$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft File: JFXX_uSkmeyvEdLT2o44neMjQS8.mft (raw, json) Hash identifier: A/tK52KCw4s27SPWOUGLsc5ONv+E6zIeXZ21MU8BQGs= Subject key identifier: EA:1B:E8:61:5D:E9:8B:C9:71:35:EF:E3:85:25:B2:0E:5C:B2:E3:93 Authority key identifier: 24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F Certificate issuer: /CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Certificate serial: 01935162DD8146473D167520B3B917A6E44F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft Manifest number: 10A1 Signing time: Fri 22 Nov 2024 01:00:53 +0000 Manifest this update: Fri 22 Nov 2024 01:00:53 +0000 Manifest next update: Sat 23 Nov 2024 01:00:53 +0000 Files and hashes: 1: 0Hyzo0hnpiHBxDW04br4Ws6_FwM.roa (hash: TnF21hPVFwWeFBh7Z+3PzalMv9cO4yneAnDPRQJ2X9o=) 2: 1-3t0l6vKJ3YJQBoNhsWcts2xk38.roa (hash: aw10dc5u2WmCUbSCJ/Su/yGmh686bqLSTUaFeKeZvJY=) 3: 4N4Vmd5Lt3tIPh_lY6QrUE-_k88.roa (hash: +NAXP/k192GmPSIcIIb/4YdbMvPVxnVIttB+9OiCBEs=) 4: 8hgKNOMZKcY_Ubc96GOloIRdIpU.roa (hash: HVl52eYXBtSx5hRXRkLesW9QZf4Rdynn1/ooR5SEp/E=) 5: C9C0V0G6heXKhMs9zwewEbgyH4E.roa (hash: +sw7YDqtUsQwPEhe7kVcvTRomQL8/W5JSnyqYTO1A64=) 6: EtDOiSCXoeNNTdnRDfE7baHiANc.roa (hash: ILTv3h8y3j+59ZTzCWgoMK6NKqix40g6GigeeisktW0=) 7: FJiZaMUBtAUUCAR7GnrCeKRKaiY.roa (hash: 82c//JgDtlzilUCwfHn76Vm7Sb7ZZYLIJ/9BrLfCwhg=) 8: JFXX_uSkmeyvEdLT2o44neMjQS8.crl (hash: n1upkA0r3TDs5hvP7yymuiG6Qwl30kJOMVxHWTTzfSE=) 9: Qc-vdaxHHC2qzqiVtbU3NtwhIEc.roa (hash: wVyehcP8j17dziTYbaWirEAmJhgDZnn/ypyZbyof4dI=) 10: QwHW9zRKSDjOPhyCEFmchZNk7yU.roa (hash: myBEZglhsWmrzvYGGPciDpLziFkofoV2gasp2JNcsNM=) 11: Uj3RRxvldIS7KO3N2_uESZFn0pQ.roa (hash: JIw4TqMp1EoDsc28RdZBznl7CyXaNXBOdlHkV131ciE=) 12: V2I353X9c6UPJJCcNKACwjU9uDo.roa (hash: Q52qzpu1g5L7Lxt0kixPoC8hflYnsk0ZDAAzDKk5FVQ=) 13: YXRKToY-ZkTEgteHDgYDSvF3JbA.roa (hash: HF4vLOpBuvyZR5vL5B5Quw46sVIRX2RSRh0XG+FuUuM=) 14: aAd3eu0aAgou1_tDcCmo2DILPkM.roa (hash: 09a35DRtLryUI5G+QSL9aQFU0gY/vQQq/WSG80rjUgk=) 15: iHl9M9dD_Q4GMUfJ48BHVZYAO9Y.roa (hash: 5ajkJVPU2aNKACUypGflrQtIm4VQ667e4Q3OVKtR3Qo=) 16: jhlVJdEq5CSb7xeEJJluyO2cD4U.roa (hash: Y5BoZbliCSJMGLNrnV8LMOT4HfFNdC4CnHxcWDylkIc=) 17: k6BSoLeif0h-pw0EVZPjP5ln_is.roa (hash: K3+VONp8l7M2CDHzeWYVNMQbg6xeiDi/D+/b38Lzpmo=) 18: nMNCPNuFNIme8jkeGGGrwNJRJSE.roa (hash: mmQoWt0UBcaMNvGmjzBh6DPDA4spa/nVvEq1E2xR/tU=) 19: nsOo67P1pOxIhOHap1kvjAR1RMk.roa (hash: tXPzP2r5oOkRIIGaSeFIaz/0I3DrQz8utyF4G0BMg9Q=) 20: q-LJzW3zeJvFle2xuCTtWpfW_S0.roa (hash: qy+ODjFK3x6C+8FYYflREP+Tl/VJYMt3q1d6F1RciK8=) 21: uurtOIbDUg52KtpeZEKK8kv0ewE.roa (hash: X0xp04wFY05WL2ujF3zf1HI8p5AWUMM0Fp9GJoDVQHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:dd:81:46:47:3d:16:75:20:b3:b9:17:a6:e4:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2455d7fee4a499ecaf11d2d3da8e389de323412f Validity Not Before: Nov 22 01:00:53 2024 GMT Not After : Nov 23 01:00:53 2024 GMT Subject: CN=ea1be8615de98bc97135efe38525b20e5cb2e393 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:56:33:91:9c:34:df:96:35:b9:7b:85:01:c3: e8:a8:2d:c7:da:a0:a0:86:20:98:35:af:73:9b:af: 4b:59:b5:65:c5:0b:13:df:a1:4f:0d:16:cf:ca:23: 92:6a:b6:60:c7:7d:0a:2c:c5:81:f8:6c:60:52:da: a3:b2:4d:76:06:1c:92:2d:4c:4b:df:29:b4:5b:3b: 82:83:c7:ff:7b:47:33:d6:e9:9b:48:9d:6c:16:ea: b9:4e:f5:34:c1:ce:31:d3:80:f7:43:6f:44:04:11: 77:1d:18:13:8f:d8:65:43:cc:5e:b5:bd:98:3f:43: ce:9e:77:76:51:b4:73:10:5f:9d:aa:b9:db:f7:40: b7:bf:c4:ef:c6:39:12:57:86:c0:46:63:77:0e:ff: e8:78:3c:de:2e:42:84:9f:3e:83:f9:ff:64:95:44: 91:e6:f0:30:49:c8:8e:a1:d2:61:1b:74:9d:64:11: b4:c5:a1:99:61:79:84:a0:a3:9d:57:e3:99:91:d1: cd:30:d4:72:79:c0:b4:e1:c7:49:f7:9b:ca:3c:ad: 7d:1a:f6:2c:65:d1:5f:9e:98:76:43:e1:8a:41:b7: a5:33:2d:7a:9f:31:05:b6:ff:d3:00:ed:e9:bd:37: 77:dd:5b:a0:9d:14:b2:0e:5a:01:e5:7f:27:1c:96: 12:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EA:1B:E8:61:5D:E9:8B:C9:71:35:EF:E3:85:25:B2:0E:5C:B2:E3:93 X509v3 Authority Key Identifier: keyid:24:55:D7:FE:E4:A4:99:EC:AF:11:D2:D3:DA:8E:38:9D:E3:23:41:2F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JFXX_uSkmeyvEdLT2o44neMjQS8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/3ffb76-9931-4942-9da1-1e0465513b63/1/JFXX_uSkmeyvEdLT2o44neMjQS8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b4:1e:87:d6:67:d4:ae:19:26:52:b8:cc:57:4d:5d:31:00:41: 0c:d6:7f:48:86:52:fd:89:34:4e:52:54:17:5a:7d:03:75:f4: de:99:42:83:3e:b1:b0:84:44:59:21:2a:9c:5d:eb:16:d0:42: 80:58:20:a8:d4:d7:8e:d4:63:9a:02:a8:84:f5:a6:4b:2e:d7: 97:a8:1e:a8:0f:59:fb:05:29:d0:1d:36:bf:4e:36:7e:18:7c: a7:08:13:e4:4c:57:5f:51:69:e6:56:f5:35:c0:a5:1d:9f:26: ef:e4:57:d8:dd:06:06:a4:3d:55:1a:4b:87:e9:d1:3f:0f:bd: 2d:dd:89:ee:05:18:6d:b1:a7:5f:74:e3:69:ca:d2:03:2a:82: 54:3b:4b:a5:1c:1c:67:f1:65:92:90:ce:b5:fb:91:62:c7:97: 06:0b:1b:5f:f5:ec:c9:ce:e2:5f:cd:00:b5:a0:2d:ec:28:e6: 59:45:07:80:a1:2d:37:f6:30:4d:a7:4e:a7:80:f4:94:88:8b: e4:39:56:cd:9a:c0:47:8c:54:7d:96:db:ef:07:4b:df:86:75: 92:c9:8c:b4:6c:e9:c1:e4:b5:f9:22:12:f5:e2:77:64:6f:ac: 43:86:3d:3b:01:c6:e0:cb:6b:7d:4e:02:58:d1:3f:35:ea:5f: 5c:8c:03:89 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYt2BRkc9FnUgs7kXpuRPMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI0NTVkN2ZlZTRhNDk5ZWNhZjExZDJkM2RhOGUzODlkZTMy MzQxMmYwHhcNMjQxMTIyMDEwMDUzWhcNMjQxMTIzMDEwMDUzWjAzMTEwLwYDVQQD EyhlYTFiZTg2MTVkZTk4YmM5NzEzNWVmZTM4NTI1YjIwZTVjYjJlMzkzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqFYzkZw035Y1uXuFAcPoqC3H2qCg hiCYNa9zm69LWbVlxQsT36FPDRbPyiOSarZgx30KLMWB+GxgUtqjsk12BhySLUxL 3ym0WzuCg8f/e0cz1umbSJ1sFuq5TvU0wc4x04D3Q29EBBF3HRgTj9hlQ8xetb2Y P0POnnd2UbRzEF+dqrnb90C3v8TvxjkSV4bARmN3Dv/oeDzeLkKEnz6D+f9klUSR 5vAwSciOodJhG3SdZBG0xaGZYXmEoKOdV+OZkdHNMNRyecC04cdJ95vKPK19GvYs ZdFfnph2Q+GKQbelMy16nzEFtv/TAO3pvTd33VugnRSyDloB5X8nHJYS/wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOob6GFd6YvJcTXv44Ulsg5csuOTMB8GA1UdIwQY MBaAFCRV1/7kpJnsrxHS09qOOJ3jI0EvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEt MWUwNDY1NTEzYjYzLzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wYy8zZmZiNzYtOTkzMS00OTQyLTlkYTEtMWUwNDY1NTEzYjYz LzEvSkZYWF91U2ttZXl2RWRMVDJvNDRuZU1qUVM4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtB6H1mfU rhkmUrjMV01dMQBBDNZ/SIZS/Yk0TlJUF1p9A3X03plCgz6xsIREWSEqnF3rFtBC gFggqNTXjtRjmgKohPWmSy7Xl6geqA9Z+wUp0B02v042fhh8pwgT5ExXX1Fp5lb1 NcClHZ8m7+RX2N0GBqQ9VRpLh+nRPw+9Ld2J7gUYbbGnX3TjacrSAyqCVDtLpRwc Z/FlkpDOtfuRYseXBgsbX/Xsyc7iX80AtaAt7CjmWUUHgKEtN/YwTadOp4D0lIiL 5DlWzZrAR4xUfZbb7wdL34Z1ksmMtGzpweS1+SIS9eJ3ZG+sQ4Y9OwHG4MtrfU4C WNE/NepfXIwDiQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:43:27 2024 by rpki-client on console-ams.rpki-client.org