$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft File: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft (raw, json) Hash identifier: koatjIt5SAZEBW+EL4SF2zBNuGLI+RnfVl94bLYEf1w= Subject key identifier: 25:35:AB:24:C3:6C:18:23:85:B1:94:5D:9B:40:66:32:C4:02:3D:FD Authority key identifier: D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA Certificate issuer: /CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Certificate serial: 019352070384C6EC327CC942F3733CB78010 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft Manifest number: 0D71 Signing time: Fri 22 Nov 2024 04:00:11 +0000 Manifest this update: Fri 22 Nov 2024 04:00:11 +0000 Manifest next update: Sat 23 Nov 2024 04:00:11 +0000 Files and hashes: 1: 1-GxUqbxJa-z0EoNl4SUDUHAH5lk.roa (hash: sUym7PdUFQ+5SLh2CWzvhf4k7lucxzrVliTrUKr7fmU=) 2: 2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl (hash: 7tS1xc205S51VaNR0Irz++6c2J53ZtD80GWH5X9RVR8=) 3: BIfvHViqk5dU4XhdabHUKjLVbgc.roa (hash: ijoTbhbdDsNUuBacP84Udl/uDzBVMRmkKdwE6fAVec4=) 4: CsusnRnaw2LCtfoNmPUd1GKf7o8.roa (hash: i/eOjTcyd4KBBKwZVy8WRK0LfrKGbguFVP8NWLMlyJM=) 5: DUPFl5KOVoZ0Px1YTZjQhU3GS74.roa (hash: RdQAIUqTLZ56Z5/n3970qBezVFVmizondDtwNW6hgk0=) 6: KMDP10NxaT8o4lwcHnOHGen99vs.roa (hash: v3FvtwwIb1ZedqTC/nSXTymHOOf6l/r5ulGnI0RTWGE=) 7: KORxHWyQyPXJ2bzo8VZwhcrvq2I.roa (hash: 6QJVb6bycyUSibnB6y/9KE0u2mYGn8CS3q3rqMAIx/Y=) 8: LmShfnxJ3bFq-MOmey1Ri_DnuwI.roa (hash: PF3VuibycRIof6e2VR5nchHPh4s533jKGzhaJodZBYs=) 9: UX6UYtLtvP2a_x1SpMsTQiMIMIA.roa (hash: roEyQSyxDzr8797U3LPruiJxwCgY2dSV5wEWl/w1Njs=) 10: Xwy_yscJpEkFgTMOYEjNNfgBEsI.roa (hash: R9KueGsn1sIHIZgri6R9+yLygjYbotauj05eItndx3w=) 11: bTzZB5eJSEVND5o7cQHPU_gGats.roa (hash: k+V/QQHCTOpI+9n0bWspdVYQoayz60wp4d2SYRTLJqA=) 12: kwNGqJi16v15vEKhIVHS7T4BnSM.roa (hash: YuhN7wMChIhyi5JTmg/oRvYZa9RVGWcxEO6WM7P9mO4=) 13: ms1ekaWq311G3eHPqwSiswMc-WM.roa (hash: sstgo0zaP48B4EL93VWGQeEvWI0ca7JYtwRxFRs0nY8=) 14: t7Q9dh5QzcR71wi6jcb-CqF0ap8.roa (hash: pbtX+KFXwwmGzV1Nb7OCYe4DtNI6RDSYwdNIchNjruQ=) 15: xf-gLOtusEqH_qqJjMFFLL-oyC4.roa (hash: LI4Ov2vNuVtCOHJpAWhJdxgp6Z6raWfW7tf6j03KSWY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:03:84:c6:ec:32:7c:c9:42:f3:73:3c:b7:80:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d8c60a0d2d70a9337d0bda56d1ad596ac1f69cda Validity Not Before: Nov 22 04:00:11 2024 GMT Not After : Nov 23 04:00:11 2024 GMT Subject: CN=2535ab24c36c182385b1945d9b406632c4023dfd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:85:43:3a:54:e2:26:83:19:89:b4:e9:e9:aa: 2c:dc:0e:41:3a:f8:be:79:1f:0a:7d:42:dc:20:8c: 65:ba:67:7f:f9:a9:f3:55:83:c5:2f:d1:5f:a4:a0: 87:2e:c5:16:74:77:84:6a:11:e4:b6:39:ac:b7:b5: 2d:f2:8a:3d:76:18:30:86:45:b2:24:be:25:9e:8d: 27:82:1c:9d:57:76:ba:a1:2a:6a:d7:34:1e:e7:3d: 8d:0c:9f:2b:94:d6:a2:bf:77:57:fb:54:2e:b4:eb: a3:d7:dd:99:13:50:80:03:a9:ec:35:68:0f:97:25: 8a:56:91:09:9c:da:63:0d:50:89:20:c2:b2:67:f2: 1c:24:2a:23:10:9f:cb:f5:07:01:51:ac:ed:5c:a3: eb:61:86:8a:c1:35:2a:de:6e:d8:61:8b:77:5e:d5: ad:0c:db:06:5d:ae:d2:99:db:18:51:73:ef:55:22: 96:51:c9:5d:4f:b5:8b:92:d1:f7:e7:77:0a:f3:55: ed:d0:30:1b:11:5b:6f:16:b5:b9:56:a0:b6:ef:40: bd:3a:7d:e5:42:0b:af:be:a5:7a:44:d6:b8:b0:92: 14:61:f2:66:3e:82:51:97:bd:9b:54:3d:77:fb:86: 99:f0:e7:b3:57:56:52:b6:02:02:da:41:cb:93:a2: 8a:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 25:35:AB:24:C3:6C:18:23:85:B1:94:5D:9B:40:66:32:C4:02:3D:FD X509v3 Authority Key Identifier: keyid:D8:C6:0A:0D:2D:70:A9:33:7D:0B:DA:56:D1:AD:59:6A:C1:F6:9C:DA X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MYKDS1wqTN9C9pW0a1ZasH2nNo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/24/b51a85-f99f-423f-9fae-dd294c378f6c/1/2MYKDS1wqTN9C9pW0a1ZasH2nNo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:d3:7b:95:7a:e2:c9:df:91:e9:2a:26:1e:76:59:d7:14:f0: 50:a7:43:26:ec:68:93:12:7a:a2:25:c2:df:10:98:09:52:9a: df:34:5d:c0:f1:16:c7:f2:00:64:7b:81:85:92:ba:69:f6:4e: 56:18:c0:a9:60:7d:7e:71:38:66:54:33:da:33:17:8d:06:44: ca:76:b9:66:f4:61:30:f5:58:4f:6b:c6:71:55:74:94:29:cd: e9:1c:91:fa:7a:31:b8:a2:80:9d:5b:2f:7b:92:e8:69:8c:7f: 48:84:b0:79:bc:b4:c4:b4:a9:bc:f3:50:14:75:7b:06:01:a5: de:1d:5e:2e:83:9a:37:20:a1:80:16:cd:19:d9:3c:a9:79:0b: 71:6f:dc:f1:2f:11:30:26:17:33:3f:fa:a9:8f:d4:c9:94:72: 08:39:5a:0e:01:3d:db:63:2a:23:e1:81:1e:52:3d:ff:48:4f: 53:e8:ac:97:0b:82:77:63:1e:b9:db:da:66:01:df:55:e5:18: d4:2a:df:ed:6b:ba:11:38:83:16:a2:9b:b2:14:7f:b8:cd:4d: c0:c9:28:a3:75:5d:e4:4b:8d:a5:e1:c2:d7:12:c1:a7:a5:cb: ba:c0:03:af:dc:52:1f:c2:2d:0b:61:12:9f:0d:fe:07:9a:82: 8d:6e:ee:15 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSBwOExuwyfMlC83M8t4AQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4YzYwYTBkMmQ3MGE5MzM3ZDBiZGE1NmQxYWQ1OTZhYzFm NjljZGEwHhcNMjQxMTIyMDQwMDExWhcNMjQxMTIzMDQwMDExWjAzMTEwLwYDVQQD EygyNTM1YWIyNGMzNmMxODIzODViMTk0NWQ5YjQwNjYzMmM0MDIzZGZkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6oVDOlTiJoMZibTp6aos3A5BOvi+ eR8KfULcIIxlumd/+anzVYPFL9FfpKCHLsUWdHeEahHktjmst7Ut8oo9dhgwhkWy JL4lno0nghydV3a6oSpq1zQe5z2NDJ8rlNaiv3dX+1QutOuj192ZE1CAA6nsNWgP lyWKVpEJnNpjDVCJIMKyZ/IcJCojEJ/L9QcBUaztXKPrYYaKwTUq3m7YYYt3XtWt DNsGXa7SmdsYUXPvVSKWUcldT7WLktH353cK81Xt0DAbEVtvFrW5VqC270C9On3l QguvvqV6RNa4sJIUYfJmPoJRl72bVD13+4aZ8OezV1ZStgIC2kHLk6KK/QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCU1qyTDbBgjhbGUXZtAZjLEAj39MB8GA1UdIwQY MBaAFNjGCg0tcKkzfQvaVtGtWWrB9pzaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUt ZGQyOTRjMzc4ZjZjLzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNC9iNTFhODUtZjk5Zi00MjNmLTlmYWUtZGQyOTRjMzc4ZjZj LzEvMk1ZS0RTMXdxVE45QzlwVzBhMVphc0gybk5vLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZNN7lXri yd+R6SomHnZZ1xTwUKdDJuxokxJ6oiXC3xCYCVKa3zRdwPEWx/IAZHuBhZK6afZO VhjAqWB9fnE4ZlQz2jMXjQZEyna5ZvRhMPVYT2vGcVV0lCnN6RyR+noxuKKAnVsv e5LoaYx/SISweby0xLSpvPNQFHV7BgGl3h1eLoOaNyChgBbNGdk8qXkLcW/c8S8R MCYXMz/6qY/UyZRyCDlaDgE922MqI+GBHlI9/0hPU+islwuCd2MeudvaZgHfVeUY 1Crf7Wu6ETiDFqKbshR/uM1NwMkoo3Vd5EuNpeHC1xLBp6XLusADr9xSH8ItC2ES nw3+B5qCjW7uFQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:36:16 2024 by rpki-client on console-fra.rpki-client.org