$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft File: dGOVwSZyrZWJIbYrncmyvNimip8.mft (raw, json) Hash identifier: NuuAj6FH0eqsZhK6txDvy3QnioF9CkYh0DR7VmeNXJo= Subject key identifier: 91:95:06:03:1C:BF:3B:1B:F8:60:13:70:03:5C:36:72:D0:9C:4E:11 Authority key identifier: 74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F Certificate issuer: /CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Certificate serial: 0193542C65475C88E51274950E839CC0D8C0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft Manifest number: 0BB3 Signing time: Fri 22 Nov 2024 14:00:15 +0000 Manifest this update: Fri 22 Nov 2024 14:00:15 +0000 Manifest next update: Sat 23 Nov 2024 14:00:15 +0000 Files and hashes: 1: 5WVBdwOfzwgOUyZfq0m4R4HdWQI.roa (hash: 0/+EPg8UNvoNELEKe0Cr6PjreVjY/NVFskb5qDwGyJc=) 2: DgGUdPH4yyo9Vx65CiZdtzd3798.roa (hash: X4MgidQc/KEcOswc25QGUR5QQIhKifKiJUeVy65QCH4=) 3: GP4nkxdJBhoHw8zRoYJES80oCY0.roa (hash: g2FExQvO4y2KvymxXYRcarb+RJW0ct8ZUDa1tlm1IyU=) 4: IvFJSm75h3GwG8trK74Q2PdIoGY.roa (hash: bIDnN3VdK0bQwDA8fs+PjdiPjmWm5Y9oCibHXjZf/4E=) 5: NSQENbaUV-eBYjgBvOkRiP8j4Oo.roa (hash: wF4ku7o0B4KalOgauhLqFBoaN2au3VGSpsLO22KKXjs=) 6: P64zczG9_fPLEGRbBL4JodHkeaw.roa (hash: l89z0Hs2bssw7Rq7oghjDJfZA8NTWwTkC8W/BFhmwlU=) 7: Xa_--512AXu8oQGuf95npJYWMXk.roa (hash: A9KMH/dmI4aRV/CVgD5uUkhbEHonAFiB+bHlP4dCpRs=) 8: b_N0TmgyFn4nxtsiw2SAHOov8_8.roa (hash: zWKc3uih3GbGQw4yJcvgK3riIEmsYLJcr+CJCdmmfM8=) 9: dGOVwSZyrZWJIbYrncmyvNimip8.crl (hash: g38M8Cay+xcfXuEHK3Q+PhFo89uyRmbmN6BMZHthuK0=) 10: ilis1cd02WWZjXvKo4g2_X6rJE8.roa (hash: aBCiNlDfzf4crhinK6OkrSM3Oe4PL581BiAO+RYHMT0=) 11: mUlWun6okGpXWk8DJXV0ksak18c.roa (hash: JExaI5wWNsGuu3cK5IsS5PrW6vNnJRD2oshT5e/YVLc=) 12: omWgxlKDLGmJMR82gaFLLnsHa1M.roa (hash: C3fBG40bmEX0oIkMeOaLTyXq/3PezvD1oheJntALBac=) 13: sbB9abaNNShwCtjBi7sCXMQHHH8.roa (hash: u9apZm03A1D7nkJyje6bzYTGPJFAOqU+2ZXs7HC+tqE=) 14: tblgrNo8wgog6QKBxfAgOyEF-Cc.roa (hash: XUCk9N0vRZNn1v55c59lJXML9/2fV/MhTpZ+waFPpXY=) 15: wUXpSMF0Bnsox9S71vCi0cuf-FQ.roa (hash: PBQa0RvUJ8qvQ3qh4O1IbiFlZi9YSOC6kCbf43wr7kE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:54:2c:65:47:5c:88:e5:12:74:95:0e:83:9c:c0:d8:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=746395c12672ad958921b62b9dc9b2bcd8a68a9f Validity Not Before: Nov 22 14:00:15 2024 GMT Not After : Nov 23 14:00:15 2024 GMT Subject: CN=919506031cbf3b1bf8601370035c3672d09c4e11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:b1:84:fb:6b:aa:c0:a2:d0:b5:30:56:03:3e: 76:1d:6c:3e:a1:14:d7:c6:3d:c7:a0:8a:32:98:2f: 2d:1c:18:cc:7b:9d:7c:08:f8:a3:5f:f9:a5:e7:21: 21:91:4a:2e:83:04:e1:46:91:93:53:63:4e:65:32: 61:c3:9d:0f:6f:c9:d7:e1:4a:7b:bf:a2:64:b9:b6: 41:2d:ed:b5:67:87:41:71:93:23:d3:d7:b1:72:be: c5:62:29:21:fe:35:45:43:49:cd:28:68:5f:dd:5c: 41:84:23:73:e6:33:14:eb:73:23:46:01:e3:b5:51: f0:8c:c7:89:e9:ac:9d:b5:4a:42:fd:6f:cd:37:7d: b7:e3:90:5f:6a:4e:b5:bc:30:0b:27:ca:ac:b1:0c: a8:74:c1:90:96:7d:39:96:5d:a3:84:c8:70:a4:ac: 2b:b1:f1:4b:4d:41:b3:d9:77:b2:4f:bf:28:45:9f: 04:ff:94:23:23:33:09:c1:7c:26:fa:20:00:13:cc: 40:20:2a:04:ed:60:41:cd:03:3d:fc:0e:51:4d:e8: d6:e2:7c:e0:16:df:c7:e0:f2:1a:c5:42:e7:ff:8a: 6f:44:15:1e:7b:b7:cb:16:07:69:ce:9a:3e:e8:e3: e0:62:ee:52:92:d9:64:63:f1:aa:01:31:6f:bb:8c: 18:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:95:06:03:1C:BF:3B:1B:F8:60:13:70:03:5C:36:72:D0:9C:4E:11 X509v3 Authority Key Identifier: keyid:74:63:95:C1:26:72:AD:95:89:21:B6:2B:9D:C9:B2:BC:D8:A6:8A:9F X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dGOVwSZyrZWJIbYrncmyvNimip8.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/62/9e2351-8dd0-4b70-a5fc-fb774abdfac2/1/dGOVwSZyrZWJIbYrncmyvNimip8.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:3f:a1:b2:55:7e:b1:d7:6b:3c:e0:71:30:f7:b6:59:ec:92: 85:1b:48:07:ff:0f:05:aa:b8:5b:09:6c:bb:3e:d4:65:bb:35: 12:e2:be:5a:d7:fd:e8:8a:3c:ea:e0:bc:f3:cb:fc:f0:e8:2b: b9:31:5b:78:71:dc:d6:98:e1:b4:41:13:cd:39:37:f2:9d:25: 0d:41:96:18:75:22:ec:55:54:91:7e:b9:34:fc:3d:a3:fe:cc: c0:21:e3:d1:be:58:93:f3:a9:b0:67:02:8f:1c:5e:44:5f:f2: 92:de:a6:c1:a3:13:cf:fa:8a:b9:a5:0d:b1:59:23:02:80:b0: ba:ed:fd:0f:96:7c:99:76:62:04:68:ca:29:c5:16:30:db:a4: 42:60:21:b0:0d:dd:a1:18:75:f1:18:18:49:34:d7:52:99:e5: 32:dc:5b:65:5f:a6:35:f0:7b:89:20:13:6b:ef:2f:df:24:29: cd:99:fe:44:80:75:e0:63:a4:4a:f9:9b:1b:99:80:09:5e:08: 4f:3e:ce:24:b2:35:c8:d1:d1:6d:af:b1:c0:6b:af:79:2e:34: 90:1e:28:b1:37:fd:51:c5:23:fb:f4:b7:e1:07:05:d1:de:38: 51:56:b4:91:93:b8:3b:fa:44:27:e7:7e:f8:fd:27:aa:f7:a5: bf:95:18:df -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNULGVHXIjlEnSVDoOcwNjAMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDc0NjM5NWMxMjY3MmFkOTU4OTIxYjYyYjlkYzliMmJjZDhh NjhhOWYwHhcNMjQxMTIyMTQwMDE1WhcNMjQxMTIzMTQwMDE1WjAzMTEwLwYDVQQD Eyg5MTk1MDYwMzFjYmYzYjFiZjg2MDEzNzAwMzVjMzY3MmQwOWM0ZTExMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7GE+2uqwKLQtTBWAz52HWw+oRTX xj3HoIoymC8tHBjMe518CPijX/ml5yEhkUougwThRpGTU2NOZTJhw50Pb8nX4Up7 v6JkubZBLe21Z4dBcZMj09excr7FYikh/jVFQ0nNKGhf3VxBhCNz5jMU63MjRgHj tVHwjMeJ6aydtUpC/W/NN32345Bfak61vDALJ8qssQyodMGQln05ll2jhMhwpKwr sfFLTUGz2XeyT78oRZ8E/5QjIzMJwXwm+iAAE8xAICoE7WBBzQM9/A5RTejW4nzg Ft/H4PIaxULn/4pvRBUee7fLFgdpzpo+6OPgYu5SktlkY/GqATFvu4wYMwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJGVBgMcvzsb+GATcANcNnLQnE4RMB8GA1UdIwQY MBaAFHRjlcEmcq2ViSG2K53JsrzYpoqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMt ZmI3NzRhYmRmYWMyLzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82Mi85ZTIzNTEtOGRkMC00YjcwLWE1ZmMtZmI3NzRhYmRmYWMy LzEvZEdPVndTWnlyWldKSWJZcm5jbXl2TmltaXA4LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoj+hslV+ sddrPOBxMPe2WeyShRtIB/8PBaq4Wwlsuz7UZbs1EuK+Wtf96Io86uC888v88Ogr uTFbeHHc1pjhtEETzTk38p0lDUGWGHUi7FVUkX65NPw9o/7MwCHj0b5Yk/OpsGcC jxxeRF/ykt6mwaMTz/qKuaUNsVkjAoCwuu39D5Z8mXZiBGjKKcUWMNukQmAhsA3d oRh18RgYSTTXUpnlMtxbZV+mNfB7iSATa+8v3yQpzZn+RIB14GOkSvmbG5mACV4I Tz7OJLI1yNHRba+xwGuveS40kB4osTf9UcUj+/S34QcF0d44UVa0kZO4O/pEJ+d+ +P0nqvelv5UY3w== -----END CERTIFICATE-----Generated at Fri Nov 22 18:10:36 2024 by rpki-client on console-fra.rpki-client.org