$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft File: QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft (raw, json) Hash identifier: k29sPmfWMRF7qt5ajWYlgGCU40o474BXVl2OUYxoOA0= Subject key identifier: C6:56:42:70:68:FC:70:55:6E:F5:98:30:27:EC:1E:5C:78:C7:9D:E3 Authority key identifier: 42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A Certificate issuer: /CN=42f8ab2ba24879e45c445486fceb21af46656d5a Certificate serial: 018F8447D1BC5B63B4F5793DCB1CE79DF954 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft Manifest number: 0EC4 Signing time: Fri 17 May 2024 02:00:50 +0000 Manifest this update: Fri 17 May 2024 02:00:50 +0000 Manifest next update: Sat 18 May 2024 02:00:50 +0000 Files and hashes: 1: CZHhAV2krkEDqW4m67HRTIvcas4.roa (hash: G7C2GZ1/XSXeEq1uCuRxtCsq4rzVqO7dHsni3cl+9jo=) 2: O-__0NXDzQFVCd8cuIy_brDwwSA.roa (hash: D5DpCD68QKAkLi3h5PCtGLZiXnduo7g6LYQTLUdg08s=) 3: QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl (hash: caeoFFcHvoVS2cY7Xo50eiuHlMUTf9ymvMuAb07Z0+I=) 4: ZF9449-41UhJXmrXFkaxGnmMBxo.roa (hash: NbupFgZ400cBwsoaeMYQOGAWszg917QM3WiEMbkjn8g=) 5: ZZHTrcZtMyPT5Zn8uRN-UvF2pl8.roa (hash: IVW9PIGkrTyLPNC5ByOXCkOGUUEYZpsuzzpmGF46dlk=) 6: aH2wXa57pNMxu0vSAzEAdH2GLCU.roa (hash: iLTh6H/fg7jKkVITNzGwR/DsAhzxYJal5UdIDzBWR6g=) 7: or4JqpUqVfuyDErnrAkinjF0LRU.roa (hash: MAkxgFBeaSG5HNGqaCtBIWDGTwRhTD+aOYyxBsnrbBE=) 8: pd3mdOT8agiACSepSs9mrkMBjb0.roa (hash: jqUdQcoKLTm4rxSGiLxF/uMtXKISzq6uTnjKhbm/bG4=) 9: tBGrkKjwjsXKTKSAQ85_BaNmAR4.roa (hash: ZXotWny2AIx11o7E6So+NW89Pv4fMzvhWH6Qcn3Wvmc=) 10: wC2CIDmq7XPKcBvPGFiPRucATOw.roa (hash: 2HpbHTFpj0DvUZsG87H8lcThDqRm6rWFqT0+IxWyTfY=) 11: xatcrhFoun4L5mgNf4fubWFHTZk.roa (hash: BslNuDSr3pZx4kYGbe1xX8/Qmx8dvXuE2v/g6HGJkIo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:84:47:d1:bc:5b:63:b4:f5:79:3d:cb:1c:e7:9d:f9:54 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=42f8ab2ba24879e45c445486fceb21af46656d5a Validity Not Before: May 17 02:00:50 2024 GMT Not After : May 18 02:00:50 2024 GMT Subject: CN=c656427068fc70556ef5983027ec1e5c78c79de3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:15:1f:a6:03:c2:17:0d:95:0e:fc:ad:5f:64: ca:d8:7c:07:78:35:cf:89:c3:89:da:63:b0:d8:b4: 03:a5:20:5a:ff:ce:63:3b:2e:ae:76:b0:f8:f3:aa: 0d:dd:04:26:dc:49:dd:a6:bc:64:10:c0:63:de:c2: 8d:c2:92:6a:7e:fa:02:38:64:73:3f:90:b8:c9:bd: 3d:da:98:74:b5:cb:38:c5:29:1c:b0:0c:83:9f:8d: 2a:be:16:46:f0:e4:eb:dd:19:4f:4f:2d:94:59:84: 64:f0:39:1e:4f:3d:9f:f3:a3:41:00:9b:d1:4c:ec: 13:d7:35:6a:6e:3b:46:47:f0:98:74:b2:28:a6:c7: 1d:b0:8b:2a:ff:8b:b7:a5:d1:84:66:2c:0e:f5:88: 5a:61:8f:77:45:98:15:4a:a6:4f:ed:a5:61:99:9d: 9f:33:ad:a8:b9:e6:50:a8:14:e6:16:b4:67:a3:1d: 56:91:90:45:ef:06:cf:4c:bd:a3:f8:dc:06:49:a8: af:91:e4:1d:61:79:5d:1f:4d:86:11:d0:32:90:88: 90:52:76:9f:83:95:f2:f4:55:0f:95:41:d2:72:ac: de:8a:22:ae:7d:de:de:df:1f:d4:cf:39:18:58:cb: e8:63:ef:63:74:06:2b:87:17:ed:70:2e:e7:fc:1f: 8a:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C6:56:42:70:68:FC:70:55:6E:F5:98:30:27:EC:1E:5C:78:C7:9D:E3 X509v3 Authority Key Identifier: keyid:42:F8:AB:2B:A2:48:79:E4:5C:44:54:86:FC:EB:21:AF:46:65:6D:5A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QvirK6JIeeRcRFSG_Oshr0ZlbVo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c17c5d-7543-440f-878f-1769fef6be96/1/QvirK6JIeeRcRFSG_Oshr0ZlbVo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption df:89:fb:4a:fa:ea:9b:14:2a:a7:88:d8:97:ab:11:e4:68:8b: 12:39:b9:ea:ab:92:c8:98:94:a7:c0:57:8f:b5:32:a9:43:3d: 19:60:26:33:d4:12:65:f8:0e:06:0a:01:31:c7:70:bd:ff:fc: f6:99:1f:d3:36:19:8f:08:9c:7a:be:5a:85:71:c6:4a:0e:e5: 38:fa:f6:3c:c8:b2:85:33:70:2e:22:d5:eb:6b:5f:c1:e6:a0: f1:3c:69:cc:ef:88:61:b6:c2:b1:dc:a2:ad:3b:9f:18:44:2b: f4:61:19:7c:a5:3c:b3:8a:9b:b3:98:47:08:1a:5f:78:5d:9a: 82:f4:20:d8:0a:15:df:46:eb:91:df:48:da:22:bc:34:9f:2f: bc:46:dc:3b:ee:1f:28:40:c8:ad:f3:58:93:e4:63:3c:5c:de: 8d:3f:fb:13:84:8e:23:5c:6a:7b:6f:a7:1c:0f:0f:83:a7:79: de:63:b9:09:c9:f0:6f:83:ef:c2:8e:98:d4:db:c3:ce:2c:7a: 13:bb:38:79:7c:74:69:61:79:e6:d2:10:44:3b:eb:aa:57:c3: 5e:12:64:8e:d6:e0:b1:7e:82:34:49:f6:3e:5c:68:20:45:c9: a3:cf:91:1b:b7:88:a5:30:56:73:cb:5c:33:32:89:e3:70:54: 94:ee:fa:1e -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+ER9G8W2O09Xk9yxznnflUMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDQyZjhhYjJiYTI0ODc5ZTQ1YzQ0NTQ4NmZjZWIyMWFmNDY2 NTZkNWEwHhcNMjQwNTE3MDIwMDUwWhcNMjQwNTE4MDIwMDUwWjAzMTEwLwYDVQQD EyhjNjU2NDI3MDY4ZmM3MDU1NmVmNTk4MzAyN2VjMWU1Yzc4Yzc5ZGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoRUfpgPCFw2VDvytX2TK2HwHeDXP icOJ2mOw2LQDpSBa/85jOy6udrD486oN3QQm3EndprxkEMBj3sKNwpJqfvoCOGRz P5C4yb092ph0tcs4xSkcsAyDn40qvhZG8OTr3RlPTy2UWYRk8DkeTz2f86NBAJvR TOwT1zVqbjtGR/CYdLIopscdsIsq/4u3pdGEZiwO9YhaYY93RZgVSqZP7aVhmZ2f M62oueZQqBTmFrRnox1WkZBF7wbPTL2j+NwGSaivkeQdYXldH02GEdAykIiQUnaf g5Xy9FUPlUHScqzeiiKufd7e3x/UzzkYWMvoY+9jdAYrhxftcC7n/B+KfQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFMZWQnBo/HBVbvWYMCfsHlx4x53jMB8GA1UdIwQY MBaAFEL4qyuiSHnkXERUhvzrIa9GZW1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYt MTc2OWZlZjZiZTk2LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNC9jMTdjNWQtNzU0My00NDBmLTg3OGYtMTc2OWZlZjZiZTk2 LzEvUXZpcks2SkllZVJjUkZTR19Pc2hyMFpsYlZvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA34n7Svrq mxQqp4jYl6sR5GiLEjm56quSyJiUp8BXj7UyqUM9GWAmM9QSZfgOBgoBMcdwvf/8 9pkf0zYZjwicer5ahXHGSg7lOPr2PMiyhTNwLiLV62tfweag8TxpzO+IYbbCsdyi rTufGEQr9GEZfKU8s4qbs5hHCBpfeF2agvQg2AoV30brkd9I2iK8NJ8vvEbcO+4f KEDIrfNYk+RjPFzejT/7E4SOI1xqe2+nHA8Pg6d53mO5Ccnwb4Pvwo6Y1NvDzix6 E7s4eXx0aWF55tIQRDvrqlfDXhJkjtbgsX6CNEn2PlxoIEXJo8+RG7eIpTBWc8tc MzKJ43BUlO76Hg== -----END CERTIFICATE-----Generated at Fri May 17 05:35:15 2024 by rpki-client on console-ams.rpki-client.org