$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft File: CoH-kFn2ggvBitWALy8fynfSVLc.mft (raw, json) Hash identifier: pyBdgFFDY4T1yqRErEgEugAQWzYA9VmIAa/doS1eFhg= Subject key identifier: 92:AB:FA:B3:24:61:D3:E9:EF:B0:A3:0B:B9:D1:20:18:49:3D:69:7B Authority key identifier: 0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 Certificate issuer: /CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Certificate serial: 018F3CD3BFCD27391FD5B88D15653AEDA8E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft Manifest number: 04AF Signing time: Fri 03 May 2024 05:01:01 +0000 Manifest this update: Fri 03 May 2024 05:01:01 +0000 Manifest next update: Sat 04 May 2024 05:01:01 +0000 Files and hashes: 1: 8av_LqS1mtCGG20BlQlKKHzIukY.roa (hash: xCZnDMEaFWrS/KgHUSNH4mODnDt7GxO89ppkCUhtUG8=) 2: AG7CXwfbBeeyN3sG54ieP_SvJ0k.roa (hash: N1SjCKH8b/qaTFBWcExacqHVAYXeq/ezra/Q8zDsPCI=) 3: AUbhsbOkXzpb8vYZ0l69AyUCWpo.roa (hash: qsqM24V593AbWKl/Yn0U6i1+14fCVTQuKHouYl9DprM=) 4: CoH-kFn2ggvBitWALy8fynfSVLc.crl (hash: ULJVUL4b9TZoY0IgCV0LsbCejR7tHR9weVhhIQM8UTM=) 5: MuDWFTyXhTwMYdKc2jo70tKKO70.roa (hash: XPiYNNxlE2q0sWLCph/qCqDk3Z+Wgpb/TUzfR8dWurI=) 6: Ub5lSWLNlUqOZQ5On_mqFbz9G3w.roa (hash: tKV1DqTu3cirZQ+c7WWLYMDVgCptwBQ5iAkticMbnbU=) 7: XxFIyYk-JeXXPViz19Tpm0wUuF4.roa (hash: 809k4ckC3caJFxDta0EhWeg1EZ7M1GYCWteZe/zolGs=) 8: bGQDj8QPA9r_pLMxydrQRyKgQqQ.roa (hash: rHtqUwmxie5jgzFI2CTIIOS8XCDYGfxb0sXMZ1656HU=) 9: h6bwUmHe2fGn1c5Nr_0Az2teVv0.roa (hash: yYoUG2tvPRhDBZFeTym5a6HJ593OW1/oixPBJqSug+I=) 10: mDOAiYPn4DBt3mk1yAdAG5o6VQE.roa (hash: ILQ8mdArrK+fpSnRLefKj8ZzvgCXalDc6sm12PITlXM=) 11: zhgkthKfuzjSNC7Vlv0rUxWD0fA.roa (hash: IdU9G2D/hkuh7P3ZpE81bZlVnhFTRfMwGz3H+U6J/Mk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 04 May 2024 02:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:3c:d3:bf:cd:27:39:1f:d5:b8:8d:15:65:3a:ed:a8:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0a81fe9059f6820bc18ad5802f2f1fca77d254b7 Validity Not Before: May 3 05:01:01 2024 GMT Not After : May 4 05:01:01 2024 GMT Subject: CN=92abfab32461d3e9efb0a30bb9d12018493d697b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:51:08:8a:bd:74:ef:74:73:ea:0e:0c:46:34: 79:2c:4d:c3:2e:3c:f3:26:e3:b0:ba:db:3e:da:a8: 37:46:1f:20:ad:6c:e5:3e:c3:bd:b4:25:c4:90:93: c4:dc:c9:19:82:06:a2:16:43:0e:eb:30:46:c8:64: 1c:6b:27:55:ca:b1:09:a6:cf:56:30:d6:ba:e4:0b: fb:91:b9:22:fb:05:db:f2:20:d8:7e:99:50:69:04: 9e:fa:b4:70:ca:fe:92:dc:03:54:ff:d4:4a:61:31: 00:8f:ac:42:1a:4a:68:85:b0:01:5a:d9:6e:7f:55: 73:6c:f0:07:1b:fd:5a:f9:fe:09:f5:4b:46:3f:c8: ff:ca:b5:10:52:26:12:db:59:a0:98:c0:89:cd:78: cd:9b:e8:7f:a7:ec:8f:b9:e7:3b:e1:67:c8:a4:4c: 3c:44:8a:2c:f6:32:50:55:0b:0f:e0:2e:35:c1:20: 70:02:5d:63:58:b7:bc:ba:45:4d:34:0a:f0:ea:23: 93:90:10:2c:99:d2:b5:95:7b:15:a4:cf:32:ea:a5: 12:63:3a:15:29:bb:06:b0:b8:ff:dc:e3:e7:eb:a0: b4:8f:a3:2c:98:87:ca:8e:99:68:99:65:1b:16:83: 44:b5:31:d5:d6:6a:ca:7e:8a:ad:ab:08:54:ca:36: fb:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:AB:FA:B3:24:61:D3:E9:EF:B0:A3:0B:B9:D1:20:18:49:3D:69:7B X509v3 Authority Key Identifier: keyid:0A:81:FE:90:59:F6:82:0B:C1:8A:D5:80:2F:2F:1F:CA:77:D2:54:B7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CoH-kFn2ggvBitWALy8fynfSVLc.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/80/4984df-6db2-4e0a-91f8-bf05acc82bd1/1/CoH-kFn2ggvBitWALy8fynfSVLc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 38:1f:15:33:e4:e4:5c:26:b1:f4:0f:58:f3:84:40:01:57:57: 72:e3:8d:75:88:a4:c7:57:de:52:85:95:51:6d:2d:42:08:d8: 40:1a:8f:3f:df:b9:b6:34:4d:e9:ac:bd:29:89:63:cd:7b:5b: 12:01:c8:7e:94:13:ef:75:7d:a3:6a:e7:3a:b7:a2:93:cd:3a: 22:c7:30:d6:2a:b1:09:d8:eb:07:97:a0:75:74:34:79:52:bb: 8a:ef:96:a2:f0:7e:4d:b4:e0:02:43:47:9e:c3:b7:a7:b5:fd: a2:f1:97:ca:9a:5d:71:77:fb:70:84:69:50:a4:50:5a:1f:bd: 17:30:7f:5a:27:cc:91:85:9a:a5:29:9b:f7:43:5a:f1:0b:18: c0:df:cc:77:82:0d:e5:ec:d4:c1:a3:09:64:e3:cb:40:44:1a: 8b:63:6b:8b:cb:d7:4e:2c:1b:8f:00:90:59:4e:0a:06:d7:88: 2c:35:d5:b7:f3:ca:ab:c0:68:fe:a9:c5:86:ca:1f:9f:df:0e: c6:63:da:c4:b0:a3:75:08:71:eb:a7:89:1e:42:e5:c4:99:e8: a0:1f:1d:64:59:90:b7:e9:0f:ae:c5:1b:30:c5:a7:67:c7:a6: 2a:41:fb:58:b8:49:55:5d:e1:d0:7f:e5:ff:f1:3a:f1:51:87: 64:4d:1d:38 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8807/NJzkf1biNFWU67ajnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDBhODFmZTkwNTlmNjgyMGJjMThhZDU4MDJmMmYxZmNhNzdk MjU0YjcwHhcNMjQwNTAzMDUwMTAxWhcNMjQwNTA0MDUwMTAxWjAzMTEwLwYDVQQD Eyg5MmFiZmFiMzI0NjFkM2U5ZWZiMGEzMGJiOWQxMjAxODQ5M2Q2OTdiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4lEIir1073Rz6g4MRjR5LE3DLjzz JuOwuts+2qg3Rh8grWzlPsO9tCXEkJPE3MkZggaiFkMO6zBGyGQcaydVyrEJps9W MNa65Av7kbki+wXb8iDYfplQaQSe+rRwyv6S3ANU/9RKYTEAj6xCGkpohbABWtlu f1VzbPAHG/1a+f4J9UtGP8j/yrUQUiYS21mgmMCJzXjNm+h/p+yPuec74WfIpEw8 RIos9jJQVQsP4C41wSBwAl1jWLe8ukVNNArw6iOTkBAsmdK1lXsVpM8y6qUSYzoV KbsGsLj/3OPn66C0j6MsmIfKjplomWUbFoNEtTHV1mrKfoqtqwhUyjb7jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJKr+rMkYdPp77CjC7nRIBhJPWl7MB8GA1UdIwQY MBaAFAqB/pBZ9oILwYrVgC8vH8p30lS3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgt YmYwNWFjYzgyYmQxLzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC84MC80OTg0ZGYtNmRiMi00ZTBhLTkxZjgtYmYwNWFjYzgyYmQx LzEvQ29ILWtGbjJnZ3ZCaXRXQUx5OGZ5bmZTVkxjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB8VM+Tk XCax9A9Y84RAAVdXcuONdYikx1feUoWVUW0tQgjYQBqPP9+5tjRN6ay9KYljzXtb EgHIfpQT73V9o2rnOreik806Iscw1iqxCdjrB5egdXQ0eVK7iu+WovB+TbTgAkNH nsO3p7X9ovGXyppdcXf7cIRpUKRQWh+9FzB/WifMkYWapSmb90Na8QsYwN/Md4IN 5ezUwaMJZOPLQEQai2Nri8vXTiwbjwCQWU4KBteILDXVt/PKq8Bo/qnFhsofn98O xmPaxLCjdQhx66eJHkLlxJnooB8dZFmQt+kPrsUbMMWnZ8emKkH7WLhJVV3h0H/l //E68VGHZE0dOA== -----END CERTIFICATE-----Generated at Fri May 3 11:15:57 2024 by rpki-client on console-ams.rpki-client.org