$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft File: P-3YXB7Mtf9LqTARenMpCZwP8us.mft (raw, json) Hash identifier: +n+Pc8gkefJOxtIW8LXh5PfB+jPb+pS19Fl6UbpwkDs= Subject key identifier: 08:D7:34:96:BF:96:6F:B2:35:52:3B:27:13:5D:C2:4D:75:15:CB:2D Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Certificate serial: 0193553EFC3EC6DD8E78F95D04AF4E9A983A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft Manifest number: 1393 Signing time: Fri 22 Nov 2024 19:00:11 +0000 Manifest this update: Fri 22 Nov 2024 19:00:11 +0000 Manifest next update: Sat 23 Nov 2024 19:00:11 +0000 Files and hashes: 1: 5oXEjXSZXk8gGoeKSpnatlzSkU8.roa (hash: c/0vVch+MHtmDQjhHSs8QLQwqQdJpq4N5Py2CuvTAbM=) 2: 7qkOSuFRUcyYKEw9eeQoyGsSKdM.roa (hash: GifETILrK9NkOBL6RKHtfkhY3OcuMcPjgbMzkC/+3Dw=) 3: CshPQv3WitwH-Tw1DnNWXIT-fyE.roa (hash: xOxFUSmIw+yw97rCwcMw24fBJYrzbSHSkY5uHpKAF3c=) 4: Do0JSgiNCqriv80PIhtwMnexSNc.roa (hash: RwQMBdH7IsYN85P3xCXPyoXK0UkudDgkL+/EfmT5Xt0=) 5: GC88wOt3zbSCv-O1LEEiKvY4VYQ.roa (hash: Ow4rCOKajpb9hC8TUxfEtv1qSD5PGaWoIV8rQDWnVbw=) 6: Ho4RsPdmq-d5M8eMON9sQR773X4.roa (hash: W1DnIo59YpKainHdHycNWVLli+AuD9xIu789tN7sh4Y=) 7: O4IKRUZNiBOkkRwOodDLWZKl3B8.roa (hash: AlMeWmMjIgz2y+md3SEXEF5Y76vXlnQujofd4kOLBGY=) 8: P-3YXB7Mtf9LqTARenMpCZwP8us.crl (hash: TYxvb+QkrHRKxBWR9PcRSYwTbp6RRv2Z+BxEvadtWT8=) 9: QGhG6RxqyM5xS4zSfkTkhEc08iw.roa (hash: Zbfe3Kbv20fwsPXZZlxeo8S7ShO9tsbTG5lOXXoVCSo=) 10: Zj3A_BUC9CB-xht_VIoh4BFeujU.roa (hash: 84EcRw3+/2FQqsIJ6jbo026iVQpvo8WsxjruxFl/+tk=) 11: ejXBv3HQQPqILjgc4rN6PwYd8xo.roa (hash: F/nJfGAdXC5XqIGIGlOgkrvToToRWI5Pyj24LlEK+uk=) 12: j9BS6TSn4ZaJS5O8vf-fysuvRRA.roa (hash: 3J/2SiG4+3YACKui0i9D7UUY3r2Hw70t5cZiJ+7M354=) 13: tQbSXBtyAuflkQ3CkfQ3gV4hzLk.roa (hash: Yy6lyMjMb6JMtzhCRYSIgo8UuLDmcBkgwOOL8Mgy32c=) 14: wqewg384Z7m-JVIE3YMl8cIamNA.roa (hash: PIpH9+1LpTUbjGq1ZThGMmzcm6E//TN9Xsch42+tecA=) 15: xPLfJ4gjT8OyBMojHvTlELKhJA8.roa (hash: 0jKpvn3Dbt9TYMQmP+5IuTLQXAuccdXgm7oNE5ZTYaQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 19:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:3e:fc:3e:c6:dd:8e:78:f9:5d:04:af:4e:9a:98:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb Validity Not Before: Nov 22 19:00:11 2024 GMT Not After : Nov 23 19:00:11 2024 GMT Subject: CN=08d73496bf966fb235523b27135dc24d7515cb2d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:8e:56:91:41:e9:ab:ed:9b:eb:b0:1d:de: 17:e8:54:b8:b0:6a:91:a7:55:a4:94:ee:0b:33:d7: f3:a0:69:fe:c2:eb:c5:c9:da:b1:7a:a0:e7:f8:f8: 98:b1:89:18:38:7b:6a:20:8b:b7:5d:05:13:d5:72: 46:49:4a:32:ec:73:0f:48:4d:bd:c3:aa:4f:b4:1b: be:e9:d5:a0:24:c7:b0:d3:a7:95:86:4a:e8:0c:6c: a9:99:f0:62:bb:aa:ae:f8:53:22:e1:7e:3b:32:cc: 71:8d:36:87:d6:08:59:85:65:1e:db:16:d5:e1:a9: 6c:7a:c6:7e:f6:c6:1f:00:0a:a7:47:13:47:a5:45: 7c:62:25:83:ff:3f:1d:6c:b4:8b:e3:61:ef:4d:ba: 7d:a9:70:2a:68:7b:70:4b:53:33:ad:1d:cb:87:7f: 75:c4:11:8b:63:b6:cb:9f:46:ea:ec:24:9e:ae:5c: 63:26:d0:ab:69:c4:89:30:84:94:0a:04:3c:9a:21: d0:a5:5b:cd:cc:55:93:a4:d7:83:1c:06:4d:04:a4: cb:9e:49:0b:3e:6a:fa:45:7e:e1:77:07:71:ed:d1: 72:f1:89:78:f4:cf:d2:8d:e7:06:87:21:2e:fa:5f: f7:37:c4:9d:15:82:0e:13:40:a2:41:fe:53:57:02: d0:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 08:D7:34:96:BF:96:6F:B2:35:52:3B:27:13:5D:C2:4D:75:15:CB:2D X509v3 Authority Key Identifier: keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:86:5a:6d:db:64:58:f5:9b:ec:9e:fd:05:45:93:6f:41:f9: 60:15:23:ab:a4:32:a8:24:20:19:46:c1:6b:c5:95:ac:f3:10: ea:54:f0:00:1d:ac:64:8d:40:d2:f2:ac:0a:aa:8c:d3:52:64: b7:a6:79:8c:19:2a:55:27:33:eb:9f:f9:48:9d:62:44:71:9e: 7c:e0:88:16:d0:62:22:93:e1:ab:88:76:dc:2c:e4:84:cf:64: 35:c9:20:b3:be:41:89:3b:de:64:47:a7:22:c3:7c:45:1c:a3: 4c:68:3f:63:02:62:cd:0d:11:97:cd:5b:0d:e2:f1:02:26:1e: 2b:3f:7b:a6:cf:fc:af:a7:c2:56:02:ed:8e:ba:44:bb:20:c9: 1e:93:00:8a:b4:cb:10:d8:b9:f7:0b:89:25:83:1e:17:5e:af: 1e:ba:9c:dd:fa:51:53:85:f9:10:5c:cc:5f:9c:59:b3:d7:2b: dd:2d:b7:c1:17:3e:50:e7:dc:a9:3e:fa:e2:36:89:06:05:d0: e4:1d:61:06:8b:2c:ad:2c:5c:b9:cf:ea:50:49:43:10:b4:5a: 12:cb:b8:0f:13:24:45:1a:a0:48:9e:b6:35:a9:ce:b4:1c:b4: eb:8e:14:f1:f0:e9:65:be:bb:d7:99:d7:7e:2b:98:b0:6b:fc: 02:4d:9c:88 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNVPvw+xt2OePldBK9Ompg6MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw ZmYyZWIwHhcNMjQxMTIyMTkwMDExWhcNMjQxMTIzMTkwMDExWjAzMTEwLwYDVQQD EygwOGQ3MzQ5NmJmOTY2ZmIyMzU1MjNiMjcxMzVkYzI0ZDc1MTVjYjJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsIeOVpFB6avtm+uwHd4X6FS4sGqR p1WklO4LM9fzoGn+wuvFydqxeqDn+PiYsYkYOHtqIIu3XQUT1XJGSUoy7HMPSE29 w6pPtBu+6dWgJMew06eVhkroDGypmfBiu6qu+FMi4X47MsxxjTaH1ghZhWUe2xbV 4alsesZ+9sYfAAqnRxNHpUV8YiWD/z8dbLSL42HvTbp9qXAqaHtwS1MzrR3Lh391 xBGLY7bLn0bq7CSerlxjJtCracSJMISUCgQ8miHQpVvNzFWTpNeDHAZNBKTLnkkL Pmr6RX7hdwdx7dFy8Yl49M/SjecGhyEu+l/3N8SdFYIOE0CiQf5TVwLQzQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAjXNJa/lm+yNVI7JxNdwk11FcstMB8GA1UdIwQY MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt ZTJiNTI3NzI4ZTk2LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2 LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZoZabdtk WPWb7J79BUWTb0H5YBUjq6QyqCQgGUbBa8WVrPMQ6lTwAB2sZI1A0vKsCqqM01Jk t6Z5jBkqVScz65/5SJ1iRHGefOCIFtBiIpPhq4h23CzkhM9kNckgs75BiTveZEen IsN8RRyjTGg/YwJizQ0Rl81bDeLxAiYeKz97ps/8r6fCVgLtjrpEuyDJHpMAirTL ENi59wuJJYMeF16vHrqc3fpRU4X5EFzMX5xZs9cr3S23wRc+UOfcqT764jaJBgXQ 5B1hBossrSxcuc/qUElDELRaEsu4DxMkRRqgSJ62NanOtBy0644U8fDpZb6715nX fiuYsGv8Ak2ciA== -----END CERTIFICATE-----Generated at Sat Nov 23 03:17:29 2024 by rpki-client on console-fra.rpki-client.org