$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: 8e03BBjQJZGUEjUt1F4KqgmuUYW5B31aOjixLunrPo8= Subject key identifier: 68:94:2A:58:A1:E3:B6:F9:20:3A:BC:EC:51:09:54:9B:3F:57:49:4E Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 0193527503A406FF43B486929A682746787F Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 0BF3 Signing time: Fri 22 Nov 2024 06:00:20 +0000 Manifest this update: Fri 22 Nov 2024 06:00:20 +0000 Manifest next update: Sat 23 Nov 2024 06:00:20 +0000 Files and hashes: 1: 6PW-Vqk5H6Wj2081fgjzEJHGT3k.roa (hash: WGAglAZwZl39V8IC8LwnuDktx/vfJKpbzCf34mlkaf8=) 2: 9R1xtEP7l1oHy3OC_a1AoOF07LQ.roa (hash: SzaPTOP5dS/JC07twtKC80ETYyhMzMCospYmIGrAFqI=) 3: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: NSIVq/vQnlQIyr3Ck/hakNcpovyH4loBCLy5/kuctGw=) 4: LrSfmd566QVvOwlLMC7zxomrY2U.roa (hash: D8GvLGRRDlZDMo5CMCIaQSfZFiIRPV//N8nuX77Gdio=) 5: LrfUlsA5WfOXKzc4BUIaOvtLgWg.roa (hash: vLnLRAQhJil8g5eAEIev+hqWiQaK+6x5u9euwSMbH7c=) 6: O_cWPiU3raQrqDxs4zatO4idy0Y.roa (hash: sin5+5s1ipugsNF7arCak0i8IZeeAJKoxPpxgh2gldY=) 7: WciI7ArpdgcvglULiniBxnMrwpk.roa (hash: UNTJOdTewZGtB/fzMSHoxNrs8iS5S83h+DKa5XZTtwI=) 8: bbNYn_3dr0oMc_BCykzivIyhyVw.roa (hash: 4Pkf5HQP78AZbBdVgcvNsnsPMCZ7dj8JyJ4HCucUfAA=) 9: hNuFNniVlloM6muhWw_XWP-eI1A.roa (hash: zv1EqngSJ72f1tif2iJM2pxDwdAVYKFaT8bE6fkkQak=) 10: jalSk_9M-jp2JziUFcL42vg8J5Q.roa (hash: uvltO/PpvYYSzBwcM7o8nDEtUstGGhCcIf8eSWCeY2A=) 11: qmWhU9oSEBDjE-FOvGwIa6R3RXE.roa (hash: 4fDY8YWfH9CDwRSj8KqKMypD/mbrgmjgl3/U4T+qkSI=) 12: tVmd8MzzCixbL1mQkmt13m__4cU.roa (hash: rWHCVkqqWdhd9M4THku0WYx60L5xdz1AhDEB94medvU=) 13: yEP7iBQY-ezqoErL-LoVzwaBdeU.roa (hash: 14BquGjiIbUR/YvwOF1YRoBXSPp7HF/UClFU31Vhx8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:75:03:a4:06:ff:43:b4:86:92:9a:68:27:46:78:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Nov 22 06:00:20 2024 GMT Not After : Nov 23 06:00:20 2024 GMT Subject: CN=68942a58a1e3b6f9203abcec5109549b3f57494e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:a8:61:54:58:ee:68:85:6d:fa:03:95:d2:4f: 71:e7:49:bc:0a:aa:3e:48:0a:ad:65:ad:97:8f:4e: ef:7e:52:3a:99:16:80:53:ab:8e:a7:fa:e7:7a:ee: ec:b3:bf:0e:85:fc:77:6a:f8:6b:c4:2e:29:f6:de: 6b:ae:a5:4c:dd:38:e3:8b:87:43:10:c6:49:09:fb: d9:20:08:f3:cb:da:7c:b0:ed:c2:83:55:af:2c:d1: f7:4a:7e:db:84:89:5f:29:1b:a8:e2:7e:7d:5d:8b: b5:0e:fb:b7:0a:f6:d9:47:51:06:9f:a3:64:4b:78: 53:38:31:5a:36:b0:f1:8f:5a:57:88:0a:7b:14:17: 80:f0:05:bc:5b:5e:94:32:d0:65:ee:2d:97:e9:a3: 28:16:62:65:2c:09:b5:cc:a3:e4:27:69:85:03:ca: 61:23:dd:fa:0b:75:f5:05:91:b1:6e:55:49:c1:0f: 6f:6b:7e:2b:da:4c:09:c6:bb:b4:6f:66:cb:ea:96: 96:be:7c:2b:5d:ea:d8:20:38:3d:9b:eb:d4:f9:d5: 14:f1:e3:d1:81:7e:c3:67:eb:25:0c:93:12:2d:dd: 50:dd:05:77:5e:87:11:00:52:65:38:b0:85:73:9a: 26:ed:5d:3a:75:aa:9b:79:04:c0:ca:e9:98:77:06: fe:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 68:94:2A:58:A1:E3:B6:F9:20:3A:BC:EC:51:09:54:9B:3F:57:49:4E X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3c:16:ef:bf:f1:e0:36:06:e5:19:af:0d:75:5d:64:b6:a0:79: e5:9a:6f:51:34:f7:c7:60:af:f1:2f:aa:cd:f8:20:fe:03:c5: 56:5b:28:ed:6f:71:ea:37:fa:b5:1d:3a:7a:29:20:38:13:51: 73:01:55:c2:ee:e7:42:e7:0e:2c:5a:59:37:52:f2:a9:7b:ef: 2b:78:75:c0:40:97:ef:8b:32:27:82:60:1d:bd:f8:06:99:8c: c6:4e:e9:6c:ab:72:ee:cc:ae:47:e3:4d:52:4b:89:d4:93:e5: 1f:62:1f:0c:c4:5d:87:22:c5:ea:ea:64:52:db:4f:0c:c2:79: 71:d8:56:f8:ca:fc:ec:35:44:a8:16:16:95:04:00:d7:1d:f7: 21:93:17:7a:0b:b3:31:66:a8:a6:2e:55:85:11:7c:49:69:9e: fe:f5:eb:32:08:22:ed:56:90:c8:f2:68:f8:e6:51:58:55:54: 58:36:f1:f3:6c:66:ac:79:53:6e:b0:f9:e1:7a:e6:29:28:6f: 63:32:5a:f1:72:40:5a:55:a6:04:fa:e6:ee:f7:bf:b4:07:a8: 42:85:c5:22:37:3c:b2:0b:07:09:b2:df:c1:90:60:f1:a2:f4: f0:cf:bc:c4:d4:46:f7:bb:e0:6a:01:69:eb:88:78:c7:ae:b8: c9:15:46:ea -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSdQOkBv9DtIaSmmgnRnh/MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjQxMTIyMDYwMDIwWhcNMjQxMTIzMDYwMDIwWjAzMTEwLwYDVQQD Eyg2ODk0MmE1OGExZTNiNmY5MjAzYWJjZWM1MTA5NTQ5YjNmNTc0OTRlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmahhVFjuaIVt+gOV0k9x50m8Cqo+ SAqtZa2Xj07vflI6mRaAU6uOp/rneu7ss78Ohfx3avhrxC4p9t5rrqVM3Tjji4dD EMZJCfvZIAjzy9p8sO3Cg1WvLNH3Sn7bhIlfKRuo4n59XYu1Dvu3CvbZR1EGn6Nk S3hTODFaNrDxj1pXiAp7FBeA8AW8W16UMtBl7i2X6aMoFmJlLAm1zKPkJ2mFA8ph I936C3X1BZGxblVJwQ9va34r2kwJxru0b2bL6paWvnwrXerYIDg9m+vU+dUU8ePR gX7DZ+slDJMSLd1Q3QV3XocRAFJlOLCFc5om7V06daqbeQTAyumYdwb+ywIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGiUKlih47b5IDq87FEJVJs/V0lOMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPBbvv/Hg NgblGa8NdV1ktqB55ZpvUTT3x2Cv8S+qzfgg/gPFVlso7W9x6jf6tR06eikgOBNR cwFVwu7nQucOLFpZN1LyqXvvK3h1wECX74syJ4JgHb34BpmMxk7pbKty7syuR+NN UkuJ1JPlH2IfDMRdhyLF6upkUttPDMJ5cdhW+Mr87DVEqBYWlQQA1x33IZMXeguz MWaopi5VhRF8SWme/vXrMggi7VaQyPJo+OZRWFVUWDbx82xmrHlTbrD54XrmKShv YzJa8XJAWlWmBPrm7ve/tAeoQoXFIjc8sgsHCbLfwZBg8aL08M+8xNRG97vgagFp 64h4x664yRVG6g== -----END CERTIFICATE-----Generated at Fri Nov 22 07:03:05 2024 by rpki-client on console-fra.rpki-client.org