$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft File: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft (raw, json) Hash identifier: BBKK+EVCXBRt2USH/NyeBQCMb7Achs5pvljKNs3lGA0= Subject key identifier: 61:24:C4:4D:0C:1E:9A:67:E6:D5:5C:36:6A:40:63:12:56:0D:77:88 Authority key identifier: 5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC Certificate issuer: /CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Certificate serial: 0193523E1D8E94E336946992BE4385C6B545 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft Manifest number: 0BC4 Signing time: Fri 22 Nov 2024 05:00:22 +0000 Manifest this update: Fri 22 Nov 2024 05:00:22 +0000 Manifest next update: Sat 23 Nov 2024 05:00:22 +0000 Files and hashes: 1: 63K3gM3gqOwuMxo7LCjqv7G7biI.roa (hash: vnU3gD1Y+qEAH7ps8prsBhPwUnb0ovY4Ql664EVU+iY=) 2: 7P2CYdhriAUM_9b-Ti7ahWJDxh0.roa (hash: j6koATZKfAy6H6CAzvy/86RREh0OIybMIqG5jGwGee8=) 3: AxJZJZJDXQQxIDuYYFPAfDT1tIc.roa (hash: uhW0irGiMfcTISDl2jYvGF+2wBIavExDXe6RbS2z130=) 4: L9sLLKcaqIUZx3Ip12R1MyXaMl8.roa (hash: EfjbxP2rJ4/Tny22xMUV60G9rVkipOuB201yMBNxoN0=) 5: LvgliWlwKOYLnIL9SurKrYlAW9A.roa (hash: tII6yfde1nMHR8s9/b5EW+wqC7XaX/SLbOw9PlryIJk=) 6: SeIGX5WVfUcp3xwMF4P4CSTytaE.roa (hash: pcA9IyYvrZ85IzneQbBVkQRVCNdSEDsd1/ycwFRTdYQ=) 7: TmXOKeiFO094g4qPgwAXVhUTPDk.roa (hash: Phu0heoSgpxcZvOkLdXEjyPxIFVbWm+h5RH8qfAL+3w=) 8: Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl (hash: 2rlJ2Z2eoBLdgBglYPkRdo1dj2MEJoP1ZPP984NEChU=) 9: bIXbGnmiAnAoUxSiZ74UzpvmjEo.roa (hash: rg7zY081joyocJhHRS/oclCCECNCYTg6Fxkf7JBPIQo=) 10: cnwvNBqIXBzEPYTjifJARBhAA1A.roa (hash: 0JcOEb/y04enmGbtLTRfBKmjgZx2s1JVBenkbDOtk+o=) 11: r7rVHuE3UaJGbJverYYh-IUwl6c.roa (hash: ospIKQ5B13jvlFHaTlWrQirRBG4t/tBRNOktp/TQrZk=) 12: tSLbbP-ksJeNISvS2zPN-4MZwJU.roa (hash: z6+riQPNEy9IxITj8M6n55nEMfi9v914HUcGN3hZGiA=) 13: uV-avjwEhJXUnJxEPBfWqSAkiic.roa (hash: G/o6tnmxcuFVCjHQENQTBXCWN7/gwn5319+TNjfcEPc=) 14: xyXSw3CkjzNAb0Kkb0l4DUa0QZU.roa (hash: qV+n5eOYG+qt2TiXEIwjHol1fecoOB0qRzExuBlf/Zg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 05:00:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:3e:1d:8e:94:e3:36:94:69:92:be:43:85:c6:b5:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5e0ff8aaf7453114147028d54ae1c693a8a147bc Validity Not Before: Nov 22 05:00:22 2024 GMT Not After : Nov 23 05:00:22 2024 GMT Subject: CN=6124c44d0c1e9a67e6d55c366a406312560d7788 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:93:26:f7:3f:0a:3f:31:42:bc:30:90:be:b9: 71:06:fc:82:1e:64:9a:9c:1b:05:8f:af:5b:af:55: 48:88:5f:4c:50:a0:a3:33:24:51:aa:62:9b:44:2a: da:72:05:4e:99:66:32:c2:b5:34:10:30:98:10:0c: 96:c0:06:c3:2e:e3:bd:09:29:96:84:28:3a:26:eb: 15:9a:21:7f:b1:11:6d:d2:d9:75:17:a4:38:69:df: 11:80:54:20:e1:40:b7:d2:7d:0e:79:37:95:c2:52: 3f:d2:d4:cd:c3:1a:cd:ca:62:9e:46:b9:3d:e6:6f: 4b:d8:e9:a1:61:4c:89:ca:4a:1f:b4:f3:0d:4c:0d: bb:48:ee:20:eb:70:b5:b4:92:db:48:10:9d:f4:5f: 6a:17:ed:c8:70:90:ce:9c:7e:54:bf:af:98:b2:e3: 33:20:a4:43:30:5e:95:84:76:b2:55:76:ac:8a:2a: e7:de:80:1a:fc:1a:a8:75:51:ab:db:c4:2a:48:e9: 04:26:93:78:28:74:8f:a0:9b:08:37:f1:90:8e:88: 03:ea:a6:ec:14:13:1e:57:c7:65:11:45:b4:38:ec: 29:9f:66:1b:49:bb:49:7b:44:af:71:34:ca:3e:77: 72:06:c4:8e:a3:01:fa:50:96:92:dd:35:a2:02:0c: ab:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 61:24:C4:4D:0C:1E:9A:67:E6:D5:5C:36:6A:40:63:12:56:0D:77:88 X509v3 Authority Key Identifier: keyid:5E:0F:F8:AA:F7:45:31:14:14:70:28:D5:4A:E1:C6:93:A8:A1:47:BC X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/09/dd6e1d-abc9-473b-a91a-d8721375644a/1/Xg_4qvdFMRQUcCjVSuHGk6ihR7w.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:f6:54:05:63:7d:88:5b:e0:f3:c4:63:e4:ea:7a:40:0c:93: d1:b2:7b:a7:97:c7:39:5c:c3:db:85:e8:ac:7b:c5:44:21:81: ce:e2:50:b2:93:e1:b4:37:87:ca:89:7c:ba:36:61:40:e4:01: 5b:57:d2:c8:73:89:35:ad:be:60:09:88:39:06:e3:1b:33:ea: cc:e7:bc:63:30:b4:8f:4e:8e:e2:aa:af:a5:88:0b:80:a0:ca: cb:29:45:a3:fa:be:67:cc:00:cc:93:31:d8:fb:c2:c8:3f:cc: a9:68:01:a1:9d:fa:31:72:72:6d:00:8b:41:2c:ba:53:4c:5f: b8:c5:80:13:a6:27:4b:a8:14:71:73:71:66:97:a2:93:7e:86: 9d:c5:8d:37:b7:34:00:12:af:92:13:92:61:51:a6:75:11:7f: 85:05:7d:e8:22:18:01:ba:45:de:1d:b9:1c:c7:7f:e5:a2:09: af:5c:7c:79:19:0f:2b:f8:9f:a5:2d:e0:b5:12:f8:58:64:a7: 65:63:67:03:8b:a9:82:93:50:1f:86:66:86:08:50:90:95:7d: 57:ab:e7:2b:dd:a8:7b:3b:d7:34:5a:51:e9:73:2e:4b:96:3e: f2:df:5f:78:5f:0b:aa:94:be:4c:e6:9c:65:cd:92:59:a0:64: d9:a7:a8:5d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSPh2OlOM2lGmSvkOFxrVFMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVlMGZmOGFhZjc0NTMxMTQxNDcwMjhkNTRhZTFjNjkzYThh MTQ3YmMwHhcNMjQxMTIyMDUwMDIyWhcNMjQxMTIzMDUwMDIyWjAzMTEwLwYDVQQD Eyg2MTI0YzQ0ZDBjMWU5YTY3ZTZkNTVjMzY2YTQwNjMxMjU2MGQ3Nzg4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpMm9z8KPzFCvDCQvrlxBvyCHmSa nBsFj69br1VIiF9MUKCjMyRRqmKbRCracgVOmWYywrU0EDCYEAyWwAbDLuO9CSmW hCg6JusVmiF/sRFt0tl1F6Q4ad8RgFQg4UC30n0OeTeVwlI/0tTNwxrNymKeRrk9 5m9L2OmhYUyJykoftPMNTA27SO4g63C1tJLbSBCd9F9qF+3IcJDOnH5Uv6+YsuMz IKRDMF6VhHayVXasiirn3oAa/BqodVGr28QqSOkEJpN4KHSPoJsIN/GQjogD6qbs FBMeV8dlEUW0OOwpn2YbSbtJe0SvcTTKPndyBsSOowH6UJaS3TWiAgyr3QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGEkxE0MHppn5tVcNmpAYxJWDXeIMB8GA1UdIwQY MBaAFF4P+Kr3RTEUFHAo1UrhxpOooUe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEt ZDg3MjEzNzU2NDRhLzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wOS9kZDZlMWQtYWJjOS00NzNiLWE5MWEtZDg3MjEzNzU2NDRh LzEvWGdfNHF2ZEZNUlFVY0NqVlN1SEdrNmloUjd3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZvZUBWN9 iFvg88Rj5Op6QAyT0bJ7p5fHOVzD24XorHvFRCGBzuJQspPhtDeHyol8ujZhQOQB W1fSyHOJNa2+YAmIOQbjGzPqzOe8YzC0j06O4qqvpYgLgKDKyylFo/q+Z8wAzJMx 2PvCyD/MqWgBoZ36MXJybQCLQSy6U0xfuMWAE6YnS6gUcXNxZpeik36GncWNN7c0 ABKvkhOSYVGmdRF/hQV96CIYAbpF3h25HMd/5aIJr1x8eRkPK/ifpS3gtRL4WGSn ZWNnA4upgpNQH4ZmhghQkJV9V6vnK92oezvXNFpR6XMuS5Y+8t9feF8LqpS+TOac Zc2SWaBk2aeoXQ== -----END CERTIFICATE-----Generated at Fri Nov 22 13:39:07 2024 by rpki-client on console-fra.rpki-client.org