$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft File: UtycIYtRDAe8Zlmwn70yr-aKv9I.mft (raw, json) Hash identifier: Ksap/cZW4ztQPrRaxqFPAq0RWuQTgxB1MbcpHb+s5Ew= Subject key identifier: 90:9C:FD:A9:B7:2C:04:16:4B:32:A5:62:8C:17:2C:FB:67:99:D8:E9 Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Certificate serial: 01935207A36470FC461906F226D1891020DC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft Manifest number: 1225 Signing time: Fri 22 Nov 2024 04:00:52 +0000 Manifest this update: Fri 22 Nov 2024 04:00:52 +0000 Manifest next update: Sat 23 Nov 2024 04:00:52 +0000 Files and hashes: 1: 60U9cnLOckPfgET2TChl6_9ogjU.roa (hash: /mdha7t9PcZ8hZlT/a6jC4GM0xSZny5kLsGrJSEG8JI=) 2: 9zC1TH8TF16a8IgZJ4hNhzcasJo.roa (hash: pxk247tv8aUh/Isf2wvsMw/ZHbs8OU4kZgwrlLkXbzU=) 3: F8QaDtgH9XkFi5vPA8lr7ztzrhg.roa (hash: 4jbPNgMj7nNtndcUpXvqYIXtsLIe7lxcFyn4S7byWIE=) 4: SPjllwg8L5BtgbFV39YHDEcmMkE.roa (hash: xI5CMCb3k3FkQnGEnzX+Bv8cmvzGi2e0bHzY3U+foak=) 5: UtycIYtRDAe8Zlmwn70yr-aKv9I.crl (hash: 5AJkl9ArorewF/1tt3U21RG43gRx2o7YOqt9pagultM=) 6: hDGxH1i_UvckxbfB7yigAmeooa4.roa (hash: hcnKjGzFrPPqtY+FcGgfPCtE1/k0OEZ0xElodBdizqs=) 7: lqPrVTGn5gHI-VBZ631h_BX22Z4.roa (hash: 0ghjMoelFdalUfrX1JzlBCKGPUp+mqNLnym5Tx+gL60=) 8: n7Nf4AKzK9J3rcbI4Sfplu6Jtuw.roa (hash: spIJ4Dm/j6Q0UEUoQ2LWl9+FShNcIFiOSz5oVnrH4og=) 9: pljQjrp_siShEjsSyWp8cgqwW6U.roa (hash: NF/34mXB59jbas9vtVMmHabhIxVmovVzMtKnM4cPIBo=) 10: t2d5_y7QhiCPrL_D3Qbebx9f5ZA.roa (hash: ZBFp1MGkF9gCz1SNn/y2yQzz4gWbO4tjqL9o/qd8IFU=) 11: yCwoPXCAbSCPknYftbCTa3i0q0Q.roa (hash: fX922fWxcDDBQjy4NojIHNBv8xEB/Nan3IO/MGB1qmE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:a3:64:70:fc:46:19:06:f2:26:d1:89:10:20:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2 Validity Not Before: Nov 22 04:00:52 2024 GMT Not After : Nov 23 04:00:52 2024 GMT Subject: CN=909cfda9b72c04164b32a5628c172cfb6799d8e9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:97:07:b1:ad:87:1f:3d:80:ab:04:6c:96:63: 5a:2f:f5:bf:55:47:19:c0:3e:43:06:4a:34:dc:7f: e8:c8:f2:54:c6:66:dc:48:72:ae:d0:b8:b5:5c:0d: 11:4f:46:35:d4:41:ce:89:e3:e8:1e:ea:aa:2c:5c: 12:e5:73:9c:79:3f:08:69:8b:08:88:16:cc:48:21: ce:e1:e2:7b:77:32:2d:1b:b7:ee:98:7e:42:3b:78: 0a:e4:44:c4:0a:60:eb:52:bd:62:36:11:cb:a8:15: 98:f8:81:90:99:f1:00:b7:a5:53:53:a4:fb:23:e7: 55:3b:0d:4c:c7:36:59:72:08:94:03:e6:f2:de:58: 0a:4e:87:be:b3:58:e5:69:e8:66:08:82:92:80:1a: 2e:08:b1:90:a1:14:d1:53:de:18:eb:f2:81:68:92: d4:b5:14:17:f4:2e:7c:17:45:2d:47:e0:e2:14:da: d5:46:bd:e0:be:1d:be:b9:9f:b5:c2:8a:4e:d0:3b: 65:f4:07:51:d5:fb:19:f1:da:9b:40:66:3a:f8:65: 5a:62:77:ae:e0:5f:d0:cb:5a:43:de:1d:72:ef:12: c0:8a:ff:06:a5:bf:5c:b4:b3:92:5e:b1:af:f3:16: 65:6f:cf:96:df:a0:14:a0:56:9c:7a:f7:fa:75:55: 05:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:9C:FD:A9:B7:2C:04:16:4B:32:A5:62:8C:17:2C:FB:67:99:D8:E9 X509v3 Authority Key Identifier: keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:9c:6d:40:df:bf:c5:2e:86:fb:f3:af:67:0c:5c:20:e7:06: 24:69:f3:72:81:25:ae:00:fc:7a:7d:20:0e:8d:55:60:69:2a: e5:17:00:a8:da:0d:6a:c2:ff:6f:d9:f3:b8:2b:31:65:e4:1c: c4:1f:7c:8f:3c:c2:b4:8f:6a:2f:b8:b9:2a:98:f2:32:68:37: 57:1b:5c:68:05:9b:8c:65:20:ba:e9:59:1f:0e:05:13:1e:40: c4:f1:aa:3b:20:92:dc:65:a9:96:59:b8:f5:13:3b:be:65:1f: ae:1b:25:b9:8a:5b:14:ac:46:2a:a2:52:f5:bc:c0:20:a1:54: de:46:01:6d:9c:3c:b4:b5:be:e9:ff:0a:84:41:1c:16:9e:a4: e4:29:74:57:ce:89:32:44:1d:88:41:9d:7e:8f:0c:b0:5c:ac: 08:c5:ec:92:19:dd:d8:3e:b1:21:4c:56:0d:17:d8:0f:10:a8: dd:64:2c:32:af:70:cb:c2:f6:5d:a1:63:00:36:a3:24:57:13: 07:64:6d:16:73:b8:10:dd:80:f0:a9:c6:4a:02:80:a2:bf:eb: d0:58:96:44:7f:65:14:af:bf:90:c1:05:72:94:d4:1e:7f:90: ad:a5:5f:1c:25:9e:db:ff:fd:3c:4e:6c:cb:53:be:55:36:02: df:0d:26:13 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSB6NkcPxGGQbyJtGJECDcMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDUyZGM5YzIxOGI1MTBjMDdiYzY2NTliMDlmYmQzMmFmZTY4 YWJmZDIwHhcNMjQxMTIyMDQwMDUyWhcNMjQxMTIzMDQwMDUyWjAzMTEwLwYDVQQD Eyg5MDljZmRhOWI3MmMwNDE2NGIzMmE1NjI4YzE3MmNmYjY3OTlkOGU5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA65cHsa2HHz2AqwRslmNaL/W/VUcZ wD5DBko03H/oyPJUxmbcSHKu0Li1XA0RT0Y11EHOiePoHuqqLFwS5XOceT8IaYsI iBbMSCHO4eJ7dzItG7fumH5CO3gK5ETECmDrUr1iNhHLqBWY+IGQmfEAt6VTU6T7 I+dVOw1MxzZZcgiUA+by3lgKToe+s1jlaehmCIKSgBouCLGQoRTRU94Y6/KBaJLU tRQX9C58F0UtR+DiFNrVRr3gvh2+uZ+1wopO0Dtl9AdR1fsZ8dqbQGY6+GVaYneu 4F/Qy1pD3h1y7xLAiv8Gpb9ctLOSXrGv8xZlb8+W36AUoFacevf6dVUFuQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJCc/am3LAQWSzKlYowXLPtnmdjpMB8GA1UdIwQY MBaAFFLcnCGLUQwHvGZZsJ+9Mq/mir/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYt NTJmOTdiMjc3ZDFmLzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xZC80MDliN2UtMTI3NS00M2VkLWFmMGYtNTJmOTdiMjc3ZDFm LzEvVXR5Y0lZdFJEQWU4Wmxtd243MHlyLWFLdjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWpxtQN+/ xS6G+/OvZwxcIOcGJGnzcoElrgD8en0gDo1VYGkq5RcAqNoNasL/b9nzuCsxZeQc xB98jzzCtI9qL7i5KpjyMmg3VxtcaAWbjGUguulZHw4FEx5AxPGqOyCS3GWpllm4 9RM7vmUfrhsluYpbFKxGKqJS9bzAIKFU3kYBbZw8tLW+6f8KhEEcFp6k5Cl0V86J MkQdiEGdfo8MsFysCMXskhnd2D6xIUxWDRfYDxCo3WQsMq9wy8L2XaFjADajJFcT B2RtFnO4EN2A8KnGSgKAor/r0FiWRH9lFK+/kMEFcpTUHn+QraVfHCWe2//9PE5s y1O+VTYC3w0mEw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:45:20 2024 by rpki-client on console-ams.rpki-client.org