$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft File: Y2O7ZYlfOlSksyShDHmsmO_ioco.mft (raw, json) Hash identifier: 40S1YdwDk1pNYH7CMSVgzeltSrt4eLe/EzhFAL0J2nY= Subject key identifier: F4:7E:71:FF:55:46:D6:1F:A4:C1:4C:7D:A7:21:B5:CC:A4:72:60:C4 Authority key identifier: 63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA Certificate issuer: /CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Certificate serial: 018F84B54FBE5FA62C598574F087C0B05D53 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft Manifest number: 0AB4 Signing time: Fri 17 May 2024 04:00:25 +0000 Manifest this update: Fri 17 May 2024 04:00:25 +0000 Manifest next update: Sat 18 May 2024 04:00:25 +0000 Files and hashes: 1: 06lBf6eCb_YiUokSZGBKGW6XyCU.roa (hash: dTUeSqK/nOA3qCd6y/9E7v2aujggQW+n6OCv4RhgGkM=) 2: 3M4pfb9w_Ih8Um-7dDYb749XofI.roa (hash: CI1/gWetxm/dmFK2wzXzeALW+di8gLgAFQT6cFnlGtY=) 3: 5pg_93qnaR-AYjTKJ9nzmq2APJw.roa (hash: PQACg8S509/7L2Da5K8T8zd9h+wkXSAplu6/AuHlw6g=) 4: EjoRTmXZPogeMLnq4ICj13QYj7A.roa (hash: OvD7i8Zl26+i9FUL4ZqZ/VO7EmmdT74UH3HZYnZTyGM=) 5: RGRQyycScMgIaEkVRTTYZcBbshE.roa (hash: R251uuvyYJsnRk6nXvAjAQeOdiywSG9AQKpl1Hd9UZs=) 6: VSKaxahZF2K-DIR3WFefzrGQR54.roa (hash: rz9D2ovG2mx7pSKDAJ0a/qytt3zNMII6FMrlYzL7ygE=) 7: Y2O7ZYlfOlSksyShDHmsmO_ioco.crl (hash: h+Ma5JtDRpu7DIEqfFlWdLwec9uBho9rzdxG+0+zhnM=) 8: bTBH0Ey8mfNclPT8nJHOIGhxkZc.roa (hash: 75dIjuGrNJrGWF16H7RJVXVTUYqAHnsLxy0NJFria2Y=) 9: bX0oaiwG7MdJHdRsJSJsa4zTkVk.roa (hash: MiJ8tC8UZ9aq0pDkC3uP60NhzC5wfelidzzeAY/qlJI=) 10: h1JhC3pj6L5H4u9v4rYKFNZZ_DM.roa (hash: F/V4CulY/M2rxE7v3eX5GIvTTpmAfWAXMllEF5O80h4=) 11: keSNqW0HmxHuMl2TAvvSyKAOilE.roa (hash: 1aj0NjG3HFkz/OnLitnZdRIuNvi5Ol8QieHArNMGG1E=) 12: m5wxxPLcNH8N5y_KCLQOLIE612U.roa (hash: x9uefpJ6pz7v8ILgP3vcqpps/Am4lQakGs0woQqebS4=) 13: mmhUC8yDo3GA_xcX-H0dxAwTUv8.roa (hash: PVdCfJGBdzSz9vsVphkWbhS9nKzXeLf0DSm46BWLv7Y=) 14: nTvm7CMJvHXt3QLnX4gIxcKtVzE.roa (hash: 6geIl+0+4sleg/k2+XsFC1T4ArfuiUpA+bCiJ77RdLA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 04:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:84:b5:4f:be:5f:a6:2c:59:85:74:f0:87:c0:b0:5d:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6363bb65895f3a54a4b324a10c79ac98efe2a1ca Validity Not Before: May 17 04:00:25 2024 GMT Not After : May 18 04:00:25 2024 GMT Subject: CN=f47e71ff5546d61fa4c14c7da721b5cca47260c4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:c3:ed:d2:db:48:a6:5a:62:26:d7:e9:39:5c: 88:7f:7b:84:11:a5:e1:5f:fc:a4:6d:61:e2:78:1b: de:76:90:7d:5b:e0:eb:5b:19:f1:65:8f:a3:7c:c3: ff:9b:70:fd:97:50:40:d7:14:dc:f6:c5:61:df:cb: aa:23:ba:6e:2a:41:8d:3c:60:5c:0d:51:50:1a:2d: 88:73:e7:f9:49:05:2b:08:d1:ef:38:31:19:b9:0b: ce:61:57:10:23:8a:1b:22:05:7c:a1:87:d5:0b:b3: e8:d6:2b:ba:40:9e:e4:26:69:3e:55:a6:a1:e7:49: 25:57:1d:9d:9c:95:bd:09:7e:a2:2d:99:8b:3d:b3: 2b:3b:d6:af:5f:dd:77:c5:7f:84:0e:de:2d:d0:59: 1b:c2:77:97:3f:03:ec:1b:00:93:ca:58:ad:6b:59: 8e:4f:58:c5:8a:c7:55:f1:86:f2:3b:e8:d9:ee:d4: 1c:16:f2:35:c2:b4:9d:a4:05:33:9d:13:1c:ce:4e: 63:07:3d:3a:f5:4c:4d:43:26:b4:55:55:53:57:ab: 55:0c:bf:05:f7:18:1b:bc:b1:e6:11:fa:e7:6c:9f: c5:4f:2a:12:2c:4d:ea:15:47:f2:86:e2:b5:d9:d4: 43:52:1d:9e:86:9c:5d:48:2f:55:2d:42:51:9f:8e: 2c:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:7E:71:FF:55:46:D6:1F:A4:C1:4C:7D:A7:21:B5:CC:A4:72:60:C4 X509v3 Authority Key Identifier: keyid:63:63:BB:65:89:5F:3A:54:A4:B3:24:A1:0C:79:AC:98:EF:E2:A1:CA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y2O7ZYlfOlSksyShDHmsmO_ioco.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/17/db9bf1-e019-45a4-8663-a6ca454db2d7/1/Y2O7ZYlfOlSksyShDHmsmO_ioco.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:af:14:17:03:af:da:75:58:ec:54:23:c9:f2:84:9d:bf:4d: be:aa:ae:7a:4c:7e:0c:f3:ac:ea:b6:36:5f:69:cd:c8:66:2b: 58:68:37:25:97:b2:a7:fb:b0:84:20:2f:67:86:2e:68:74:98: b9:a0:0d:2e:0c:e6:15:8f:92:4c:86:5a:4c:d9:a1:59:1b:87: 8f:8c:e4:06:a6:94:eb:41:38:15:56:dd:82:10:bd:f3:5f:79: 1a:c0:99:3e:97:cd:32:58:f3:05:ca:02:ca:86:30:84:5c:8b: 34:0d:ef:6f:49:94:db:cb:a4:1d:ac:de:1e:ec:37:99:59:c3: 3e:b3:2d:3d:6d:e8:d6:bb:da:6d:19:17:45:82:0f:65:b8:07: 48:eb:80:90:a8:38:df:b1:f0:f6:d5:75:4a:df:ff:62:2e:7a: ff:87:12:ee:e7:c2:a0:82:a6:46:6e:0f:66:cf:0e:bc:0e:98: e7:1b:a6:d5:a0:b8:54:9b:13:32:0d:90:64:26:d4:0c:0f:10: c0:2a:d0:89:be:9c:95:5c:53:3b:f6:a5:5e:f7:63:36:d0:5b: 1e:80:b0:3c:6d:a0:d6:df:86:3e:20:37:2e:04:2b:eb:40:80: 9c:90:1e:43:c5:af:2e:00:71:eb:ef:21:dd:a8:81:32:dc:84: cd:55:0e:6e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+EtU++X6YsWYV08IfAsF1TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDYzNjNiYjY1ODk1ZjNhNTRhNGIzMjRhMTBjNzlhYzk4ZWZl MmExY2EwHhcNMjQwNTE3MDQwMDI1WhcNMjQwNTE4MDQwMDI1WjAzMTEwLwYDVQQD EyhmNDdlNzFmZjU1NDZkNjFmYTRjMTRjN2RhNzIxYjVjY2E0NzI2MGM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwMPt0ttIplpiJtfpOVyIf3uEEaXh X/ykbWHieBvedpB9W+DrWxnxZY+jfMP/m3D9l1BA1xTc9sVh38uqI7puKkGNPGBc DVFQGi2Ic+f5SQUrCNHvODEZuQvOYVcQI4obIgV8oYfVC7Po1iu6QJ7kJmk+Vaah 50klVx2dnJW9CX6iLZmLPbMrO9avX913xX+EDt4t0FkbwneXPwPsGwCTylita1mO T1jFisdV8YbyO+jZ7tQcFvI1wrSdpAUznRMczk5jBz069UxNQya0VVVTV6tVDL8F 9xgbvLHmEfrnbJ/FTyoSLE3qFUfyhuK12dRDUh2ehpxdSC9VLUJRn44sAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPR+cf9VRtYfpMFMfachtcykcmDEMB8GA1UdIwQY MBaAFGNju2WJXzpUpLMkoQx5rJjv4qHKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMt YTZjYTQ1NGRiMmQ3LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNy9kYjliZjEtZTAxOS00NWE0LTg2NjMtYTZjYTQ1NGRiMmQ3 LzEvWTJPN1pZbGZPbFNrc3lTaERIbXNtT19pb2NvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAba8UFwOv 2nVY7FQjyfKEnb9Nvqquekx+DPOs6rY2X2nNyGYrWGg3JZeyp/uwhCAvZ4YuaHSY uaANLgzmFY+STIZaTNmhWRuHj4zkBqaU60E4FVbdghC98195GsCZPpfNMljzBcoC yoYwhFyLNA3vb0mU28ukHazeHuw3mVnDPrMtPW3o1rvabRkXRYIPZbgHSOuAkKg4 37Hw9tV1St//Yi56/4cS7ufCoIKmRm4PZs8OvA6Y5xum1aC4VJsTMg2QZCbUDA8Q wCrQib6clVxTO/alXvdjNtBbHoCwPG2g1t+GPiA3LgQr60CAnJAeQ8WvLgBx6+8h 3aiBMtyEzVUObg== -----END CERTIFICATE-----Generated at Fri May 17 10:18:35 2024 by rpki-client on console-fra.rpki-client.org