$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft File: uk0Oaat2n2W7KxVb36g6cYburEQ.mft (raw, json) Hash identifier: r8FYTUt5wzxbJs4S6h9WoXpX7KeVfhmugcplQ1ytzfw= Subject key identifier: DD:D9:B9:BD:C8:51:CD:51:06:BE:A3:05:C2:55:4B:0F:21:F4:5D:10 Authority key identifier: BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 Certificate issuer: /CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Certificate serial: 018EF5CD18C7068A4EFDBEA2C37AE048CB68 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft Manifest number: 0FBC Signing time: Fri 19 Apr 2024 10:00:42 +0000 Manifest this update: Fri 19 Apr 2024 10:00:42 +0000 Manifest next update: Sat 20 Apr 2024 10:00:42 +0000 Files and hashes: 1: 2HtdbmzjI9O3JVt0NYTd5oo72H8.roa (hash: HzWJf2lzaHeUgRmgXySme3nA6TkvqSTFGZTBi5Edt18=) 2: A7EdYDm-kHBEaNuMCI8O9xF_VQE.roa (hash: gpez0mGEn0JhJZhUL18QQBGx450LduIEGx8V3oqjpwU=) 3: LYaSHJw705-3YoZkbGq-Mgcyb7s.roa (hash: Scpr3RnILfVgfIXQ/znzPbeLAcSg4bGtSxn23DEcCr4=) 4: LZssoXyEFVQz04EMyt_-z8FQyG8.roa (hash: y7l48hHRTdtW1WC5sw6KU7nUyLPtXcblotViHWtyXSs=) 5: OtW7_cMyujEjbUR6s8HCKdGmQWI.roa (hash: PrKdfKUNMphvkDtAbZ3qUbuse97D6I9p5D9rZJ4oL4g=) 6: RpuM4cUms0ml1czhok1DZ6FcYm4.roa (hash: qlzNdJRm+UexdCp/EBmbeJEBVN1wAKUNnb0HiF4Zanw=) 7: ghch-lyQoLau0D3D6aczFKbur3c.roa (hash: R6pETq4/Iu4FeHyG3WF366rbJdIeb858LjArUL4LAEQ=) 8: lXwF_v5XfTuInaddEpbdvknbqJA.roa (hash: 8RXdgUoD+RvNL+nF8z57wRWHzmMrdDuSiDj0p5pFhXI=) 9: o1-i7WN05PCp8wYez1ZUO91phPs.roa (hash: QnOblNtwfPfG3NkuIjwxZXRfmz/iIEtFEXlLYjoQHwo=) 10: tMtsWFNZXjcMRR8uw83t_r_icZE.roa (hash: L5gxL/WXrHNEhFV6K9a9UeaYyjsxQldO0ZcGqATNeWo=) 11: uk0Oaat2n2W7KxVb36g6cYburEQ.crl (hash: 5UUQItj8b1ubpO47IyoeeN+hBoILwVDX0CM/0QRSf2o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 20 Apr 2024 10:00:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:f5:cd:18:c7:06:8a:4e:fd:be:a2:c3:7a:e0:48:cb:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ba4d0e69ab769f65bb2b155bdfa83a7186eeac44 Validity Not Before: Apr 19 10:00:42 2024 GMT Not After : Apr 20 10:00:42 2024 GMT Subject: CN=ddd9b9bdc851cd5106bea305c2554b0f21f45d10 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:aa:bb:63:f9:e9:72:b4:3c:27:80:f9:83:d9: 06:86:23:0a:d9:d6:e9:e3:ac:ac:13:fc:19:f8:da: 5d:1a:c4:bf:42:7a:1f:14:bf:2a:fe:49:92:6b:91: 94:db:bb:a9:5d:01:91:13:c8:4c:11:bb:4a:8f:79: 93:5c:53:d0:94:39:70:0e:96:a8:42:31:4e:01:30: 67:d0:88:e6:66:7b:17:73:32:e8:21:c1:80:c3:94: ea:86:bf:48:20:aa:ed:4f:6b:01:01:d4:e1:63:fc: f1:91:db:bd:c4:10:46:c8:20:3f:92:59:5c:6e:7a: 2b:07:46:7a:c8:d9:0c:cf:e9:e0:ba:a7:22:ab:8b: 00:9e:ef:eb:39:b2:ef:00:65:94:20:1c:90:a9:c8: d3:92:6c:f3:0b:de:c4:e4:02:9d:c4:df:6a:62:95: 06:59:97:b2:ec:4e:08:7b:8e:b3:01:ce:9c:af:c3: d8:04:44:4e:0f:40:1b:b8:4c:06:70:76:94:24:8c: 00:d9:f5:fa:a5:8b:6e:14:3c:85:ba:02:2e:df:1f: 4c:f7:c7:0f:54:20:38:34:19:ae:0c:8f:fa:00:48: f9:20:20:7f:a3:b6:d9:2f:ca:69:82:cb:37:49:e4: 29:97:c0:86:71:fe:ab:1b:10:b0:7e:56:1d:46:d2: 17:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:D9:B9:BD:C8:51:CD:51:06:BE:A3:05:C2:55:4B:0F:21:F4:5D:10 X509v3 Authority Key Identifier: keyid:BA:4D:0E:69:AB:76:9F:65:BB:2B:15:5B:DF:A8:3A:71:86:EE:AC:44 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uk0Oaat2n2W7KxVb36g6cYburEQ.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/3d6d6c-f58d-42e6-b688-8eff3fd3c48a/1/uk0Oaat2n2W7KxVb36g6cYburEQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 11:f8:e2:fc:6d:67:7c:a7:f5:22:0a:1a:91:30:57:9a:8c:b1: 85:06:e0:3e:1c:e5:bb:40:6e:79:5a:54:1f:75:23:17:d9:33: 66:58:8a:93:f3:2e:4a:00:10:53:26:9b:c1:7e:80:78:cc:da: 86:d1:c3:fc:a5:ff:8d:4d:8c:a7:fd:41:f3:7b:a1:ac:d6:29: 72:af:93:4d:53:55:80:bc:e3:4f:44:43:98:7f:fd:a4:1a:07: 96:35:38:a6:0d:d0:cd:c6:ff:c1:a2:b3:75:82:46:6f:44:59: cb:82:a3:30:bf:20:1f:bd:1d:0b:00:94:18:b6:6a:7a:05:08: 48:9d:ad:ac:3e:50:03:08:5c:a0:84:24:73:fd:6a:48:aa:61: ef:7b:c0:eb:6d:30:df:27:2b:86:eb:d0:23:e2:8e:49:7a:bb: 6c:d4:c4:72:e1:49:60:5a:95:5d:db:e5:8c:7d:c1:c2:4b:b8: 11:ae:ef:2c:40:58:6f:cc:41:a2:75:36:9c:3e:9d:28:e5:eb: 5e:43:f1:36:4d:78:0d:cf:8b:92:bc:f8:15:5c:82:eb:03:7c: 27:44:d3:0d:36:6d:6e:e6:7c:90:2d:41:e8:83:ec:89:fa:81: 8f:7b:09:88:2b:83:28:4e:98:0b:37:91:8a:a3:9d:1e:3d:10: 13:6e:a3:1d -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY71zRjHBopO/b6iw3rgSMtoMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGJhNGQwZTY5YWI3NjlmNjViYjJiMTU1YmRmYTgzYTcxODZl ZWFjNDQwHhcNMjQwNDE5MTAwMDQyWhcNMjQwNDIwMTAwMDQyWjAzMTEwLwYDVQQD EyhkZGQ5YjliZGM4NTFjZDUxMDZiZWEzMDVjMjU1NGIwZjIxZjQ1ZDEwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqq7Y/npcrQ8J4D5g9kGhiMK2dbp 46ysE/wZ+NpdGsS/QnofFL8q/kmSa5GU27upXQGRE8hMEbtKj3mTXFPQlDlwDpao QjFOATBn0IjmZnsXczLoIcGAw5Tqhr9IIKrtT2sBAdThY/zxkdu9xBBGyCA/kllc bnorB0Z6yNkMz+nguqciq4sAnu/rObLvAGWUIByQqcjTkmzzC97E5AKdxN9qYpUG WZey7E4Ie46zAc6cr8PYBEROD0AbuEwGcHaUJIwA2fX6pYtuFDyFugIu3x9M98cP VCA4NBmuDI/6AEj5ICB/o7bZL8ppgss3SeQpl8CGcf6rGxCwflYdRtIX7wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFN3Zub3IUc1RBr6jBcJVSw8h9F0QMB8GA1UdIwQY MBaAFLpNDmmrdp9luysVW9+oOnGG7qxEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgt OGVmZjNmZDNjNDhhLzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9hOC8zZDZkNmMtZjU4ZC00MmU2LWI2ODgtOGVmZjNmZDNjNDhh LzEvdWswT2FhdDJuMlc3S3hWYjM2ZzZjWWJ1ckVRLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfji/G1n fKf1IgoakTBXmoyxhQbgPhzlu0BueVpUH3UjF9kzZliKk/MuSgAQUyabwX6AeMza htHD/KX/jU2Mp/1B83uhrNYpcq+TTVNVgLzjT0RDmH/9pBoHljU4pg3Qzcb/waKz dYJGb0RZy4KjML8gH70dCwCUGLZqegUISJ2trD5QAwhcoIQkc/1qSKph73vA620w 3ycrhuvQI+KOSXq7bNTEcuFJYFqVXdvljH3Bwku4Ea7vLEBYb8xBonU2nD6dKOXr XkPxNk14Dc+Lkrz4FVyC6wN8J0TTDTZtbuZ8kC1B6IPsifqBj3sJiCuDKE6YCzeR iqOdHj0QE26jHQ== -----END CERTIFICATE-----Generated at Fri Apr 19 20:47:31 2024 by rpki-client on console-ams.rpki-client.org