$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft File: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft (raw, json) Hash identifier: uB5ZsAUL5Z1UCbXHLW2hp7a/poG+YwW4faI7E7ZoCZk= Subject key identifier: CC:66:E6:ED:88:D5:0B:82:7E:62:DC:E4:89:14:B6:82:CD:2A:AB:EE Authority key identifier: D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 Certificate issuer: /CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Certificate serial: 0193553F49CA2F75475B316D2C5397E2F826 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft Manifest number: 021B Signing time: Fri 22 Nov 2024 19:00:30 +0000 Manifest this update: Fri 22 Nov 2024 19:00:30 +0000 Manifest next update: Sat 23 Nov 2024 19:00:30 +0000 Files and hashes: 1: 1-Y5ubFW4nCnV-fXk9IkkZYij_CE.roa (hash: 0sGus1PDmxb60lznROSOCCXKMq9NSnxlFIHm2/pZgrA=) 2: 1-aa7uyRFAIdvMT9eWUgnLLGKJoM.roa (hash: GA/1zpail7t77dj0tP1pvS6vlun/yQ9tpw+w1dVGKSY=) 3: 1Ic42bNLVeyxtGi_hhgf6n32ANg.roa (hash: bwUl9TIR6Zz/IKEsvgfN2BlC2iOIFbcT2AIkh9MbqYw=) 4: 1w8aTD013opsDDsCDIyMaQXF2eY.roa (hash: P5HRvB1g3lLUVpTm9yKbpJd5sVg6euIafgYq6PluSrk=) 5: 2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl (hash: U/Z7cX+awOdhvR9v1AtqXJzAsIcapCAX+jWMDEUmMLM=) 6: 61IzDXcDQNDDcf82xfy2nXI7oFY.roa (hash: HiDh5SPvLwwPk4MWxRrI3CqkVbG9Da8384Tw8nSTOQ0=) 7: JnB5zzjGAESuQkUQnMydqeFIq6Y.roa (hash: /La/8rbGbmpyre+bkHaC9LoL1X87QdpU4ihxorLVEoQ=) 8: Q9pVZOUrhJxmgKGoZNDWDN9JVd0.roa (hash: 95QWTY84nA08IYGVEI5guE0hOawCm7o+T8w92ZZhAaI=) 9: SfCIaWanrzt5W5MTWKMfTqMk7ec.roa (hash: 6R0Z2hINP0K3Rhmmkw8gjMu7BLJHUsWJWIElSHJ4WZI=) 10: Tn5cmUWI13OKHZoviEO4n-wocrY.roa (hash: ROYVSMFLCWm82HPTmw5S4kU+oEKLbyI0l2fhS1gcupA=) 11: ktr5osSRGAePlhG83LnpRCyNXpE.roa (hash: mt9Q896QZ4QcmVqnB/nOL2wfsQhIglauvCRXy7LP6Y8=) 12: uJzr-rHGrHdeOUuvD-Pv5Pt-Z3A.roa (hash: KqMXIbukoSTfEfNZSC09tGgJz7ccf9wH+B6xt0gfTnQ=) 13: zIPpHzcEX6aLElkpG3bukogxPRk.roa (hash: IoLxLBlIYESQiLp4d0nB7BX1oDltA66oqiBV/YcuNwc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 19:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:3f:49:ca:2f:75:47:5b:31:6d:2c:53:97:e2:f8:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d82cb43ca3c0c57816cee360478d0cf882207fd2 Validity Not Before: Nov 22 19:00:30 2024 GMT Not After : Nov 23 19:00:30 2024 GMT Subject: CN=cc66e6ed88d50b827e62dce48914b682cd2aabee Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:79:61:86:77:ee:95:4d:4f:6b:ed:c1:36:c8: 96:c7:ab:15:c4:fa:2f:73:af:c8:ff:6f:37:47:99: f0:9d:36:47:8d:09:d1:59:ca:cb:ea:eb:6a:6b:ac: 53:b2:e6:8f:a5:eb:7b:ab:dd:59:59:b4:ae:17:cd: ad:b9:14:fb:d9:aa:b4:0e:7d:e7:bb:98:16:ef:ca: 52:4f:5c:5a:73:d0:89:a5:9d:71:8a:4e:cc:6a:16: b7:0e:04:01:c9:a1:f3:e6:3a:ad:11:54:23:7b:f4: 00:4d:ec:25:a9:93:57:1f:dc:1d:35:03:a2:a7:96: ad:7a:c9:a3:55:f6:f5:ea:6b:6a:51:c7:63:58:9f: c0:5a:fc:c0:8c:2b:2a:97:fe:35:50:af:f3:12:5a: c8:86:3a:77:81:c6:2b:73:5f:45:b1:ce:b6:c8:9b: 18:7b:f2:fb:38:28:61:dd:3e:df:ba:ba:ea:2e:b6: 7c:c2:ab:2d:6a:66:a9:33:f3:19:13:44:41:3b:f9: de:22:d2:b2:3f:ed:20:19:18:5e:50:95:cf:d1:85: 99:a4:0e:d2:2e:b2:55:72:5e:aa:4c:36:2f:fc:c0: 2e:23:bf:c8:31:cc:85:75:a0:10:13:da:1e:33:b5: cb:e0:94:f5:65:0e:44:3f:b6:e0:a8:8d:e7:4d:97: 56:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CC:66:E6:ED:88:D5:0B:82:7E:62:DC:E4:89:14:B6:82:CD:2A:AB:EE X509v3 Authority Key Identifier: keyid:D8:2C:B4:3C:A3:C0:C5:78:16:CE:E3:60:47:8D:0C:F8:82:20:7F:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2Cy0PKPAxXgWzuNgR40M-IIgf9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/57/3b51b8-10c6-438b-a120-15f13e3f7d85/1/2Cy0PKPAxXgWzuNgR40M-IIgf9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:90:fb:7a:97:9f:d7:f5:14:8c:07:64:8a:f8:6e:48:6f:f7: a9:59:ef:f6:d8:71:e2:3e:c5:a1:23:7c:22:c0:97:64:a0:dd: f1:88:0e:f6:43:bc:7a:a6:c4:5a:6e:35:aa:8e:aa:6f:61:f5: cd:fb:81:d2:a4:c8:c2:99:dc:0b:ce:68:8a:29:0b:d9:cc:26: f0:6a:7c:da:bb:26:08:59:c6:34:9a:0a:9c:b6:3c:90:67:c5: ca:d7:97:2a:ae:e0:57:62:5e:4d:19:67:0a:c8:44:cd:33:3a: e7:fd:b4:96:42:7e:73:a2:40:35:20:f0:97:fe:ed:dd:89:d4: ee:0d:d7:e1:64:25:9a:cb:61:59:b2:1f:8b:b2:9c:94:17:f7: f9:a6:d1:bb:9a:1a:93:f5:b9:e4:ce:ce:bf:58:2c:a6:4d:cd: dc:34:13:2f:f2:18:fe:3a:04:55:4b:a9:b8:a0:19:d0:b6:fb: 69:64:69:d4:38:49:cd:92:91:14:3d:28:70:09:b5:b9:a1:ad: 19:50:c2:45:b9:51:08:b6:99:8c:79:16:f8:2f:97:73:94:87: 07:95:5d:15:21:64:45:f0:a5:28:08:e2:72:f2:96:91:5c:a2: 57:04:14:32:af:8c:50:0d:ca:26:e9:4b:f8:33:e5:20:a6:0c: 55:8d:66:53 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNVP0nKL3VHWzFtLFOX4vgmMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ4MmNiNDNjYTNjMGM1NzgxNmNlZTM2MDQ3OGQwY2Y4ODIy MDdmZDIwHhcNMjQxMTIyMTkwMDMwWhcNMjQxMTIzMTkwMDMwWjAzMTEwLwYDVQQD EyhjYzY2ZTZlZDg4ZDUwYjgyN2U2MmRjZTQ4OTE0YjY4MmNkMmFhYmVlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHlhhnfulU1Pa+3BNsiWx6sVxPov c6/I/283R5nwnTZHjQnRWcrL6utqa6xTsuaPpet7q91ZWbSuF82tuRT72aq0Dn3n u5gW78pST1xac9CJpZ1xik7Maha3DgQByaHz5jqtEVQje/QATewlqZNXH9wdNQOi p5atesmjVfb16mtqUcdjWJ/AWvzAjCsql/41UK/zElrIhjp3gcYrc19Fsc62yJsY e/L7OChh3T7furrqLrZ8wqstamapM/MZE0RBO/neItKyP+0gGRheUJXP0YWZpA7S LrJVcl6qTDYv/MAuI7/IMcyFdaAQE9oeM7XL4JT1ZQ5EP7bgqI3nTZdWpwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMxm5u2I1QuCfmLc5IkUtoLNKqvuMB8GA1UdIwQY MBaAFNgstDyjwMV4Fs7jYEeNDPiCIH/SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAt MTVmMTNlM2Y3ZDg1LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Ny8zYjUxYjgtMTBjNi00MzhiLWExMjAtMTVmMTNlM2Y3ZDg1 LzEvMkN5MFBLUEF4WGdXenVOZ1I0ME0tSUlnZjlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEpD7epef 1/UUjAdkivhuSG/3qVnv9thx4j7FoSN8IsCXZKDd8YgO9kO8eqbEWm41qo6qb2H1 zfuB0qTIwpncC85oiikL2cwm8Gp82rsmCFnGNJoKnLY8kGfFyteXKq7gV2JeTRln CshEzTM65/20lkJ+c6JANSDwl/7t3YnU7g3X4WQlmsthWbIfi7KclBf3+abRu5oa k/W55M7Ov1gspk3N3DQTL/IY/joEVUupuKAZ0Lb7aWRp1DhJzZKRFD0ocAm1uaGt GVDCRblRCLaZjHkW+C+Xc5SHB5VdFSFkRfClKAjicvKWkVyiVwQUMq+MUA3KJulL +DPlIKYMVY1mUw== -----END CERTIFICATE-----Generated at Sat Nov 23 03:20:37 2024 by rpki-client on console-fra.rpki-client.org