$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft File: FL7g69BrS4EvnhNxbiXxw8PRTMY.mft (raw, json) Hash identifier: iIL+C1JpREQp8gY/XGTfS3fqEE+8u1TofHiFA5ySRgQ= Subject key identifier: 32:02:DD:40:0E:52:9D:92:96:B9:1A:2A:13:84:7C:AC:65:63:F4:68 Authority key identifier: 14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 Certificate issuer: /CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Certificate serial: 019350BFF87095DBE3F4686CFA52944C0438 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft Manifest number: 1381 Signing time: Thu 21 Nov 2024 22:02:58 +0000 Manifest this update: Thu 21 Nov 2024 22:02:58 +0000 Manifest next update: Fri 22 Nov 2024 22:02:58 +0000 Files and hashes: 1: FL7g69BrS4EvnhNxbiXxw8PRTMY.crl (hash: RvyZLfEZJH989nKsnqXKi71JtO7v1C45rNRkmSU4dCM=) 2: WssWNJUk1v54EQuLzE6D-3WGcm8.roa (hash: qPqiAzeowN08c61EumYxAZpKoWVApqP0lyeqz1drEJU=) 3: YXbGGJ0by2a1Nwce_pA5gxu9FOY.roa (hash: MJGYRo64TymurEfOPbqhe/SrvoKQh1997WHry56JIUQ=) 4: ZxVaSBLvppU3BakqJmfT8wLD7GE.roa (hash: em9K2eQHJYZMSXxi2C8440X8DuB7twWTYrmPrLC2gNM=) 5: _LvFVynugx-U1eU9u6b3_8PTisU.roa (hash: SRQgCIgiOBnBlyO2HPFTQvITGyNuvPeYbxHt7jI7Ipo=) 6: cPzzWEfI8uF5IvBSsreDretRq1w.roa (hash: MSCsMFHc256kudoTT5f8pRofoBaJLKDxv2bPTTCYlbU=) 7: ermgwkRJO3OG0okaCWvHpOS2v3Y.roa (hash: 5NP8otBs1nLDDgV6mYPY0aYpRmTgBXit3G3yB6C7xFg=) 8: f_482ydyxNzx9GswK_Ngm9M7fqg.roa (hash: /aEDvPx0B9npuHVDB6bSyjG8rxpfBxRoz15uREeoa4U=) 9: gLi7trmU_I4FQRHfEyerV8Du2A4.roa (hash: Fdb5+gnS91/ShIpzlMTLenJBLQk/2SELOLzh5+zZk0I=) 10: mkSPPHw07SsGbO4WGCEOd19dZWo.roa (hash: NI0rjJ3cWmxjoc/+hkUjD0/gAj9xLMFCdbwnEnmT2Hk=) 11: n1TAH7TOenxL0jFL8-2OXKDKvps.roa (hash: UTywoTq7KumlZmXjNjCS9jnBNpizUUJYSWgHlZhkIRQ=) 12: oszc4jibPLjoL4SC3l6ARZsssM0.roa (hash: 3dJGRtW4sh/wQA5sMR76aNFCzXcFEzEbIM/coacbczQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:bf:f8:70:95:db:e3:f4:68:6c:fa:52:94:4c:04:38 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=14bee0ebd06b4b812f9e13716e25f1c3c3d14cc6 Validity Not Before: Nov 21 22:02:58 2024 GMT Not After : Nov 22 22:02:58 2024 GMT Subject: CN=3202dd400e529d9296b91a2a13847cac6563f468 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:6b:99:ae:a8:73:7f:0a:9a:1b:35:84:9a:e3: 5c:09:9d:24:8c:f2:90:10:ce:dc:bd:15:ad:35:28: 4a:85:c7:01:58:59:01:99:e3:09:41:87:dc:fa:c9: 07:78:c7:09:d2:28:42:8c:41:ff:c4:f3:bf:01:1e: 72:16:54:b5:ad:20:79:a3:3c:c0:96:52:10:6a:82: 26:fd:6d:8a:5f:10:d9:5d:a7:84:e0:a8:8e:d4:57: c8:8f:15:31:28:48:0b:45:75:67:07:fa:e2:8a:de: 84:55:bc:fe:09:52:58:92:7d:d2:f1:6d:37:c4:4f: d6:cf:e1:8f:0d:2d:cf:51:9a:5a:ac:7e:3b:fa:15: 19:30:c9:f3:9b:05:2d:ab:33:95:aa:58:06:07:9e: d9:79:46:a7:97:1e:e5:62:cb:d5:5d:b3:cc:33:b3: 2b:eb:77:49:c0:ba:36:07:97:3a:94:ae:bf:58:d8: 84:7c:e9:df:46:c8:27:33:c7:4c:7d:96:23:36:ab: 3b:9b:21:cb:c0:fa:23:0b:90:dd:8f:06:93:d3:de: e6:d0:6d:e1:9d:10:3b:b6:53:aa:37:74:d5:84:3b: fb:b3:36:94:82:9b:1d:68:c1:ac:8c:f7:3e:36:e1: b8:c9:a1:e1:66:0a:99:f9:d1:a2:0d:f3:03:ea:ec: 33:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:02:DD:40:0E:52:9D:92:96:B9:1A:2A:13:84:7C:AC:65:63:F4:68 X509v3 Authority Key Identifier: keyid:14:BE:E0:EB:D0:6B:4B:81:2F:9E:13:71:6E:25:F1:C3:C3:D1:4C:C6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FL7g69BrS4EvnhNxbiXxw8PRTMY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/65/161c3f-b83d-45b1-aa8e-d1bb6b4dd701/1/FL7g69BrS4EvnhNxbiXxw8PRTMY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:b9:f2:89:6d:86:82:28:57:f7:be:fd:64:81:ad:29:d2:d8: 56:d9:47:73:78:f4:2e:ef:7f:ee:5f:0e:eb:e1:4e:c9:25:df: 53:57:e9:72:ef:d8:c9:c4:62:a3:04:25:26:b4:d7:1c:4e:be: cf:38:9f:b0:2a:85:52:97:8b:60:15:69:96:1f:b3:a7:52:2e: 94:ca:6c:fd:67:2a:9d:12:df:57:41:c3:01:1e:a2:f3:4c:7b: f2:d8:a2:5b:c5:36:a8:30:b9:2b:53:a8:d5:e4:52:72:0d:89: 72:25:5d:67:79:77:33:ad:7f:3d:cc:ce:3d:2b:2b:8a:5f:44: c5:7d:cf:6e:99:73:12:54:69:a2:5d:b1:d8:82:f6:b4:bd:98: 2f:ab:b2:69:dc:bb:13:34:c4:8d:49:2f:cf:4f:e2:1d:9a:b5: c7:21:ad:2a:88:fb:b6:95:52:83:d7:a7:ff:9b:99:19:37:1b: e1:b8:26:46:e0:c5:29:91:fc:02:72:8b:d4:82:fd:78:15:d6: 65:d1:4e:66:2d:2c:5a:b3:6d:63:00:91:78:06:54:43:e1:df: df:b5:b1:9c:05:d7:c8:c2:0c:e8:1b:51:ef:ee:35:40:1f:63: 26:91:6e:40:79:4c:6c:b8:a1:f4:81:4c:18:76:a1:41:f5:d0: e8:f0:c5:34 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQv/hwldvj9Ghs+lKUTAQ4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE0YmVlMGViZDA2YjRiODEyZjllMTM3MTZlMjVmMWMzYzNk MTRjYzYwHhcNMjQxMTIxMjIwMjU4WhcNMjQxMTIyMjIwMjU4WjAzMTEwLwYDVQQD EygzMjAyZGQ0MDBlNTI5ZDkyOTZiOTFhMmExMzg0N2NhYzY1NjNmNDY4MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5WuZrqhzfwqaGzWEmuNcCZ0kjPKQ EM7cvRWtNShKhccBWFkBmeMJQYfc+skHeMcJ0ihCjEH/xPO/AR5yFlS1rSB5ozzA llIQaoIm/W2KXxDZXaeE4KiO1FfIjxUxKEgLRXVnB/riit6EVbz+CVJYkn3S8W03 xE/Wz+GPDS3PUZparH47+hUZMMnzmwUtqzOVqlgGB57ZeUanlx7lYsvVXbPMM7Mr 63dJwLo2B5c6lK6/WNiEfOnfRsgnM8dMfZYjNqs7myHLwPojC5DdjwaT097m0G3h nRA7tlOqN3TVhDv7szaUgpsdaMGsjPc+NuG4yaHhZgqZ+dGiDfMD6uwz2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDIC3UAOUp2SlrkaKhOEfKxlY/RoMB8GA1UdIwQY MBaAFBS+4OvQa0uBL54TcW4l8cPD0UzGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUt ZDFiYjZiNGRkNzAxLzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC82NS8xNjFjM2YtYjgzZC00NWIxLWFhOGUtZDFiYjZiNGRkNzAx LzEvRkw3ZzY5QnJTNEV2bmhOeGJpWHh3OFBSVE1ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK7nyiW2G gihX9779ZIGtKdLYVtlHc3j0Lu9/7l8O6+FOySXfU1fpcu/YycRiowQlJrTXHE6+ zzifsCqFUpeLYBVplh+zp1IulMps/WcqnRLfV0HDAR6i80x78tiiW8U2qDC5K1Oo 1eRScg2JciVdZ3l3M61/PczOPSsril9ExX3PbplzElRpol2x2IL2tL2YL6uyady7 EzTEjUkvz0/iHZq1xyGtKoj7tpVSg9en/5uZGTcb4bgmRuDFKZH8AnKL1IL9eBXW ZdFOZi0sWrNtYwCReAZUQ+Hf37WxnAXXyMIM6BtR7+41QB9jJpFuQHlMbLih9IFM GHahQfXQ6PDFNA== -----END CERTIFICATE-----Generated at Fri Nov 22 02:14:10 2024 by rpki-client on console-ams.rpki-client.org