$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft File: R3avt0-tW68KYYC0lRDYuEl9-NM.mft (raw, json) Hash identifier: WLsFUH4ActZd7XpHB0/M0kPGgCrTH7y78MTSLtV/hAE= Subject key identifier: 63:D4:F6:FF:1C:9D:8D:D1:A2:7E:B6:5E:88:9B:30:55:A2:5E:3A:3D Authority key identifier: 47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 Certificate issuer: /CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Certificate serial: 0193579B875350A08274DD62F74C2B307F18 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft Manifest number: 1372 Signing time: Sat 23 Nov 2024 06:00:30 +0000 Manifest this update: Sat 23 Nov 2024 06:00:30 +0000 Manifest next update: Sun 24 Nov 2024 06:00:30 +0000 Files and hashes: 1: AgAUUr68A29sxAcuucu-QH395yc.roa (hash: xvjrIYn8OY2/7hrGdLU8S91rQrgcAqUlhnhRI/ftz+Y=) 2: LJyNvDe-Rh0YHzFAOFr2BZpPJDg.roa (hash: HW8iYVyxKglLKUh/ID3L4I7qltwwpGwyAA/Ylhox90o=) 3: OTqAO26bWOJs8Cg9Nu8zOxcD6jw.roa (hash: BxLpkZ5lsORgMm3qmZZ8xttlI+npxtF7o/xMQBCCGHA=) 4: R3avt0-tW68KYYC0lRDYuEl9-NM.crl (hash: 6N6z9uQvhM8gtCDe6N8QgTfuYiqS7IOm/yoKw1jn2ns=) 5: T94e7iGlcpj8tDyAqUkgSYaove4.roa (hash: MRmR+sD/m1bH6fQE7LpSZpKpuho/pq9kHyjaXG+5kq8=) 6: WIrmiJS3uGmM4Api4TMWWkb357U.roa (hash: XUBkW8GNpOjPnW7fbyVVSF4KCbyVMtnBBaClnPECCMY=) 7: bTWAGD69mx0_1ZE39R7YJzdlgpQ.roa (hash: d0UmavIMZwMye2b/lu+sbTW1E2OKVTTmL9PAHFZE90E=) 8: fFQZKLTDvq3iTMd0DkRXOlohoyQ.roa (hash: qh8+mAj+qSGUKH+wAP3tdReIHNbxOxRR7cAiiljJCLE=) 9: hPEtXs323fx0LX0Y9AdSvpcWiPg.roa (hash: fbLm/1wvMKupP5ReKGjKyucGKpeARahIGnbRrmU0Aa8=) 10: jOwAQd3-P7f9hyNnCgexev-EOsY.roa (hash: 8bQPUZ8jkFcsjhoiGzztCrXfsXYfaeENW+zad3lsEks=) 11: oFDRiCw38nEh76unqCzPWnrE9bA.roa (hash: 6IIQCPF1HY5MJ6sp5kCP4immAIpvSmtQPTj9lTqCM84=) 12: oOLMjRI7b1YSUgio02v27UwTDEc.roa (hash: YWdztiCM6CEDcHiVCQvvaCdEpxNxUu3xIkYxc/pV79A=) 13: q3vAi3x8-Kr-v2uP7Hb-iPUZC8A.roa (hash: 3z+q0tnEZIx9659g0Vs4mdg6f4tLIDG4i450OvBVE5Q=) 14: vfYZzHur55SwofG7_Uj1prEqwoE.roa (hash: TTprKhgEMRpczDrOA2mAF1XPbyi+YSfqJgpGP6QgzKM=) 15: zC5cnzJZXWJ15DovFhNZnjAYlx8.roa (hash: PmHbi3CbXx+RGitt7dLTRvI+Gkto3U25bJJVc6K8JOk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 06:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:57:9b:87:53:50:a0:82:74:dd:62:f7:4c:2b:30:7f:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4776afb74fad5baf0a6180b49510d8b8497df8d3 Validity Not Before: Nov 23 06:00:30 2024 GMT Not After : Nov 24 06:00:30 2024 GMT Subject: CN=63d4f6ff1c9d8dd1a27eb65e889b3055a25e3a3d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:4a:73:ce:d5:eb:71:af:e5:bb:93:ee:bf:79: 92:ed:db:b3:9f:99:5b:c1:ae:16:30:81:c0:2d:9e: 0c:3d:69:0d:ea:6e:95:ea:18:ae:1a:8a:94:7f:71: 65:a7:f6:c0:e7:da:ad:19:5f:4a:ef:ce:f2:bd:3a: ed:bf:ea:a8:b7:f3:79:ed:3e:f8:ee:f6:24:00:f1: c5:d8:13:3e:ed:66:80:cc:45:a9:2c:08:93:a1:e3: a2:af:ac:fd:84:f8:df:22:2d:ca:4c:15:90:fa:de: 96:3e:53:db:56:16:6c:7e:c8:33:77:29:82:f4:00: be:86:cc:f1:bc:f8:0e:6f:12:81:9b:0e:17:ba:00: 50:a1:3a:a2:85:b3:7d:a0:fa:cc:74:73:c0:37:10: 20:6e:3e:40:bd:e7:a4:e1:77:05:97:48:b5:92:36: 95:ba:ef:81:7c:7b:1d:fa:ec:e3:54:a7:6b:09:11: f5:6e:06:c6:b3:fc:b9:dc:06:a4:41:61:b8:cf:5b: 06:af:80:5e:21:f1:f7:97:8b:fd:73:35:4c:68:58: 28:62:12:1b:70:4a:30:c8:4a:bc:ab:85:7e:61:36: 5c:fe:33:9d:9e:74:20:35:5b:33:04:87:d8:76:fc: 84:7f:b6:83:ab:cd:be:b6:6d:25:95:54:7c:bc:6c: a5:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:D4:F6:FF:1C:9D:8D:D1:A2:7E:B6:5E:88:9B:30:55:A2:5E:3A:3D X509v3 Authority Key Identifier: keyid:47:76:AF:B7:4F:AD:5B:AF:0A:61:80:B4:95:10:D8:B8:49:7D:F8:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R3avt0-tW68KYYC0lRDYuEl9-NM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/94/f71cc2-b71d-4668-8661-0538e95f3f12/1/R3avt0-tW68KYYC0lRDYuEl9-NM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 93:5e:ea:27:7a:0b:e6:13:a2:a4:e8:64:07:f5:27:dc:c9:73: 36:2b:1e:54:0e:0d:a6:38:94:55:69:5e:e7:78:7e:ea:28:f2: a8:cd:f7:a1:5d:25:b7:48:3a:04:92:b6:b7:06:8f:2c:f8:3c: 39:50:82:99:4a:b7:26:3f:b9:d9:4b:5b:34:07:a0:ac:66:48: 82:13:fa:b8:8a:bb:f9:fe:db:ee:10:98:ab:a1:28:ff:41:e1: 8c:9c:69:50:7d:b6:2f:1f:fc:12:2f:22:f2:ec:a6:ef:f5:ac: 5a:e2:2e:37:17:18:e1:f0:1a:73:73:aa:07:3f:32:f9:56:ad: 64:c9:54:f4:75:1a:df:7d:2c:ad:33:50:e8:9e:d4:f2:60:75: 74:a8:77:8f:89:de:ec:d5:dc:3e:8b:1d:52:43:2d:1f:47:38: 42:87:d1:35:0c:56:eb:ed:5e:89:3c:ff:96:47:64:6e:88:1c: 13:dc:53:d1:e9:4a:39:60:36:82:c8:50:44:02:ca:cc:3d:c5: 7f:ee:70:8e:3d:52:4e:b4:2d:a3:5e:34:3c:f3:5d:32:d5:c9: 02:e7:57:b0:ad:71:71:3b:fb:01:2d:1c:c0:c0:c7:d9:f8:fd: 57:67:3e:ff:d1:94:89:c2:f2:6f:63:d1:28:6a:2d:59:80:b2: eb:98:26:81 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNXm4dTUKCCdN1i90wrMH8YMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ3NzZhZmI3NGZhZDViYWYwYTYxODBiNDk1MTBkOGI4NDk3 ZGY4ZDMwHhcNMjQxMTIzMDYwMDMwWhcNMjQxMTI0MDYwMDMwWjAzMTEwLwYDVQQD Eyg2M2Q0ZjZmZjFjOWQ4ZGQxYTI3ZWI2NWU4ODliMzA1NWEyNWUzYTNkMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30pzztXrca/lu5Puv3mS7duzn5lb wa4WMIHALZ4MPWkN6m6V6hiuGoqUf3Flp/bA59qtGV9K787yvTrtv+qot/N57T74 7vYkAPHF2BM+7WaAzEWpLAiToeOir6z9hPjfIi3KTBWQ+t6WPlPbVhZsfsgzdymC 9AC+hszxvPgObxKBmw4XugBQoTqihbN9oPrMdHPANxAgbj5Aveek4XcFl0i1kjaV uu+BfHsd+uzjVKdrCRH1bgbGs/y53AakQWG4z1sGr4BeIfH3l4v9czVMaFgoYhIb cEowyEq8q4V+YTZc/jOdnnQgNVszBIfYdvyEf7aDq82+tm0llVR8vGylZwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGPU9v8cnY3Ron62XoibMFWiXjo9MB8GA1UdIwQY MBaAFEd2r7dPrVuvCmGAtJUQ2LhJffjTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEt MDUzOGU5NWYzZjEyLzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85NC9mNzFjYzItYjcxZC00NjY4LTg2NjEtMDUzOGU5NWYzZjEy LzEvUjNhdnQwLXRXNjhLWVlDMGxSRFl1RWw5LU5NLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk17qJ3oL 5hOipOhkB/Un3MlzNiseVA4NpjiUVWle53h+6ijyqM33oV0lt0g6BJK2twaPLPg8 OVCCmUq3Jj+52UtbNAegrGZIghP6uIq7+f7b7hCYq6Eo/0HhjJxpUH22Lx/8Ei8i 8uym7/WsWuIuNxcY4fAac3OqBz8y+VatZMlU9HUa330srTNQ6J7U8mB1dKh3j4ne 7NXcPosdUkMtH0c4QofRNQxW6+1eiTz/lkdkbogcE9xT0elKOWA2gshQRALKzD3F f+5wjj1STrQto140PPNdMtXJAudXsK1xcTv7AS0cwMDH2fj9V2c+/9GUicLyb2PR KGotWYCy65gmgQ== -----END CERTIFICATE-----Generated at Sat Nov 23 10:03:42 2024 by rpki-client on console-fra.rpki-client.org