$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft File: 0d4STg-K2059lXbOrjJfZo3SJLE.mft (raw, json) Hash identifier: qur9ywkXB0gZNZVqHL/sa5lvJv3upwgSPIIumnTWG18= Subject key identifier: 9D:30:C3:71:3C:68:03:FF:A3:83:12:62:93:7F:EB:B7:CA:82:03:29 Authority key identifier: D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 Certificate issuer: /CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Certificate serial: 018F505A82D5632A36049CF1530A333B96E5 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft Manifest number: 0C6F Signing time: Tue 07 May 2024 00:00:59 +0000 Manifest this update: Tue 07 May 2024 00:00:59 +0000 Manifest next update: Wed 08 May 2024 00:00:59 +0000 Files and hashes: 1: 0d4STg-K2059lXbOrjJfZo3SJLE.crl (hash: Z59k/cOx2S20tNvKircwiTsA/XMLxewlPm6mJIuZE4s=) 2: 6Cei3N3EIJK-UOjtNLBdBl41h0M.roa (hash: +rQ1LcKQpgiYZYD7P30B3ISKy+AmL+KCkTWH3FacAAc=) 3: RjPjE-PVDbb0TkMjrKG5Qo8wd-A.roa (hash: NS15tOaWYhYTknAT3SqxYYWRSRmWeDH3pgaoR86ohWg=) 4: S9W59O5vFGtLr22z984JcUprRVw.roa (hash: 0B6H3spMSATc1SmNzf0vcV2AAIvAzYS7hS2hMgMj8aA=) 5: UCnug3VKUD3FXa61R4sRX5Hq1h4.roa (hash: D2As3QN2SMI79Nc8MlGCxrk9sjZ9F7Rn4L0GBEFykWM=) 6: _oeU2AXD9MP7JmNoNP1XLbEJOmo.roa (hash: ft+YL7TdR8vP2mgCFPVLiKXd9sGY96tWTyUW/2o2dDE=) 7: axmao9c91WhnDc1U4oVL67WCRhk.roa (hash: 2fcECHGE0jOkyK+wifFkygHd1q5QnrKHXGGLTXEx3VE=) 8: b51aHn1b6WUHuYiRy1qncnMHeCs.roa (hash: cZ/VIYvMA+X4Dw0vuM/jt4H8DyAihep4MvQc4YRAfqo=) 9: coMIAUfsxKtGYE-hzn5HVJu7tXM.roa (hash: R4wvLEhddnWcKFgR/aVleZh28x06YSwWAmeYhMI/ouQ=) 10: lmlWx1Ko99chUANlRGPxPreTwRI.roa (hash: MQLZFlLp4Nw7Qi7YCH6/+vYfJ5NRUfI9PznkZ+AW+7Q=) 11: oEQMBHsB9wQoDdfdluhkF-eSZ7k.roa (hash: yvfvkhyYtA7cAP7Qm2CVUycBAj9sshP3P81oEPk4ozA=) 12: vb4Mu2CSpnF2YvquxSqZSslH91I.roa (hash: RLgsf5PmnPOhylQALfe1U+K+2qJ2yvgM/xFA+Z25kBk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 08 May 2024 00:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:50:5a:82:d5:63:2a:36:04:9c:f1:53:0a:33:3b:96:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d1de124e0f8adb4e7d9576ceae325f668dd224b1 Validity Not Before: May 7 00:00:59 2024 GMT Not After : May 8 00:00:59 2024 GMT Subject: CN=9d30c3713c6803ffa3831262937febb7ca820329 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:59:af:f0:ef:d4:6f:69:82:c5:ea:ba:4e: e3:92:e6:c1:8b:6b:70:20:55:5b:45:ab:c8:96:3d: dc:8a:68:e1:0b:09:d4:e9:9b:32:fa:76:54:7e:b8: 1e:98:f5:a8:ad:06:af:af:f7:15:b6:c6:f4:17:89: e3:e6:75:69:4b:f5:ff:ba:be:ab:a0:0d:3f:4e:98: 95:ac:62:8b:5a:d4:19:42:95:08:32:ed:f4:78:af: 7c:19:68:55:c4:7d:5c:2c:a6:df:a2:1a:72:34:50: 6b:0a:74:55:2e:35:eb:f0:29:0b:0d:f5:24:33:83: 26:6d:f1:d1:d0:3f:13:28:9d:77:f9:5a:5c:e2:d8: 86:ac:6c:f9:a7:e1:75:fe:46:8e:4f:ef:1e:71:42: 2e:cd:5f:f6:0c:cd:f3:81:38:5b:08:07:6a:83:91: db:0a:b9:4d:a4:a2:3d:39:24:91:20:06:9f:68:0d: 51:cd:9d:2e:83:c3:ca:77:94:aa:76:79:33:ef:0e: 73:a5:40:0d:58:b3:7f:cb:d5:3b:a1:19:18:86:b0: b3:69:ba:6f:f1:64:4a:dd:21:71:6a:01:fe:67:9c: ce:1d:6d:a0:8f:56:36:04:cd:21:1a:06:e1:7b:59: dc:d0:4c:27:b8:b1:0b:de:26:91:58:21:c5:ff:20: 3c:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:30:C3:71:3C:68:03:FF:A3:83:12:62:93:7F:EB:B7:CA:82:03:29 X509v3 Authority Key Identifier: keyid:D1:DE:12:4E:0F:8A:DB:4E:7D:95:76:CE:AE:32:5F:66:8D:D2:24:B1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d4STg-K2059lXbOrjJfZo3SJLE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/abe134-0093-4652-9057-4f4c9b343e90/1/0d4STg-K2059lXbOrjJfZo3SJLE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:8d:5c:f0:21:f3:95:87:3c:e8:9a:ac:83:14:86:bc:5f:a1: 6f:b8:2e:1e:42:90:50:db:98:f5:c7:d8:33:0d:e6:d4:4d:0e: a5:22:6f:c4:b6:71:10:9d:df:80:48:ce:e6:9a:da:f6:7a:08: c0:2f:82:c6:6b:9f:59:1c:33:73:94:3c:54:74:53:1a:15:12: d2:3c:63:1f:b5:92:2f:d5:66:21:72:11:9b:12:1e:38:1f:a6: 4d:86:b7:93:3d:65:5d:09:90:f1:d9:e0:d2:fc:8b:bd:31:7b: d6:7f:ae:55:71:e8:cc:70:9f:f9:b5:2d:f6:10:05:06:f6:17: db:77:09:0d:51:63:f0:6b:99:28:95:5c:56:07:b9:48:2d:08: a8:74:45:35:34:e0:ab:18:5d:01:60:d2:3d:25:94:6a:b6:36: 9b:aa:09:c0:3b:7c:b9:fe:e6:6c:eb:39:8e:2a:36:74:09:f4: 8e:1d:04:a3:41:68:70:d8:3a:e2:6a:72:a8:4e:61:8a:5c:18: 04:96:80:47:05:38:74:f2:4f:4f:e9:af:b8:35:1c:6d:ba:9a: ff:69:66:31:a9:5f:ba:62:50:29:74:d9:da:63:8f:49:a4:75: 83:21:93:71:90:4f:61:42:82:d1:71:dc:79:fa:95:e7:8c:3b: 0e:a6:9f:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9QWoLVYyo2BJzxUwozO5blMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQxZGUxMjRlMGY4YWRiNGU3ZDk1NzZjZWFlMzI1ZjY2OGRk MjI0YjEwHhcNMjQwNTA3MDAwMDU5WhcNMjQwNTA4MDAwMDU5WjAzMTEwLwYDVQQD Eyg5ZDMwYzM3MTNjNjgwM2ZmYTM4MzEyNjI5MzdmZWJiN2NhODIwMzI5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqSZZr/Dv1G9pgsXquk7jkubBi2tw IFVbRavIlj3cimjhCwnU6Zsy+nZUfrgemPWorQavr/cVtsb0F4nj5nVpS/X/ur6r oA0/TpiVrGKLWtQZQpUIMu30eK98GWhVxH1cLKbfohpyNFBrCnRVLjXr8CkLDfUk M4MmbfHR0D8TKJ13+Vpc4tiGrGz5p+F1/kaOT+8ecUIuzV/2DM3zgThbCAdqg5Hb CrlNpKI9OSSRIAafaA1RzZ0ug8PKd5Sqdnkz7w5zpUANWLN/y9U7oRkYhrCzabpv 8WRK3SFxagH+Z5zOHW2gj1Y2BM0hGgbhe1nc0EwnuLEL3iaRWCHF/yA8FwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ0ww3E8aAP/o4MSYpN/67fKggMpMB8GA1UdIwQY MBaAFNHeEk4PittOfZV2zq4yX2aN0iSxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTct NGY0YzliMzQzZTkwLzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zYS9hYmUxMzQtMDA5My00NjUyLTkwNTctNGY0YzliMzQzZTkw LzEvMGQ0U1RnLUsyMDU5bFhiT3JqSmZabzNTSkxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF41c8CHz lYc86JqsgxSGvF+hb7guHkKQUNuY9cfYMw3m1E0OpSJvxLZxEJ3fgEjO5pra9noI wC+CxmufWRwzc5Q8VHRTGhUS0jxjH7WSL9VmIXIRmxIeOB+mTYa3kz1lXQmQ8dng 0vyLvTF71n+uVXHozHCf+bUt9hAFBvYX23cJDVFj8GuZKJVcVge5SC0IqHRFNTTg qxhdAWDSPSWUarY2m6oJwDt8uf7mbOs5jio2dAn0jh0Eo0FocNg64mpyqE5hilwY BJaARwU4dPJPT+mvuDUcbbqa/2lmMalfumJQKXTZ2mOPSaR1gyGTcZBPYUKC0XHc efqV54w7Dqaf1g== -----END CERTIFICATE-----Generated at Tue May 7 07:23:03 2024 by rpki-client on console-fra.rpki-client.org