$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft File: jbNHdLAZeShP2edU_qaPo8YXg9A.mft (raw, json) Hash identifier: LynBz9eLeEyT8O6KLzEdA7chdhAssp4jtiMavfIGpdU= Subject key identifier: 3A:B4:9F:30:27:22:8A:4E:91:6B:28:25:38:15:39:80:37:18:24:4D Authority key identifier: 8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 Certificate issuer: /CN=8db34774b01979284fd9e754fea68fa3c61783d0 Certificate serial: 018F7DA2C26174D6CF8415CAEED3170558BF Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft Manifest number: 11AC Signing time: Wed 15 May 2024 19:02:49 +0000 Manifest this update: Wed 15 May 2024 19:02:49 +0000 Manifest next update: Thu 16 May 2024 19:02:49 +0000 Files and hashes: 1: BXEf6iGzGfC6qct9V43YCBj2z0Q.roa (hash: 9XEuhrm3ff1GelgTXcTScSn238Bv5wu/35j2ONgngIQ=) 2: D-MIiGVFOL0lDiVjVuCMsRxujgM.roa (hash: Xlk0coiF0wTnWtUdA8Umy3UQTnlZ5Ztjxfw3xoF86oY=) 3: F6p-CRNmA3lYgQ6QARSb1o5-z84.roa (hash: YMxx0GGfeJxQe0PVjGe9WYaMyQUwYKIQ2OjNEhIzsrw=) 4: Kazw4QdzFuYHDK5wRUQ-4hLqNbU.roa (hash: vldRZGVTKTkigPyTWvQHDKmMTpR6xw4GAz2NkNMZPdw=) 5: Sag71X9CjBXttNETcBl8I-L4L-4.roa (hash: AUDQd+v6tfPx7ssNgBh/8aQtcib7c1nznEr8qL7Xsek=) 6: aI0lkgkAHSY0xv7QgK8siGdpJr0.roa (hash: MWt8USFENteEThY3v4wyt+2ufjS3YFglMqUJbYs12Vc=) 7: fYOOSM15whMcVvZ5tcFiBd0Qo9E.roa (hash: P7sYbtKWK8O7ktUBrn2OGQXrmI6ml9SSTOTmn2X4zgA=) 8: g7cHjlzdGI266Uit3P73HRzSciM.roa (hash: bPq2hj9iBZNVhf7hXp/Ima94OZpK3e8KMgcvQL01DJM=) 9: jbNHdLAZeShP2edU_qaPo8YXg9A.crl (hash: F1I2G9WgxpZ12YdkEdVNm5ZTxWL4AbKqccqD/fs3IcQ=) 10: kbBOtfxqaVa5Qk2WZZpd63lULp4.roa (hash: JMxR4nLkPNGx30I8a/Y6n6x88as6NV8bBbCYZBySjIw=) 11: miwo3mZBa-EtPkyRyvbWk89OGRY.roa (hash: aSrD5C5flSihtB0KMj6M4hLWb7DrfMEQFsHkjf2Fck4=) 12: s6exTmLKlJVVmtxsCYQ6KpyuysA.roa (hash: QS0tJPVIiCnVlYZz0ARUohhzxPB+Nx5Zb/AFV4j4eq4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 16 May 2024 14:51:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:7d:a2:c2:61:74:d6:cf:84:15:ca:ee:d3:17:05:58:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8db34774b01979284fd9e754fea68fa3c61783d0 Validity Not Before: May 15 19:02:49 2024 GMT Not After : May 16 19:02:49 2024 GMT Subject: CN=3ab49f3027228a4e916b2825381539803718244d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d2:4e:15:49:97:ed:61:04:fc:f8:24:57:a4: eb:20:29:3e:eb:6d:fc:9d:99:04:df:a9:e7:6c:7b: c0:3f:1c:b7:07:a0:ab:05:ee:ed:92:19:dc:a2:d5: 03:84:9c:62:3c:fc:2d:0a:22:f0:db:80:b8:19:35: a7:50:2c:82:d7:68:e0:b6:ce:5c:4f:e3:ed:95:0d: 72:20:ce:10:df:23:22:98:f9:ac:14:10:e4:01:2b: ee:81:3b:61:6b:93:fd:20:fa:54:a9:31:7d:a1:14: 57:a2:cb:22:5b:75:05:85:06:3e:59:41:ad:cc:f0: a2:4a:67:2c:24:aa:a8:60:10:97:02:68:8a:f1:be: 88:7f:01:7f:47:ab:31:bb:f5:28:c6:4b:09:21:06: ee:ec:38:17:20:26:21:83:4d:e6:eb:50:09:c3:fd: 89:60:56:ef:a3:1c:42:55:30:3b:26:2d:6a:12:3e: 78:e8:d7:46:73:87:ae:a2:d6:05:9a:f9:b3:3f:22: db:bd:1a:7a:46:05:bf:25:f3:ec:67:3e:d3:fe:52: f0:c5:fa:37:49:3e:05:60:bc:90:03:b0:f4:f3:3e: 56:4d:71:76:67:7e:6d:7a:4d:82:08:e3:08:4e:d4: 93:27:f3:6b:00:76:b1:b2:4a:82:16:ba:67:aa:af: b8:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:B4:9F:30:27:22:8A:4E:91:6B:28:25:38:15:39:80:37:18:24:4D X509v3 Authority Key Identifier: keyid:8D:B3:47:74:B0:19:79:28:4F:D9:E7:54:FE:A6:8F:A3:C6:17:83:D0 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jbNHdLAZeShP2edU_qaPo8YXg9A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/37/70a8f1-d8eb-42b5-bddb-6265521f6df7/1/jbNHdLAZeShP2edU_qaPo8YXg9A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d3:b5:91:a9:6c:a7:7d:73:e5:fc:61:25:4e:c8:03:4d:98:33: 4f:3f:f8:79:f8:b8:ae:97:c4:d3:7d:80:ce:06:8d:77:3e:d4: 6d:dc:09:3c:00:fd:bd:17:8f:9b:e5:8a:7a:0a:9d:72:ce:b8: 37:2d:e2:f1:fd:7f:b3:13:6d:b0:0e:36:ad:d6:bc:b2:8f:e8: 2e:5e:f0:24:de:a7:9c:08:e8:1c:c6:c3:49:57:f1:d1:38:69: 45:b0:b2:b6:c2:8b:7c:9e:c1:5b:6f:3b:60:f7:9a:2c:73:06: 12:15:d9:8e:f8:6f:44:fb:b8:24:98:ba:6f:10:e6:0b:f7:19: c1:89:c6:55:ca:fc:6b:c4:77:d8:54:37:2f:65:28:ed:39:2e: 49:bf:ed:b9:46:d2:4b:5b:68:30:f4:37:a1:d4:8c:59:8e:06: 8e:68:a6:bf:f8:f4:c5:ef:b6:a8:66:c8:c6:c6:cf:f5:8c:8b: 6c:0d:cb:94:6c:e3:dd:68:13:20:d6:b4:40:1a:80:53:93:47: 38:ce:3b:ed:7c:83:34:f8:a8:cc:fd:f0:27:70:25:13:a9:5d: 1c:af:c8:c9:37:81:73:88:67:30:20:9b:78:ce:0f:07:02:35: e5:fc:11:1a:b7:47:6d:bd:58:30:5d:3e:97:ad:75:50:e1:8b: d7:18:17:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY99osJhdNbPhBXK7tMXBVi/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDhkYjM0Nzc0YjAxOTc5Mjg0ZmQ5ZTc1NGZlYTY4ZmEzYzYx NzgzZDAwHhcNMjQwNTE1MTkwMjQ5WhcNMjQwNTE2MTkwMjQ5WjAzMTEwLwYDVQQD EygzYWI0OWYzMDI3MjI4YTRlOTE2YjI4MjUzODE1Mzk4MDM3MTgyNDRkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9JOFUmX7WEE/PgkV6TrICk+6238 nZkE36nnbHvAPxy3B6CrBe7tkhncotUDhJxiPPwtCiLw24C4GTWnUCyC12jgts5c T+PtlQ1yIM4Q3yMimPmsFBDkASvugTtha5P9IPpUqTF9oRRXossiW3UFhQY+WUGt zPCiSmcsJKqoYBCXAmiK8b6IfwF/R6sxu/UoxksJIQbu7DgXICYhg03m61AJw/2J YFbvoxxCVTA7Ji1qEj546NdGc4euotYFmvmzPyLbvRp6RgW/JfPsZz7T/lLwxfo3 ST4FYLyQA7D08z5WTXF2Z35tek2CCOMITtSTJ/NrAHaxskqCFrpnqq+4rQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDq0nzAnIopOkWsoJTgVOYA3GCRNMB8GA1UdIwQY MBaAFI2zR3SwGXkoT9nnVP6mj6PGF4PQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGIt NjI2NTUyMWY2ZGY3LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zNy83MGE4ZjEtZDhlYi00MmI1LWJkZGItNjI2NTUyMWY2ZGY3 LzEvamJOSGRMQVplU2hQMmVkVV9xYVBvOFlYZzlBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA07WRqWyn fXPl/GElTsgDTZgzTz/4efi4rpfE032AzgaNdz7UbdwJPAD9vRePm+WKegqdcs64 Ny3i8f1/sxNtsA42rda8so/oLl7wJN6nnAjoHMbDSVfx0ThpRbCytsKLfJ7BW287 YPeaLHMGEhXZjvhvRPu4JJi6bxDmC/cZwYnGVcr8a8R32FQ3L2Uo7TkuSb/tuUbS S1toMPQ3odSMWY4Gjmimv/j0xe+2qGbIxsbP9YyLbA3LlGzj3WgTINa0QBqAU5NH OM477XyDNPiozP3wJ3AlE6ldHK/IyTeBc4hnMCCbeM4PBwI15fwRGrdHbb1YMF0+ l611UOGL1xgXqw== -----END CERTIFICATE-----Generated at Wed May 15 20:51:14 2024 by rpki-client on console-fra.rpki-client.org