$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft File: r16T-QI1TOSAS0ywSc9osg92rrI.mft (raw, json) Hash identifier: ud735Jd3/xOimN1Epbamo26M5WkcURxaYZYI/3kep7M= Subject key identifier: 77:01:11:C9:E8:8C:BE:B2:7C:C5:50:B7:20:95:50:4C:94:B3:65:9A Authority key identifier: AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 Certificate issuer: /CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Certificate serial: 01935387CC1839B14DC9E7E662F0C8710E5A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft Manifest number: 0FFF Signing time: Fri 22 Nov 2024 11:00:28 +0000 Manifest this update: Fri 22 Nov 2024 11:00:28 +0000 Manifest next update: Sat 23 Nov 2024 11:00:28 +0000 Files and hashes: 1: 1_AkT0bvVx9UiB4y3dlKK090pOs.roa (hash: /daT1S++9NKgfPddHHsT9eRe5VcAYewZrFL9QaJfUK8=) 2: 1hB8-5SbBQp9uBMjkAko4UTFi2I.roa (hash: ySNhSFK285jz5BuwzJBv3vYAkMABZ7Ua2Muah/SQ+F4=) 3: 6jWomrJ49DEFmWyqqSdMFgALuuE.roa (hash: fCibN18cnCR1G+0w5qFDsXYL0B69kGwIzyRHcg+Vuzk=) 4: 9ajk4C0pzz7yg9W0Aq8P1ySxK8g.roa (hash: yrHMfMl0cV9//UA5WgUOsmD+HjwatvUMH3SNL5LUKiY=) 5: HrZRkIw9Cw56hUTKFYybs9RW430.roa (hash: iC7tcdnPk6bzATuw3NTk04gIAAY3kcEtt/NkTmoc89g=) 6: P_PSQT1ij1L8WEHykThVUOhnI9Y.roa (hash: RHXufzIIIbDV6+9nQ1JY8xrZwFYV2+CJDZs7Y/cHcUM=) 7: T5hLDt_4AhBr4gQVD0Tu2knK7lY.roa (hash: R+j2XNy4EMPPsCzq0eZt9zSzy0hjDPoJvJOPBTovIng=) 8: WGuCa9f-OjB8H_HZWE-pFXYqhUM.roa (hash: 4APQzssQdjq6Aixe35wXExouwvhkjWPtXb/dN+Rq4kE=) 9: ZN_ALgSg4qp73tZq3AThdrV1Gac.roa (hash: 1hWkRXVIAugEIgAL163hs40yfJzxwEA1auDe/ULuwF0=) 10: ZW72xB-w1tVcBy76S89IZpycl2k.roa (hash: bhjjT7T2SeifLeUDfroIKPOsVwXyhFWWxrl1zPVndR4=) 11: aOQKyFiKJ0TSz0BAtgFhQMfqzE0.roa (hash: v/aGXNBxLJCibQvgVcVkN7DxkAUlN9cI50+V/ryNWEU=) 12: d8MkI-JgmqlNjYBrJTKxabyb7cE.roa (hash: NDfx6cpmrnph4JTxGCavkW5ySGaUR1hhff4UkN+/xR8=) 13: evvEv3Mx0hzGYC0q_FD_47GWTKY.roa (hash: 9SOP/tWDP3qEJ/fMNKMu5H5HBnUEGmkzFCny6T6WPeA=) 14: hrrDqXEePBsnhqpzPraI0DtJqC0.roa (hash: UeV3Er2CPUGu1ZKOf24Z7WPEv761KUbseJcvx3PMf6I=) 15: r16T-QI1TOSAS0ywSc9osg92rrI.crl (hash: aLqXYmU2yU+JphSDdxAksa31jnbB3xnAHHb5chXBEGw=) 16: zBfwc67C2gcCEJfkCXZ9GVpkpsU.roa (hash: Z/GWZy0VgB6+jNeO62y33o7X5zFIj6J4Q4p2bJ7HUNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:87:cc:18:39:b1:4d:c9:e7:e6:62:f0:c8:71:0e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=af5e93f902354ce4804b4cb049cf68b20f76aeb2 Validity Not Before: Nov 22 11:00:28 2024 GMT Not After : Nov 23 11:00:28 2024 GMT Subject: CN=770111c9e88cbeb27cc550b72095504c94b3659a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:24:09:d2:e3:44:3e:67:3f:a1:ee:e7:24:1d: bd:84:b3:ac:7a:10:30:a4:1a:f4:b3:03:03:b4:9f: 0a:b1:7c:93:c3:a0:69:d7:a5:a4:b2:69:9b:b8:3f: d6:a4:dd:8c:3f:9a:15:c3:a2:f5:6c:44:f7:7c:de: f3:cb:9c:60:d3:5b:d4:62:9f:8e:1e:8b:58:cc:71: 0a:b8:ec:66:9e:32:77:9b:f1:d2:85:0d:5a:e1:a1: 6b:a9:98:0b:6c:34:e2:a7:ac:61:bd:75:30:7c:d0: 3a:2a:f5:a6:b2:e0:27:b7:7c:7c:a6:88:ac:04:03: b0:d5:63:7e:2c:30:6a:25:b2:99:9c:ad:04:b0:f9: b5:f7:fa:77:68:7a:57:83:8d:29:20:c1:45:5f:14: 69:89:0c:d7:bb:35:ce:b4:d7:c8:bb:30:ab:69:6e: 23:6a:49:1a:40:17:7f:c1:c9:0c:26:4c:93:d0:46: fb:a7:d8:82:09:cb:28:03:bb:0f:4c:d0:6a:8e:9d: 0b:f8:8b:5d:49:53:aa:ec:a3:d1:7e:0c:6b:47:cc: 63:2e:b5:c1:2d:bf:fd:fb:c1:b2:05:1b:84:f5:29: 9b:da:59:22:49:dc:e4:ac:d0:35:f2:58:89:87:05: 5e:59:72:ca:af:99:a3:0f:05:eb:e9:b1:55:80:cf: a4:bd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 77:01:11:C9:E8:8C:BE:B2:7C:C5:50:B7:20:95:50:4C:94:B3:65:9A X509v3 Authority Key Identifier: keyid:AF:5E:93:F9:02:35:4C:E4:80:4B:4C:B0:49:CF:68:B2:0F:76:AE:B2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r16T-QI1TOSAS0ywSc9osg92rrI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/42/f4004b-d602-475d-931b-7e05ad0190ce/1/r16T-QI1TOSAS0ywSc9osg92rrI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:8f:2a:43:8f:96:37:60:e1:7c:89:f0:1b:6c:da:19:d3:6f: 22:9d:14:77:1e:02:6c:7f:f7:e9:cb:d3:9a:fb:83:19:be:12: 25:a9:f1:8f:76:d4:c9:bb:47:00:12:1a:7a:13:b1:20:08:ca: 7d:fb:90:44:96:7f:b9:d5:03:16:94:35:9d:7e:cd:a3:cf:fe: 9b:b8:bf:8b:37:db:e7:24:43:31:0e:bc:cc:35:50:53:1d:ea: de:35:28:da:b0:6b:63:2c:a8:66:38:82:b2:c2:27:f9:56:03: da:1b:80:7f:13:6d:df:ba:dd:56:38:34:e5:82:89:85:e2:7c: cf:38:b3:61:1b:4c:26:98:1e:ad:74:ca:24:e7:0f:2e:29:b5: 1f:f0:27:75:80:50:6d:2d:34:22:63:28:1c:99:11:94:00:d6: e9:e7:3c:75:aa:5d:64:1b:fa:76:af:9a:ad:b2:78:32:4e:13: 3c:81:82:70:6a:d0:06:5c:ab:50:e6:ad:9b:28:90:33:37:73: 42:25:6c:a3:8b:99:a3:62:4e:c2:b6:e6:8e:79:87:5a:57:8e: c4:da:f3:de:62:46:04:57:29:4a:30:16:42:8e:25:dc:0d:f6: 24:3d:42:ac:e0:69:1f:7b:87:3f:7d:e4:a7:a1:44:2f:86:d7: 81:03:a3:03 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTh8wYObFNyefmYvDIcQ5aMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFmNWU5M2Y5MDIzNTRjZTQ4MDRiNGNiMDQ5Y2Y2OGIyMGY3 NmFlYjIwHhcNMjQxMTIyMTEwMDI4WhcNMjQxMTIzMTEwMDI4WjAzMTEwLwYDVQQD Eyg3NzAxMTFjOWU4OGNiZWIyN2NjNTUwYjcyMDk1NTA0Yzk0YjM2NTlhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyQJ0uNEPmc/oe7nJB29hLOsehAw pBr0swMDtJ8KsXyTw6Bp16WksmmbuD/WpN2MP5oVw6L1bET3fN7zy5xg01vUYp+O HotYzHEKuOxmnjJ3m/HShQ1a4aFrqZgLbDTip6xhvXUwfNA6KvWmsuAnt3x8pois BAOw1WN+LDBqJbKZnK0EsPm19/p3aHpXg40pIMFFXxRpiQzXuzXOtNfIuzCraW4j akkaQBd/wckMJkyT0Eb7p9iCCcsoA7sPTNBqjp0L+ItdSVOq7KPRfgxrR8xjLrXB Lb/9+8GyBRuE9Smb2lkiSdzkrNA18liJhwVeWXLKr5mjDwXr6bFVgM+kvQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHcBEcnojL6yfMVQtyCVUEyUs2WaMB8GA1UdIwQY MBaAFK9ek/kCNUzkgEtMsEnPaLIPdq6yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWIt N2UwNWFkMDE5MGNlLzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Mi9mNDAwNGItZDYwMi00NzVkLTkzMWItN2UwNWFkMDE5MGNl LzEvcjE2VC1RSTFUT1NBUzB5d1NjOW9zZzkycnJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMo8qQ4+W N2DhfInwG2zaGdNvIp0Udx4CbH/36cvTmvuDGb4SJanxj3bUybtHABIaehOxIAjK ffuQRJZ/udUDFpQ1nX7No8/+m7i/izfb5yRDMQ68zDVQUx3q3jUo2rBrYyyoZjiC ssIn+VYD2huAfxNt37rdVjg05YKJheJ8zzizYRtMJpgerXTKJOcPLim1H/AndYBQ bS00ImMoHJkRlADW6ec8dapdZBv6dq+arbJ4Mk4TPIGCcGrQBlyrUOatmyiQMzdz QiVso4uZo2JOwrbmjnmHWleOxNrz3mJGBFcpSjAWQo4l3A32JD1CrOBpH3uHP33k p6FEL4bXgQOjAw== -----END CERTIFICATE-----Generated at Fri Nov 22 14:38:15 2024 by rpki-client on console-ams.rpki-client.org