$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft File: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft (raw, json) Hash identifier: JNRpFwcPt8Nb6JhrQs1oSrJsM5l6JnkxjHWAbKFSbTo= Subject key identifier: 82:D4:52:12:24:1A:97:86:4C:85:FD:72:B6:D8:D1:FB:57:57:10:A0 Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Certificate serial: 019363D669FFED4D42958D7E8C6650F142C2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft Manifest number: 1383 Signing time: Mon 25 Nov 2024 15:00:16 +0000 Manifest this update: Mon 25 Nov 2024 15:00:16 +0000 Manifest next update: Tue 26 Nov 2024 15:00:16 +0000 Files and hashes: 1: 7ajqWVvOuGHR-70-l7Uih-iT2bg.roa (hash: AXH3/yb00a0ec7waRYc4pLl/CljJDI9teB4r12iFMnE=) 2: 8rvVVOxo8s_BguyYt-gyqDmKYns.roa (hash: 0feQ+kMUF1kDno8x+H2CYPeRz3tpDEbMHQOzJ5YQz+M=) 3: 9a_OLlXZeLbXmkr5ffkIHE4daLI.roa (hash: rQ56Cvmxx8PUYiBYD/tBgHUgrRvLFS8E886K39SJfmI=) 4: GNqt9s805yU3Z8BjeixIc0Scxro.roa (hash: DBdp3f6BtaFS1Z6iwVW9Al3thOmZaCoPcGhnBQiZt1Q=) 5: JjgLVYD_xJAzQgEsxv704RTJtEI.roa (hash: 2h1ogcGPMQ3n2z1740U/v3v9A4z+IsHVRGyjZ8cmBOk=) 6: Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl (hash: TEFZLvUs+rEQbPPHmBGH7fIc5NqTrG7ggt7T4mEW2Mc=) 7: Ujn2J4r2LFLl-_gb7Sy0F7rALOo.roa (hash: z1kcbtHeiXC1YqOD9mGfLnM0qBdsjxe8MY5vg1dMbLQ=) 8: Y6xKgFJSMGagThqSHBQvd6i_-lA.roa (hash: h3dK4N2+G254Hu0LzjGyA3SwibB2HddKmUNjjExzCQU=) 9: aDEfeqV98-NL5_Pd-REnBjHb07g.roa (hash: yDsnt0nyfuFlB7TcgKXI3Utjfu44wMy1d+jzUrdSPqA=) 10: krjDxfU590GjTH49GE4EgTMh2SQ.roa (hash: hrSYcdx5kxvJA5HJ5ilgciv45kJOsUoLeAOkrImHdPw=) 11: ohEhWZeM5ipCdzdIAyZjO84tBXs.roa (hash: I3ej3sloqeUpSOuP5z3N57MY9/cai1QhDgMbNOq+RTY=) 12: tff3n2uoHwgUSRAFoOtxGXRIYis.roa (hash: NEjSwFtworZYaH3yGQD9jG8+DlvyxWNQvZHRUJ+Bzh0=) 13: twy4DH5KOj6ndHW9ts0yYZ8i7MA.roa (hash: gpqHW2FmraRjh0+mLj9LmJ4NXifMW0Wv+a6zthp/TNo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 15:00:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:63:d6:69:ff:ed:4d:42:95:8d:7e:8c:66:50:f1:42:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1 Validity Not Before: Nov 25 15:00:16 2024 GMT Not After : Nov 26 15:00:16 2024 GMT Subject: CN=82d45212241a97864c85fd72b6d8d1fb575710a0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:49:27:0e:41:e1:9c:da:5c:1d:a8:f3:e6:64: 91:72:66:d8:81:80:03:29:2a:63:fd:59:c0:07:13: 86:a3:48:51:10:0a:0a:37:7c:d8:c3:07:03:45:5f: 73:80:e8:a3:33:28:1c:ad:bc:47:56:be:64:be:d0: a8:61:a0:5e:24:ac:9a:1a:fc:4c:b1:0f:ea:b0:c5: 86:a1:29:08:ea:8c:15:4d:97:99:f9:97:0b:b1:df: b3:f8:10:90:24:9a:1e:3b:06:b6:72:ad:55:26:2a: ef:ef:40:4e:12:9f:39:ac:b7:bf:57:80:a5:c9:67: 46:67:7b:49:82:aa:92:a5:73:a1:c7:14:9c:7e:6e: 90:76:76:d9:68:8c:ca:31:05:9e:15:c9:41:fb:80: 8a:29:42:5a:11:4f:7a:59:c6:c0:78:ad:df:e2:9a: 2b:8a:47:88:3b:25:92:e8:27:06:ce:01:38:69:d3: eb:1c:2a:ea:a4:f4:a6:e8:bf:f3:53:bf:41:a4:88: 4b:ee:ab:7d:84:36:2e:21:e5:39:4d:49:58:42:49: 04:8e:58:bb:de:18:81:e5:5c:da:d0:52:07:40:d7: 54:ba:22:2d:02:19:34:36:dd:ac:62:f2:5f:4e:9c: 43:07:07:e9:78:f1:32:3c:13:7c:bf:4c:13:06:a2: dc:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 82:D4:52:12:24:1A:97:86:4C:85:FD:72:B6:D8:D1:FB:57:57:10:A0 X509v3 Authority Key Identifier: keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:41:16:4d:ba:36:25:5b:a7:8a:5a:66:07:9e:cc:8e:1f:a7: 1b:28:60:fd:e3:d8:03:0e:0a:9f:08:1d:5f:1d:39:7a:17:da: b5:54:ea:0e:5c:1a:49:81:53:25:8f:ce:ad:a3:ef:28:b6:94: b8:a0:9e:0b:37:12:09:f5:b9:9c:96:6a:3f:35:d9:46:b3:41: c1:da:80:51:ec:f5:ca:ae:b7:91:a6:ef:60:94:62:37:10:9f: af:84:ad:d0:e3:46:85:55:9f:5a:c7:98:c5:0a:47:5a:91:9b: ba:07:b0:bf:9e:22:e9:cc:38:ef:76:f1:e8:20:48:35:bf:f3: 8b:00:91:4a:32:35:02:48:69:e4:69:14:9c:37:f2:51:7a:79: 5f:9e:9f:49:5e:3a:56:dc:40:a5:c0:0b:b3:d9:56:fb:d7:0e: 86:b7:19:27:1b:04:09:f7:54:19:29:be:a5:d4:94:40:46:ee: e1:b0:5c:91:f9:d4:bc:60:55:70:af:55:96:27:07:46:62:cc: fa:89:36:a5:85:7a:d6:b7:cb:18:7d:ad:53:4c:33:10:2d:73: 93:f4:9b:4b:14:8f:cd:c4:d5:12:12:9c:8e:81:c0:33:79:3c: 0e:9d:3d:d6:be:6a:31:fa:a8:82:7e:5c:35:98:3f:1c:3e:4a: 12:c2:2a:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNj1mn/7U1ClY1+jGZQ8ULCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyY2U3NTkzMjAxOTViOWNjMThjY2ZjYjFiNTMyYWVhOTQ5 MjU4ZjEwHhcNMjQxMTI1MTUwMDE2WhcNMjQxMTI2MTUwMDE2WjAzMTEwLwYDVQQD Eyg4MmQ0NTIxMjI0MWE5Nzg2NGM4NWZkNzJiNmQ4ZDFmYjU3NTcxMGEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuEknDkHhnNpcHajz5mSRcmbYgYAD KSpj/VnABxOGo0hREAoKN3zYwwcDRV9zgOijMygcrbxHVr5kvtCoYaBeJKyaGvxM sQ/qsMWGoSkI6owVTZeZ+ZcLsd+z+BCQJJoeOwa2cq1VJirv70BOEp85rLe/V4Cl yWdGZ3tJgqqSpXOhxxScfm6QdnbZaIzKMQWeFclB+4CKKUJaEU96WcbAeK3f4por ikeIOyWS6CcGzgE4adPrHCrqpPSm6L/zU79BpIhL7qt9hDYuIeU5TUlYQkkEjli7 3hiB5Vza0FIHQNdUuiItAhk0Nt2sYvJfTpxDBwfpePEyPBN8v0wTBqLcyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFILUUhIkGpeGTIX9crbY0ftXVxCgMB8GA1UdIwQY MBaAFELOdZMgGVucwYzPyxtTKuqUkljxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUt Njk3OTQ4ZWE3MWY1LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9hNTIwNDgtMTJjYS00YTAzLTk1YmUtNjk3OTQ4ZWE3MWY1 LzEvUXM1MWt5QVpXNXpCak1fTEcxTXE2cFNTV1BFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANUEWTbo2 JVunilpmB57Mjh+nGyhg/ePYAw4KnwgdXx05ehfatVTqDlwaSYFTJY/OraPvKLaU uKCeCzcSCfW5nJZqPzXZRrNBwdqAUez1yq63kabvYJRiNxCfr4St0ONGhVWfWseY xQpHWpGbugewv54i6cw473bx6CBINb/ziwCRSjI1Akhp5GkUnDfyUXp5X56fSV46 VtxApcALs9lW+9cOhrcZJxsECfdUGSm+pdSUQEbu4bBckfnUvGBVcK9VlicHRmLM +ok2pYV61rfLGH2tU0wzEC1zk/SbSxSPzcTVEhKcjoHAM3k8Dp091r5qMfqogn5c NZg/HD5KEsIqHg== -----END CERTIFICATE-----Generated at Mon Nov 25 18:09:00 2024 by rpki-client on console-fra.rpki-client.org