$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft File: cPmxat8v0xmIhZkitEV0gd1-70A.mft (raw, json) Hash identifier: xtR7Pc1/idS30CjMSC3rch/obO/oVXnYlZ41D9l9Rxg= Subject key identifier: 24:73:47:DC:A6:F0:2E:EA:0E:6A:99:DC:9E:4F:10:15:FA:6D:E9:AF Authority key identifier: 70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 Certificate issuer: /CN=70f9b16adf2fd31988859922b4457481dd7eef40 Certificate serial: 019351623CEAD709F0A4164C79DACF6E5E4A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft Manifest number: 10FD Signing time: Fri 22 Nov 2024 01:00:12 +0000 Manifest this update: Fri 22 Nov 2024 01:00:12 +0000 Manifest next update: Sat 23 Nov 2024 01:00:12 +0000 Files and hashes: 1: 6zZc9Btr7dT-cKX2xDUv1TlyMOk.roa (hash: k0VU2vyawK+USNIENPm5vQ+bHwlByS+2V0mbDLUlIX4=) 2: AazIPkpPdSCd2THTX2bZYNBraDg.roa (hash: HM20VtWI36InXlF1/fjNbU0cTuqjWWGxjV1qJrcxUQ8=) 3: D6z3uH2EsI5QhDsSYxjtlpl1eHA.roa (hash: ZGD46BffVNFNd8Dv/G9ld9z6dYrkJsXhn/Uio551jbU=) 4: DDFKoxTPYE7ilqPiExcTldqQtxQ.roa (hash: 3pOehKTGvq9pClPWLlvICsZJFMAUJPm87zg9RG2hrJs=) 5: ImNZpsa6Qki4_mxVHQGlcr4kMEQ.roa (hash: I3CjyfAyGoz6eUw60S189BQgoco56UfaN83Q2MGH6pc=) 6: OMwUdd8NFWACgY3Z5BMinuibCJs.roa (hash: 1JFs3F/ZAfJCU0enUzYcjIt3Pm3WK2WXapsiBemqozw=) 7: UqhlvWkaBHpdMA2X5mK7PYvr73g.roa (hash: 3LF7DHKsmKIBhvNWwdxzesF61GnLC1OyzURk24kyRrY=) 8: _2RAZTcGLPFkH36FpgDCKfnf69o.roa (hash: rWOaI8bHCSu6JvqiR5iiLvp9ktf9nPCTMOxrv5N2Fyk=) 9: cPmxat8v0xmIhZkitEV0gd1-70A.crl (hash: S3f3rjprJEA7QP7iHXRbIeVwEniSNq1dP45x7B70T9Q=) 10: eVSIDMAZY-kT2DZRZqgXMHaitwQ.roa (hash: chJ6RD2ugkEX98xK/EECES6mtY8fJGLBHoxqwzU3X2E=) 11: lKJHBLJ9RMfJhZ1dnvQ2nPJbx94.roa (hash: FYcFbj0a1er1XVqqA294XY1flix7Ey5BVF1g/9vPIp0=) 12: qKYVM3P93nRLVm1u2UrwJZv55bk.roa (hash: KSRsXe0OKgKTS1RVQSoIU/On2UiXlk0V9ZkfCB9F0RQ=) 13: w_Pn5UoPp_w_0Elwx_ELMjD_2Ks.roa (hash: s+y/SVot+iUKXgYYFnL92VNA36fCH2OVcOc0A7/r+sg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:3c:ea:d7:09:f0:a4:16:4c:79:da:cf:6e:5e:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=70f9b16adf2fd31988859922b4457481dd7eef40 Validity Not Before: Nov 22 01:00:12 2024 GMT Not After : Nov 23 01:00:12 2024 GMT Subject: CN=247347dca6f02eea0e6a99dc9e4f1015fa6de9af Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:68:06:f0:c9:0e:af:3e:fa:8f:e2:b5:1c:eb: 16:38:4b:98:fd:9f:4f:bd:e1:91:d2:9a:f0:89:31: 15:4e:c4:e9:eb:51:04:53:e9:f4:5f:52:32:c2:cb: 19:93:dc:ce:b3:64:1b:e3:cf:35:c1:5c:01:68:49: e7:ab:18:00:c2:2b:72:b7:60:fb:f4:30:71:08:cb: 58:c7:86:6d:12:84:ff:4f:f2:86:fa:e0:56:4b:7f: 49:d8:18:83:9d:70:7f:84:79:7e:bf:fb:e7:b9:05: dc:cf:ad:8e:90:90:b8:cc:f0:01:31:fd:55:a6:26: bc:5c:14:83:6d:2a:00:6a:35:98:77:9a:a9:bd:0c: 16:20:a0:88:64:34:b6:15:45:fd:c9:99:4e:a3:4a: 32:1a:3c:42:3c:1d:3a:d7:df:96:33:9f:bb:60:53: 3c:f5:21:db:d9:3f:c9:ca:81:aa:01:3b:f6:9f:5d: d9:52:fd:8d:4a:5d:f9:1c:d8:c5:07:f9:e8:3c:bd: 62:d6:70:40:86:be:cd:24:89:df:de:71:16:37:7a: e4:57:f1:37:11:6c:fb:c3:f5:3d:e0:63:22:0f:7f: 28:1f:dc:5b:c8:fa:d7:3d:83:b4:b8:12:80:f9:c3: 5c:b8:cb:1f:a3:00:d8:f8:bb:fc:92:d3:1c:ae:6e: 64:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:73:47:DC:A6:F0:2E:EA:0E:6A:99:DC:9E:4F:10:15:FA:6D:E9:AF X509v3 Authority Key Identifier: keyid:70:F9:B1:6A:DF:2F:D3:19:88:85:99:22:B4:45:74:81:DD:7E:EF:40 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cPmxat8v0xmIhZkitEV0gd1-70A.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/956db9-c8f7-4b9f-a56e-bc6db7248add/1/cPmxat8v0xmIhZkitEV0gd1-70A.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5c:48:34:b9:b4:33:6e:a2:58:38:9e:3a:57:df:c3:67:59:6a: b4:6d:1d:f5:73:44:ff:17:4f:0e:2b:ea:d4:c2:fc:be:8a:1a: 79:e5:e2:1d:a5:49:6a:5a:2b:43:86:eb:41:a5:b5:ce:4e:47: 6d:7f:32:1c:b7:4c:1f:a7:6f:8d:ec:1f:2c:c0:0b:b8:f9:ca: 54:11:b2:93:e6:e9:49:ee:ad:76:12:44:4d:25:65:d6:eb:aa: 14:5e:58:a4:16:96:0d:1a:c1:ce:8b:a3:31:89:a5:62:50:fc: 31:c1:f1:cb:86:89:b0:75:9e:d6:89:bb:5e:79:50:b7:81:16: c7:94:63:d1:1a:18:ff:c8:1c:4c:c4:76:d9:a0:cd:0b:8b:ac: 74:ae:38:46:1f:13:7a:88:ca:d1:85:17:1e:3e:4f:a4:74:2b: fa:61:74:de:15:2e:48:cb:92:2f:d8:5f:cf:fb:96:20:6b:8c: 2b:1c:73:6c:6b:58:54:b5:83:5c:75:89:c4:28:e5:7f:62:45: 49:b1:af:60:28:05:42:8c:d6:eb:95:70:66:c5:cf:e3:fd:ed: b0:eb:7e:4f:c1:8b:e9:bf:35:74:1f:48:91:47:a8:14:c7:11: 3c:a2:fc:40:35:e1:44:2e:30:57:10:87:a6:8f:94:48:a4:5b: 61:2c:e8:ab -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYjzq1wnwpBZMedrPbl5KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDcwZjliMTZhZGYyZmQzMTk4ODg1OTkyMmI0NDU3NDgxZGQ3 ZWVmNDAwHhcNMjQxMTIyMDEwMDEyWhcNMjQxMTIzMDEwMDEyWjAzMTEwLwYDVQQD EygyNDczNDdkY2E2ZjAyZWVhMGU2YTk5ZGM5ZTRmMTAxNWZhNmRlOWFmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmgG8MkOrz76j+K1HOsWOEuY/Z9P veGR0prwiTEVTsTp61EEU+n0X1IywssZk9zOs2Qb4881wVwBaEnnqxgAwityt2D7 9DBxCMtYx4ZtEoT/T/KG+uBWS39J2BiDnXB/hHl+v/vnuQXcz62OkJC4zPABMf1V pia8XBSDbSoAajWYd5qpvQwWIKCIZDS2FUX9yZlOo0oyGjxCPB0619+WM5+7YFM8 9SHb2T/JyoGqATv2n13ZUv2NSl35HNjFB/noPL1i1nBAhr7NJInf3nEWN3rkV/E3 EWz7w/U94GMiD38oH9xbyPrXPYO0uBKA+cNcuMsfowDY+Lv8ktMcrm5k+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCRzR9ym8C7qDmqZ3J5PEBX6bemvMB8GA1UdIwQY MBaAFHD5sWrfL9MZiIWZIrRFdIHdfu9AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUt YmM2ZGI3MjQ4YWRkLzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC81Zi85NTZkYjktYzhmNy00YjlmLWE1NmUtYmM2ZGI3MjQ4YWRk LzEvY1BteGF0OHYweG1JaFpraXRFVjBnZDEtNzBBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXEg0ubQz bqJYOJ46V9/DZ1lqtG0d9XNE/xdPDivq1ML8vooaeeXiHaVJalorQ4brQaW1zk5H bX8yHLdMH6dvjewfLMALuPnKVBGyk+bpSe6tdhJETSVl1uuqFF5YpBaWDRrBzouj MYmlYlD8McHxy4aJsHWe1om7XnlQt4EWx5Rj0RoY/8gcTMR22aDNC4usdK44Rh8T eojK0YUXHj5PpHQr+mF03hUuSMuSL9hfz/uWIGuMKxxzbGtYVLWDXHWJxCjlf2JF SbGvYCgFQozW65VwZsXP4/3tsOt+T8GL6b81dB9IkUeoFMcRPKL8QDXhRC4wVxCH po+USKRbYSzoqw== -----END CERTIFICATE-----Generated at Fri Nov 22 09:50:35 2024 by rpki-client on console-ams.rpki-client.org