$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft File: GstjdqFkjUnVXk17ATcTZ7DcKvk.mft (raw, json) Hash identifier: 1wGQoBq6y3RKR5UihHWsKzXDpeJCQ+mIxZuwA/M393Q= Subject key identifier: 96:E5:A0:6D:CB:A9:A8:08:55:29:27:49:A3:F0:7F:4E:29:9B:26:EA Authority key identifier: 1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 Certificate issuer: /CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Certificate serial: 018F1633B1BFF56552932505440D75BAB21A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft Manifest number: 0573 Signing time: Thu 25 Apr 2024 17:00:37 +0000 Manifest this update: Thu 25 Apr 2024 17:00:37 +0000 Manifest next update: Fri 26 Apr 2024 17:00:37 +0000 Files and hashes: 1: 15rPVmwZBw1XOCcquCkqayHji0Y.roa (hash: p8xUg7w16+n/2oTgZnFPogbqm0HijesrmPWgRTB6e/M=) 2: GstjdqFkjUnVXk17ATcTZ7DcKvk.crl (hash: /EAeZ0HN8T03w3LJboTfz99kgC0PEx5uQR+FpG01STY=) 3: KhNiOPNuy3H9w9y4XQMlWYwBD6A.roa (hash: Sqheap4M0xCPgDrxXhmlkPC8i74yuXEIxKy/e/B0CI0=) 4: P7uWxGrOxxi9hOOHPyDYaJPmMU8.roa (hash: 6BFfdXOQtrIGrybKVZjoDpYBX60noWf1K2bameLG0S0=) 5: Pbd9BgZzOSHMMHP_61LkfCFlDZg.roa (hash: 8b+CDNBm8mWOeIjg74JioregTXaszNBcmxenaw9AwbM=) 6: UrGfyvGxzsWdBVvABaZO8t0XrKc.roa (hash: IHM48LMc66Za6rJgEwxPnv3ej1ByJ3ESd2yw2c7oJrA=) 7: WU9La3gtDzbYELLK8QrU8M1LZ0c.roa (hash: 5dURrWYkWgU7NAXTK6199K3njWEhcNrOP00m3Sk81eY=) 8: cc9aiJN4LxW3d4wCJ3F0bzi_4X0.roa (hash: X1Qo2+KTYfP/hhRxZ2fR5XdljJuWEszqpo7VS2RYI6o=) 9: czuam8qAdfeWDr9pgUU4YlZBCdg.roa (hash: eq2p9u1Z5h1LeXlSQLXeQA6gpHmOqVSIhbTUdfxbsiw=) 10: lOwSFLRS9dsRvV5G_loSmfgGXQo.roa (hash: H6DT6RBN9c3LNcYqsBooLyJRSkNg6lfkZzdISuRHx4o=) 11: u4D1o1XupW2SC-i0ocGdOS7eRVw.roa (hash: 4AW31mdFaOjEBeYYEGQfKK9a3peIlMOljIrDDqdd0o8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 26 Apr 2024 14:10:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:16:33:b1:bf:f5:65:52:93:25:05:44:0d:75:ba:b2:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1acb6376a1648d49d55e4d7b01371367b0dc2af9 Validity Not Before: Apr 25 17:00:37 2024 GMT Not After : Apr 26 17:00:37 2024 GMT Subject: CN=96e5a06dcba9a80855292749a3f07f4e299b26ea Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bb:43:4c:81:3b:15:1e:ae:aa:c7:91:67:8b:b7: 07:93:6c:85:ab:5f:8a:e3:19:c4:fe:8b:ac:1a:a4: a5:6e:58:e8:1b:0d:18:0b:29:7f:16:91:a8:93:c6: c7:4b:22:60:d9:5b:05:c0:f1:08:13:8d:14:4e:8b: 8f:41:dc:2a:24:43:6b:7c:6f:9f:1a:cd:05:e1:4c: a9:e3:b3:8d:d7:db:5b:9d:d6:2f:57:cc:60:61:bb: ae:23:08:21:08:be:80:19:2b:1b:df:7f:82:4d:f4: 67:e7:d7:2e:3b:a2:47:09:2c:01:bf:24:5a:38:c3: 91:fd:e0:39:80:7c:85:cd:6a:47:7a:24:45:83:02: d0:c0:ef:8a:b7:2e:e4:53:a0:44:19:57:ac:e7:33: bf:ff:f9:0c:b1:ea:af:cd:46:78:e2:1e:2d:bd:cc: 59:46:3f:35:36:e5:31:71:18:52:6e:31:4d:43:42: cb:10:c9:01:a8:2c:6d:14:8b:f6:59:48:f6:39:f1: 8e:a3:c0:99:20:85:88:90:8f:b6:bb:83:79:91:54: ec:08:ff:bf:4c:d6:ec:0d:12:81:7b:0b:1e:07:df: 10:cc:e6:8b:1f:90:82:df:d8:56:3c:68:3a:59:83: 0b:ac:a7:51:dc:33:fa:87:5b:07:49:b2:4a:15:58: 12:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:E5:A0:6D:CB:A9:A8:08:55:29:27:49:A3:F0:7F:4E:29:9B:26:EA X509v3 Authority Key Identifier: keyid:1A:CB:63:76:A1:64:8D:49:D5:5E:4D:7B:01:37:13:67:B0:DC:2A:F9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GstjdqFkjUnVXk17ATcTZ7DcKvk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/99/7247b0-4989-43ea-9350-7a936751db1b/1/GstjdqFkjUnVXk17ATcTZ7DcKvk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2f:07:1f:46:66:a5:cc:fe:da:31:fe:a8:a3:9f:da:f0:4b:76: 86:e9:64:8b:0a:3f:b9:6d:a7:66:88:81:21:92:35:ea:48:ee: e3:04:b4:eb:d2:21:85:c0:c9:b8:58:b7:2f:20:38:6e:64:45: 87:a7:e4:4b:ba:ea:34:60:ce:9c:02:cc:9f:28:f6:39:a5:20: f5:50:d3:9f:55:a7:d4:36:0d:ad:c0:20:7d:14:19:a8:61:d6: 8c:97:3d:36:cd:b3:c4:c2:ef:45:98:b5:f4:94:a2:5e:2d:c0: a2:1e:8a:ee:26:3f:66:9d:79:47:a2:95:77:48:bc:76:66:6b: d6:94:ac:3f:56:5c:1d:c7:5d:2b:89:8e:82:b2:91:8f:77:07: cf:a5:84:bb:95:4c:27:90:88:aa:5d:96:eb:f2:bc:8e:22:bd: ec:3d:2b:91:7f:b1:94:26:fe:56:1a:b6:d3:b2:a6:fa:75:f5: c2:81:31:44:94:41:d2:89:f3:e0:64:25:c6:a8:52:29:15:cd: 83:9c:98:34:45:86:ab:49:dc:26:83:bf:d5:61:45:a7:f6:d7: 93:21:15:f6:5c:b4:06:fd:7b:df:10:4c:1c:5e:25:f9:58:0b: 63:64:18:ec:b2:af:61:91:e0:90:b7:6e:aa:07:4a:ba:3f:7f: 3f:58:66:b1 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8WM7G/9WVSkyUFRA11urIaMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhY2I2Mzc2YTE2NDhkNDlkNTVlNGQ3YjAxMzcxMzY3YjBk YzJhZjkwHhcNMjQwNDI1MTcwMDM3WhcNMjQwNDI2MTcwMDM3WjAzMTEwLwYDVQQD Eyg5NmU1YTA2ZGNiYTlhODA4NTUyOTI3NDlhM2YwN2Y0ZTI5OWIyNmVhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0NMgTsVHq6qx5Fni7cHk2yFq1+K 4xnE/ousGqSlbljoGw0YCyl/FpGok8bHSyJg2VsFwPEIE40UTouPQdwqJENrfG+f Gs0F4Uyp47ON19tbndYvV8xgYbuuIwghCL6AGSsb33+CTfRn59cuO6JHCSwBvyRa OMOR/eA5gHyFzWpHeiRFgwLQwO+Kty7kU6BEGVes5zO///kMseqvzUZ44h4tvcxZ Rj81NuUxcRhSbjFNQ0LLEMkBqCxtFIv2WUj2OfGOo8CZIIWIkI+2u4N5kVTsCP+/ TNbsDRKBewseB98QzOaLH5CC39hWPGg6WYMLrKdR3DP6h1sHSbJKFVgSDQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJbloG3LqagIVSknSaPwf04pmybqMB8GA1UdIwQY MBaAFBrLY3ahZI1J1V5NewE3E2ew3Cr5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAt N2E5MzY3NTFkYjFiLzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85OS83MjQ3YjAtNDk4OS00M2VhLTkzNTAtN2E5MzY3NTFkYjFi LzEvR3N0amRxRmtqVW5WWGsxN0FUY1RaN0RjS3ZrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALwcfRmal zP7aMf6oo5/a8Et2hulkiwo/uW2nZoiBIZI16kju4wS069IhhcDJuFi3LyA4bmRF h6fkS7rqNGDOnALMnyj2OaUg9VDTn1Wn1DYNrcAgfRQZqGHWjJc9Ns2zxMLvRZi1 9JSiXi3Aoh6K7iY/Zp15R6KVd0i8dmZr1pSsP1ZcHcddK4mOgrKRj3cHz6WEu5VM J5CIql2W6/K8jiK97D0rkX+xlCb+Vhq207Km+nX1woExRJRB0onz4GQlxqhSKRXN g5yYNEWGq0ncJoO/1WFFp/bXkyEV9ly0Bv173xBMHF4l+VgLY2QY7LKvYZHgkLdu qgdKuj9/P1hmsQ== -----END CERTIFICATE-----Generated at Thu Apr 25 23:16:22 2024 by rpki-client on console-fra.rpki-client.org