$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft File: 7TChMXGFYKNKs0k4hOhY7EMfatE.mft (raw, json) Hash identifier: IPj/P/+05u3GqTeh5nBv19WzQ+MnrOBb44cEIrwXAZg= Subject key identifier: FA:B6:CC:47:D8:05:AA:35:BD:A7:DF:3E:38:FD:AF:10:2F:27:D7:B8 Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1 Certificate serial: 01935162887709C48F2B5085139187CEB8C3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft Manifest number: 09C2 Signing time: Fri 22 Nov 2024 01:00:32 +0000 Manifest this update: Fri 22 Nov 2024 01:00:32 +0000 Manifest next update: Sat 23 Nov 2024 01:00:32 +0000 Files and hashes: 1: 7HkMXMHSThrtgZKaP6Z5BeNrmXA.roa (hash: p7tbkpqZ+iV47W7W3IqzIFYC50Vawr8ny8FXa5ZvIb4=) 2: 7TChMXGFYKNKs0k4hOhY7EMfatE.crl (hash: lel0oFaEP8jOoVWuOJCX5tPi/CTnRGeu1jtz6ddgai4=) 3: 93Ktg8yKVqsIjano4A8tsuL-nxc.roa (hash: cvIPHetNQLp86ngwOFfLSVDDlr0Bzh9K1/VkRiIcUGQ=) 4: Bx7q8Nl5vLyYAgPVzr_Q2fPFK-U.roa (hash: oUDWBNI+oDXK42Gd7KjwKlI0A7iL/RI6vpBaqWBeyMs=) 5: HmBy6mf73q3RxMobfDtm5703L5Y.roa (hash: WE7kyn66vKGPLt+MpmphDJIeHz601CTn3mDL5xRDU5c=) 6: M_jnh0abgBwroSVIrww6via6vuA.roa (hash: e/LAhrVzGuCicp8Fpw7Y007Qlc9wUPlsDB02pWwBfsI=) 7: PiicB2K_nwdfJ1ImdzjxAeMmPag.roa (hash: 6j2yuwPQK3HLyRIwDZWTlgkn5lMTUK4K8ehqpH2p5Yo=) 8: eimdwvSjVoJMybU18LfqBL_lOno.roa (hash: GFeltt0YSB/VRt9XagqeY8VvCVN/bSzNaRDdjiM4h9Y=) 9: rzDcVQbMrYB3vSK7FxhJPQiL_2Q.roa (hash: jRfK4WaMNg2V2dKRwQLXVfeXE7w017S1V47bVOVUsxM=) 10: sFqD8b6-aftnbmPASbHhTEvz60c.roa (hash: kOLfxySn0gLz2uvo1vrium/qDqDuSpx0HCn+8U+dFng=) 11: sMEmbmqhLaHBx9jrVa4phVMOmvU.roa (hash: am0i1Z86myvrfWqvwaPabQqvmkEv1qr93RPvhjEf9I4=) 12: vUsBVRfb7Ljv2xrLmo6PgdsXFUE.roa (hash: R/KMJvhd8p3Ty9efW/9oja27ceXbvc1bM1NX3Mprt6g=) 13: xs82aokeVGpVsbaQUDmPhz-LvAs.roa (hash: 9gUchDnFVAfbXz4mJxlWvv6Y/C1eNg869gO2cKLtfMk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:88:77:09:c4:8f:2b:50:85:13:91:87:ce:b8:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1 Validity Not Before: Nov 22 01:00:32 2024 GMT Not After : Nov 23 01:00:32 2024 GMT Subject: CN=fab6cc47d805aa35bda7df3e38fdaf102f27d7b8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:28:fa:2b:1f:46:cd:93:c2:0c:b0:b9:ab:c3: 10:af:ab:6d:a3:dc:1f:1b:a2:dd:ba:98:1f:95:be: 5c:8f:df:6e:12:30:e2:14:51:69:d4:52:f4:03:f9: 12:19:92:bd:57:b9:a2:82:da:03:2f:5f:b4:22:af: 2f:81:ef:c5:a7:be:ab:d3:f0:3d:7d:9d:fd:ef:24: 8d:35:b5:2e:05:07:cf:92:49:c8:9c:5f:1a:c7:26: 89:00:38:82:a3:bf:5f:8a:9b:e9:9e:f2:6a:78:93: 72:81:11:6f:9d:7e:52:16:ee:93:18:65:1a:eb:4b: ad:76:59:ea:b8:b8:fb:9b:c6:4a:52:ce:94:0c:51: 45:50:13:26:22:95:ea:ac:bf:53:b6:43:ad:f8:31: fc:8d:b8:cd:de:c7:b8:e8:e6:ca:28:1e:8f:a6:10: c3:ca:6a:e1:16:99:37:ee:6a:4c:e4:06:53:34:36: c8:fd:6d:38:2e:ea:d2:81:89:c8:ef:2a:86:e5:b6: 8d:4b:7c:67:1a:80:02:da:6b:d6:b3:13:22:d0:4d: ed:ab:d9:0d:dd:98:dd:b5:bc:c1:9e:b9:f4:b4:05: e7:88:73:1e:9f:e1:0b:58:a6:e9:f7:e1:49:2d:7c: bc:da:5a:c0:9d:3f:60:b8:a5:b2:2f:f8:0c:78:c9: 1f:5d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FA:B6:CC:47:D8:05:AA:35:BD:A7:DF:3E:38:FD:AF:10:2F:27:D7:B8 X509v3 Authority Key Identifier: keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 77:7f:34:b6:fb:9b:eb:f9:45:84:32:70:cb:8e:84:e0:6b:66: 1e:79:b3:62:ad:91:e9:35:21:3b:68:33:27:99:c1:23:ac:82: ac:f1:31:10:ba:53:63:16:94:8d:ea:6b:8d:85:7e:f0:67:c1: 4f:c9:bf:08:c1:13:c6:20:a2:e9:b9:24:00:87:da:6a:7d:7b: 54:24:d5:c1:73:fb:6e:39:74:d0:34:25:46:fb:03:b7:e5:6e: 3f:82:c9:0a:d8:26:15:83:7d:44:92:05:9c:68:ef:4b:dc:99: 50:d6:e6:5c:5f:bf:2c:2d:0d:ef:53:3b:f9:fa:31:71:6f:94: 9f:10:05:8e:c8:c8:0b:e4:51:29:f1:5e:8c:53:69:de:07:7e: c4:c4:1b:53:6e:3f:8f:11:9b:21:1d:52:9b:ab:3f:75:87:dd: 13:4c:a3:b7:86:90:fc:c5:3a:3f:de:cb:47:cd:31:a5:44:4b: 4d:1f:ad:84:59:30:fa:53:5a:6f:ab:1c:48:55:43:fb:23:42: 90:67:a3:e1:ed:6a:c3:28:45:4e:52:c5:63:63:4a:4b:0f:d4: 28:dc:c9:b4:ca:e8:d0:69:3e:f0:48:7d:7b:3f:92:84:11:b7: 68:85:1e:a4:2b:1a:06:29:c9:e1:9a:d6:2e:93:3b:bc:ef:b9: 82:7b:ba:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYoh3CcSPK1CFE5GHzrjDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVkMzBhMTMxNzE4NTYwYTM0YWIzNDkzODg0ZTg1OGVjNDMx ZjZhZDEwHhcNMjQxMTIyMDEwMDMyWhcNMjQxMTIzMDEwMDMyWjAzMTEwLwYDVQQD EyhmYWI2Y2M0N2Q4MDVhYTM1YmRhN2RmM2UzOGZkYWYxMDJmMjdkN2I4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyj6Kx9GzZPCDLC5q8MQr6tto9wf G6Ldupgflb5cj99uEjDiFFFp1FL0A/kSGZK9V7migtoDL1+0Iq8vge/Fp76r0/A9 fZ397ySNNbUuBQfPkknInF8axyaJADiCo79fipvpnvJqeJNygRFvnX5SFu6TGGUa 60utdlnquLj7m8ZKUs6UDFFFUBMmIpXqrL9TtkOt+DH8jbjN3se46ObKKB6PphDD ymrhFpk37mpM5AZTNDbI/W04LurSgYnI7yqG5baNS3xnGoAC2mvWsxMi0E3tq9kN 3ZjdtbzBnrn0tAXniHMen+ELWKbp9+FJLXy82lrAnT9guKWyL/gMeMkfXQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPq2zEfYBao1vaffPjj9rxAvJ9e4MB8GA1UdIwQY MBaAFO0woTFxhWCjSrNJOIToWOxDH2rRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTkt NGIzYjFiNjNiNmFiLzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8wZi81YjA3MDItMTZlNy00NjI3LWFlMTktNGIzYjFiNjNiNmFi LzEvN1RDaE1YR0ZZS05LczBrNGhPaFk3RU1mYXRFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd380tvub 6/lFhDJwy46E4GtmHnmzYq2R6TUhO2gzJ5nBI6yCrPExELpTYxaUjeprjYV+8GfB T8m/CMETxiCi6bkkAIfaan17VCTVwXP7bjl00DQlRvsDt+VuP4LJCtgmFYN9RJIF nGjvS9yZUNbmXF+/LC0N71M7+foxcW+UnxAFjsjIC+RRKfFejFNp3gd+xMQbU24/ jxGbIR1Sm6s/dYfdE0yjt4aQ/MU6P97LR80xpURLTR+thFkw+lNab6scSFVD+yNC kGej4e1qwyhFTlLFY2NKSw/UKNzJtMro0Gk+8Eh9ez+ShBG3aIUepCsaBinJ4ZrW LpM7vO+5gnu6CQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:52:19 2024 by rpki-client on console-ams.rpki-client.org