$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft File: w_tAOiQYg-WPztUtOdgOq9Urs28.mft (raw, json) Hash identifier: yZ5fohoDAObRGK2eWludJZhdcPFgHB+fJXXyn7ReeJU= Subject key identifier: 2D:40:1B:1A:AB:D9:B5:56:97:26:00:C1:33:1A:D8:3A:B8:CA:09:7E Authority key identifier: C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F Certificate issuer: /CN=c3fb403a241883e58fced52d39d80eabd52bb36f Certificate serial: 019362C3E93BBE40B4F905DDC0BFFC01DB25 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft Manifest number: 1081 Signing time: Mon 25 Nov 2024 10:00:26 +0000 Manifest this update: Mon 25 Nov 2024 10:00:26 +0000 Manifest next update: Tue 26 Nov 2024 10:00:26 +0000 Files and hashes: 1: 4sGhbSlh1D5Xw0_g_iMtDNiIJu0.roa (hash: GOPouLleaQUyIRqlbgyKR66gnu7TtJod9i3znjbEOfM=) 2: 79cVxed4eOs7YD6UHynhzcgNnvk.roa (hash: ACkWCyaIuFwDaC+rmC+wfbsKsDDPfjxZs7Ij4Lv6oxs=) 3: Ag1IJJ_aGL25RlltrDNTCpSjkJk.roa (hash: TfbUPM8o9aFUUYlbbrFXauSHc+ZlOYUubA4eqosE8uw=) 4: FE4JCrglQOGWYz3KTMlrQvi4SMk.roa (hash: I7rdjFFnaqg/QuqhQLrz7d9Gv0hTCe0oggpar/JEguo=) 5: SCmyyA3QeG8ivlM691kU5-Gs2eQ.roa (hash: o0JJ77e2P1ancFOdwDW6izQf0wwkK177XzR0lSDNcdI=) 6: UpMgO3lx62ycM_xxFePa4Ss5WWY.roa (hash: 2sGSAjCX2PQfRDt5zcY7+A01/ypD6irg2E31N79L6RU=) 7: V3bef9298fn7YtXzH9sNDdrUXaU.roa (hash: qACxYertAD5VWzZVUlJhoCAPWcYOxREwhj/Jj+2Z7LQ=) 8: ZCQ3_ttv9Oemi5GZgn6-OrBhdnA.roa (hash: J2Tul/t+3vXj89aadwLZVMC/CKBjJ9LVvtjJBLDDNUE=) 9: e4x3-nvVCsDGlsvzsLxgUqiU5Fs.roa (hash: Vv7ysYNbD7AsarPlUWRlpnypFTB/MfMJbhbIzVEWld0=) 10: onJ1qNZV9VBfZ7EesWQZrihzNOQ.roa (hash: aEfzhEK0o6qV+91B5H5FLFKpFhwCQb6iDqhLgdzBPlM=) 11: w_tAOiQYg-WPztUtOdgOq9Urs28.crl (hash: 5cQ9HIAtSE0Z0egR/73wf8bW4XU8Ry0v52UYWt8kVHU=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 10:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:62:c3:e9:3b:be:40:b4:f9:05:dd:c0:bf:fc:01:db:25 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c3fb403a241883e58fced52d39d80eabd52bb36f Validity Not Before: Nov 25 10:00:26 2024 GMT Not After : Nov 26 10:00:26 2024 GMT Subject: CN=2d401b1aabd9b556972600c1331ad83ab8ca097e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:67:02:61:15:bf:cb:54:bb:43:62:fa:14:e4: 44:98:eb:d4:84:78:0f:fc:37:7e:e1:e1:16:6b:3b: 17:16:9f:52:0f:70:f1:59:ea:80:cb:e8:3e:0e:0b: f4:35:b9:17:d6:a7:a7:81:01:30:52:29:0b:40:86: 9d:ff:61:b8:ec:e8:e2:da:f5:13:bf:c0:8f:1b:38: 87:9e:00:c6:04:66:ec:63:7d:c5:62:68:18:c8:c1: 35:42:db:48:30:ae:97:d9:83:f9:4f:74:ae:32:b0: 86:b2:f0:09:05:88:05:59:38:1d:32:a3:69:b2:d5: 25:64:3e:8a:91:ee:30:d6:41:ed:d5:0a:6a:18:86: f4:49:61:4d:f5:d7:b4:74:bf:e5:8a:75:15:1c:7f: ad:5a:2b:fe:5a:c5:c8:5b:49:4d:c4:ea:47:6c:12: ec:b4:45:99:1a:d0:57:33:3b:2c:78:bc:23:0b:14: e0:cb:8c:23:3e:40:2f:3c:2f:c3:58:90:c1:b0:f3: bb:93:7e:c6:9d:9a:23:95:62:7f:96:df:e6:98:2b: 1d:45:54:85:ab:3b:d6:ca:b0:41:e3:0a:8c:e1:94: 88:53:03:03:8e:63:26:a4:fd:09:79:fd:40:31:9a: 5f:96:2f:2e:21:f2:6f:f3:8e:db:2a:7c:a9:b7:72: e0:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2D:40:1B:1A:AB:D9:B5:56:97:26:00:C1:33:1A:D8:3A:B8:CA:09:7E X509v3 Authority Key Identifier: keyid:C3:FB:40:3A:24:18:83:E5:8F:CE:D5:2D:39:D8:0E:AB:D5:2B:B3:6F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w_tAOiQYg-WPztUtOdgOq9Urs28.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/04/4dc625-7c1c-4dac-899e-a9a779026f0a/1/w_tAOiQYg-WPztUtOdgOq9Urs28.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:52:3e:54:b5:1b:f3:59:8b:05:a7:49:65:c8:38:bf:8b:09: 48:be:64:ac:77:38:8b:94:56:5d:de:4a:c3:47:51:e2:1f:04: 4a:49:1b:72:78:bf:70:3d:13:f1:45:77:62:82:de:78:30:66: 8c:e0:c4:d1:ba:c4:fa:7e:7f:b2:59:21:bb:b2:ff:23:0c:c6: 2e:92:70:0c:87:69:04:56:bb:4b:d0:db:94:92:fa:e5:e1:85: 97:0a:5b:d1:08:ce:40:f5:5b:44:bd:d0:20:29:6c:58:ae:b4: 2a:65:a5:75:23:f9:3a:5e:5c:b2:91:21:06:c4:92:1c:a7:e6: 4d:e8:ee:b4:36:25:26:2d:e7:ef:11:5e:f3:6a:00:60:21:a3: 33:4f:f5:8c:aa:d5:c0:86:51:19:4e:6a:e1:11:8e:26:01:bb: 9f:cf:f6:c5:e9:bf:dc:3d:03:61:fc:81:77:8d:21:d4:58:bc: 89:30:93:2b:6d:79:98:26:d9:af:6c:aa:91:6e:a1:3c:ba:27: 24:3a:f1:9c:1a:6e:cd:ef:5d:3f:dd:e7:22:51:67:51:a3:78: b0:1a:66:15:fc:92:4a:72:7a:f4:de:ed:c7:3e:a3:be:2c:ef: e5:25:00:1f:cb:a5:f2:2f:88:0e:41:55:d2:98:73:b4:63:f7: 89:f4:c5:f2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNiw+k7vkC0+QXdwL/8AdslMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMzZmI0MDNhMjQxODgzZTU4ZmNlZDUyZDM5ZDgwZWFiZDUy YmIzNmYwHhcNMjQxMTI1MTAwMDI2WhcNMjQxMTI2MTAwMDI2WjAzMTEwLwYDVQQD EygyZDQwMWIxYWFiZDliNTU2OTcyNjAwYzEzMzFhZDgzYWI4Y2EwOTdlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmWcCYRW/y1S7Q2L6FOREmOvUhHgP /Dd+4eEWazsXFp9SD3DxWeqAy+g+Dgv0NbkX1qengQEwUikLQIad/2G47Oji2vUT v8CPGziHngDGBGbsY33FYmgYyME1QttIMK6X2YP5T3SuMrCGsvAJBYgFWTgdMqNp stUlZD6Kke4w1kHt1QpqGIb0SWFN9de0dL/linUVHH+tWiv+WsXIW0lNxOpHbBLs tEWZGtBXMzsseLwjCxTgy4wjPkAvPC/DWJDBsPO7k37GnZojlWJ/lt/mmCsdRVSF qzvWyrBB4wqM4ZSIUwMDjmMmpP0Jef1AMZpfli8uIfJv847bKnypt3LgTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFC1AGxqr2bVWlyYAwTMa2Dq4ygl+MB8GA1UdIwQY MBaAFMP7QDokGIPlj87VLTnYDqvVK7NvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUt YTlhNzc5MDI2ZjBhLzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wNC80ZGM2MjUtN2MxYy00ZGFjLTg5OWUtYTlhNzc5MDI2ZjBh LzEvd190QU9pUVlnLVdQenRVdE9kZ09xOVVyczI4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAflI+VLUb 81mLBadJZcg4v4sJSL5krHc4i5RWXd5Kw0dR4h8ESkkbcni/cD0T8UV3YoLeeDBm jODE0brE+n5/slkhu7L/IwzGLpJwDIdpBFa7S9DblJL65eGFlwpb0QjOQPVbRL3Q IClsWK60KmWldSP5Ol5cspEhBsSSHKfmTejutDYlJi3n7xFe82oAYCGjM0/1jKrV wIZRGU5q4RGOJgG7n8/2xem/3D0DYfyBd40h1Fi8iTCTK215mCbZr2yqkW6hPLon JDrxnBpuze9dP93nIlFnUaN4sBpmFfySSnJ69N7txz6jvizv5SUAH8ul8i+IDkFV 0phztGP3ifTF8g== -----END CERTIFICATE-----Generated at Mon Nov 25 16:09:28 2024 by rpki-client on console-fra.rpki-client.org