$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft File: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft (raw, json) Hash identifier: hBbtQlK1FoIr26SdwWM94vQpbiEqjJ7DjERPcWC+Vyc= Subject key identifier: AB:7F:45:83:6B:0A:9A:82:C7:B6:67:74:52:3B:BD:07:3B:35:74:E3 Authority key identifier: 1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 Certificate issuer: /CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Certificate serial: 01935199A4D9F33AD04E6A3A6D3AE4F8FAA4 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft Manifest number: 138E Signing time: Fri 22 Nov 2024 02:00:43 +0000 Manifest this update: Fri 22 Nov 2024 02:00:43 +0000 Manifest next update: Sat 23 Nov 2024 02:00:43 +0000 Files and hashes: 1: H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl (hash: Pl1IdnbzjJg0njKdbOM7M/Eh+pGPrIS871zfBbdmt1I=) 2: IQ9mkXsk_VOOFgsv0t7hacRUbKA.roa (hash: qwhUX4sWkekXHdNCZorv7/myQdgQ4C6MzSsXdZ5LuRo=) 3: Ldc4o9L-5HMwL6CiKLTPZNj10t4.roa (hash: MnLWlh0g5BLxsxCKq3v+1BT4h2/+3tXxViOM9GFNaDw=) 4: MQLAZtM7yFr_hR7h_Q0sFiUjo0E.roa (hash: Q6UPvomfMUjtEY5D/bbb2IMqQQUf16FtPI8dYvm2RyQ=) 5: NbSFDcOllohrMed4Ihdzk29z_wM.roa (hash: pa6LnH7GySgonVWG9JZW4YXAkqAcW0/PuvgDcBRiQoM=) 6: OpmonBFO56vtMRogn9acRiXVcTE.roa (hash: Bhcs7RL3jgxTeM8ESoQ6WKXtdI+kNOY4w1sNhAloyuQ=) 7: PsgYUBK101HJIlARrE2pnssy6IU.roa (hash: QaEu3rtSqwigs6Cqdn/r0YiMRz7XQiOP8FKoqJV4jo4=) 8: XCzXDCVJyGO8GS9ksaDduV3e2IA.roa (hash: xK/EVG8zRWt9rCZhhtLmPA8PVNxGjkB5jq5kl0YkqQw=) 9: crw8qMKpyZy-3mVK1E2M2PrpMQI.roa (hash: QUySm50e7Kr12TlxEHiiVPVZ66/lEuQcx3V5Ql+XoOA=) 10: gOSAZ4GuL3kxY6b4ETjFf4zNDwI.roa (hash: Y5xnWnvt/tRPwQ7uSd+1G+UV3H6aVE3wx8GoCC0qfzk=) 11: h8hMAL0GKRBTFoJDQgo8opfSZho.roa (hash: Xo0IH7V4CFOHnmhD0d5fbw3JnkHbu9Xg8tKR9fdUJE0=) 12: m2BuVig8YErAqgiQAMfe8GMuqZI.roa (hash: xO6BT9PF2WDS0PfgRPTTstrY5haaaxQ5babve0ASmPk=) 13: oo-a44S7TIqo6a7u_RVh26TFcho.roa (hash: ukM9SAQsS8ui5EqZSKgfLauW+kG2GioEvBWuie00C3s=) 14: rpPObXxx5bOq5Po7WGWgReVRYQA.roa (hash: IOHAdL9+bZktE2RKxmSvBMUGEQSLCjb+fIQENbNsbqg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:a4:d9:f3:3a:d0:4e:6a:3a:6d:3a:e4:f8:fa:a4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1f68138d4ec2ea51cacef09ff1058a370a5be190 Validity Not Before: Nov 22 02:00:43 2024 GMT Not After : Nov 23 02:00:43 2024 GMT Subject: CN=ab7f45836b0a9a82c7b66774523bbd073b3574e3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:81:00:92:d5:97:06:a4:63:d6:b8:56:f2:c8: b1:93:74:bf:6b:eb:bc:69:ca:e7:78:83:41:35:64: b4:44:9b:83:92:1c:10:ad:a5:1f:5e:e7:73:bc:44: ce:54:43:fd:45:d2:4c:c0:85:8d:94:48:73:e0:3e: ac:00:16:f3:08:ba:ed:05:d0:5b:6d:2a:47:bc:73: 56:9d:6b:2f:44:a3:54:ee:3c:be:aa:ed:5e:9f:da: 7b:83:a0:53:a6:f0:11:4b:47:ac:75:76:eb:5a:9f: 81:38:e7:dc:33:22:a4:21:2a:eb:5e:54:2b:0a:c3: 09:7c:82:bc:97:28:6a:1e:18:9a:81:98:b1:c2:d6: f8:43:e9:9b:38:0b:c6:ba:94:f2:1c:04:2c:49:76: 1b:26:dc:74:cf:e8:6a:65:d1:95:0a:2c:ab:31:1d: 16:ea:73:0c:96:a0:f4:6e:08:d6:70:1b:a1:ce:2b: b2:b2:dd:8d:39:f6:aa:11:53:81:3b:df:88:46:3e: 4c:08:1a:c7:7d:87:45:7a:db:f7:4f:30:8c:24:e6: 96:29:50:47:e9:87:c4:3e:a1:a1:c7:eb:85:90:8f: 5a:96:f5:d5:7e:66:5d:ef:5a:c9:d5:72:37:66:01: 47:43:e6:a4:0c:98:8b:2e:5a:ed:e6:ce:e6:b0:39: c5:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AB:7F:45:83:6B:0A:9A:82:C7:B6:67:74:52:3B:BD:07:3B:35:74:E3 X509v3 Authority Key Identifier: keyid:1F:68:13:8D:4E:C2:EA:51:CA:CE:F0:9F:F1:05:8A:37:0A:5B:E1:90 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/b9adf4-f910-4355-bfc8-608564839fd0/1/H2gTjU7C6lHKzvCf8QWKNwpb4ZA.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1d:cc:a8:a8:51:fa:90:76:ba:9b:3d:ba:09:b0:ca:1d:67:65: e7:5e:d8:24:1d:0a:41:b5:29:d0:d7:c4:7f:96:cc:09:0c:f5: 56:79:f6:36:47:61:a4:2a:8c:f9:b7:25:ca:88:6c:98:40:6f: fb:0c:78:fb:2e:ae:f8:63:07:58:69:30:79:13:12:74:18:6e: f4:ae:2e:9c:4e:e1:87:7f:96:30:a7:15:32:ec:47:73:0f:ca: b2:df:f4:cb:fa:8e:dd:b6:60:38:24:7c:ca:68:7c:b1:a2:46: d0:e2:f4:b8:7e:ed:49:13:12:cd:fc:a0:2c:e1:ff:6d:d3:63: 92:21:56:7f:d4:8e:59:02:25:92:6e:45:7d:58:7d:e2:ce:f8: 66:08:10:2c:b3:77:6b:a0:19:f8:c6:6c:21:8a:8c:c4:d5:5b: 5d:8d:4a:77:2a:ee:2d:ec:dd:19:cf:f1:25:39:f5:54:44:07: 37:1f:9a:24:6f:65:02:d2:24:a5:5a:73:2a:3c:94:ba:68:61: 54:96:ae:c1:29:cc:2f:bf:0f:92:63:a4:8b:96:80:58:8f:14: 6b:2a:d2:2a:e7:59:cb:3a:80:46:49:a8:4c:13:90:5a:c4:66: 5a:63:dd:8b:98:ad:4f:b3:99:78:c9:40:4c:36:c2:21:90:62: 50:1d:bd:21 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRmaTZ8zrQTmo6bTrk+PqkMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFmNjgxMzhkNGVjMmVhNTFjYWNlZjA5ZmYxMDU4YTM3MGE1 YmUxOTAwHhcNMjQxMTIyMDIwMDQzWhcNMjQxMTIzMDIwMDQzWjAzMTEwLwYDVQQD EyhhYjdmNDU4MzZiMGE5YTgyYzdiNjY3NzQ1MjNiYmQwNzNiMzU3NGUzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx4EAktWXBqRj1rhW8sixk3S/a+u8 acrneINBNWS0RJuDkhwQraUfXudzvETOVEP9RdJMwIWNlEhz4D6sABbzCLrtBdBb bSpHvHNWnWsvRKNU7jy+qu1en9p7g6BTpvARS0esdXbrWp+BOOfcMyKkISrrXlQr CsMJfIK8lyhqHhiagZixwtb4Q+mbOAvGupTyHAQsSXYbJtx0z+hqZdGVCiyrMR0W 6nMMlqD0bgjWcBuhziuyst2NOfaqEVOBO9+IRj5MCBrHfYdFetv3TzCMJOaWKVBH 6YfEPqGhx+uFkI9alvXVfmZd71rJ1XI3ZgFHQ+akDJiLLlrt5s7msDnF7QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKt/RYNrCpqCx7ZndFI7vQc7NXTjMB8GA1UdIwQY MBaAFB9oE41OwupRys7wn/EFijcKW+GQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgt NjA4NTY0ODM5ZmQwLzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hNy9iOWFkZjQtZjkxMC00MzU1LWJmYzgtNjA4NTY0ODM5ZmQw LzEvSDJnVGpVN0M2bEhLenZDZjhRV0tOd3BiNFpBLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHcyoqFH6 kHa6mz26CbDKHWdl517YJB0KQbUp0NfEf5bMCQz1Vnn2NkdhpCqM+bclyohsmEBv +wx4+y6u+GMHWGkweRMSdBhu9K4unE7hh3+WMKcVMuxHcw/Kst/0y/qO3bZgOCR8 ymh8saJG0OL0uH7tSRMSzfygLOH/bdNjkiFWf9SOWQIlkm5FfVh94s74ZggQLLN3 a6AZ+MZsIYqMxNVbXY1KdyruLezdGc/xJTn1VEQHNx+aJG9lAtIkpVpzKjyUumhh VJauwSnML78PkmOki5aAWI8UayrSKudZyzqARkmoTBOQWsRmWmPdi5itT7OZeMlA TDbCIZBiUB29IQ== -----END CERTIFICATE-----Generated at Fri Nov 22 04:35:32 2024 by rpki-client on console-fra.rpki-client.org