$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft File: gfpI9AvIRUDEa9I76bkIl6oYT00.mft (raw, json) Hash identifier: LMRJPXY5TmQnZVBobuJCFPQp1wFKN5aZtUdqR+UJsrU= Subject key identifier: 9E:C8:EF:8C:BD:18:BF:21:1C:59:2A:E0:66:FD:59:18:FD:5A:29:BC Authority key identifier: 81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D Certificate issuer: /CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Certificate serial: 019029825C8EA082B3A33ED82908218DE3E2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft Manifest number: 10CF Signing time: Tue 18 Jun 2024 04:02:07 +0000 Manifest this update: Tue 18 Jun 2024 04:02:07 +0000 Manifest next update: Wed 19 Jun 2024 04:02:07 +0000 Files and hashes: 1: 2mRuof242mnAxA1NsqFDYEgtgJM.roa (hash: akdIvn73z9cElZ4t2Siuwk2b/j8pZVxISmUUe1lFLvI=) 2: EHxwoe99Mw6q85DlbayyP2L7kt8.roa (hash: zrCh4fcIhwNS7uTU4beR9on89mF5rKJQbZpKIgLmxdw=) 3: EyGqTLXc2ydWjyvhkkiyqi8ArhA.roa (hash: 5jWUC0nXWyuda/cqZ0Ox9ZX+hgjP+DWd/QWyV6ItBf4=) 4: JNiBqjiZ8o0fEuCExZ1WzPg1H04.roa (hash: 2Fp9KPMsFl+AjIYLOyygEIe6amosXgl14EI9/qi38EM=) 5: NQ_0RGcgko8xWuS2A3ISkmOMAWU.roa (hash: B5+RzFrt9L241eaG3ogx7IBafNpm9tdDowgBqPaJD4c=) 6: Xlcf-9Wledgl1z9cCjZ8CUpKYmU.roa (hash: tReKZhv1IWlK1n8uwjph5+dBy1lxrpuGLdUfCNZSL0o=) 7: gfpI9AvIRUDEa9I76bkIl6oYT00.crl (hash: IKKNiXe/q5knGI9YG4W3zzqvbKHwkbrNLI3HXxM/dkc=) 8: ilatJaOQanuH236kCBA16WvHFME.roa (hash: 2OMQzZNr6nNXTx0LdHoktq/m3hqjVRmzowvREHDz2lU=) 9: mNtMaj40L_g69mB1oQhCEzLpCdM.roa (hash: qzsb0NAx2zGbYRZ1ax1gMSbK7MH/852sN7b7maMxteA=) 10: vS99QXBJt8P5ApGW6Dqxt4c25VQ.roa (hash: 8PJYsiMYX8bZ2hjqMu9DEa5pKl+I+g+TmnsPLznLNMs=) 11: zITW6YxGrwiJv01_mujSvgsfE6Y.roa (hash: I4KHvXcdEGXNCK1gyqNeVJL3djX5sq2UOaeO+5Xd2sw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 19 Jun 2024 04:02:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:90:29:82:5c:8e:a0:82:b3:a3:3e:d8:29:08:21:8d:e3:e2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81fa48f40bc84540c46bd23be9b90897aa184f4d Validity Not Before: Jun 18 04:02:07 2024 GMT Not After : Jun 19 04:02:07 2024 GMT Subject: CN=9ec8ef8cbd18bf211c592ae066fd5918fd5a29bc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:3c:08:08:1e:77:09:10:73:ba:29:a9:a9:74: 9b:4c:c8:55:14:21:ba:cc:a3:43:f4:0a:32:42:97: 71:cf:f3:37:2f:f7:4c:5e:61:f1:43:de:97:b5:86: 47:f3:76:1d:40:52:65:b2:c0:77:7a:2c:11:60:f8: 3c:dc:ff:be:a7:57:91:37:d2:59:7a:54:bd:c0:4b: 81:2d:1d:db:a0:1b:48:b8:16:16:39:40:8f:7c:78: f6:12:f6:0c:49:fe:50:ef:16:f1:1d:bc:3d:84:48: 6b:d9:da:73:72:78:0d:af:be:2c:aa:e2:81:a9:64: 39:db:03:03:f6:95:fd:84:62:4b:ba:0c:23:aa:f3: 10:d8:e1:29:ad:33:e3:fe:51:3e:cd:b0:07:74:67: 96:d7:60:2d:ae:ed:fa:fe:fe:f7:c2:0b:f8:5c:c6: ff:39:3a:c9:84:96:85:b4:aa:54:9f:f8:41:30:88: 31:3d:a1:2b:22:7a:57:b4:48:b5:f1:13:da:f7:90: 18:2e:6b:97:10:1f:7e:0b:69:d2:8f:3c:02:4e:96: fd:29:86:95:fc:ab:33:06:6f:55:38:fd:db:2d:88: e7:39:84:47:d8:45:ff:df:6d:db:4d:48:ad:e3:53: ff:84:db:e5:c7:e8:8c:7e:6e:5f:a2:d4:5a:df:00: df:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:C8:EF:8C:BD:18:BF:21:1C:59:2A:E0:66:FD:59:18:FD:5A:29:BC X509v3 Authority Key Identifier: keyid:81:FA:48:F4:0B:C8:45:40:C4:6B:D2:3B:E9:B9:08:97:AA:18:4F:4D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gfpI9AvIRUDEa9I76bkIl6oYT00.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/73/146078-f9b2-4163-af1a-8e93cb5c5355/1/gfpI9AvIRUDEa9I76bkIl6oYT00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 21:93:75:28:ea:1b:ab:47:81:bf:cf:46:1e:03:15:c2:fe:e6: bc:a5:51:c3:f2:4e:31:42:73:a6:a2:87:2f:1d:9e:8e:d3:79: 39:1c:b0:2c:81:81:8a:79:b4:98:c1:1a:80:82:6a:b5:3f:1f: b8:9b:b4:71:39:0b:b0:df:82:cb:a3:b5:8b:6a:af:57:6d:e8: bb:0f:7c:1c:f7:37:f1:24:36:c3:66:9d:7a:db:4c:50:5d:fe: 0d:4e:1e:24:be:0d:c0:b7:f4:e6:57:93:e6:58:6c:85:b1:f9: 8c:e4:ad:e9:44:47:cc:6b:d1:7c:8d:40:41:82:b0:a5:9d:72: ea:0b:18:6b:ef:60:21:09:56:97:97:17:17:05:26:a9:0a:ac: a5:3b:1d:6f:53:e7:e7:10:81:7c:d8:74:c2:b0:49:fd:e5:f8: e3:ea:a5:38:d0:b0:f8:ae:79:22:58:cd:50:7b:74:88:d8:9e: 2f:62:30:96:df:0d:df:75:9b:0b:d3:fb:ce:86:c8:a2:36:b9: 8e:22:29:df:49:f0:3b:29:95:a5:15:90:a4:01:b2:18:56:3f: 7a:b7:a2:29:a7:09:66:a8:3f:4a:d7:b8:a1:e2:f7:25:d4:c7: 95:2b:a6:6a:53:a4:db:02:f6:45:6e:ac:f5:df:2e:08:56:d6: a8:4a:09:b9 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZApglyOoIKzoz7YKQghjePiMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgxZmE0OGY0MGJjODQ1NDBjNDZiZDIzYmU5YjkwODk3YWEx ODRmNGQwHhcNMjQwNjE4MDQwMjA3WhcNMjQwNjE5MDQwMjA3WjAzMTEwLwYDVQQD Eyg5ZWM4ZWY4Y2JkMThiZjIxMWM1OTJhZTA2NmZkNTkxOGZkNWEyOWJjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3TwICB53CRBzuimpqXSbTMhVFCG6 zKND9AoyQpdxz/M3L/dMXmHxQ96XtYZH83YdQFJlssB3eiwRYPg83P++p1eRN9JZ elS9wEuBLR3boBtIuBYWOUCPfHj2EvYMSf5Q7xbxHbw9hEhr2dpzcngNr74squKB qWQ52wMD9pX9hGJLugwjqvMQ2OEprTPj/lE+zbAHdGeW12Atru36/v73wgv4XMb/ OTrJhJaFtKpUn/hBMIgxPaErInpXtEi18RPa95AYLmuXEB9+C2nSjzwCTpb9KYaV /KszBm9VOP3bLYjnOYRH2EX/323bTUit41P/hNvlx+iMfm5fotRa3wDfTwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ7I74y9GL8hHFkq4Gb9WRj9Wim8MB8GA1UdIwQY MBaAFIH6SPQLyEVAxGvSO+m5CJeqGE9NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEt OGU5M2NiNWM1MzU1LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83My8xNDYwNzgtZjliMi00MTYzLWFmMWEtOGU5M2NiNWM1MzU1 LzEvZ2ZwSTlBdklSVURFYTlJNzZia0lsNm9ZVDAwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIZN1KOob q0eBv89GHgMVwv7mvKVRw/JOMUJzpqKHLx2ejtN5ORywLIGBinm0mMEagIJqtT8f uJu0cTkLsN+Cy6O1i2qvV23ouw98HPc38SQ2w2adettMUF3+DU4eJL4NwLf05leT 5lhshbH5jOSt6URHzGvRfI1AQYKwpZ1y6gsYa+9gIQlWl5cXFwUmqQqspTsdb1Pn 5xCBfNh0wrBJ/eX44+qlONCw+K55IljNUHt0iNieL2Iwlt8N33WbC9P7zobIoja5 jiIp30nwOymVpRWQpAGyGFY/ereiKacJZqg/Ste4oeL3JdTHlSumalOk2wL2RW6s 9d8uCFbWqEoJuQ== -----END CERTIFICATE-----Generated at Tue Jun 18 12:14:01 2024 by rpki-client on console-fra.rpki-client.org