$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft File: CR7HzPD6dh7Zm8WnqewNDusL8FU.mft (raw, json) Hash identifier: lIGzPZ5zPH0b1HPzhR2SI1iqPUeaymORFhYkIhIxowM= Subject key identifier: BC:C8:01:64:B7:F9:DF:63:63:F3:8C:6C:E0:3C:44:F0:13:C7:11:BD Authority key identifier: 09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 Certificate issuer: /CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Certificate serial: 01935162A3E39F6506ACD609465FF22D92B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft Manifest number: 0CFF Signing time: Fri 22 Nov 2024 01:00:39 +0000 Manifest this update: Fri 22 Nov 2024 01:00:39 +0000 Manifest next update: Sat 23 Nov 2024 01:00:39 +0000 Files and hashes: 1: 0eJMb18P7i0Jgsq8AOGY_nh8IlE.roa (hash: n1GbytqGpJVLwWVuConwCuFpJh83PmnnOSQcX2Sfr+k=) 2: 6NsWLohb37syOp1yK1CMSSUYIjQ.roa (hash: Q/rHWBuCsFm8tiu1cFAYrgEeQ04bnRJRePXFHaBJKjU=) 3: CR7HzPD6dh7Zm8WnqewNDusL8FU.crl (hash: v3AMIO09yjs11is6rKeH9QZC/pIpIghKVvl0mTQozuU=) 4: EcM90ZQyydTCn7dRplZnvyJEL-c.roa (hash: EZ2t33SbdutwwEKKxtBBYnuH20K0oZgPBW6QoGpkPZQ=) 5: RjwwcbuZiGwVdTA0amRy0fpspE0.roa (hash: DFnO/KX0rXeLQ5PycEhHUJsx+71/vxi25dpVlIo0MTk=) 6: S1jP1kYQ9HHZV5S-4HA7z6BoL8A.roa (hash: OY+UkxHEWFq3pbVFXtYWNfsRbahkapSnqANMraaa9kQ=) 7: _7VP1m-jZV1L1ptzLJ2bDVHWkUk.roa (hash: HRTZ+Jlza+zjzZ8sRsZbIPSXkZUx2e/BRG4tid3R81s=) 8: aBEbYc13aAgho_JaXVhwN_xt6AY.roa (hash: lOxYmOxlYFFv9Fm8Ade3X/7tuhFc09gbrD2UKSsxUY0=) 9: d2rbL0g_I4y2ebefcjHyJgn7lkY.roa (hash: EtByGbJNRCNF9mClgDELF/775o3ROAJZREySRXE5OgU=) 10: e_6MIEu7XfD3bIMMpEC1PEzISPU.roa (hash: ho1JagFt/nEt3D3B0HKApzVRMsiTaYg2m/dTJB8++t4=) 11: epmRXRPqXn9UMxi33b5MKWyZgqM.roa (hash: aNB6o1vWqYsUN+qKVrChp5naxX9ZJV0WPpB7CwlbQw0=) 12: gaVkBA730_9CjnWHPI61T0yG6Ak.roa (hash: fUltAiMHiN/oJ2u09UbRUu+CX9fo6uixU4A3SRoREIw=) 13: ls7BUQN3YEoucLPQUt0qa99dpEU.roa (hash: g5tbHIwSM9WyJkw1wyRoOoMVuhszqKQVKLupmHjjbY4=) 14: lyK1yEv9nJXnaxX8Ew3BveOPK0c.roa (hash: wm9AsmkQ/kZpfC2rGEMpRtrLBmfB0aj71fEBGu6Xm/Y=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:a3:e3:9f:65:06:ac:d6:09:46:5f:f2:2d:92:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=091ec7ccf0fa761ed99bc5a7a9ec0d0eeb0bf055 Validity Not Before: Nov 22 01:00:39 2024 GMT Not After : Nov 23 01:00:39 2024 GMT Subject: CN=bcc80164b7f9df6363f38c6ce03c44f013c711bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:01:bc:4f:fa:9d:62:da:4c:44:75:3e:16:4a: 3d:e9:c3:34:0a:96:e7:a8:a2:fe:d5:95:ac:44:3f: e7:5d:95:74:75:2c:f8:7e:9f:e9:dd:4f:8e:c6:25: ca:e3:2a:fd:e7:52:53:75:26:b3:0a:bb:d4:0d:9b: 98:e5:6e:f3:40:b0:d4:c1:76:25:80:31:ac:75:be: 15:3b:74:ce:03:26:2b:37:1c:9c:ea:67:9e:00:b2: 51:96:ba:0c:a1:c7:67:b9:96:02:d2:d1:19:f2:b3: 3e:84:29:7e:00:06:17:1e:dc:10:4c:93:9a:b7:1f: 41:aa:3d:29:63:e7:c9:05:ad:cc:9b:f7:64:67:85: 0d:21:c1:82:79:fa:11:ca:7f:ae:e0:e3:5d:c2:60: a0:8e:cf:20:77:2f:c1:c8:70:bd:d7:00:5f:a3:9c: 47:14:88:d5:8c:1c:22:b4:e1:6e:56:9d:2e:a6:d9: e5:58:05:e8:81:9d:d8:1b:a9:6f:29:5d:dd:53:a1: 7c:21:9a:60:ec:e8:40:03:b8:4f:d5:b3:c6:ef:5d: 44:a4:72:ac:71:be:d2:e7:ac:8a:90:38:3c:9a:05: 80:df:72:bc:db:47:48:33:e8:9b:80:e0:97:1f:53: f1:98:36:cf:9d:34:4e:f3:1f:f2:57:a1:88:6a:23: 85:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:C8:01:64:B7:F9:DF:63:63:F3:8C:6C:E0:3C:44:F0:13:C7:11:BD X509v3 Authority Key Identifier: keyid:09:1E:C7:CC:F0:FA:76:1E:D9:9B:C5:A7:A9:EC:0D:0E:EB:0B:F0:55 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CR7HzPD6dh7Zm8WnqewNDusL8FU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/79/e6478a-7b73-4758-addd-45cfc857dddd/1/CR7HzPD6dh7Zm8WnqewNDusL8FU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 35:93:aa:5c:1b:94:43:11:27:00:0f:bc:1a:78:bb:ce:6e:ed: 39:5a:0f:d3:92:36:1e:c5:8d:d2:42:35:ea:09:cd:d9:57:50: 0b:e4:ae:53:e5:00:ab:34:ba:79:7d:7f:55:93:04:30:b0:5b: 01:d3:3c:19:cc:0d:29:7d:d3:d8:65:55:4f:47:85:58:bf:e3: d4:1d:3e:bc:22:d3:58:06:e1:66:b2:4b:26:bf:56:77:49:65: 23:ed:31:c7:95:8f:28:49:70:50:0a:3a:f7:36:94:ec:00:ab: f9:b1:a8:4d:ec:25:be:81:eb:7b:08:05:19:b2:e9:53:b8:4d: 32:dd:6d:1a:c0:ac:71:e9:40:2d:c9:8f:16:1f:bf:db:9f:be: 40:56:ff:0e:a5:15:7f:02:4a:1a:8d:87:72:2d:15:76:f5:24: 1e:81:29:2e:21:95:a1:b8:00:09:66:0f:c8:cf:29:53:78:4e: 4a:1c:7b:14:26:82:ca:81:e2:09:7b:17:61:1d:7e:df:98:c2: 06:e5:ed:32:9e:d9:e3:08:27:85:62:28:5d:9f:1e:20:08:34: 91:99:c0:e8:e6:ac:41:79:12:a8:e6:a7:2f:d4:b7:81:51:11: f1:72:e9:9a:3e:87:63:59:1e:06:75:f6:8f:c9:b6:ea:fa:a3: 83:77:c8:6f -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYqPjn2UGrNYJRl/yLZKzMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDA5MWVjN2NjZjBmYTc2MWVkOTliYzVhN2E5ZWMwZDBlZWIw YmYwNTUwHhcNMjQxMTIyMDEwMDM5WhcNMjQxMTIzMDEwMDM5WjAzMTEwLwYDVQQD EyhiY2M4MDE2NGI3ZjlkZjYzNjNmMzhjNmNlMDNjNDRmMDEzYzcxMWJkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2AG8T/qdYtpMRHU+Fko96cM0Cpbn qKL+1ZWsRD/nXZV0dSz4fp/p3U+OxiXK4yr951JTdSazCrvUDZuY5W7zQLDUwXYl gDGsdb4VO3TOAyYrNxyc6meeALJRlroMocdnuZYC0tEZ8rM+hCl+AAYXHtwQTJOa tx9Bqj0pY+fJBa3Mm/dkZ4UNIcGCefoRyn+u4ONdwmCgjs8gdy/ByHC91wBfo5xH FIjVjBwitOFuVp0uptnlWAXogZ3YG6lvKV3dU6F8IZpg7OhAA7hP1bPG711EpHKs cb7S56yKkDg8mgWA33K820dIM+ibgOCXH1PxmDbPnTRO8x/yV6GIaiOFyQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLzIAWS3+d9jY/OMbOA8RPATxxG9MB8GA1UdIwQY MBaAFAkex8zw+nYe2ZvFp6nsDQ7rC/BVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQt NDVjZmM4NTdkZGRkLzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC83OS9lNjQ3OGEtN2I3My00NzU4LWFkZGQtNDVjZmM4NTdkZGRk LzEvQ1I3SHpQRDZkaDdabThXbnFld05EdXNMOEZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANZOqXBuU QxEnAA+8Gni7zm7tOVoP05I2HsWN0kI16gnN2VdQC+SuU+UAqzS6eX1/VZMEMLBb AdM8GcwNKX3T2GVVT0eFWL/j1B0+vCLTWAbhZrJLJr9Wd0llI+0xx5WPKElwUAo6 9zaU7ACr+bGoTewlvoHrewgFGbLpU7hNMt1tGsCscelALcmPFh+/25++QFb/DqUV fwJKGo2Hci0VdvUkHoEpLiGVobgACWYPyM8pU3hOShx7FCaCyoHiCXsXYR1+35jC BuXtMp7Z4wgnhWIoXZ8eIAg0kZnA6OasQXkSqOanL9S3gVER8XLpmj6HY1keBnX2 j8m26vqjg3fIbw== -----END CERTIFICATE-----Generated at Fri Nov 22 02:42:01 2024 by rpki-client on console-fra.rpki-client.org