$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft File: s57NJPMhmI3rfBncoFKk48SbYOo.mft (raw, json) Hash identifier: 776Okp2+tlOrIYNfy63iIkjUrFFMa0v8GdVZyJSx8l4= Subject key identifier: F5:ED:8D:30:58:64:3E:A7:9F:83:4E:B4:D7:08:96:56:E1:D8:15:2A Authority key identifier: B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA Certificate issuer: /CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea Certificate serial: 01935199A79A4D99455A92CCF78DFDD08162 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft Manifest number: 1389 Signing time: Fri 22 Nov 2024 02:00:44 +0000 Manifest this update: Fri 22 Nov 2024 02:00:44 +0000 Manifest next update: Sat 23 Nov 2024 02:00:44 +0000 Files and hashes: 1: 1sjgNKAMdRNFetXEPZINAHENLT8.roa (hash: 464bG3NQ7KIWLpV9dx/p/SdncWO4Iz4t2VB5ZIiPPog=) 2: 9_RaElh4q4guvRqQ8v52w_iXLVU.roa (hash: LOssJqlEH70LIHKZywrnxI81/yDOYVK7EiZnca/cRsU=) 3: CAEBqCeQQKaZQxwXuUKfTAui-ho.roa (hash: MC9vXt0QY6CbqlRPG4LvPP3Kc2YfGF4RnraWWnJ9Lw8=) 4: DmK_EMA2E48Iv5iHNGgRlWxTEBM.roa (hash: aRzoG9oNEnHJoiFWb8qbL74EglgYgqiSBVgw4aM/eB4=) 5: DnaT0qJaGMculPKHxQnyJbIbX9Y.roa (hash: lczjgYuCKmP/00NqKfxqvqsCAwfV4h3DFQ2mDCZvhFU=) 6: ErIiGL_7Kto2GtfNEahKQdYHZUU.roa (hash: e3Cbr8pq5LGJ52X1y2doD6N0vOdFAfZB0l4ybA6M2EM=) 7: F6gkNyb963nCF1y4sjWFrBtmPvI.roa (hash: 2zjfyZq0+rWkKMPgjkVaYIYCkzcwif8GUGZ2qcSSjLI=) 8: GUsM4n0lEB6f8RpP9qCCBZxLZMY.roa (hash: +dKtcWvfKHqlMhBLBrBhtABSfzVcCnlhMXOCHDXquPg=) 9: P9EZqlT14QdIDUthiMHl7hO6pqI.roa (hash: FmExaKTaJ5EhnwPKfjoU4c2Dg1HC4wVDxMZ0sTv4yoA=) 10: s57NJPMhmI3rfBncoFKk48SbYOo.crl (hash: ST3miudTYxjBrrn6ZEWGYqvgjkzdhpS9CMhjBQzRmz0=) 11: x2eLIOcICE51-CE4SX0AGD9tZLE.roa (hash: Fj+mYUHIjhVIgt9C+OMTQ8VJ6yqvmyK8nA7+G0UYT8Q=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:a7:9a:4d:99:45:5a:92:cc:f7:8d:fd:d0:81:62 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b39ecd24f321988deb7c19dca052a4e3c49b60ea Validity Not Before: Nov 22 02:00:44 2024 GMT Not After : Nov 23 02:00:44 2024 GMT Subject: CN=f5ed8d3058643ea79f834eb4d7089656e1d8152a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:e2:82:09:b9:ba:95:38:bf:59:5a:fc:6c:18: 6b:d6:83:e3:40:70:4c:7e:6d:47:a5:27:83:93:56: e4:ff:a4:3c:5c:4b:5b:67:9a:5d:3e:f6:db:3c:e4: ac:28:42:3f:fb:53:e0:80:ea:c2:b4:30:40:5c:a8: 55:8f:b6:d3:f8:c2:09:d1:97:10:64:6c:0f:52:39: fc:51:84:81:1b:b6:17:91:df:90:9f:59:db:2d:a2: 8c:e9:d9:6d:c9:0b:49:20:d0:76:46:a8:37:b4:92: 15:42:14:81:c5:9c:ee:90:fd:77:8e:1e:e9:f7:99: 48:35:a0:a3:aa:37:43:b0:e1:64:67:7b:9e:97:f8: b3:52:81:48:5f:fd:84:a5:ab:67:06:b0:33:79:69: 99:74:b2:06:e1:3f:83:bb:bb:b5:8f:bc:48:e2:f4: 90:28:a5:62:80:37:ae:6a:30:da:71:73:88:f1:94: 2c:67:e7:9a:e3:b8:3a:d0:23:46:86:81:b8:e5:77: c5:b9:64:e3:fb:02:23:49:60:f1:69:ee:fa:e5:e7: 4b:af:6f:e3:39:7e:17:68:7f:b6:39:40:a8:37:5c: 4a:79:f3:0c:8b:e3:46:c5:72:da:6c:61:9c:bc:32: 65:2e:ba:29:83:8a:28:c6:ef:0d:c1:98:70:25:a9: 62:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F5:ED:8D:30:58:64:3E:A7:9F:83:4E:B4:D7:08:96:56:E1:D8:15:2A X509v3 Authority Key Identifier: keyid:B3:9E:CD:24:F3:21:98:8D:EB:7C:19:DC:A0:52:A4:E3:C4:9B:60:EA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s57NJPMhmI3rfBncoFKk48SbYOo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/e3826d-5ada-4e43-9084-1ba695faef25/1/s57NJPMhmI3rfBncoFKk48SbYOo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:7e:30:37:76:77:03:37:f7:a6:66:a3:17:87:05:3d:4b:a7: c5:60:10:58:cd:3c:d5:0c:27:26:75:09:8a:51:2f:cc:be:72: 9d:19:47:08:59:b8:8b:9c:13:30:73:09:3d:6b:2b:09:4a:fc: ad:72:13:16:0a:05:26:fa:4f:a3:01:19:10:70:6c:4b:53:a9: a6:58:44:bc:a9:78:be:fa:fd:9c:4e:08:c9:db:2e:a3:56:74: 1d:96:b7:a3:a9:91:46:11:46:db:f8:11:57:2f:79:d1:78:ac: c0:3c:66:c9:ce:4b:a4:3c:f8:91:4a:75:a9:d0:c2:62:62:2e: ee:76:65:b2:18:1d:27:45:ef:6e:c5:6d:1b:ce:5e:ef:f2:9e: 80:01:b6:49:46:ea:f7:da:57:d6:92:10:d0:e1:fe:56:49:3c: fe:91:0c:b6:12:db:95:6f:20:d2:1d:de:46:fe:77:ff:f9:74: 12:eb:06:bc:e5:a7:75:5d:13:bc:8f:1d:78:25:d1:e9:bf:bf: a4:ef:2a:c5:50:36:b0:21:a7:b9:a8:b2:90:d9:f9:45:3f:7f: f6:06:11:d9:4a:5a:a6:7e:87:ee:33:ac:93:d1:3f:43:d2:db: 5e:59:fc:9b:2b:6c:88:58:35:4a:11:00:be:a2:37:7e:7f:b7: 9c:13:32:09 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRmaeaTZlFWpLM94390IFiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIzOWVjZDI0ZjMyMTk4OGRlYjdjMTlkY2EwNTJhNGUzYzQ5 YjYwZWEwHhcNMjQxMTIyMDIwMDQ0WhcNMjQxMTIzMDIwMDQ0WjAzMTEwLwYDVQQD EyhmNWVkOGQzMDU4NjQzZWE3OWY4MzRlYjRkNzA4OTY1NmUxZDgxNTJhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxeKCCbm6lTi/WVr8bBhr1oPjQHBM fm1HpSeDk1bk/6Q8XEtbZ5pdPvbbPOSsKEI/+1PggOrCtDBAXKhVj7bT+MIJ0ZcQ ZGwPUjn8UYSBG7YXkd+Qn1nbLaKM6dltyQtJINB2Rqg3tJIVQhSBxZzukP13jh7p 95lINaCjqjdDsOFkZ3uel/izUoFIX/2EpatnBrAzeWmZdLIG4T+Du7u1j7xI4vSQ KKVigDeuajDacXOI8ZQsZ+ea47g60CNGhoG45XfFuWTj+wIjSWDxae765edLr2/j OX4XaH+2OUCoN1xKefMMi+NGxXLabGGcvDJlLropg4ooxu8NwZhwJaliNQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFPXtjTBYZD6nn4NOtNcIllbh2BUqMB8GA1UdIwQY MBaAFLOezSTzIZiN63wZ3KBSpOPEm2DqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQt MWJhNjk1ZmFlZjI1LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xYi9lMzgyNmQtNWFkYS00ZTQzLTkwODQtMWJhNjk1ZmFlZjI1 LzEvczU3TkpQTWhtSTNyZkJuY29GS2s0OFNiWU9vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQX4wN3Z3 Azf3pmajF4cFPUunxWAQWM081QwnJnUJilEvzL5ynRlHCFm4i5wTMHMJPWsrCUr8 rXITFgoFJvpPowEZEHBsS1OpplhEvKl4vvr9nE4Iydsuo1Z0HZa3o6mRRhFG2/gR Vy950XiswDxmyc5LpDz4kUp1qdDCYmIu7nZlshgdJ0XvbsVtG85e7/KegAG2SUbq 99pX1pIQ0OH+Vkk8/pEMthLblW8g0h3eRv53//l0EusGvOWndV0TvI8deCXR6b+/ pO8qxVA2sCGnuaiykNn5RT9/9gYR2Upapn6H7jOsk9E/Q9LbXln8mytsiFg1ShEA vqI3fn+3nBMyCQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:33:21 2024 by rpki-client on console-fra.rpki-client.org