$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft File: fKZDuzmcbYetxMfLpdK3L70A0EY.mft (raw, json) Hash identifier: PmZR3YaHVxxN92WyFUiOd25Lc9LsCuEPCHt95246gvg= Subject key identifier: 57:97:F2:7F:FC:75:C0:52:83:DE:E2:75:2F:80:35:0D:35:88:70:2F Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Certificate serial: 01935086A09F6B5D58483DB99715A6F2FDD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft Manifest number: 0D38 Signing time: Thu 21 Nov 2024 21:00:20 +0000 Manifest this update: Thu 21 Nov 2024 21:00:20 +0000 Manifest next update: Fri 22 Nov 2024 21:00:20 +0000 Files and hashes: 1: 1-umA8kMpL9U8bveK4PhI8pC7Iy8.roa (hash: ZCM8IsKkXM5hxyavnTWPjTbiHEYG7akRI1xhRdgbwQU=) 2: 6dH0aE9YoHnrvcV-_qXTHANBCjM.roa (hash: 89x/KKCo2rh2fmFNV7EDs2EqIkiY6nCibMJTVDs+JVw=) 3: 9i4SBcAQbbxJJ7-ujFUmRgPdqhg.roa (hash: Q4N/uMpu8S735DeNgBOoqsl5y6vL8d/og7CpNy+rFbI=) 4: CFz2Wk2b0mhBpexEd43LdPyh-pY.roa (hash: kDFXisowkfq8D2XsEouvlxIV+qNAOy4KjwoUTm24Aiw=) 5: GM9puCmtkmv6vONJyESSZG4GDCM.roa (hash: iKEmqT66+uoFq/l3/5ot7zYIZhxOxAJQkqlwzQnHZ1w=) 6: HDnPjlAOb-hMtdfTgLqUSIAUXbs.roa (hash: xMNqMTHd7OITgi5sWrYWN3Wv0EI6PBGK7h3f2V01nyc=) 7: cWGh-YeqJJ15a1wMYDPbFLsgtE4.roa (hash: tsqhpY3TmYQ2Z5Huu0WnwydjgN4ESIcZnUW7PEAbDO0=) 8: fKZDuzmcbYetxMfLpdK3L70A0EY.crl (hash: q9xoWkuUtv/DLMd9HW7hHTxstL8LYmrLpywwo3Msmog=) 9: le2nvzNB36tyoI2uE4ylhscAzxY.roa (hash: To7gM9OgMe1NloGliS2ida8+Qp0wtngmB0529u42wK0=) 10: mXJk2JZaX_rpeuxneOaZFpEOMdc.roa (hash: 5jueZ1GHcyO7m7ORxSAjmNaw2O5jJE+uUva8pQfP9ZQ=) 11: tsNrq3-_rTg36aaTcbtEyEt5t-Q.roa (hash: zEE0lY+LgAdjz2XtweUdsBTZuFTs4x4yuRjE0GtdhCk=) 12: ufvSIzpYu4RXxJa0KTKDqS6WFN0.roa (hash: PgfIBlacCimNH8jP4CzbtNpPpmPG8JkE0iSjwFeqDT0=) 13: xPALUfluhc3M1pU60G36RtHocpA.roa (hash: wRwFSHaQORk1ykv79GhYTCI3NoOPBL8jK/cotxCEkRo=) 14: zVbXzI-UPMkwGTXNir_RXndD_f4.roa (hash: MjYQ6ywejwH4Sh9xenn14d9jTdhqTv1lV7PDpz2ptA4=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:86:a0:9f:6b:5d:58:48:3d:b9:97:15:a6:f2:fd:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046 Validity Not Before: Nov 21 21:00:20 2024 GMT Not After : Nov 22 21:00:20 2024 GMT Subject: CN=5797f27ffc75c05283dee2752f80350d3588702f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e5:71:86:76:b1:aa:64:7e:5f:b1:96:7e:c0: 78:d7:5f:23:76:f5:5b:17:07:98:11:3b:f4:f5:66: 1c:68:c0:61:31:79:1d:0b:36:d8:1f:cf:84:62:2a: 14:01:a0:d4:28:d2:8a:86:06:31:27:4c:35:c9:37: 5f:63:95:f9:94:0f:88:3f:11:b8:86:20:8a:a7:a6: 97:df:4e:4e:42:e0:db:99:a9:71:c7:6d:06:0b:c8: 9b:ab:e8:9b:4b:7e:07:bc:46:a3:c3:e6:6b:67:47: 91:a2:f4:50:b4:43:40:ec:67:05:df:ca:47:f5:19: 80:91:b1:a5:d1:77:9d:07:b0:48:d7:3c:c3:72:d0: 53:6d:ed:7a:cb:ae:91:38:a8:06:d6:42:2d:1f:ef: 50:c0:d2:f0:9e:cc:57:9b:e5:7c:ad:1e:dc:33:fd: 2e:04:8c:d2:dd:ed:c2:70:d9:d7:d3:c1:66:7b:43: 9b:2f:ca:3b:b4:60:53:19:f5:e1:da:ee:0d:38:b1: 7e:f6:3c:9c:b6:a8:ae:e6:bd:f4:40:69:bd:b8:1b: 0e:b2:e5:ea:51:78:d9:16:0d:af:eb:11:27:15:3d: 0f:b5:ff:79:5b:28:75:3a:94:1d:cb:58:1f:33:a2: 6e:15:7b:45:c3:7e:cc:9a:f0:27:66:65:4b:c9:03: fe:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:97:F2:7F:FC:75:C0:52:83:DE:E2:75:2F:80:35:0D:35:88:70:2F X509v3 Authority Key Identifier: keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:05:e3:47:ab:51:31:00:ba:68:02:f1:08:2d:0c:f8:f6:bf: 97:65:ae:89:35:e0:cf:8e:59:e6:0f:10:9d:ca:54:f1:2c:f0: 71:ac:8d:b9:ae:78:9e:08:5f:2d:4a:e3:d2:7d:19:13:48:61: 09:d2:09:a7:26:5d:01:f5:53:0c:6b:b7:bc:c7:8d:8a:fc:d1: 67:bd:8e:c0:d8:e2:c0:e3:37:7a:04:58:8f:f9:3a:d1:38:9c: 7c:7b:39:2f:2a:d4:f2:d2:1d:ae:d8:e7:7d:7b:5e:a9:a3:aa: c6:91:27:d4:09:39:9d:46:ca:85:2e:b3:c0:bc:4d:99:86:ba: da:7c:6d:e5:78:4f:26:81:97:69:fd:4d:f9:25:3c:96:4f:32: e0:07:c7:38:d0:6c:12:fe:1b:63:89:10:f1:0b:90:57:e5:2d: 90:b8:51:76:6c:9b:1f:34:c2:81:51:b4:f4:74:1a:0e:39:ae: b1:e0:4f:b7:f5:30:9c:b8:4f:10:3f:e9:06:7b:3d:d0:e2:98: 7a:f0:a5:62:83:6d:23:7c:68:ab:38:9c:33:ee:67:fa:4b:e3: 1d:52:45:67:05:b1:8c:eb:9e:49:9d:cd:42:37:48:3c:91:73: cf:1a:91:c7:21:f6:19:83:2e:08:ed:36:f1:ff:1e:34:d5:fc: d5:cb:37:b2 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQhqCfa11YSD25lxWm8v3SMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDdjYTY0M2JiMzk5YzZkODdhZGM0YzdjYmE1ZDJiNzJmYmQw MGQwNDYwHhcNMjQxMTIxMjEwMDIwWhcNMjQxMTIyMjEwMDIwWjAzMTEwLwYDVQQD Eyg1Nzk3ZjI3ZmZjNzVjMDUyODNkZWUyNzUyZjgwMzUwZDM1ODg3MDJmMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3eVxhnaxqmR+X7GWfsB4118jdvVb FweYETv09WYcaMBhMXkdCzbYH8+EYioUAaDUKNKKhgYxJ0w1yTdfY5X5lA+IPxG4 hiCKp6aX305OQuDbmalxx20GC8ibq+ibS34HvEajw+ZrZ0eRovRQtENA7GcF38pH 9RmAkbGl0XedB7BI1zzDctBTbe16y66ROKgG1kItH+9QwNLwnsxXm+V8rR7cM/0u BIzS3e3CcNnX08Fme0ObL8o7tGBTGfXh2u4NOLF+9jyctqiu5r30QGm9uBsOsuXq UXjZFg2v6xEnFT0Ptf95Wyh1OpQdy1gfM6JuFXtFw37MmvAnZmVLyQP+fQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFeX8n/8dcBSg97idS+ANQ01iHAvMB8GA1UdIwQY MBaAFHymQ7s5nG2HrcTHy6XSty+9ANBGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMt NDRlYTY0NzIxYzllLzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNi9jMDMwMWQtNTgwMS00YWM2LWI1MDMtNDRlYTY0NzIxYzll LzEvZktaRHV6bWNiWWV0eE1mTHBkSzNMNzBBMEVZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANgXjR6tR MQC6aALxCC0M+Pa/l2WuiTXgz45Z5g8QncpU8SzwcayNua54nghfLUrj0n0ZE0hh CdIJpyZdAfVTDGu3vMeNivzRZ72OwNjiwOM3egRYj/k60TicfHs5LyrU8tIdrtjn fXteqaOqxpEn1Ak5nUbKhS6zwLxNmYa62nxt5XhPJoGXaf1N+SU8lk8y4AfHONBs Ev4bY4kQ8QuQV+UtkLhRdmybHzTCgVG09HQaDjmuseBPt/UwnLhPED/pBns90OKY evClYoNtI3xoqzicM+5n+kvjHVJFZwWxjOueSZ3NQjdIPJFzzxqRxyH2GYMuCO02 8f8eNNX81cs3sg== -----END CERTIFICATE-----Generated at Fri Nov 22 02:26:59 2024 by rpki-client on console-ams.rpki-client.org