$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft File: KQn__NgaZryYtinUwFeSR2RfD-Q.mft (raw, json) Hash identifier: Us/11+UNqTK4gKVabBXzKufrWLvnigReHKGESkZpxUM= Subject key identifier: A5:43:D2:03:B4:06:FE:3C:54:76:C9:EB:B1:CF:94:24:AE:EB:2B:CB Authority key identifier: 29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 Certificate issuer: /CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Certificate serial: 018F83D9FF72A0E59C84FBD2F4D9FC5F96BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft Manifest number: 1195 Signing time: Fri 17 May 2024 00:00:53 +0000 Manifest this update: Fri 17 May 2024 00:00:53 +0000 Manifest next update: Sat 18 May 2024 00:00:53 +0000 Files and hashes: 1: 3JXJlol2hWtZ67A4NiHo5T5scZk.roa (hash: IwJOyfnUZBTcel/a7NCndXyWpC0YPxZDaX21GFcW0t0=) 2: 7nyqPtYoHXMWuhuH0xJUbFGWGgg.roa (hash: 2CiqNvbHTLLRuoEDyU+kgv+cV9Gy71Fh4kEypMiMI+4=) 3: Aal5fDlv8KTqjduL-1trsHe7lCc.roa (hash: zj/AVp1HZvxzwBQuPni9XQZCW87AasIvY9xqo7RidLM=) 4: ElBNamiGixpZz_l00IXECfbKodM.roa (hash: com0NIM9WeL2GEvN2OJSaX4gbjScrQvUpEBULhGotIo=) 5: IBHQ4Pr--NRO7Obhaw8nPwKad0s.roa (hash: sEqiSbSvymv+lWzERVPv6znMds/WSiWiTb9t5iQBxRI=) 6: JMo5lfYTKWZT9Ef1GDZ0beZKyfc.roa (hash: GecDWZwMVJdaoaQeFoK33CJgNff3vDXN7JIe3Dd2dCA=) 7: KQn__NgaZryYtinUwFeSR2RfD-Q.crl (hash: PJ2YJ5oCS6aSx/9O3xSf8JyZobbprsWjeO3eNjvKhbA=) 8: ORhBz4KRm2gloGHlSyClusZu9tI.roa (hash: JbsoogMNWD/lhbP+4vVwr6exl7qtpby38NnKeDDSUtY=) 9: UTfh3_UjTF5ctqAyjqs4yhkbbVQ.roa (hash: kuhxEaOpC3nBc8FZRnqwbfZbV6GKfFQbDZwzIi4thek=) 10: XzeVIkdyFRWV394J-hMQjZh94l0.roa (hash: kYLAX9K3pbg27Ls9WY0wh7zdYDg51WKsiYamqaX0uFU=) 11: ajWayDIMdZp3qMNs9TNTxPIxFZM.roa (hash: hfJ9wYadBznnrEW9ldNwsFJgWMukbwbfJNuyikUPd5o=) 12: atKomxObHgDEn_ABNq_b4RxNA4M.roa (hash: IId8thkQdFwpEyh6aN4A63s37FPeua1dAlD0VZu6Ig8=) 13: cbqAwGpb0dMFO3g8OTMtkER8uAg.roa (hash: WL465HSaRKRVcqbOC0CTY5BoenUjgFlxnqa1FgmiIdo=) 14: gLqFduyaM-ujPpXoI1wH6cKvKUE.roa (hash: DsCFKo7jLl0JmgBenbA9gcyN8ILsdJkxPnaG/CFbJ14=) 15: gOJj2smQhFOlOiLQZeStq8ANlSo.roa (hash: agLe2wQtDjR1OU0uD3p4d//Z48g4lLvgLqvTJGfM7WA=) 16: kXjEx0YPTAnwXO5zHZtjT8lRViI.roa (hash: 3Tq9HbAl4l4n2bfADTN2bAH7nkhVQqAm4rq7DKvnyi4=) 17: yL9s5mwShdQIVybYAiDh3Mh8ej8.roa (hash: 2nH3ZZWHimz560g4h9zsP1cJYnyzOnQAKqZjg6rUaaY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 19:23:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:83:d9:ff:72:a0:e5:9c:84:fb:d2:f4:d9:fc:5f:96:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2909fffcd81a66bc98b629d4c0579247645f0fe4 Validity Not Before: May 17 00:00:53 2024 GMT Not After : May 18 00:00:53 2024 GMT Subject: CN=a543d203b406fe3c5476c9ebb1cf9424aeeb2bcb Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:6d:91:2a:9e:5a:f3:8d:1d:51:b5:34:77:9e: 55:6f:a5:99:37:68:b1:28:41:71:18:95:a3:b7:ff: 1e:cc:3f:21:45:84:90:f5:e7:93:a0:f9:dd:26:91: 1a:60:9c:9d:28:85:5c:d5:a5:c8:54:e2:d5:07:95: 75:20:ab:db:61:d1:1d:fa:4f:e0:6a:5f:f2:9d:bd: e1:3f:a1:21:4c:ec:84:94:18:e6:4d:64:8a:f1:c5: f0:ac:b0:0d:bc:81:5a:35:d8:d8:fc:f5:95:ab:cb: 24:2b:a8:b5:ef:07:c6:e4:db:de:91:96:cd:22:76: c3:86:13:e0:e3:e8:84:c5:d0:d4:ac:ca:a0:ad:60: 9c:8c:01:30:ea:36:ad:0b:88:7c:fe:85:df:8f:c2: 02:14:30:b1:bf:92:ed:37:1a:53:97:dc:e0:b1:29: 57:0e:0f:9e:0c:b3:b2:71:71:b0:68:5b:99:8c:8d: db:9f:b0:2b:36:d0:24:93:ad:4c:5d:c3:cf:cc:1d: 9c:65:f2:c4:07:f5:98:91:86:a9:ee:37:d2:e8:a4: 6e:55:dc:8a:5c:73:ca:4b:31:8c:63:fa:a7:2d:7e: a4:ba:f7:3b:d3:14:64:8b:bb:aa:c9:3c:51:14:0b: d0:21:e1:63:94:f5:33:dc:69:c2:43:fa:98:47:14: 0a:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A5:43:D2:03:B4:06:FE:3C:54:76:C9:EB:B1:CF:94:24:AE:EB:2B:CB X509v3 Authority Key Identifier: keyid:29:09:FF:FC:D8:1A:66:BC:98:B6:29:D4:C0:57:92:47:64:5F:0F:E4 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQn__NgaZryYtinUwFeSR2RfD-Q.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/de3041-9536-492e-a9cd-f2ae7bc7ecc5/1/KQn__NgaZryYtinUwFeSR2RfD-Q.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:3d:09:d3:8a:66:41:a8:71:4d:d4:a9:9d:51:ac:5e:be:c6: 91:8e:49:56:4b:74:59:b2:a6:37:4e:42:27:97:a5:67:bf:34: a9:20:73:aa:98:61:1e:ff:c3:2f:e6:d8:f0:c9:c1:fc:62:9a: bf:93:57:25:93:30:a4:7f:ec:be:e2:fc:a9:58:50:a6:ac:cf: 71:20:5c:69:37:5e:ef:a8:b7:26:0c:e9:35:79:21:49:31:9b: 5c:c1:f8:2d:03:c2:ef:85:c0:69:55:54:2c:cf:2a:01:b0:e3: 4c:c3:12:35:b0:19:bd:85:24:f4:ad:9f:ed:4a:b6:49:32:82: 9c:e5:18:5a:62:61:4f:bf:4e:26:e5:ac:cc:55:66:16:22:d9: 13:6f:53:dd:c3:e7:e3:30:0d:72:d1:b9:e9:4b:86:28:f3:31: 66:4b:dc:3d:a6:ff:e9:93:2e:47:4f:7f:27:fa:82:61:51:44: 57:d7:e1:0c:86:58:49:c9:02:d9:de:60:0c:af:87:c2:b4:8a: 24:fc:42:8d:3f:03:97:d0:43:80:1a:1c:81:b6:71:97:92:f2: 33:ff:0a:b0:6c:27:dd:8f:23:79:d0:32:f8:ac:67:0f:a2:03: 0b:cc:ae:bf:a7:c0:4a:f3:b6:ba:5b:3d:43:9e:c9:7e:94:89: b8:b6:0d:10 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+D2f9yoOWchPvS9Nn8X5a6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDI5MDlmZmZjZDgxYTY2YmM5OGI2MjlkNGMwNTc5MjQ3NjQ1 ZjBmZTQwHhcNMjQwNTE3MDAwMDUzWhcNMjQwNTE4MDAwMDUzWjAzMTEwLwYDVQQD EyhhNTQzZDIwM2I0MDZmZTNjNTQ3NmM5ZWJiMWNmOTQyNGFlZWIyYmNiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA722RKp5a840dUbU0d55Vb6WZN2ix KEFxGJWjt/8ezD8hRYSQ9eeToPndJpEaYJydKIVc1aXIVOLVB5V1IKvbYdEd+k/g al/ynb3hP6EhTOyElBjmTWSK8cXwrLANvIFaNdjY/PWVq8skK6i17wfG5NvekZbN InbDhhPg4+iExdDUrMqgrWCcjAEw6jatC4h8/oXfj8ICFDCxv5LtNxpTl9zgsSlX Dg+eDLOycXGwaFuZjI3bn7ArNtAkk61MXcPPzB2cZfLEB/WYkYap7jfS6KRuVdyK XHPKSzGMY/qnLX6kuvc70xRki7uqyTxRFAvQIeFjlPUz3GnCQ/qYRxQKbwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKVD0gO0Bv48VHbJ67HPlCSu6yvLMB8GA1UdIwQY MBaAFCkJ//zYGma8mLYp1MBXkkdkXw/kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2Qt ZjJhZTdiYzdlY2M1LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yZi9kZTMwNDEtOTUzNi00OTJlLWE5Y2QtZjJhZTdiYzdlY2M1 LzEvS1FuX19OZ2FacnlZdGluVXdGZVNSMlJmRC1RLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdD0J04pm QahxTdSpnVGsXr7GkY5JVkt0WbKmN05CJ5elZ780qSBzqphhHv/DL+bY8MnB/GKa v5NXJZMwpH/svuL8qVhQpqzPcSBcaTde76i3JgzpNXkhSTGbXMH4LQPC74XAaVVU LM8qAbDjTMMSNbAZvYUk9K2f7Uq2STKCnOUYWmJhT79OJuWszFVmFiLZE29T3cPn 4zANctG56UuGKPMxZkvcPab/6ZMuR09/J/qCYVFEV9fhDIZYSckC2d5gDK+HwrSK JPxCjT8Dl9BDgBocgbZxl5LyM/8KsGwn3Y8jedAy+KxnD6IDC8yuv6fASvO2uls9 Q57JfpSJuLYNEA== -----END CERTIFICATE-----Generated at Fri May 17 01:08:27 2024 by rpki-client on console-fra.rpki-client.org