$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft File: rfSRSIp82ESKQglFhxwLmWctxm4.mft (raw, json) Hash identifier: ropBzSkYZy+Ao2bMOBNgG92Mlf47YCptoHjfZ8j6yUg= Subject key identifier: 59:80:E3:09:98:2C:FF:D9:03:06:CB:D9:F2:EB:FA:31:E3:DF:A5:50 Authority key identifier: AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E Certificate issuer: /CN=adf491488a7cd8448a420945871c0b99672dc66e Certificate serial: 019356BF9B4A2DE79B52396AF75828785B77 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft Manifest number: 1529 Signing time: Sat 23 Nov 2024 02:00:17 +0000 Manifest this update: Sat 23 Nov 2024 02:00:17 +0000 Manifest next update: Sun 24 Nov 2024 02:00:17 +0000 Files and hashes: 1: 8cewFw2Ya_Xty0L56n6T8K_yHuY.roa (hash: EOf9GOdSZWxxi0yz8EzaSRDQUy8IlAJo1LcYK2qCQzs=) 2: Gduot1mSMk5blfCeQrcWqepCmso.roa (hash: rv1EQrtK3bT34xjB0gmBgh6Jx9PU1UlJIwschtUWfdE=) 3: KkzZYCxeWj4Im2W7LvYsE7PQvfg.roa (hash: /yTBAeo0jaFzebaPKppGmHP6XiTMuKrquIL5AK+NVlo=) 4: Lcn_ax5fqbmvAtCicR0Veskwzvs.roa (hash: zVQ22j/NAyINRuhQ1hlD4Nai/I5FHdqDxDdIA7HvFdA=) 5: Q9UpkFRKDMsDL3pib0Mlb-Lo1m4.roa (hash: 3a+OzjwV6ZWS6ceNI7t9rGiMekHtH00gUYEsPFOcCRI=) 6: ZkrwdpP0bg8c8HJ8lGblkkax-So.roa (hash: YDdRD19jLF9KlvIb73aX0vW3vsSWBXLvv98q1gpR5sI=) 7: hXGGb5Ji0ggYGlx7VB8wK5ioXQk.roa (hash: zNw/B88XzIT9hhxPO3vMysF5YLzAfJ8Lxz/pLWCHV/o=) 8: huGx7ZCw10nCfq_YBoAbwzCRORc.roa (hash: UKNpvkXVBGsbWA05tP1A97ZVijUBTesn7XA9HJhTxyw=) 9: mJLOFQAaZoC1HhgZ6yZHFCA_Iy8.roa (hash: LvGONG3NXFMqKdYofIOfY/9ZQOnIJeRKK6eMLaqfjFA=) 10: rfSRSIp82ESKQglFhxwLmWctxm4.crl (hash: JZcpWzr1OpqYkMU+jpiYi9XbnR3pMlcRWUu3dxOwxgw=) 11: zK-FiRk6lWeoDkFhJy9Z2gPiOvc.roa (hash: eK+mWy+BUFxRDk24BwhZ9fAKInB/Yg9Tv47Z94MNVdg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:56:bf:9b:4a:2d:e7:9b:52:39:6a:f7:58:28:78:5b:77 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=adf491488a7cd8448a420945871c0b99672dc66e Validity Not Before: Nov 23 02:00:17 2024 GMT Not After : Nov 24 02:00:17 2024 GMT Subject: CN=5980e309982cffd90306cbd9f2ebfa31e3dfa550 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:13:1d:fa:af:ef:9d:dd:4b:a5:2b:6c:4f:d8: 6c:e7:ce:3a:39:6b:a7:c2:ea:61:d5:cf:c2:e1:af: 3f:2a:58:1e:dd:d1:b1:16:7f:0a:19:39:16:a8:31: 81:79:80:75:d3:d4:df:d3:58:e4:19:e8:ec:bc:77: 90:e7:e5:4a:d0:e0:9e:f2:0d:74:6c:b1:1a:24:62: 20:66:34:cc:ed:bc:c6:93:73:81:d0:59:40:bb:a0: 65:5c:09:7a:67:ff:c8:f4:50:22:9b:7b:42:6a:09: c1:26:4e:f3:4c:43:20:a8:b9:2a:06:bc:46:a7:cd: ff:dc:7d:ff:c6:4c:01:67:69:5c:e5:55:3a:60:21: e2:ff:d8:21:9f:c7:3b:7c:71:20:5c:29:ec:f8:19: 2c:b4:06:0a:33:ee:23:94:05:6a:c6:c1:78:ef:a8: f1:09:61:a5:44:e7:64:70:cb:ca:4a:5f:aa:86:b6: 49:70:a1:7d:c7:77:6d:39:f4:fc:39:be:d0:6f:dc: a5:22:ee:1e:52:62:da:61:64:34:0b:51:2d:82:2e: 2d:0c:0a:5a:f1:0f:c8:47:04:08:b1:ca:c1:77:ed: 0c:e0:c0:5b:65:3b:4e:ab:df:2f:ed:6d:3d:ed:9b: ed:74:2a:a3:ab:d9:9a:0f:47:cb:1b:34:50:e2:a9: 46:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:80:E3:09:98:2C:FF:D9:03:06:CB:D9:F2:EB:FA:31:E3:DF:A5:50 X509v3 Authority Key Identifier: keyid:AD:F4:91:48:8A:7C:D8:44:8A:42:09:45:87:1C:0B:99:67:2D:C6:6E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rfSRSIp82ESKQglFhxwLmWctxm4.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/72/715d15-2810-4827-8dbd-0bee06126b1a/1/rfSRSIp82ESKQglFhxwLmWctxm4.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption be:01:66:99:75:a2:ba:ed:20:62:cc:8d:ce:4f:12:24:85:a3: f1:d6:95:73:d7:ec:f6:51:78:57:c4:6d:3c:ed:80:fb:42:de: 47:38:fb:1e:27:e4:ae:ec:ba:42:e2:af:eb:a5:ae:42:1f:9e: 6b:dc:85:ea:38:7c:15:0f:40:a8:5b:be:34:7d:d0:c0:fa:9b: ac:a0:f5:05:26:f4:bd:33:11:78:37:08:00:a2:38:1d:7d:f5: 63:de:f0:5c:50:b2:71:61:7c:7c:58:c4:d8:33:52:93:66:c7: 67:d5:7c:82:95:8d:e1:e2:6d:15:35:6b:7f:7e:68:39:a9:32: 04:38:03:29:31:e1:9d:49:41:f1:60:de:62:ee:b8:07:51:99: 69:96:4d:39:de:11:fe:f3:99:fe:91:d8:32:9e:ca:3e:9b:ba: ac:b0:be:4f:de:cc:2c:27:04:b6:fc:4e:94:e0:48:58:57:92: f7:92:a3:03:08:ab:c9:8a:3d:71:79:10:d9:99:8b:f9:41:d2: 0f:ef:d5:59:50:d8:18:64:13:0e:dc:9a:fe:48:2f:55:f6:16: 73:81:f6:97:54:6f:f6:00:81:01:f7:93:48:93:24:8e:0a:38: bc:55:a4:f9:a5:17:4e:a9:e3:f5:1d:96:2b:d1:32:3b:03:2d: c6:82:fc:67 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNWv5tKLeebUjlq91goeFt3MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkZjQ5MTQ4OGE3Y2Q4NDQ4YTQyMDk0NTg3MWMwYjk5Njcy ZGM2NmUwHhcNMjQxMTIzMDIwMDE3WhcNMjQxMTI0MDIwMDE3WjAzMTEwLwYDVQQD Eyg1OTgwZTMwOTk4MmNmZmQ5MDMwNmNiZDlmMmViZmEzMWUzZGZhNTUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuBMd+q/vnd1LpStsT9hs5846OWun wuph1c/C4a8/Klge3dGxFn8KGTkWqDGBeYB109Tf01jkGejsvHeQ5+VK0OCe8g10 bLEaJGIgZjTM7bzGk3OB0FlAu6BlXAl6Z//I9FAim3tCagnBJk7zTEMgqLkqBrxG p83/3H3/xkwBZ2lc5VU6YCHi/9ghn8c7fHEgXCns+BkstAYKM+4jlAVqxsF476jx CWGlROdkcMvKSl+qhrZJcKF9x3dtOfT8Ob7Qb9ylIu4eUmLaYWQ0C1Etgi4tDApa 8Q/IRwQIscrBd+0M4MBbZTtOq98v7W097ZvtdCqjq9maD0fLGzRQ4qlGHQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFmA4wmYLP/ZAwbL2fLr+jHj36VQMB8GA1UdIwQY MBaAFK30kUiKfNhEikIJRYccC5lnLcZuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQt MGJlZTA2MTI2YjFhLzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83Mi83MTVkMTUtMjgxMC00ODI3LThkYmQtMGJlZTA2MTI2YjFh LzEvcmZTUlNJcDgyRVNLUWdsRmh4d0xtV2N0eG00LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvgFmmXWi uu0gYsyNzk8SJIWj8daVc9fs9lF4V8RtPO2A+0LeRzj7Hifkruy6QuKv66WuQh+e a9yF6jh8FQ9AqFu+NH3QwPqbrKD1BSb0vTMReDcIAKI4HX31Y97wXFCycWF8fFjE 2DNSk2bHZ9V8gpWN4eJtFTVrf35oOakyBDgDKTHhnUlB8WDeYu64B1GZaZZNOd4R /vOZ/pHYMp7KPpu6rLC+T97MLCcEtvxOlOBIWFeS95KjAwiryYo9cXkQ2ZmL+UHS D+/VWVDYGGQTDtya/kgvVfYWc4H2l1Rv9gCBAfeTSJMkjgo4vFWk+aUXTqnj9R2W K9EyOwMtxoL8Zw== -----END CERTIFICATE-----Generated at Sat Nov 23 04:43:12 2024 by rpki-client on console-ams.rpki-client.org