$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft File: naFA6AKObVN2AOCIipr1qXHF20Y.mft (raw, json) Hash identifier: WQekznOOPie6n4DwsrDttcUBgv+q5daL8RY7e0SeXKc= Subject key identifier: 97:4F:7C:96:A9:07:C5:7F:7E:D9:AC:E5:0D:4D:FD:69:A7:DA:A5:40 Authority key identifier: 9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 Certificate issuer: /CN=9da140e8028e6d537600e0888a9af5a971c5db46 Certificate serial: 019355E4679EDB7065A249E2B6241ADE0482 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft Manifest number: 137D Signing time: Fri 22 Nov 2024 22:00:52 +0000 Manifest this update: Fri 22 Nov 2024 22:00:52 +0000 Manifest next update: Sat 23 Nov 2024 22:00:52 +0000 Files and hashes: 1: 25AFt4kgG1FsyrEYSokp2lABaWo.roa (hash: 3/S540cBhTbxewHqzMOaiHyEzorCTP4PRJplxhOIHpw=) 2: Alwd8urU3MKZlIMbBWRxTU4fcqQ.roa (hash: UFD4vPzxMVa3/oUThIIrGkXO7lHClgrauVkH0898vjg=) 3: Exx3AquM3OM9B8GbmjMrv5gy_60.roa (hash: NLPJwg9AXPApSntZpbhM0BvTmz5yLycdq/XGaRlgUgI=) 4: L9-_dOO7qksadodF8-mh2sf_xow.roa (hash: fm1P9eIBEPNvCxDwbJlH92RW0Txdfb7RcC9nh/wo6dY=) 5: MDP3P-qpr6htShL6pdhFa_KXFx8.roa (hash: lL2naxrD84ilvNUv1RDlU3PzNuLM4TIrZo3ABMQZAnI=) 6: TkCDmaPPyHQeR_7NFWYwrkx4VwA.roa (hash: A7oGr1LQe8JyS22aet86OS9QPKN9AjCaNEj9AedMGfk=) 7: YUeVGQg9zbtLcZSix_CNd8mmxAQ.roa (hash: fUpZ00P8qZo8da628wZz8OQf1+KOfmSGNGUOURiMIew=) 8: c7Vrd41jnBThAesSJFq-cevfLKE.roa (hash: 5bjXME3//nudET65DyEByfqdY9mm6kZIcx81P11+b1A=) 9: heZqx25pmuYnncr4U5jhTNAGJYQ.roa (hash: oIwDUmLL+1hYzGTj3DCjOQPML9ojnY8ou9rPnGEhvHI=) 10: naFA6AKObVN2AOCIipr1qXHF20Y.crl (hash: zRghRn1YqJNwYidqtQv7yL/NvN93RTr7zMmZzJbov0s=) 11: qVR7cNRaSfd9E9sZr9bORI5h-Ho.roa (hash: 9hvl3/ycJJRFc3yuTEgfHZcR7CWsdQR9kLeDmD4zVHc=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 17:02:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:e4:67:9e:db:70:65:a2:49:e2:b6:24:1a:de:04:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9da140e8028e6d537600e0888a9af5a971c5db46 Validity Not Before: Nov 22 22:00:52 2024 GMT Not After : Nov 23 22:00:52 2024 GMT Subject: CN=974f7c96a907c57f7ed9ace50d4dfd69a7daa540 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:77:51:10:13:bd:4c:3a:38:4e:30:5b:b9:2b: 8b:a4:62:fa:e7:5d:55:ba:d7:08:de:97:47:4d:aa: 72:0a:bd:28:0f:8d:11:62:0f:3a:3c:dd:14:2e:76: 73:51:77:f2:d8:be:15:9e:20:b2:16:33:69:fa:25: 8d:ee:e4:68:b4:30:1e:9b:d4:1b:5c:ba:d7:d0:8c: 06:0e:a2:5d:70:9c:df:c5:9d:66:25:61:2e:a4:4e: bf:b7:13:3f:4c:ae:f7:c2:5f:19:80:5f:b6:57:75: f9:c1:af:60:d1:85:32:29:2e:fd:93:e6:af:39:13: f5:07:f5:12:29:5f:ee:2c:41:58:47:6d:3c:f4:14: 22:7d:77:c3:97:6b:b6:5f:9f:b7:8e:3e:fa:62:df: f2:5e:2c:9b:81:8b:6a:48:40:cc:98:db:f4:77:c7: fe:bb:5e:75:a7:24:14:3f:57:cb:e7:fe:74:72:a2: 48:c1:af:bc:5f:7b:0c:6d:96:62:07:6d:7b:2d:13: 6d:42:7e:25:67:5f:9a:54:d3:3f:f6:3d:66:2e:78: 6f:74:46:b5:45:9c:12:69:7f:89:7f:75:c6:80:b2: 38:ec:34:0b:2e:48:94:a2:3f:52:cc:ab:6e:d2:79: 3e:67:d3:9b:93:10:29:d8:49:14:9c:15:3e:42:21: 11:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:4F:7C:96:A9:07:C5:7F:7E:D9:AC:E5:0D:4D:FD:69:A7:DA:A5:40 X509v3 Authority Key Identifier: keyid:9D:A1:40:E8:02:8E:6D:53:76:00:E0:88:8A:9A:F5:A9:71:C5:DB:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/naFA6AKObVN2AOCIipr1qXHF20Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/90/126755-eedd-40b1-95e8-a4ca8b9c205b/1/naFA6AKObVN2AOCIipr1qXHF20Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 84:f7:32:cc:92:fe:c7:f7:ea:72:31:3f:6d:3a:28:df:69:6e: bd:cf:b9:3f:d7:20:ff:bb:a5:fb:86:ad:54:96:bf:60:ce:51: 98:18:a4:af:36:13:02:98:0a:4f:fb:83:45:96:d1:37:1c:cd: 0d:ed:8c:da:b1:bf:ab:81:ba:2c:c0:b9:a2:4e:f3:81:43:6f: 79:b5:92:11:3e:ff:0d:de:9f:f0:0f:c4:ff:a0:26:55:b7:54: d7:ba:ef:77:45:fe:22:c7:b0:7d:ad:bd:af:7f:62:4d:04:b0: 67:14:28:5e:4a:c9:64:6b:a4:37:df:11:46:c4:54:45:31:d3: 5d:3f:3f:2a:16:c0:53:39:f8:13:b3:fa:1b:30:23:0a:cd:f7: 14:d4:30:dd:ba:37:97:3f:6f:d6:64:82:bf:c9:2e:83:af:a3: 87:58:08:f4:89:eb:03:a9:8a:1f:dc:3b:ad:27:25:73:9c:f6: 28:3c:a5:3e:08:44:3c:b6:6f:d2:1b:28:c1:12:24:46:05:c6: c2:d8:d9:f1:68:21:16:f0:d5:e9:cd:0b:86:7f:55:6d:07:dc: 99:0a:da:f1:d7:66:26:ce:8d:43:51:41:40:77:9e:bd:c5:49: 48:4b:b0:39:3e:e7:d2:6c:c1:d3:93:e8:39:fc:9a:d6:7d:11: 48:81:34:85 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNV5Gee23BloknitiQa3gSCMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkYTE0MGU4MDI4ZTZkNTM3NjAwZTA4ODhhOWFmNWE5NzFj NWRiNDYwHhcNMjQxMTIyMjIwMDUyWhcNMjQxMTIzMjIwMDUyWjAzMTEwLwYDVQQD Eyg5NzRmN2M5NmE5MDdjNTdmN2VkOWFjZTUwZDRkZmQ2OWE3ZGFhNTQwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzXdREBO9TDo4TjBbuSuLpGL6511V utcI3pdHTapyCr0oD40RYg86PN0ULnZzUXfy2L4VniCyFjNp+iWN7uRotDAem9Qb XLrX0IwGDqJdcJzfxZ1mJWEupE6/txM/TK73wl8ZgF+2V3X5wa9g0YUyKS79k+av ORP1B/USKV/uLEFYR2089BQifXfDl2u2X5+3jj76Yt/yXiybgYtqSEDMmNv0d8f+ u151pyQUP1fL5/50cqJIwa+8X3sMbZZiB217LRNtQn4lZ1+aVNM/9j1mLnhvdEa1 RZwSaX+Jf3XGgLI47DQLLkiUoj9SzKtu0nk+Z9ObkxAp2EkUnBU+QiERfwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJdPfJapB8V/ftms5Q1N/Wmn2qVAMB8GA1UdIwQY MBaAFJ2hQOgCjm1TdgDgiIqa9alxxdtGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgt YTRjYThiOWMyMDViLzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85MC8xMjY3NTUtZWVkZC00MGIxLTk1ZTgtYTRjYThiOWMyMDVi LzEvbmFGQTZBS09iVk4yQU9DSWlwcjFxWEhGMjBZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhPcyzJL+ x/fqcjE/bToo32luvc+5P9cg/7ul+4atVJa/YM5RmBikrzYTApgKT/uDRZbRNxzN De2M2rG/q4G6LMC5ok7zgUNvebWSET7/Dd6f8A/E/6AmVbdU17rvd0X+Isewfa29 r39iTQSwZxQoXkrJZGukN98RRsRURTHTXT8/KhbAUzn4E7P6GzAjCs33FNQw3bo3 lz9v1mSCv8kug6+jh1gI9InrA6mKH9w7rSclc5z2KDylPghEPLZv0hsowRIkRgXG wtjZ8WghFvDV6c0Lhn9VbQfcmQra8ddmJs6NQ1FBQHeevcVJSEuwOT7n0mzB05Po Ofya1n0RSIE0hQ== -----END CERTIFICATE-----Generated at Fri Nov 22 23:42:01 2024 by rpki-client on console-fra.rpki-client.org