$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft File: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft (raw, json) Hash identifier: w8x3I/pfSNr7TIJSqDrbA6SLTgbcgAlT+JtYcPzjwpE= Subject key identifier: 34:BD:2A:44:10:A6:61:59:E7:E1:B8:32:71:07:0E:15:6E:1C:B6:DB Authority key identifier: 2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 Certificate issuer: /CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Certificate serial: 018F0FFA433724B08507796647C96D3A1321 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft Manifest number: 09B9 Signing time: Wed 24 Apr 2024 12:00:10 +0000 Manifest this update: Wed 24 Apr 2024 12:00:10 +0000 Manifest next update: Thu 25 Apr 2024 12:00:10 +0000 Files and hashes: 1: 4ijE6IgHMU_4FD59IgEPFqezREc.roa (hash: /NaCGNB4SUQzsnK0T28ZmjNozakmt8IoXghurYoP07Q=) 2: 9R1xtEP7l1oHy3OC_a1AoOF07LQ.roa (hash: SzaPTOP5dS/JC07twtKC80ETYyhMzMCospYmIGrAFqI=) 3: LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl (hash: bj2/apYW5XaXWWK+LYfoTBIalLFha1tQXpHOq00eR8w=) 4: LrSfmd566QVvOwlLMC7zxomrY2U.roa (hash: D8GvLGRRDlZDMo5CMCIaQSfZFiIRPV//N8nuX77Gdio=) 5: LrfUlsA5WfOXKzc4BUIaOvtLgWg.roa (hash: vLnLRAQhJil8g5eAEIev+hqWiQaK+6x5u9euwSMbH7c=) 6: O_cWPiU3raQrqDxs4zatO4idy0Y.roa (hash: sin5+5s1ipugsNF7arCak0i8IZeeAJKoxPpxgh2gldY=) 7: bbNYn_3dr0oMc_BCykzivIyhyVw.roa (hash: 4Pkf5HQP78AZbBdVgcvNsnsPMCZ7dj8JyJ4HCucUfAA=) 8: fcdNzEinFrEqEiz-1FKcYEwl9zc.roa (hash: KoedLQT6PsDzdh75u20EFOThztPuThrFjlxHuXGWcYA=) 9: hNuFNniVlloM6muhWw_XWP-eI1A.roa (hash: zv1EqngSJ72f1tif2iJM2pxDwdAVYKFaT8bE6fkkQak=) 10: jalSk_9M-jp2JziUFcL42vg8J5Q.roa (hash: uvltO/PpvYYSzBwcM7o8nDEtUstGGhCcIf8eSWCeY2A=) 11: pSBQe5y7CwgZA5VjtUH-0UnTOj4.roa (hash: iLEgeoQtr8YO7bJclfG+oJXKF95mRUaEaJJZk635kD8=) 12: qmWhU9oSEBDjE-FOvGwIa6R3RXE.roa (hash: 4fDY8YWfH9CDwRSj8KqKMypD/mbrgmjgl3/U4T+qkSI=) 13: yEP7iBQY-ezqoErL-LoVzwaBdeU.roa (hash: 14BquGjiIbUR/YvwOF1YRoBXSPp7HF/UClFU31Vhx8w=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 25 Apr 2024 11:00:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:0f:fa:43:37:24:b0:85:07:79:66:47:c9:6d:3a:13:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2e82963ff1aa70ab10d1d33e86b1d6d494d6ce51 Validity Not Before: Apr 24 12:00:10 2024 GMT Not After : Apr 25 12:00:10 2024 GMT Subject: CN=34bd2a4410a66159e7e1b83271070e156e1cb6db Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8e:c1:2a:b6:48:43:8d:3e:fe:00:b5:af:0e:1b: 82:f0:a0:16:89:e4:ef:75:cd:05:7e:e0:e4:09:8d: 89:9e:d6:1d:fe:eb:02:54:a8:25:8e:7b:ef:2b:9d: 59:37:22:a0:14:4b:dd:f8:d7:69:01:a3:c8:c9:92: 2e:ba:88:09:30:bf:dc:c2:3b:5a:c1:b2:0c:8f:60: 1f:95:8c:cf:8c:c1:76:26:39:05:59:98:90:46:60: 19:ad:2d:f0:bd:4b:36:d0:a6:26:3a:e8:63:a5:d2: e4:53:c4:3a:6e:36:af:b0:a6:ae:5f:77:1b:60:ca: 37:65:55:b6:48:56:bf:3f:77:4f:25:b7:38:59:8d: 5e:59:64:49:7e:db:89:dc:5d:0d:11:73:5f:63:13: 5e:4e:93:4f:5e:dd:ed:14:c0:a6:0d:80:53:c3:f5: 2c:f1:cd:ec:97:eb:40:51:03:e9:55:99:25:e5:c3: 0b:a3:dc:31:1b:ae:4c:29:4b:b3:0a:52:3c:74:d7: c3:09:4b:a4:f5:2e:9e:5e:af:77:73:01:c3:fe:3d: 0c:cf:46:00:a2:eb:ed:ab:3d:4d:ea:d9:3f:30:33: e6:b7:0e:77:11:07:6e:6a:3f:eb:ea:10:ca:92:f8: 03:8c:dc:63:37:74:e3:fb:3d:86:10:6c:34:83:51: dc:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:BD:2A:44:10:A6:61:59:E7:E1:B8:32:71:07:0E:15:6E:1C:B6:DB X509v3 Authority Key Identifier: keyid:2E:82:96:3F:F1:AA:70:AB:10:D1:D3:3E:86:B1:D6:D4:94:D6:CE:51 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/957c68-6f27-40ed-abed-df64f0e82360/1/LoKWP_GqcKsQ0dM-hrHW1JTWzlE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 32:20:26:71:e9:0e:8e:33:d1:30:95:ac:f0:87:6a:04:32:71: 1c:5f:7a:9b:5d:45:3e:79:20:8f:bb:e3:72:cb:31:83:dc:41: 0d:07:78:2e:61:7b:98:ed:1e:f1:98:2c:de:7c:ac:f8:15:8d: fb:cd:fa:73:e1:d1:33:e0:54:57:4f:ca:75:6a:cd:e1:cc:d8: c4:8d:c4:1d:f6:09:ee:1e:b6:93:59:44:a2:c6:35:4f:ed:48: be:8a:55:27:b8:0c:06:bc:b8:f2:7e:bd:9f:67:2c:bf:40:9c: ce:5a:1c:08:0c:31:3e:f0:be:e5:55:40:23:99:42:49:3f:80: 97:a5:fe:d3:27:35:0c:87:b2:2f:66:d3:1c:d5:5a:eb:2d:71: 93:64:ea:40:cd:bf:02:89:bd:14:d9:56:ea:ac:51:46:ec:33: 2f:df:41:b4:39:ed:c0:03:c3:76:a1:cd:b4:bf:f4:5e:66:fd: ef:c9:b9:70:f5:8d:94:a4:73:cd:0b:9c:94:94:ea:a3:a3:a5: ce:f6:f7:2f:40:a6:27:05:95:ef:8b:87:e9:00:d3:1b:a6:98: 59:36:e2:f0:4c:b9:cd:51:b0:41:11:c1:74:8f:52:a3:98:15: 07:81:a9:57:7a:f3:44:e4:b3:6a:f8:25:d5:b5:6f:54:24:70: e0:1d:2a:20 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8P+kM3JLCFB3lmR8ltOhMhMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJlODI5NjNmZjFhYTcwYWIxMGQxZDMzZTg2YjFkNmQ0OTRk NmNlNTEwHhcNMjQwNDI0MTIwMDEwWhcNMjQwNDI1MTIwMDEwWjAzMTEwLwYDVQQD EygzNGJkMmE0NDEwYTY2MTU5ZTdlMWI4MzI3MTA3MGUxNTZlMWNiNmRiMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsEqtkhDjT7+ALWvDhuC8KAWieTv dc0FfuDkCY2JntYd/usCVKgljnvvK51ZNyKgFEvd+NdpAaPIyZIuuogJML/cwjta wbIMj2AflYzPjMF2JjkFWZiQRmAZrS3wvUs20KYmOuhjpdLkU8Q6bjavsKauX3cb YMo3ZVW2SFa/P3dPJbc4WY1eWWRJftuJ3F0NEXNfYxNeTpNPXt3tFMCmDYBTw/Us 8c3sl+tAUQPpVZkl5cMLo9wxG65MKUuzClI8dNfDCUuk9S6eXq93cwHD/j0Mz0YA ouvtqz1N6tk/MDPmtw53EQduaj/r6hDKkvgDjNxjN3Tj+z2GEGw0g1Hc+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDS9KkQQpmFZ5+G4MnEHDhVuHLbbMB8GA1UdIwQY MBaAFC6Clj/xqnCrENHTPoax1tSU1s5RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQt ZGY2NGYwZTgyMzYwLzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hMi85NTdjNjgtNmYyNy00MGVkLWFiZWQtZGY2NGYwZTgyMzYw LzEvTG9LV1BfR3FjS3NRMGRNLWhySFcxSlRXemxFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMiAmcekO jjPRMJWs8IdqBDJxHF96m11FPnkgj7vjcssxg9xBDQd4LmF7mO0e8Zgs3nys+BWN +836c+HRM+BUV0/KdWrN4czYxI3EHfYJ7h62k1lEosY1T+1IvopVJ7gMBry48n69 n2csv0CczlocCAwxPvC+5VVAI5lCST+Al6X+0yc1DIeyL2bTHNVa6y1xk2TqQM2/ Aom9FNlW6qxRRuwzL99BtDntwAPDdqHNtL/0Xmb978m5cPWNlKRzzQuclJTqo6Ol zvb3L0CmJwWV74uH6QDTG6aYWTbi8Ey5zVGwQRHBdI9So5gVB4GpV3rzROSzavgl 1bVvVCRw4B0qIA== -----END CERTIFICATE-----Generated at Wed Apr 24 14:16:56 2024 by rpki-client on console-ams.rpki-client.org