$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft File: ORnyrZFYS6_wRnRHusj7l40fndM.mft (raw, json) Hash identifier: jD465qxEBV2hq7uZJiqn1s3P2gOP6I2cG2ztCOm6RgI= Subject key identifier: 84:21:FA:0E:91:1B:62:F3:06:39:D8:51:C8:0C:8A:A0:A4:2F:90:70 Authority key identifier: 39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 Certificate issuer: /CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Certificate serial: 01935274F3EF7BA0F20D9212EA6EF035C390 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft Manifest number: 138D Signing time: Fri 22 Nov 2024 06:00:16 +0000 Manifest this update: Fri 22 Nov 2024 06:00:16 +0000 Manifest next update: Sat 23 Nov 2024 06:00:16 +0000 Files and hashes: 1: 1b1sfeuUrI6kHZZcru0rVUPN6xs.roa (hash: 5DXVyGF9+ODXXosS3KiNDVTiRt7dAPB8oE2s8NuxB14=) 2: 7AUCOp8doWAnFtkF84ohyXaw_V8.roa (hash: 1Aa9w+YLf7szXydvZ6yQdvFkVOWBB1ppD9PDcmJ0bOM=) 3: ORnyrZFYS6_wRnRHusj7l40fndM.crl (hash: 1oUh5x+CHp+S5ypZfgmdNyqOERr3R9jCJOjQuQBF/w4=) 4: RYIPtWVXSSza31HEB8r_uZmgeTI.roa (hash: 42kcuynvlcrgmsVZFXRCGdLIO5CNKUaxgM8+2Wb840c=) 5: a4YsGT-AwRqEZqUc_gFJdMQqb1M.roa (hash: U3agAORIA0H2LAsf5q7/o3vqT0lHAYKjazdYqGzW2pY=) 6: aMcI3IXm06cgbR_KJnqGt28zZ-8.roa (hash: chb/OvRT2T3jcGSvoKb8dvp5jFoWeKhTTEO6gGR8PXU=) 7: ljErZIQ9clzEzn49eM6c8voNk-s.roa (hash: 9ntGoDtDwvb/cekg1nOWuu+4MJOEpG0mVAnyAT7jlco=) 8: nevZ6euM76WMVvW6gwVEf5P2BW4.roa (hash: SieEc8r9ZNxd7n2oeA+DFz5OR5VkyV28urJmNXP7muU=) 9: oPu2Bb91EOgjHoE2lsDern5rpiY.roa (hash: hLNPMjcO5QwKH5kggyta7ADIdAGmGXmcZpaJm5YTiT4=) 10: sfQZPpGpNeYVWXlyQqqfFO1t7t0.roa (hash: ri3ZVcjnGr/qNykNmEWEMclDO7bE40245vOX+J8H8QE=) 11: wMsOz3AXQOjBsWoWLodPOyFasfI.roa (hash: WeOKxjC6hdXry8MmMzVaE2aKLRmjlNMw2ySRYlYGpXk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:74:f3:ef:7b:a0:f2:0d:92:12:ea:6e:f0:35:c3:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3919f2ad91584baff0467447bac8fb978d1f9dd3 Validity Not Before: Nov 22 06:00:16 2024 GMT Not After : Nov 23 06:00:16 2024 GMT Subject: CN=8421fa0e911b62f30639d851c80c8aa0a42f9070 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:95:5a:f5:1e:8d:7d:38:74:43:71:a5:ee:2a: f6:cd:42:84:ae:b8:5a:5b:44:d8:ee:7b:9d:88:bd: 30:94:9b:9c:5f:c4:a0:fd:bf:42:60:c1:72:51:8b: ce:57:e1:14:1b:28:a0:99:8b:e6:a4:53:18:39:35: 33:4d:83:61:1a:c7:c8:8b:b7:6b:50:31:0b:3e:f3: 36:b9:d4:02:71:d6:b5:a2:7a:4b:43:de:0a:3b:dc: a2:24:67:fb:aa:55:cb:78:48:29:82:8f:90:83:cb: 51:41:53:18:fe:7b:f6:f4:00:34:19:6a:39:ac:2a: 08:9a:b0:c8:3f:c2:39:85:38:e6:da:c3:78:a7:c9: 12:02:ce:6a:7b:ad:01:c5:6e:77:53:7b:29:f1:6b: b3:cb:04:fa:bf:48:25:9d:7d:bc:01:3b:ca:e1:c3: 6b:2d:b7:0e:b2:90:6b:23:14:5d:48:95:2e:a0:fb: 0e:fa:28:f4:b1:da:55:e3:82:71:48:9d:78:29:b2: 13:34:0f:a9:d3:24:f9:6b:80:03:5d:f0:75:4a:17: c0:0f:52:e0:82:06:f8:64:4b:86:4f:53:f0:7c:89: 73:86:3d:f0:d0:b7:ce:22:b4:12:86:52:93:a8:f1: d2:55:71:c6:a1:4f:1b:25:e2:73:ca:b2:d2:bf:9e: 1e:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 84:21:FA:0E:91:1B:62:F3:06:39:D8:51:C8:0C:8A:A0:A4:2F:90:70 X509v3 Authority Key Identifier: keyid:39:19:F2:AD:91:58:4B:AF:F0:46:74:47:BA:C8:FB:97:8D:1F:9D:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ORnyrZFYS6_wRnRHusj7l40fndM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/75/9118e2-ae74-4c24-a775-32aa6731c291/1/ORnyrZFYS6_wRnRHusj7l40fndM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 71:fe:b8:32:ce:45:94:78:3b:06:f5:ee:f9:96:84:2f:b7:d9: 98:1a:0c:86:11:4d:b0:1e:2f:30:52:a9:ea:43:a9:a8:b2:b6: c1:73:fa:43:7b:36:75:b3:3a:86:63:3f:e7:02:fe:cf:88:43: 09:05:31:bc:94:42:97:cd:ee:ec:93:e0:2a:e9:5c:99:f6:d5: 5e:77:ca:0c:9a:89:00:be:d3:2e:91:b6:96:a9:67:98:ba:23: 80:aa:a0:7d:ef:dc:b4:3c:82:96:1b:d0:0b:77:89:1f:c7:46: 19:27:85:e9:68:9f:b0:8a:95:2b:ab:44:09:67:a2:6d:8b:9d: 5b:34:f2:16:f1:a0:37:97:12:a3:8e:80:c3:ac:22:03:07:72: c5:47:b3:cf:ba:dc:24:70:f8:9a:a1:5e:e5:9f:96:50:63:10: 5d:b7:a4:79:bf:df:58:33:8d:50:e2:e4:8c:6f:81:2c:80:b2: 3c:f0:b5:6b:b0:7e:af:df:d5:7a:a6:8e:1f:55:bb:a7:d9:be: 95:68:29:d6:b2:f5:df:05:47:6c:0e:cf:55:e3:f1:1d:d5:54: d5:d5:9d:81:9a:c2:11:30:fe:14:bf:f3:1f:8f:1e:3e:15:33: b8:95:97:66:27:9b:b1:e5:0a:21:5d:33:73:78:2f:15:85:22: ce:35:92:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdPPve6DyDZIS6m7wNcOQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDM5MTlmMmFkOTE1ODRiYWZmMDQ2NzQ0N2JhYzhmYjk3OGQx ZjlkZDMwHhcNMjQxMTIyMDYwMDE2WhcNMjQxMTIzMDYwMDE2WjAzMTEwLwYDVQQD Eyg4NDIxZmEwZTkxMWI2MmYzMDYzOWQ4NTFjODBjOGFhMGE0MmY5MDcwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmZVa9R6NfTh0Q3Gl7ir2zUKErrha W0TY7nudiL0wlJucX8Sg/b9CYMFyUYvOV+EUGyigmYvmpFMYOTUzTYNhGsfIi7dr UDELPvM2udQCcda1onpLQ94KO9yiJGf7qlXLeEgpgo+Qg8tRQVMY/nv29AA0GWo5 rCoImrDIP8I5hTjm2sN4p8kSAs5qe60BxW53U3sp8WuzywT6v0glnX28ATvK4cNr LbcOspBrIxRdSJUuoPsO+ij0sdpV44JxSJ14KbITNA+p0yT5a4ADXfB1ShfAD1Lg ggb4ZEuGT1PwfIlzhj3w0LfOIrQShlKTqPHSVXHGoU8bJeJzyrLSv54ekwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFIQh+g6RG2LzBjnYUcgMiqCkL5BwMB8GA1UdIwQY MBaAFDkZ8q2RWEuv8EZ0R7rI+5eNH53TMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUt MzJhYTY3MzFjMjkxLzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83NS85MTE4ZTItYWU3NC00YzI0LWE3NzUtMzJhYTY3MzFjMjkx LzEvT1JueXJaRllTNl93Um5SSHVzajdsNDBmbmRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcf64Ms5F lHg7BvXu+ZaEL7fZmBoMhhFNsB4vMFKp6kOpqLK2wXP6Q3s2dbM6hmM/5wL+z4hD CQUxvJRCl83u7JPgKulcmfbVXnfKDJqJAL7TLpG2lqlnmLojgKqgfe/ctDyClhvQ C3eJH8dGGSeF6WifsIqVK6tECWeibYudWzTyFvGgN5cSo46Aw6wiAwdyxUezz7rc JHD4mqFe5Z+WUGMQXbekeb/fWDONUOLkjG+BLICyPPC1a7B+r9/VeqaOH1W7p9m+ lWgp1rL13wVHbA7PVePxHdVU1dWdgZrCETD+FL/zH48ePhUzuJWXZiebseUKIV0z c3gvFYUizjWSOw== -----END CERTIFICATE-----Generated at Fri Nov 22 07:02:58 2024 by rpki-client on console-fra.rpki-client.org