$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft File: OwmORe9LtdGNvIbFoTX1fry-AF0.mft (raw, json) Hash identifier: EcJmUVSKhUtu4pPIgcK9T3UVtbE104HSkg5hzOh875s= Subject key identifier: 4F:39:AC:0B:40:A8:26:A7:FD:0D:7F:56:ED:75:94:CC:A4:0C:B6:2C Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Certificate serial: 019350F46D9F2EC7FAD2920123AF70187A9A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft Manifest number: 09B3 Signing time: Thu 21 Nov 2024 23:00:16 +0000 Manifest this update: Thu 21 Nov 2024 23:00:16 +0000 Manifest next update: Fri 22 Nov 2024 23:00:16 +0000 Files and hashes: 1: 0t9ajUYp_Aoqrx3LJUwBtTc1KMA.roa (hash: 1hmqD6lClHqGTljQoH5L421Neh6kbaiMAZ2LpugEq+A=) 2: 2HCUdDs3q5GiS_BNCVlTHBbUdpA.roa (hash: EL1fpRPB6vBazh+JxYd7irOmxsKb1nM4sEbddmg3dOM=) 3: 3MaH3hAy88mGkoZ9aywFsl8fEbg.roa (hash: HXJ2tyPs2uAG3HumKsZBg4yJaGzw5ZrbgCC9XNg25uc=) 4: 45Xle4GVXy_u2J1n44LaaGzXJlQ.roa (hash: 5SLAJt9opqg0iG9fDuPJaBPV50R7hubzgSIxjDPRgrw=) 5: HVJNZDQ8hGJ3ImxbIVI-ccwLDbo.roa (hash: cUxWlQaAiZ5kBUfELuJOv+ee8uwm8duCMzvM8RnObd8=) 6: Lr2AKX7to-SgcJuLQmGNLPC0SNI.roa (hash: 2dGx0sCPsWuE7TxFvVavmU1lmEL48bOO5+6Kop0UwsY=) 7: Ny2pYzow83lfWKq6NAfIU_OAuaU.roa (hash: gJ3XsJm3ioi6DrjEQ1bdx4xwVl2tDkxmm1NOBcechYw=) 8: OwmORe9LtdGNvIbFoTX1fry-AF0.crl (hash: 1IzS2BNcv7JjxaHys55J5536vTnKO0RDTheN5q5JUKU=) 9: ReaBTiSvzL5VXTbFLUI6wWNgzmU.roa (hash: 4TTGPhxBq3EweeiXL3zgANn+AKdDVVczfdCOhTN94uo=) 10: SVjYzRzLsfuD9tW3u891Dok74ns.roa (hash: h6kqcSgB5gx8nvG7f9BIda2PEtavpipoixzTLQ+B6jk=) 11: UHjfP3V5popAhLVdBLxmVH4AHdE.roa (hash: CLr9XFS9LyXmtjSYmTZvGV7u0vDYNWpap22Q19VtSzQ=) 12: WpkijitNrcK2yjgMlU4t3EeJGNg.roa (hash: +Frm3uy+wbG/ccIax5fadl9XB42s4p+cFHNpJJ34BTg=) 13: XC7JKIa5bqihFA3FcV9VBchGyYU.roa (hash: iHcBwNUk8xqnkSOG74BSHdtc5ByOiJ+wkBNJj0rGZTQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:6d:9f:2e:c7:fa:d2:92:01:23:af:70:18:7a:9a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d Validity Not Before: Nov 21 23:00:16 2024 GMT Not After : Nov 22 23:00:16 2024 GMT Subject: CN=4f39ac0b40a826a7fd0d7f56ed7594cca40cb62c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:b8:78:01:e4:49:94:8b:58:dd:24:ef:04:c8: 12:61:50:4d:98:07:46:1e:a0:54:37:32:0d:bf:82: 30:a5:30:b6:e0:d2:ae:f9:76:76:bf:bf:aa:09:19: f4:db:b2:62:b4:2d:7e:57:04:20:6f:c6:3f:f0:55: e1:7d:56:1d:f8:da:d4:5c:c7:79:f7:8f:b6:10:08: f2:a4:c5:5f:be:fc:27:bf:e4:23:74:93:59:96:cd: 6b:a0:4d:e7:4d:c7:13:37:18:72:4d:f3:3e:2d:cf: 60:85:df:5c:73:d1:05:e6:6d:32:dd:ae:99:35:c6: 52:b8:9e:58:b6:52:3b:06:22:a8:dd:07:3b:81:41: 63:b5:0b:d4:20:9f:10:d9:c1:5f:7f:08:30:c9:4d: 62:2a:6d:af:4d:3a:8c:ac:b9:64:b0:2a:d9:0f:b0: 28:34:42:08:1a:0d:65:36:7e:68:d3:8d:1f:6a:2a: 2c:c9:43:e7:8d:3d:ac:f5:e9:12:c5:04:f7:21:99: 59:38:75:cc:02:13:82:fd:7f:8d:97:08:65:46:50: bf:df:8c:8e:60:91:af:cb:50:d0:4d:6a:2f:79:70: 79:0d:e8:56:fa:d6:de:4c:31:85:d2:66:36:18:a4: 50:2d:5e:52:72:ec:f6:f2:65:d1:c8:48:84:4f:d0: 74:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4F:39:AC:0B:40:A8:26:A7:FD:0D:7F:56:ED:75:94:CC:A4:0C:B6:2C X509v3 Authority Key Identifier: keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:e9:0f:61:5a:17:3a:8f:8c:0d:e0:3e:96:9a:67:b4:fa:13: c2:c5:f7:ac:87:70:f8:4d:f7:e2:99:1b:a9:8a:6f:50:c5:95: 9e:3b:b3:c5:c5:38:b5:10:b7:ac:77:eb:16:17:a5:47:ca:f0: 28:34:4c:ad:a7:56:ad:04:6a:c8:26:9b:d3:25:6d:68:a5:47: 5e:16:fc:1a:65:8e:ba:90:6b:c2:19:47:e3:13:ff:d4:60:bb: fa:47:d1:d4:a1:45:05:42:bf:b5:6b:9c:9a:7d:3c:cd:39:e3: 82:78:de:d0:3b:7d:7d:29:87:ae:1c:72:38:66:11:a5:0a:d5: fb:92:91:7c:45:06:f2:a4:e5:00:8f:45:e8:c8:4e:fc:47:5c: 67:78:1f:0a:49:6d:44:07:b7:2c:b1:7b:77:75:38:5f:6e:02: b6:63:79:2c:4a:47:77:12:48:cc:82:0d:59:ae:f4:b1:65:5e: 0d:97:c2:69:d9:a0:b2:24:5e:94:3b:28:1b:8f:28:7d:de:76: 24:ca:85:bd:e0:34:f1:b3:e4:58:e6:a0:a4:a2:e8:b9:3b:73: 4a:57:38:f8:9b:1f:0a:23:61:65:02:f0:f5:9e:68:32:fc:d3: d3:12:79:97:93:db:b5:a8:85:01:5d:65:31:fd:ff:4e:ff:d3: ec:46:c1:bb -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9G2fLsf60pIBI69wGHqaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDNiMDk4ZTQ1ZWY0YmI1ZDE4ZGJjODZjNWExMzVmNTdlYmNi ZTAwNWQwHhcNMjQxMTIxMjMwMDE2WhcNMjQxMTIyMjMwMDE2WjAzMTEwLwYDVQQD Eyg0ZjM5YWMwYjQwYTgyNmE3ZmQwZDdmNTZlZDc1OTRjY2E0MGNiNjJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLh4AeRJlItY3STvBMgSYVBNmAdG HqBUNzINv4IwpTC24NKu+XZ2v7+qCRn027JitC1+VwQgb8Y/8FXhfVYd+NrUXMd5 94+2EAjypMVfvvwnv+QjdJNZls1roE3nTccTNxhyTfM+Lc9ghd9cc9EF5m0y3a6Z NcZSuJ5YtlI7BiKo3Qc7gUFjtQvUIJ8Q2cFffwgwyU1iKm2vTTqMrLlksCrZD7Ao NEIIGg1lNn5o040faiosyUPnjT2s9ekSxQT3IZlZOHXMAhOC/X+NlwhlRlC/34yO YJGvy1DQTWoveXB5DehW+tbeTDGF0mY2GKRQLV5Scuz28mXRyEiET9B0iwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFE85rAtAqCan/Q1/Vu11lMykDLYsMB8GA1UdIwQY MBaAFDsJjkXvS7XRjbyGxaE19X68vgBdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMt ZTEyYjE2NDIxNWI5LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi85NTRkMzEtZjc0Yy00NjdiLTkwMTMtZTEyYjE2NDIxNWI5 LzEvT3dtT1JlOUx0ZEdOdkliRm9UWDFmcnktQUYwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+kPYVoX Oo+MDeA+lppntPoTwsX3rIdw+E334pkbqYpvUMWVnjuzxcU4tRC3rHfrFhelR8rw KDRMradWrQRqyCab0yVtaKVHXhb8GmWOupBrwhlH4xP/1GC7+kfR1KFFBUK/tWuc mn08zTnjgnje0Dt9fSmHrhxyOGYRpQrV+5KRfEUG8qTlAI9F6MhO/EdcZ3gfCklt RAe3LLF7d3U4X24CtmN5LEpHdxJIzIINWa70sWVeDZfCadmgsiRelDsoG48ofd52 JMqFveA08bPkWOagpKLouTtzSlc4+JsfCiNhZQLw9Z5oMvzT0xJ5l5PbtaiFAV1l Mf3/Tv/T7EbBuw== -----END CERTIFICATE-----Generated at Fri Nov 22 00:31:25 2024 by rpki-client on console-fra.rpki-client.org