$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft File: gnYDqTvKMbAY9RH21LC3VG6WM2I.mft (raw, json) Hash identifier: 9XGY/W3Ew6HG8XCrGR+T6uh8ZXSi5Tr4frA+V6799d0= Subject key identifier: 38:D3:DD:8D:51:C4:1A:F3:05:12:08:4F:03:91:A9:F8:86:C0:A3:4A Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362 Certificate serial: 01935162F2BDB7A23CC08177A44D2EAFD1BB Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft Manifest number: 13E6 Signing time: Fri 22 Nov 2024 01:00:59 +0000 Manifest this update: Fri 22 Nov 2024 01:00:59 +0000 Manifest next update: Sat 23 Nov 2024 01:00:59 +0000 Files and hashes: 1: 2HSiRCVRROrOcEAAqDbXvkyrWKc.roa (hash: ojFJJAIKbZ6SrKutOqNsG0fy9V6QfAg4wsSink+BljM=) 2: 848uaYI-EEOIaPdj2MW6Z1H4pH4.roa (hash: xlaoPYnffjjIiCZs9L6qtRcBKBU4tGmtusLRUOzjEk8=) 3: 8aT67bzTQFl-jtTBMu206nH7oow.roa (hash: hwEUBB2v2ZfsfwhkOr9qTX1C3j/FS1YODDt4hCLWAZ4=) 4: ETidNRxNuNuxMf4f7_Oh3DY5M5I.roa (hash: C65iz5HPvvJm/4h0DjTIn8j0lmvJjdpIKNqoxKwbgeA=) 5: Envcaaxf8ZNMwzSRpoY5rwwvHbA.roa (hash: 6OYlONBjINVI4bG+Xt2TPvOdDuT3Wul31RbR0suQNhY=) 6: _rHEppg0k7Vzj8w5-SxEz-0kxSM.roa (hash: xD3tZ5xpAOFvnttcTo0AUIXQoVX7ruAbYXXPhac9Znk=) 7: gnYDqTvKMbAY9RH21LC3VG6WM2I.crl (hash: 6Bkv2xi7YKisJirRd8kyaNMLzK5mvvaxmQAm2FDQLpA=) 8: h5sJ8l8hnPP3oKbrDSMDS_jzRS8.roa (hash: gI/ZjyL5nO/RkeQ3MhlnOJbAWwj8cQqYMBfHqdb5QZA=) 9: kaVpnmtQ-Hs26BeVMW6lX37ZLY0.roa (hash: Hk20an3fiS1xFSqpyHRSzY9G4hw1/VNCQat/+r+YIeU=) 10: oMbaJSssqUWbVeVRbmRfbHitjXQ.roa (hash: yw2KY5dZMsRDVN8yJQUCxQSw+CitLsIGcV/seIRUqbE=) 11: qow4auxX9C-7UMr80RFbsckyYYU.roa (hash: bnNxdSKkSL/jJQioIgSrpl61iNFGlSETHBvJR2N5eHY=) 12: rb1-8VqK6WW7GnPi3dVuiMtkbjg.roa (hash: 3hK9LoK0Oj0D/HqKNm5Q37ietlXuNTYSIk9zecXjQ1U=) 13: vP-7WkkmFpKkpyLTu7HjmJzXYC0.roa (hash: M8fRZa60KqvoqQurLa4kNAi+EIpisMXOZfvpL4rVFZg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 01:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:62:f2:bd:b7:a2:3c:c0:81:77:a4:4d:2e:af:d1:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362 Validity Not Before: Nov 22 01:00:59 2024 GMT Not After : Nov 23 01:00:59 2024 GMT Subject: CN=38d3dd8d51c41af30512084f0391a9f886c0a34a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:24:b7:bb:e1:3e:f9:ce:89:2b:18:d9:1b:0e: 82:02:7b:21:4a:6a:9d:30:d3:f4:60:c3:ee:9e:1c: f5:60:59:8b:c3:3c:fc:7e:97:39:b8:ac:2e:d8:4f: 34:7f:7a:7f:59:f4:15:00:2c:01:29:bd:a3:5e:dc: b2:78:90:a6:1e:18:5c:bf:19:e8:de:32:44:84:58: 30:48:db:b8:88:b8:e2:74:ba:27:c0:d3:12:01:0c: 01:98:a3:48:95:e4:c3:60:5c:20:e7:09:b9:76:83: 44:09:24:08:94:ca:7e:19:4f:d7:68:e9:b5:07:64: 4e:1a:65:dd:26:ef:92:7a:95:78:6c:95:53:8b:43: 39:cf:24:9b:1b:73:d6:5e:36:54:d1:2e:3d:5f:24: a6:3f:0c:dd:14:3a:2a:6a:ec:52:c9:bb:45:ad:56: 49:b6:43:d7:e7:7d:9b:58:ba:28:20:c5:96:26:98: 40:9e:2a:29:85:ff:e9:18:f8:5f:b9:ab:df:03:c6: bf:3a:e9:0d:79:c4:a1:99:80:c8:67:91:64:72:5d: c9:da:ac:90:c3:f8:d6:9f:7c:af:91:b8:f7:35:26: 3f:ee:2c:45:cd:66:26:f0:3d:dd:9a:c5:a2:39:d4: d1:8d:9b:3a:d2:03:b2:da:c9:31:5a:d5:e5:bd:9c: ec:e1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 38:D3:DD:8D:51:C4:1A:F3:05:12:08:4F:03:91:A9:F8:86:C0:A3:4A X509v3 Authority Key Identifier: keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:b3:98:d7:5e:f6:fd:6e:66:e0:c8:56:7e:ad:0a:e8:23:2d: a7:d2:9f:a4:a9:f6:d6:38:06:05:c3:a4:ae:4b:f9:72:c1:80: e3:41:98:83:95:63:79:56:c2:d7:8b:4e:63:ed:5d:6c:c5:da: 6d:e8:be:ac:e4:41:5a:c9:1e:46:b5:73:87:1f:28:30:2d:e0: 5c:b1:17:59:79:05:e1:80:8b:08:79:86:3b:3f:97:d4:5b:ce: e4:ce:e0:44:7a:8e:b0:68:0d:13:c1:67:55:14:67:0c:d4:1e: e9:2a:4b:92:9d:7e:a5:aa:8f:6c:97:9f:bd:da:46:5c:22:f4: 8a:fa:84:a9:ca:50:cd:27:f4:77:3b:54:06:64:4c:01:de:3d: bc:e8:a9:3b:d8:40:7d:8c:50:5a:a1:30:4f:49:5f:00:00:99: e5:b2:bf:66:d6:71:c5:25:f7:61:5c:ba:44:89:65:cf:5e:ca: 40:3e:cb:39:00:32:44:6b:19:f5:3e:1d:17:29:fd:e2:27:ca: 92:37:f1:21:89:be:79:62:87:90:41:da:0b:ae:41:a0:de:d9: 57:82:2e:c7:2a:43:02:f7:ed:0e:ca:65:86:ab:ec:46:2a:04: 9a:9c:c0:b6:2f:2a:fa:ee:fc:bc:98:6b:77:09:e7:3d:4b:92: 08:8e:bc:59 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRYvK9t6I8wIF3pE0ur9G7MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5 NjMzNjIwHhcNMjQxMTIyMDEwMDU5WhcNMjQxMTIzMDEwMDU5WjAzMTEwLwYDVQQD EygzOGQzZGQ4ZDUxYzQxYWYzMDUxMjA4NGYwMzkxYTlmODg2YzBhMzRhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviS3u+E++c6JKxjZGw6CAnshSmqd MNP0YMPunhz1YFmLwzz8fpc5uKwu2E80f3p/WfQVACwBKb2jXtyyeJCmHhhcvxno 3jJEhFgwSNu4iLjidLonwNMSAQwBmKNIleTDYFwg5wm5doNECSQIlMp+GU/XaOm1 B2ROGmXdJu+SepV4bJVTi0M5zySbG3PWXjZU0S49XySmPwzdFDoqauxSybtFrVZJ tkPX532bWLooIMWWJphAniophf/pGPhfuavfA8a/OukNecShmYDIZ5Fkcl3J2qyQ w/jWn3yvkbj3NSY/7ixFzWYm8D3dmsWiOdTRjZs60gOy2skxWtXlvZzs4QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDjT3Y1RxBrzBRIITwORqfiGwKNKMB8GA1UdIwQY MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt YjE2Y2I0ZGZhZGQzLzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb7OY1172 /W5m4MhWfq0K6CMtp9KfpKn21jgGBcOkrkv5csGA40GYg5VjeVbC14tOY+1dbMXa bei+rORBWskeRrVzhx8oMC3gXLEXWXkF4YCLCHmGOz+X1FvO5M7gRHqOsGgNE8Fn VRRnDNQe6SpLkp1+paqPbJefvdpGXCL0ivqEqcpQzSf0dztUBmRMAd49vOipO9hA fYxQWqEwT0lfAACZ5bK/ZtZxxSX3YVy6RIllz17KQD7LOQAyRGsZ9T4dFyn94ifK kjfxIYm+eWKHkEHaC65BoN7ZV4IuxypDAvftDsplhqvsRioEmpzAti8q+u78vJhr dwnnPUuSCI68WQ== -----END CERTIFICATE-----Generated at Fri Nov 22 09:56:04 2024 by rpki-client on console-ams.rpki-client.org