$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft File: BpLF8WMTZTQlvEZxBYdeOil8_5s.mft (raw, json) Hash identifier: lYWNCuINhUthZSmkHx3PPvVovuNunzm8plYhCpylCtk= Subject key identifier: 6A:4C:89:47:1A:48:30:B9:16:33:B7:03:08:F0:43:0D:AB:92:5E:6A Authority key identifier: 06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B Certificate issuer: /CN=0692c5f16313653425bc467105875e3a297cff9b Certificate serial: 0193542C5DEC8361E2A360586DB96BBDD8CB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft Manifest number: 0643 Signing time: Fri 22 Nov 2024 14:00:13 +0000 Manifest this update: Fri 22 Nov 2024 14:00:13 +0000 Manifest next update: Sat 23 Nov 2024 14:00:13 +0000 Files and hashes: 1: 0Ety3xCycDhAidG7p5bIRjrYjeo.roa (hash: aLsbVHIDUUAex/RZ1ZWst9bgNv/XFEKagSgdP4ck1Qs=) 2: 1-79pq9Zw_dyX1Ql1YX2hbzdLPMM.roa (hash: jslR6tpZ8hK4M/pFGL9x/QW6SmfFP97/ZJsMbm6aaSU=) 3: 1AOr8Dhfja5s-fmm2_g_oSFTVq0.roa (hash: mvIzno7Foy3Vj205ExDVYIyG2MXNNEBi7P8jTZAs8ig=) 4: 5snQ2bvtuvJ0GupoEaTVp05p-l0.roa (hash: Xq+IHg4+ouiSv4IImcJhzh9sG32HYOmMO1T7eSkASUo=) 5: BpLF8WMTZTQlvEZxBYdeOil8_5s.crl (hash: pwPpP1NjZDE5wZMlETpmnq1REcrtA0BAZL/vmwqZcOk=) 6: CFr6eNem9Jr4YjuDcRng805adC0.roa (hash: viYWFtB8Th7ZTHNijUHtku0QF6QIcDjx5qBAn9O9Ix0=) 7: KEtFLcWdW2NfyrL58IbivTqYHww.roa (hash: vK3Fj/ae94GAWpas1F8in1reLGo58MXXdNpnFY761AQ=) 8: UuzXP-dBN_lLq69DViXhb6ENtGQ.roa (hash: F+zTaa6Se3LGNMs5avZjEAxrDih6eyLF3SRR2u24qlA=) 9: aoCVuWP-vXvuRmt4v5WexowUv6Q.roa (hash: yUlv2BsDdUDeDITq1D+1s/CE8ndCoaxyVOpzOmoJ6uM=) 10: hyo_psvmOOkQR912IsGu6oZhTOU.roa (hash: xOsOwVzmqA/vaWpddamBn74IuDgdqA80HUVszD0H6vA=) 11: mKKriCrO0GAx6wXUexWslvu8LSc.roa (hash: FrSN6184kW7xB8iF1RKx9SGTZziePzZZuM0d+5b73JE=) 12: pb4r-8TBR8KYKmjG0hb12MrQAG8.roa (hash: TCZXfPFaEnKw/pc1ohls8/cBQomB9TQ0mDYVBfp5Nw8=) 13: qkEJRQx-RFghhQI8IXPHoi4x0-E.roa (hash: Fqcs6AfO5bjd7XnTOoC4KCIamECz3sDVM0c8ilA+OrE=) 14: tDxlBH-DDZgtG0zJy2G6PHAbzls.roa (hash: eX/80te6QzpQYaHEfOPHnfYxHSPmCZpLgJwfMxGGVwg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:54:2c:5d:ec:83:61:e2:a3:60:58:6d:b9:6b:bd:d8:cb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0692c5f16313653425bc467105875e3a297cff9b Validity Not Before: Nov 22 14:00:13 2024 GMT Not After : Nov 23 14:00:13 2024 GMT Subject: CN=6a4c89471a4830b91633b70308f0430dab925e6a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:59:07:e9:29:80:ce:47:b1:13:7e:e6:3b:9d: 1d:6f:d6:67:3a:3a:4d:de:4d:39:29:51:a7:06:6e: 5e:c2:df:1c:a5:d6:58:a2:45:dc:bc:53:21:7f:8c: 15:d2:62:5f:84:ef:f7:93:9e:f9:92:ca:c7:25:b2: 97:e8:20:3a:c4:78:6a:ee:96:de:31:55:08:e7:da: fa:56:b2:68:63:13:51:e4:11:04:8c:30:4f:ba:00: 86:95:a6:1f:a3:7c:2b:5a:ea:8d:eb:85:56:d9:4d: d2:18:b1:f7:3b:9d:2a:ea:b0:25:9e:d1:40:56:d0: fd:02:fa:ac:fb:85:4b:b9:a7:58:05:fe:30:76:44: 4a:c3:e9:ea:6e:77:d0:52:09:42:e0:a8:f5:22:c5: 56:0f:ff:f5:29:ad:98:71:1a:3f:cf:e9:d0:95:29: c3:11:3d:44:9f:9e:6a:f6:e3:be:77:fb:16:e2:0c: 3a:f7:7a:e9:d8:10:b6:e6:2a:cb:26:1a:c0:5c:d5: 78:8f:37:70:39:df:d4:bc:9b:c1:a4:a3:3a:7a:98: fb:0a:41:b1:c2:5b:99:98:e8:13:f6:f4:b3:b9:29: 17:6f:37:d2:b6:57:33:a1:4a:1c:86:e3:2c:9e:b6: ef:01:88:71:72:4e:23:8c:67:ff:bd:22:62:1e:fd: bc:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:4C:89:47:1A:48:30:B9:16:33:B7:03:08:F0:43:0D:AB:92:5E:6A X509v3 Authority Key Identifier: keyid:06:92:C5:F1:63:13:65:34:25:BC:46:71:05:87:5E:3A:29:7C:FF:9B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BpLF8WMTZTQlvEZxBYdeOil8_5s.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/779928-881c-433a-b243-c9f57e959ef1/1/BpLF8WMTZTQlvEZxBYdeOil8_5s.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:32:f6:2c:8f:b3:ef:7f:f5:27:d9:d3:be:89:23:dc:55:9b: ff:a8:0a:62:c6:9d:55:8e:3c:ea:a0:0b:d2:cf:29:d4:f8:19: de:30:53:30:61:bb:57:ef:e1:03:c4:06:e1:fd:ad:cf:9d:10: 7c:9a:a9:cc:d7:ed:98:9f:12:2d:44:3a:9e:62:87:50:23:6d: 4e:1a:6f:c0:9c:d2:94:28:01:8a:ee:6f:36:13:5b:f1:3f:43: 61:41:c0:f3:f1:dd:d4:3b:ee:67:cf:c5:7b:d8:d0:f8:69:02: 61:99:54:c2:db:65:6a:b4:ba:54:11:da:45:70:f8:1e:6f:83: 74:d5:33:7f:91:e4:46:94:44:43:25:da:a0:ac:d1:eb:a2:c6: 65:4c:c9:a2:d8:c8:54:69:3a:4b:79:14:4b:cc:e0:8b:7a:5b: a6:1e:05:7a:9c:b5:3e:f5:8d:f0:bd:55:88:3a:b2:44:34:14: 2a:bf:8a:82:74:e4:51:a0:dd:3c:ac:cd:54:64:c1:be:11:3f: 33:d3:fe:29:db:fb:4a:06:9a:d9:bd:6f:f8:06:26:be:dc:49: ab:39:d9:25:d4:74:2e:c1:21:2e:f2:91:49:bb:de:cc:6c:f8: 8d:b8:f8:8a:e2:c3:be:15:f1:d0:0b:d0:8d:bd:48:71:e0:79: 8b:03:e0:92 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNULF3sg2Hio2BYbblrvdjLMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA2OTJjNWYxNjMxMzY1MzQyNWJjNDY3MTA1ODc1ZTNhMjk3 Y2ZmOWIwHhcNMjQxMTIyMTQwMDEzWhcNMjQxMTIzMTQwMDEzWjAzMTEwLwYDVQQD Eyg2YTRjODk0NzFhNDgzMGI5MTYzM2I3MDMwOGYwNDMwZGFiOTI1ZTZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1kH6SmAzkexE37mO50db9ZnOjpN 3k05KVGnBm5ewt8cpdZYokXcvFMhf4wV0mJfhO/3k575ksrHJbKX6CA6xHhq7pbe MVUI59r6VrJoYxNR5BEEjDBPugCGlaYfo3wrWuqN64VW2U3SGLH3O50q6rAlntFA VtD9Avqs+4VLuadYBf4wdkRKw+nqbnfQUglC4Kj1IsVWD//1Ka2YcRo/z+nQlSnD ET1En55q9uO+d/sW4gw693rp2BC25irLJhrAXNV4jzdwOd/UvJvBpKM6epj7CkGx wluZmOgT9vSzuSkXbzfStlczoUochuMsnrbvAYhxck4jjGf/vSJiHv282QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGpMiUcaSDC5FjO3AwjwQw2rkl5qMB8GA1UdIwQY MBaAFAaSxfFjE2U0JbxGcQWHXjopfP+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMt YzlmNTdlOTU5ZWYxLzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS83Nzk5MjgtODgxYy00MzNhLWIyNDMtYzlmNTdlOTU5ZWYx LzEvQnBMRjhXTVRaVFFsdkVaeEJZZGVPaWw4XzVzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFTL2LI+z 73/1J9nTvokj3FWb/6gKYsadVY486qAL0s8p1PgZ3jBTMGG7V+/hA8QG4f2tz50Q fJqpzNftmJ8SLUQ6nmKHUCNtThpvwJzSlCgBiu5vNhNb8T9DYUHA8/Hd1DvuZ8/F e9jQ+GkCYZlUwttlarS6VBHaRXD4Hm+DdNUzf5HkRpREQyXaoKzR66LGZUzJotjI VGk6S3kUS8zgi3pbph4Fepy1PvWN8L1ViDqyRDQUKr+KgnTkUaDdPKzNVGTBvhE/ M9P+Kdv7Sgaa2b1v+AYmvtxJqznZJdR0LsEhLvKRSbvezGz4jbj4iuLDvhXx0AvQ jb1IceB5iwPgkg== -----END CERTIFICATE-----Generated at Fri Nov 22 18:07:16 2024 by rpki-client on console-fra.rpki-client.org