$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft File: SeFL929C2k8qwAOmxp1hwjIOLNg.mft (raw, json) Hash identifier: HxVlN1j5a5ippbpEYKqoB1QsBVCYHjNBEpbgM5oWpE8= Subject key identifier: FD:44:80:FF:43:C0:95:D3:6C:BE:35:77:C2:89:F6:6B:19:A7:95:FC Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Certificate serial: 019352070D79A912594FDFF9D942448DDF8C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft Manifest number: 0DDD Signing time: Fri 22 Nov 2024 04:00:13 +0000 Manifest this update: Fri 22 Nov 2024 04:00:13 +0000 Manifest next update: Sat 23 Nov 2024 04:00:13 +0000 Files and hashes: 1: DNVleQIQvkyD3V-ndEb6nkIX4Yo.roa (hash: I5KN7ficXAkAVHs3BqWiCuYjY67PyYhXQa3bTnXsNAg=) 2: GbI0C5rlPqvXXay48JANnzW8zZs.roa (hash: Pzw9Ufyry9DniOEbAxnZGzJzw2TC7cKNpTymgPktbJ8=) 3: SeFL929C2k8qwAOmxp1hwjIOLNg.crl (hash: R5hehostoW0kET/SBjHR75r1IWUrw3CyuGvObq1+kHU=) 4: W5giSNDmnJI0e9zdN3U7vGqWQj8.roa (hash: o35ZzoCl4bY3qgTRzeSYsVuiaU4VUybmfcXB/ks1yPc=) 5: XTO8dGabG27tG5axaN_S4rj1eLA.roa (hash: /qbrsnb3J+1StdfC/k2oElq8wnZ7GuIexeNyLuqjOVk=) 6: YF1Q-M1OrtGkM0pvahia4y554So.roa (hash: M1yHB9xY028rXdQIZ/6twwaOcVAbgAmQjfMjq7hFaRE=) 7: gs3zzjTHC8nmMxC3j9qzfeEFTSw.roa (hash: 7zGlAzMi8QDeXYRbCk1TcxKLsh2LbZSy0v7DZI5tlPo=) 8: lgCl1BQJ0GhVbq0hEp1-bf7zKDo.roa (hash: UzoApNVoQ+CshrQRuY0dYhO6jHLzC5/6dfHgyoMwSmM=) 9: lkHQGHdQHuVzFvk0e2T5yFFmr7k.roa (hash: KqWwUI0yCTagV0bj3CBhYwfXeT9NeaHkf7APcF1t5Hk=) 10: nZHSIhnx28DaDIpIndJ5JdFjlg8.roa (hash: nZRDyZ75NoY13TjFkJMiwcPm+ghCaoUaFFl2Io7Hh8c=) 11: yN0U-yWGP1qqvZMViPHwnfDWkDs.roa (hash: U1nu8GwEN5FBkujWsx0hMur+gIVJVWVFqF4obEYaGss=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:0d:79:a9:12:59:4f:df:f9:d9:42:44:8d:df:8c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8 Validity Not Before: Nov 22 04:00:13 2024 GMT Not After : Nov 23 04:00:13 2024 GMT Subject: CN=fd4480ff43c095d36cbe3577c289f66b19a795fc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:3b:42:68:34:d6:65:68:5c:28:f0:4e:92:9d: 85:df:9e:4f:a6:a1:d7:dc:3d:5c:7b:ae:01:dd:bc: 41:2f:8b:cc:c0:57:d1:d3:08:cb:e7:d2:2a:e2:a0: 1c:09:85:01:30:02:fa:6c:81:ed:77:3b:1c:cf:33: 63:8f:fa:7d:04:37:6c:9a:f7:b3:86:a7:95:60:6a: a0:03:d7:ac:d5:d3:28:d7:f4:d5:79:81:29:a7:19: a3:6f:3b:c1:61:65:0d:e4:11:4c:04:41:44:74:e3: 62:99:5a:52:be:d8:44:46:42:4d:9a:14:c6:a8:3c: cd:d5:29:67:b1:4a:4e:c0:5f:bb:90:bb:c9:e5:37: cf:5c:b4:1e:b1:f7:d9:56:28:e3:55:c4:d1:0f:5f: 56:1c:93:3e:8a:42:e8:51:db:32:bc:0b:a6:fa:5b: e7:7b:fc:39:ce:86:07:0e:3e:30:75:16:c6:17:6e: 46:ff:19:27:bc:07:40:8f:c3:1b:2b:9a:2c:1f:27: c3:cb:05:e4:d2:96:75:79:a1:d4:11:fb:2b:24:6d: 3e:99:0b:3a:2f:aa:98:da:9d:f8:b4:e7:80:e4:35: 4d:00:55:64:8c:9d:be:67:a6:45:90:5a:0e:61:5e: d2:3e:ca:4b:51:72:bf:07:ee:82:33:84:09:85:1b: 6a:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:44:80:FF:43:C0:95:D3:6C:BE:35:77:C2:89:F6:6B:19:A7:95:FC X509v3 Authority Key Identifier: keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 14:03:f1:41:14:0b:23:a8:8f:3b:da:a3:10:c1:cf:30:bd:98: 0c:ce:3f:cc:9e:b5:85:47:96:8b:b4:14:2a:62:71:87:50:c5: 58:d7:59:f4:48:46:29:a8:db:a4:5b:eb:61:0b:c3:c3:7a:31: ee:c4:5b:cf:b9:97:0b:47:6c:03:d5:8b:7d:04:3f:50:7e:e0: 97:00:5b:32:c7:42:aa:23:c9:65:db:c0:6e:7d:43:57:72:6e: c5:36:0a:c5:a2:10:a9:f9:5c:bb:76:c1:ed:43:0c:11:a4:20: 02:7f:2e:34:e9:f3:b7:2d:81:fb:e0:51:ad:1e:19:25:95:46: 60:f8:6c:59:55:3e:f5:27:1d:dc:9e:83:13:a7:24:d7:99:f4: 1d:2b:50:6e:0d:71:7e:74:07:56:5d:d3:ac:88:bd:4e:5f:2a: 84:af:6a:a9:aa:6c:9d:bb:99:96:cc:cc:2d:27:3f:09:b7:c8: d2:1a:40:b8:2b:e9:fc:db:db:aa:f3:2b:bd:82:dc:6c:87:9a: b4:6f:32:7b:5a:7a:e6:d0:3e:fc:4f:68:bd:0c:74:df:e6:c1: e1:73:b9:58:84:19:c4:5a:cb:83:b5:d3:8b:ab:13:77:62:13: 53:17:29:bc:64:9d:32:6f:3b:63:e2:62:aa:63:bd:2e:5f:c0: 5c:16:f3:d2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSBw15qRJZT9/52UJEjd+MMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw ZTJjZDgwHhcNMjQxMTIyMDQwMDEzWhcNMjQxMTIzMDQwMDEzWjAzMTEwLwYDVQQD EyhmZDQ0ODBmZjQzYzA5NWQzNmNiZTM1NzdjMjg5ZjY2YjE5YTc5NWZjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtztCaDTWZWhcKPBOkp2F355PpqHX 3D1ce64B3bxBL4vMwFfR0wjL59Iq4qAcCYUBMAL6bIHtdzsczzNjj/p9BDdsmvez hqeVYGqgA9es1dMo1/TVeYEppxmjbzvBYWUN5BFMBEFEdONimVpSvthERkJNmhTG qDzN1SlnsUpOwF+7kLvJ5TfPXLQesffZVijjVcTRD19WHJM+ikLoUdsyvAum+lvn e/w5zoYHDj4wdRbGF25G/xknvAdAj8MbK5osHyfDywXk0pZ1eaHUEfsrJG0+mQs6 L6qY2p34tOeA5DVNAFVkjJ2+Z6ZFkFoOYV7SPspLUXK/B+6CM4QJhRtqAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFP1EgP9DwJXTbL41d8KJ9msZp5X8MB8GA1UdIwQY MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt M2JlY2NhYWUzMzZkLzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFAPxQRQL I6iPO9qjEMHPML2YDM4/zJ61hUeWi7QUKmJxh1DFWNdZ9EhGKajbpFvrYQvDw3ox 7sRbz7mXC0dsA9WLfQQ/UH7glwBbMsdCqiPJZdvAbn1DV3JuxTYKxaIQqflcu3bB 7UMMEaQgAn8uNOnzty2B++BRrR4ZJZVGYPhsWVU+9Scd3J6DE6ck15n0HStQbg1x fnQHVl3TrIi9Tl8qhK9qqapsnbuZlszMLSc/CbfI0hpAuCvp/NvbqvMrvYLcbIea tG8ye1p65tA+/E9ovQx03+bB4XO5WIQZxFrLg7XTi6sTd2ITUxcpvGSdMm87Y+Ji qmO9Ll/AXBbz0g== -----END CERTIFICATE-----Generated at Fri Nov 22 05:52:29 2024 by rpki-client on console-fra.rpki-client.org