$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft File: wsErUnpdH4uLzyMOthH1LxHVK78.mft (raw, json) Hash identifier: ldmBM4KcltLhjkZOHGFMY+dbPt6BGvgSNWxN2v59QRU= Subject key identifier: C9:C4:67:52:25:B3:A1:35:D6:BC:05:11:BE:60:8C:67:E0:2A:FA:A7 Authority key identifier: C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF Certificate issuer: /CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Certificate serial: 019352E2E393D986B55172B5F404490A95B6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft Manifest number: 1386 Signing time: Fri 22 Nov 2024 08:00:21 +0000 Manifest this update: Fri 22 Nov 2024 08:00:21 +0000 Manifest next update: Sat 23 Nov 2024 08:00:21 +0000 Files and hashes: 1: DUyshzXg8H4S9LSpPcBKe5Yju0c.roa (hash: vWgw/DJ5wRG/rW1pj1oqoUh0UA3Me3XllMuUbl0WpT8=) 2: ESzdElu9ct3J-BZv2I8DzLMhNlE.roa (hash: PmGWtEJiaLk6uQGi7YVoqArZf0QhdMq/b8IFDj932iY=) 3: Gb_mVveX2SaBVuQyj9potFRRcSE.roa (hash: Ssap68vvs59UmN9b2aX5wZETfhyW8h2NXhpD3qE7cEI=) 4: PeKXsd17j6ZHF1MzMo1FWaHLN3o.roa (hash: BJDiM7CNKARiJ2maeWwfEfviYYx+l46D5svz9L4EK/4=) 5: S2hk14-ZM_arcKvdq1JA5mClovI.roa (hash: D8F2uA6ryU97nnXnEA4/5WkbQelfCgToxw2DmEjvGbg=) 6: V8G1fHfLgylYxZsBU1g1BPpQew0.roa (hash: OwwWG43R3VmEmBmAh/Ub45Oy9vcpxMKP2jrk7yLYXYg=) 7: ZIEnJYu7SIczf8I7fMa-AVKV0hk.roa (hash: CfX6dXGkI6eXzoXnZ1CSau8B50yt9R92glJwlaY4CTg=) 8: ni424xmBmva3YqbdYD56m0-yoyY.roa (hash: KQc9wRzNZBdK4U7XZxUHn+4oZPc0ZzDapj7My7EjyCY=) 9: uWtbtAUJ9CaOp8C8KYVuVmfLZjA.roa (hash: /xAWhx/eLwEYslA6S1B/IdGelAz1qBPDknZdbtUBJuQ=) 10: vQ4vVvUQf-dor70j3IykRbt09XU.roa (hash: Un6gXawHr28Qy7WFJZFMF6h4aFXaRzuNgjKZg3q5J3c=) 11: wsErUnpdH4uLzyMOthH1LxHVK78.crl (hash: 68gHfyXXd3Ko3T+wIjdXMiiHNY01smV/niAzl6++STw=) 12: y2i45MHDghr-0KZ96cKTmO1jJhM.roa (hash: 4cEioUnvjWHNirIzQk2bscsgSBLe1zWup9D4v1CyPJw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:e2:e3:93:d9:86:b5:51:72:b5:f4:04:49:0a:95:b6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c2c12b527a5d1f8b8bcf230eb611f52f11d52bbf Validity Not Before: Nov 22 08:00:21 2024 GMT Not After : Nov 23 08:00:21 2024 GMT Subject: CN=c9c4675225b3a135d6bc0511be608c67e02afaa7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:ff:a3:96:62:e9:d8:33:72:ca:0a:ce:4d:11: 1f:4c:91:0b:5d:6c:5d:b3:d3:88:32:b6:15:89:4f: 71:fb:b8:9a:0e:0d:50:3c:48:27:cf:31:48:f2:be: b6:ee:f6:dd:e1:03:8d:77:df:54:7c:bd:da:49:09: f6:7a:35:a5:be:aa:ec:2f:74:6b:df:df:04:59:8a: 80:25:32:35:76:84:b6:c1:5d:a2:e3:da:02:7d:8a: 2a:51:75:f5:0d:67:e4:6a:43:a6:99:9a:bf:e5:22: 06:3c:d6:d2:25:f6:f5:49:84:d1:e3:c5:a6:ef:2b: 9a:4d:03:f1:33:27:0a:9d:3a:6c:0c:5f:f7:f3:c6: a5:c5:bf:0c:ca:8a:23:66:a8:05:cf:df:d0:04:7d: 54:80:81:e5:a7:b4:ca:59:83:3a:29:3f:6f:2b:ab: 92:86:7b:42:6a:32:a7:d7:3a:a2:fa:53:75:ea:54: a4:2c:dd:bd:f9:2e:c8:e6:9b:49:fe:ad:85:73:6f: c0:16:19:01:45:77:ac:e1:54:8a:de:a4:6b:a8:2a: cc:03:45:2b:0c:77:13:20:32:31:85:f9:70:b0:d3: 5f:9d:98:24:78:e8:7a:96:8a:55:48:5b:52:a8:d9: 34:df:38:ea:a5:61:91:ec:32:39:92:94:c9:d2:ed: 6d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:C4:67:52:25:B3:A1:35:D6:BC:05:11:BE:60:8C:67:E0:2A:FA:A7 X509v3 Authority Key Identifier: keyid:C2:C1:2B:52:7A:5D:1F:8B:8B:CF:23:0E:B6:11:F5:2F:11:D5:2B:BF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wsErUnpdH4uLzyMOthH1LxHVK78.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/25/3ebb46-b9dd-4695-815c-46ee578a0bfe/1/wsErUnpdH4uLzyMOthH1LxHVK78.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 23:61:67:35:5f:cc:ad:98:e9:3a:0a:9e:c5:1b:30:e8:c3:dc: 56:71:b5:b4:e8:2d:56:ee:39:d9:84:32:54:77:01:f4:58:09: 91:ba:21:e2:bc:42:71:23:e6:c2:34:d9:2e:8e:30:fb:58:31: c1:2c:f4:6c:cf:88:05:12:d1:06:06:bd:6c:2e:e3:50:83:b4: e4:94:6d:2d:a1:08:71:a5:5d:c9:20:02:37:25:87:7d:d1:aa: 76:39:98:ec:f5:1f:d6:40:cc:40:ce:e3:72:e8:8e:63:5f:ae: 26:7a:2c:5f:43:eb:06:bf:a8:96:a2:e2:ce:96:56:4f:78:4b: 28:f4:f6:9f:96:eb:44:06:40:21:5e:13:f0:84:98:0a:34:96: 9f:6d:47:0c:d5:dc:40:e7:4a:b5:42:c0:6f:57:0e:cc:22:1a: b1:72:65:71:7b:9f:33:6e:8b:ff:ec:57:ad:b4:d0:79:4b:86: 49:27:0b:db:d7:13:2c:98:11:9d:e8:0f:0d:c7:3b:8f:cc:b1: 90:bb:a5:f2:7d:ab:de:24:3f:04:41:c3:35:44:04:8b:84:b9: 62:42:cc:2b:c6:f0:49:53:b1:ad:7f:7c:d0:c4:ee:7f:3f:2b: 5e:85:68:b5:4d:c0:b1:77:32:02:a2:cc:1a:22:97:7c:8b:c5: 8a:4d:f4:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNS4uOT2Ya1UXK19ARJCpW2MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGMyYzEyYjUyN2E1ZDFmOGI4YmNmMjMwZWI2MTFmNTJmMTFk NTJiYmYwHhcNMjQxMTIyMDgwMDIxWhcNMjQxMTIzMDgwMDIxWjAzMTEwLwYDVQQD EyhjOWM0Njc1MjI1YjNhMTM1ZDZiYzA1MTFiZTYwOGM2N2UwMmFmYWE3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnv+jlmLp2DNyygrOTREfTJELXWxd s9OIMrYViU9x+7iaDg1QPEgnzzFI8r627vbd4QONd99UfL3aSQn2ejWlvqrsL3Rr 398EWYqAJTI1doS2wV2i49oCfYoqUXX1DWfkakOmmZq/5SIGPNbSJfb1SYTR48Wm 7yuaTQPxMycKnTpsDF/388alxb8MyoojZqgFz9/QBH1UgIHlp7TKWYM6KT9vK6uS hntCajKn1zqi+lN16lSkLN29+S7I5ptJ/q2Fc2/AFhkBRXes4VSK3qRrqCrMA0Ur DHcTIDIxhflwsNNfnZgkeOh6lopVSFtSqNk03zjqpWGR7DI5kpTJ0u1tzwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMnEZ1Ils6E11rwFEb5gjGfgKvqnMB8GA1UdIwQY MBaAFMLBK1J6XR+Li88jDrYR9S8R1Su/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMt NDZlZTU3OGEwYmZlLzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yNS8zZWJiNDYtYjlkZC00Njk1LTgxNWMtNDZlZTU3OGEwYmZl LzEvd3NFclVucGRINHVMenlNT3RoSDFMeEhWSzc4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI2FnNV/M rZjpOgqexRsw6MPcVnG1tOgtVu452YQyVHcB9FgJkboh4rxCcSPmwjTZLo4w+1gx wSz0bM+IBRLRBga9bC7jUIO05JRtLaEIcaVdySACNyWHfdGqdjmY7PUf1kDMQM7j cuiOY1+uJnosX0PrBr+olqLizpZWT3hLKPT2n5brRAZAIV4T8ISYCjSWn21HDNXc QOdKtULAb1cOzCIasXJlcXufM26L/+xXrbTQeUuGSScL29cTLJgRnegPDcc7j8yx kLul8n2r3iQ/BEHDNUQEi4S5YkLMK8bwSVOxrX980MTufz8rXoVotU3AsXcyAqLM GiKXfIvFik30Uw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:36:18 2024 by rpki-client on console-fra.rpki-client.org