$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft File: I0tUsRmns-_xUwhbcxVQfNhROg8.mft (raw, json) Hash identifier: UxRNhbZK65+b5/muXaUK+2Healu9UBmvjEfs6te5nt8= Subject key identifier: 7E:23:7F:E0:E5:D6:B0:D2:80:7C:72:F1:72:8D:C0:F0:7E:90:AC:E9 Authority key identifier: 23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F Certificate issuer: /CN=234b54b119a7b3eff153085b7315507cd8513a0f Certificate serial: 0193523E1932620A9F5A4E068638AD31EF5F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft Manifest number: 09AC Signing time: Fri 22 Nov 2024 05:00:21 +0000 Manifest this update: Fri 22 Nov 2024 05:00:21 +0000 Manifest next update: Sat 23 Nov 2024 05:00:21 +0000 Files and hashes: 1: I0tUsRmns-_xUwhbcxVQfNhROg8.crl (hash: He9AuAXOkQNhwgt6UOAIIVEbiAYHiRf5HXtMg7/1K3A=) 2: LESnwCSKTt_bugnWCp8Ez_ODk-k.roa (hash: 6iTlmU2YjGC9KPyZR5cS7dmq9lBC3bVlClkYjDxIqpE=) 3: URUFS_I2L7NhBx0pYrMenlfKuAY.roa (hash: XPy0WkKwnhRp/2dXggrmHfSmdC2EV+LQUAJ3kncaags=) 4: USRUohu6774wo4GtQsMTtI9j4fk.roa (hash: MWZs4H7j8DxPlzHQkkV2O/uXJMhVvuaEm8tFqweyMm8=) 5: Z6RqEs0-rABXJnEuTani739B8o8.roa (hash: 7itINHzAz5u2s0+NT9bVGxUFv8Uvp3cMV4GrMv/5Ais=) 6: aKwuLAsuo4oM7ax1cJHnpC60bQs.roa (hash: ATQL2y4xQIY92X7l5D3fCUa2p2jvo4qght5tBMVAl2I=) 7: kYDxjDpVodQ5VNjyT92okY4hztA.roa (hash: uQj9tSMujkpWv4lC0T3XdmEw8hXp+xbZj3ESkD0kk+A=) 8: mvlWxjNYfAygnMT08E51HYaK9Ck.roa (hash: sSimb/mLnEygX0CAcWuA4aihyyrEcsG1lHMT7cOV1FQ=) 9: px96VewSUxJ4mPJ30uhyFQz9M9M.roa (hash: qrMT9SXTb/3A16M7wceULjVR8Tn/50tWl9mUxwo4xGk=) 10: t7gXwxyMutoLxVZVBNQXXRhN5O0.roa (hash: +eYrm1+9FzY2qfww2FvocGWskktBs6M8H/IF5tO/nao=) 11: ulA_xGy4A-myACCrYvdwgPYpe1g.roa (hash: RZaaeVZQmYLh6J8s0k0YMA3vkGv6cx/ZshXp1fgw9P0=) 12: x-UxTPaQ7oStHDD6VCxKNuOIfVY.roa (hash: 8+Qpo5xpj26GgJjZYG153nR4zZE/wmcironPtmlZYI0=) 13: z4lnjFYEqZo9HUthRS6YEsB7-To.roa (hash: kG0ly9vf56afIr9qp3K1kctUo1KOqV6hcBRYDFrudp0=) 14: zhY5FrRBQ0N5ecp-aC_VJIIElbE.roa (hash: KAHyy/M0XGviWR6UeYtxNop1Hv96LkHC5FnpeU4krNw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:3e:19:32:62:0a:9f:5a:4e:06:86:38:ad:31:ef:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=234b54b119a7b3eff153085b7315507cd8513a0f Validity Not Before: Nov 22 05:00:21 2024 GMT Not After : Nov 23 05:00:21 2024 GMT Subject: CN=7e237fe0e5d6b0d2807c72f1728dc0f07e90ace9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:2a:02:7f:fa:a3:6e:b7:39:71:a8:0b:d1:a2: 9e:7a:b8:a0:95:97:44:ed:48:fe:df:4f:e5:68:f0: 6e:53:51:97:a9:37:18:78:3a:72:3e:8c:3d:45:5f: 1d:cb:2e:76:c1:5c:fc:4a:9d:eb:9b:89:09:72:27: 58:58:c7:5a:1a:e7:a2:10:09:34:6b:e8:a4:25:46: 0e:88:58:c0:f0:f6:bd:a1:83:b6:41:28:04:93:f3: 90:19:e1:dc:f6:41:9c:36:ca:c9:b7:22:0c:58:9e: 4b:e9:5e:d8:28:bf:4c:dd:bd:a4:1c:22:33:50:60: 38:3f:56:b8:c5:9f:c7:71:af:f3:9f:cf:41:4a:21: 53:5f:54:44:4d:3e:c8:1d:9d:4b:e3:18:e4:11:26: 96:91:0c:32:51:81:1f:8a:0e:9a:15:46:31:6c:98: 02:e2:dd:67:80:8e:f9:02:a3:8a:9b:c5:2b:79:35: 9f:29:c7:24:ab:36:e0:4f:6b:bd:da:47:b2:a6:1f: ae:65:d6:e8:3b:ce:c6:36:90:18:67:3d:1a:d4:b9: 4a:f6:01:da:cd:82:08:c6:95:ca:d6:94:7a:f8:e0: c4:f1:6d:2a:48:25:f3:67:c3:22:c9:ca:f0:fd:48: 79:dd:14:98:75:bb:1a:25:6a:36:19:8e:bf:36:de: 80:b7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7E:23:7F:E0:E5:D6:B0:D2:80:7C:72:F1:72:8D:C0:F0:7E:90:AC:E9 X509v3 Authority Key Identifier: keyid:23:4B:54:B1:19:A7:B3:EF:F1:53:08:5B:73:15:50:7C:D8:51:3A:0F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I0tUsRmns-_xUwhbcxVQfNhROg8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/47/bc7078-1ee4-42f1-bc34-1d21d1bce3fe/1/I0tUsRmns-_xUwhbcxVQfNhROg8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:92:b1:c8:85:af:04:9e:46:34:a3:a3:01:3a:ec:f7:0b:c3: df:85:d2:91:77:06:4c:53:aa:38:00:ee:f5:82:0e:f9:3b:ed: 5d:9d:24:80:01:99:43:be:a8:ff:27:d8:8c:4f:f3:be:60:8e: 80:c8:64:7f:39:37:81:c8:b8:97:f7:71:27:3a:6f:d8:78:ea: 2e:f8:12:0b:15:f6:d4:63:85:36:d1:e8:91:f0:09:54:ed:7f: 8e:d3:62:03:cd:bb:82:86:8d:f1:42:bc:8c:89:b7:62:32:56: 35:56:bf:a6:08:36:5a:d1:b5:9c:ae:7b:69:5d:d9:c9:49:c5: a1:b1:81:e9:59:c0:94:22:f8:c6:90:a5:ad:51:3c:30:98:9c: 23:18:d8:f0:92:95:c8:69:43:1d:af:51:ce:55:cd:d8:f2:2d: dd:55:15:1c:36:2a:11:8e:49:ac:f1:ca:b1:00:07:fb:71:61: 6c:e7:88:75:1a:18:28:10:0c:11:9f:1c:93:94:78:11:b2:84: 1c:b8:fe:8f:88:1b:c1:46:70:fc:83:06:2d:3c:af:ea:9b:f6: bd:74:2f:5f:83:b7:a4:50:2a:ec:07:04:bc:00:29:e1:97:0a: 0a:93:5b:c3:6e:58:f0:54:a3:b6:03:9a:a6:57:7d:a8:ec:a8: 94:12:21:f5 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSPhkyYgqfWk4GhjitMe9fMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDIzNGI1NGIxMTlhN2IzZWZmMTUzMDg1YjczMTU1MDdjZDg1 MTNhMGYwHhcNMjQxMTIyMDUwMDIxWhcNMjQxMTIzMDUwMDIxWjAzMTEwLwYDVQQD Eyg3ZTIzN2ZlMGU1ZDZiMGQyODA3YzcyZjE3MjhkYzBmMDdlOTBhY2U5MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxioCf/qjbrc5cagL0aKeeriglZdE 7Uj+30/laPBuU1GXqTcYeDpyPow9RV8dyy52wVz8Sp3rm4kJcidYWMdaGueiEAk0 a+ikJUYOiFjA8Pa9oYO2QSgEk/OQGeHc9kGcNsrJtyIMWJ5L6V7YKL9M3b2kHCIz UGA4P1a4xZ/Hca/zn89BSiFTX1RETT7IHZ1L4xjkESaWkQwyUYEfig6aFUYxbJgC 4t1ngI75AqOKm8UreTWfKcckqzbgT2u92keyph+uZdboO87GNpAYZz0a1LlK9gHa zYIIxpXK1pR6+ODE8W0qSCXzZ8Miycrw/Uh53RSYdbsaJWo2GY6/Nt6AtwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFH4jf+Dl1rDSgHxy8XKNwPB+kKzpMB8GA1UdIwQY MBaAFCNLVLEZp7Pv8VMIW3MVUHzYUToPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQt MWQyMWQxYmNlM2ZlLzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80Ny9iYzcwNzgtMWVlNC00MmYxLWJjMzQtMWQyMWQxYmNlM2Zl LzEvSTB0VXNSbW5zLV94VXdoYmN4VlFmTmhST2c4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl5KxyIWv BJ5GNKOjATrs9wvD34XSkXcGTFOqOADu9YIO+TvtXZ0kgAGZQ76o/yfYjE/zvmCO gMhkfzk3gci4l/dxJzpv2HjqLvgSCxX21GOFNtHokfAJVO1/jtNiA827goaN8UK8 jIm3YjJWNVa/pgg2WtG1nK57aV3ZyUnFobGB6VnAlCL4xpClrVE8MJicIxjY8JKV yGlDHa9RzlXN2PIt3VUVHDYqEY5JrPHKsQAH+3FhbOeIdRoYKBAMEZ8ck5R4EbKE HLj+j4gbwUZw/IMGLTyv6pv2vXQvX4O3pFAq7AcEvAAp4ZcKCpNbw25Y8FSjtgOa pld9qOyolBIh9Q== -----END CERTIFICATE-----Generated at Fri Nov 22 06:39:09 2024 by rpki-client on console-ams.rpki-client.org