQ8z_soWTghVTsmS2qOcU.cer Subject Information Access: Signed Object - URI:rsync://0.sb/repo/sb/1/917B088922D0F33FECA164E08554EC992DAA39C5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:7b:50:9e:90:da:e7:cd:63:09:c7:14:bb:c8:d2:fc:e8:6d: 2a:21:56:34:58:60:bf:10:9d:34:e5:8a:ec:c7:8b:98:bd:eb: 90:3a:87:91:eb:f0:e9:ce:9c:5b:fb:fb:71:7b:64:2f:8c:6d: b0:a4:33:b7:52:fa:04:38:cb:5e:02:dc:6c:33:86:8f:72:11: 70:89:6e:62:a5:68:ec:08:aa:18:b6:86:a8:50:06:57:a4:fe: ff:19:70:e5:99:07:e8:9b:bf:5c:d5:05:04:7c:f6:66:fb:43: df:db:55:90:b8:87:59:39:80:26:c5:e1:f7:6f:f5:90:d5:d1: 0d:42:6e:ba:88:13:7d:c9:44:72:05:9f:a8:56:af:e9:2b:0d: c0:85:a1:fa:a5:15:e3:be:51:94:b5:41:2a:d5:9c:c5:93:30: b3:50:e1:44:bd:87:8c:dd:78:62:87:61:a5:12:05:1e:e8:d5: 05:09:ad:90:b9:a7:53:aa:e7:e9:76:c6:34:af:fb:95:66:30: 69:6c:06:e3:a8:d9:e0:58:d0:a0:b6:1e:18:2f:65:94:00:89: d0:d3:da:a4:f2:39:34:1b:f8:d2:fa:d0:41:12:1d:83:88:38: 1e:af:90:c5:30:c5:21:64:f7:9b:cb:91:90:67:39:2e:52:62: 13:ca:44:5f -----BEGIN CERTIFICATE----- MIIEuzCCA6OgAwIBAgIUM1gyAGd/L/Xlq/Oinm68QkqrU84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTE3YjA4ODkyMmQwZjMzZmVjYTE2NGUwODU1NGVjOTky ZGFhMzljNTAeFw0yNDExMjIxMTQzMDNaFw0yNDExMjMxMjAzMDNaMDMxMTAvBgNV BAMTKDhDQkIxNzA1QUU0OUI1Q0NCNzk1NTNGQTZDQUQyQkI4NTcyRjUxQzIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF0Vp+kolwUeVLHkoQGAOoxX5V G/XJDXNWFejra2JV/L7zmw8s/QwMRpha266Kzp2XgpyV9GyLUPGJafnaEAxjijhD mhmzWgNrxD4OF6Z1tF1spv+xQoKWsgN9SJrcfllvkHjzSFb2qk0BUxBKttr9fqLX TnOqvldaCB9OGE04WfIkBQrRpAXiIoOXpHoU+XluuzCkNAxMZbKyoB7+UfhnGpRU g2dTPo6HRWtBD7wTFjUrmaOhEUcQwmdFni3dwVAs0b1kswe+IrrQ0Uv8kOykKinK BLrvKZyIUfNk/R4FRoScoIx1jUn4f0GOt6l6GpeM5RFDcH/epcLUKyPOklfxAgMB AAGjggHFMIIBwTAdBgNVHQ4EFgQUjLsXBa5Jtcy3lVP6bK0ruFcvUcIwHwYDVR0j BBgwFoAUkXsIiSLQ8z/soWTghVTsmS2qOcUwDgYDVR0PAQH/BAQDAgeAMFQGA1Ud HwRNMEswSaBHoEWGQ3JzeW5jOi8vMC5zYi9yZXBvL3NiLzEvOTE3QjA4ODkyMkQw RjMzRkVDQTE2NEUwODU1NEVDOTkyREFBMzlDNS5jcmwwZAYIKwYBBQUHAQEEWDBW MFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9E RUZBVUxUL2tYc0lpU0xROHpfc29XVGdoVlRzbVMycU9jVS5jZXIwXwYIKwYBBQUH AQsEUzBRME8GCCsGAQUFBzALhkNyc3luYzovLzAuc2IvcmVwby9zYi8xLzkxN0Iw ODg5MjJEMEYzM0ZFQ0ExNjRFMDg1NTRFQzk5MkRBQTM5QzUubWZ0MBgGA1UdIAEB /wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQC AAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCE e1CekNrnzWMJxxS7yNL86G0qIVY0WGC/EJ005Yrsx4uYveuQOoeR6/Dpzpxb+/tx e2QvjG2wpDO3UvoEOMteAtxsM4aPchFwiW5ipWjsCKoYtoaoUAZXpP7/GXDlmQfo m79c1QUEfPZm+0Pf21WQuIdZOYAmxeH3b/WQ1dENQm66iBN9yURyBZ+oVq/pKw3A haH6pRXjvlGUtUEq1ZzFkzCzUOFEvYeM3Xhih2GlEgUe6NUFCa2QuadTqufpdsY0 r/uVZjBpbAbjqNngWNCgth4YL2WUAInQ09qk8jk0G/jS+tBBEh2DiDger5DFMMUh ZPeby5GQZzkuUmITykRf -----END CERTIFICATE-----Generated at Fri Nov 22 14:19:24 2024 by rpki-client on console-ams.rpki-client.org