$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft File: cb3erw8w-9r551uSrH1b0T8oXec.mft (raw, json) Hash identifier: xXKcWoV3+qd55fhZ5J3PdHPxmgT0tfbgg9gQaaU7J/M= Subject key identifier: 2A:A4:57:F8:E7:13:CE:35:E2:0B:59:AA:33:28:EE:1E:C1:2F:13:F5 Authority key identifier: 71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 Certificate issuer: /CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Certificate serial: 01936556EC36B6253159EA6C5F7E24049BED Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft Manifest number: 0962 Signing time: Mon 25 Nov 2024 22:00:15 +0000 Manifest this update: Mon 25 Nov 2024 22:00:15 +0000 Manifest next update: Tue 26 Nov 2024 22:00:15 +0000 Files and hashes: 1: 78WmjMLJ594O0JGbEHI9D-u7pgo.roa (hash: kM2tc+4dWMlFCqBLDxrVsTpee+YX1uiFo5MIX0ZDjm4=) 2: I_CAr9C1dxdUc47FYr9o6JqZ0lk.roa (hash: rVV8rEg/FnKtt1FjRORzavggwUAP2pLBZVJAfTBWxVE=) 3: Luo-unG3Q8lEB17oeZ9ivvt3sXk.roa (hash: Ogyt0TPjqwGXTsHlC6slqJNSttx2fXg6etKkzR2ME9g=) 4: S-LwtSAniV3-J5L4ShD5Cv5IuJM.roa (hash: iYLgowTkQGBZSDAI/q8Vyt5sI7MQ5lgXWvf8Moh+maY=) 5: UB301w9WFL5D4YiK7LdWeUoJGDQ.roa (hash: /MRMKAwnROO9De2sQGqOIZc69C5bEUU4VK4NSH+P0FY=) 6: ZxkzV8VH0BPZbCsLMi7Ok3Tkuq4.roa (hash: caIaejBpWNw3EikzqlA19Rno3NQhv+yf1Mo6PfQ99OY=) 7: aXBVswBpF7zSqap544CHqTvteR8.roa (hash: i44qHZf3whzinsSR1KFq0ylUC1idAG1GpE6O61uehXU=) 8: c_iyGXSPf8q2doyW4EbkqC9HyuA.roa (hash: t9/LEVx8ttglIJnKnjVN+ErF2zY8lqAQc1Nrf6zcnFA=) 9: cb3erw8w-9r551uSrH1b0T8oXec.crl (hash: DDDHvAqRIgBPmovT2KctnCg4ZyuqMhbE+X4bALLv4nM=) 10: evJ3380ga8jjdRzTlQKQbqyhcmk.roa (hash: mrF2MKrmsL/csp1+zZzOOq4wJcPlMlIx4Q1QzqcbVuM=) 11: fVcgsSneQ87C4i0IV7IkoCr35P4.roa (hash: QQfBBhuGFrexsSPsqg/kHQJEI0GOdVBtK/r8Cy0LzGc=) 12: ncIDCRgMQQMI8bFviNGRdJbwhDI.roa (hash: 45x0+AXM4S0d6zQOh92kMLDRksy+uV6WA7XDDVnyX88=) 13: xcdQedE7xqhGcUXspO94B_OQ0nY.roa (hash: TwYqwZmDDTBpjrf0iKk63Yy7mlEGA3si7GFehqqa5fc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 16:12:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:65:56:ec:36:b6:25:31:59:ea:6c:5f:7e:24:04:9b:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=71bddeaf0f30fbdaf9e75b92ac7d5bd13f285de7 Validity Not Before: Nov 25 22:00:15 2024 GMT Not After : Nov 26 22:00:15 2024 GMT Subject: CN=2aa457f8e713ce35e20b59aa3328ee1ec12f13f5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:f9:6e:b3:17:67:97:f7:8a:2f:83:ce:64:53: 97:49:cf:e5:bf:71:62:94:c0:e4:f6:1b:bc:93:ef: f9:78:87:ed:a2:f0:b6:6e:0f:b6:ea:82:57:8f:d5: 51:e4:35:4b:29:e9:78:6b:32:fd:6d:63:17:bb:08: 38:07:7e:04:1b:31:e6:42:de:69:c7:43:50:c8:a3: cc:9d:ae:a1:38:58:ce:40:b6:87:25:8e:96:bb:d7: 80:c5:f6:3e:17:94:7e:ea:34:ae:c7:10:ed:a3:00: 37:1f:bf:6d:f9:c6:3e:3c:0a:e5:36:d8:28:8c:43: 01:77:26:4d:87:d5:80:09:78:ae:76:23:08:ba:b3: 67:90:a8:30:ab:b3:73:97:34:8e:aa:e5:95:f7:19: da:33:db:72:7e:b4:d7:24:17:de:8f:f4:2a:83:4b: 09:4d:35:10:9b:77:70:7c:ea:36:eb:10:bb:ec:d7: 72:05:2e:b2:2e:fb:fc:b0:ad:cc:b3:29:3d:b2:f9: 23:0d:f6:35:23:87:22:d8:87:71:f1:3f:6a:25:25: 79:a2:31:c3:3a:bf:4d:a6:36:44:d6:53:3b:10:e8: d5:7f:eb:7e:77:74:87:d2:66:4c:7d:3c:75:25:08: 57:b2:50:92:d9:89:17:b1:84:fe:02:c6:58:39:13: 93:f7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:A4:57:F8:E7:13:CE:35:E2:0B:59:AA:33:28:EE:1E:C1:2F:13:F5 X509v3 Authority Key Identifier: keyid:71:BD:DE:AF:0F:30:FB:DA:F9:E7:5B:92:AC:7D:5B:D1:3F:28:5D:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb3erw8w-9r551uSrH1b0T8oXec.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/814ec5-9e41-4b5a-a6fe-477231191a35/1/cb3erw8w-9r551uSrH1b0T8oXec.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 70:2f:71:46:88:8b:65:1e:1b:b0:54:c3:80:ca:28:15:3d:72: a0:8b:55:a4:28:d4:0e:51:e1:23:75:a8:c2:a8:ab:6f:1a:27: 65:fa:b4:a7:71:49:ca:b1:6a:86:b2:a2:7a:2b:7e:c6:24:d6: aa:3d:09:66:fa:5a:5c:e9:e8:24:d2:b1:90:e1:97:d6:52:e2: 05:df:60:06:ee:a3:56:82:2b:76:c2:ba:db:16:0c:11:b3:b2: ae:77:03:26:22:26:b1:41:9f:e0:09:53:85:e8:ff:66:b0:e6: 58:a6:07:59:ae:63:83:86:eb:14:a6:a7:7c:ec:c9:1f:11:56: 5c:44:9b:8c:36:69:54:d8:72:1e:a9:7c:01:5d:84:48:c4:d8: 82:b2:d4:93:6b:03:c0:16:6a:2f:dc:07:51:81:f6:82:37:4b: e8:86:bd:41:94:8f:0a:5d:b9:8c:68:7e:fa:eb:da:6d:de:b1: f3:8d:db:e3:bf:40:3d:cb:89:5c:9e:53:32:ad:d1:92:45:f3: e1:8b:ba:d9:0f:7f:52:6f:28:8c:90:97:e6:b7:ab:cc:b9:00: fb:ca:49:a9:69:ab:57:ed:08:cc:46:cb:aa:bc:c0:71:66:6f: de:55:f5:0c:2c:07:22:96:71:63:d0:73:ed:17:96:be:7b:ec: f7:c2:5d:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNlVuw2tiUxWepsX34kBJvtMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcxYmRkZWFmMGYzMGZiZGFmOWU3NWI5MmFjN2Q1YmQxM2Yy ODVkZTcwHhcNMjQxMTI1MjIwMDE1WhcNMjQxMTI2MjIwMDE1WjAzMTEwLwYDVQQD EygyYWE0NTdmOGU3MTNjZTM1ZTIwYjU5YWEzMzI4ZWUxZWMxMmYxM2Y1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnflusxdnl/eKL4POZFOXSc/lv3Fi lMDk9hu8k+/5eIftovC2bg+26oJXj9VR5DVLKel4azL9bWMXuwg4B34EGzHmQt5p x0NQyKPMna6hOFjOQLaHJY6Wu9eAxfY+F5R+6jSuxxDtowA3H79t+cY+PArlNtgo jEMBdyZNh9WACXiudiMIurNnkKgwq7NzlzSOquWV9xnaM9tyfrTXJBfej/Qqg0sJ TTUQm3dwfOo26xC77NdyBS6yLvv8sK3Msyk9svkjDfY1I4ci2Idx8T9qJSV5ojHD Or9NpjZE1lM7EOjVf+t+d3SH0mZMfTx1JQhXslCS2YkXsYT+AsZYOROT9wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCqkV/jnE8414gtZqjMo7h7BLxP1MB8GA1UdIwQY MBaAFHG93q8PMPva+edbkqx9W9E/KF3nMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUt NDc3MjMxMTkxYTM1LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS84MTRlYzUtOWU0MS00YjVhLWE2ZmUtNDc3MjMxMTkxYTM1 LzEvY2IzZXJ3OHctOXI1NTF1U3JIMWIwVDhvWGVjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC9xRoiL ZR4bsFTDgMooFT1yoItVpCjUDlHhI3WowqirbxonZfq0p3FJyrFqhrKieit+xiTW qj0JZvpaXOnoJNKxkOGX1lLiBd9gBu6jVoIrdsK62xYMEbOyrncDJiImsUGf4AlT hej/ZrDmWKYHWa5jg4brFKanfOzJHxFWXESbjDZpVNhyHql8AV2ESMTYgrLUk2sD wBZqL9wHUYH2gjdL6Ia9QZSPCl25jGh++uvabd6x843b479APcuJXJ5TMq3RkkXz 4Yu62Q9/Um8ojJCX5rerzLkA+8pJqWmrV+0IzEbLqrzAcWZv3lX1DCwHIpZxY9Bz 7ReWvnvs98JdEg== -----END CERTIFICATE-----Generated at Tue Nov 26 00:29:02 2024 by rpki-client on console-ams.rpki-client.org