$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft File: 51TDR9aNFUk95xu5YvClZ-E01gM.mft (raw, json) Hash identifier: WNQFHqwBGDvuWJIadlLacRFJIPlfyaQ+S/KJ/LezHUA= Subject key identifier: 23:23:D4:C3:6C:BE:76:1C:B2:FE:94:61:9C:43:E3:BD:88:7A:15:7A Authority key identifier: E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 Certificate issuer: /CN=e754c347d68d15493de71bb962f0a567e134d603 Certificate serial: 018F6298A26EC6F8961CE4687AF4488CFB99 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft Manifest number: 1216 Signing time: Fri 10 May 2024 13:02:01 +0000 Manifest this update: Fri 10 May 2024 13:02:01 +0000 Manifest next update: Sat 11 May 2024 13:02:01 +0000 Files and hashes: 1: 51TDR9aNFUk95xu5YvClZ-E01gM.crl (hash: H36Ja4zGEWjel4eYPdJxYmnaEN5xgMef1e8zGFytYjg=) 2: 5OTwBMFkrOH8jEajcoxl1tEHuVU.roa (hash: 3IosFFhbjgxihpkVvAEWpyRbhQNB8Al6CKr9xh1JjjU=) 3: 7pLzk_-fe02tyCq7I0UXJpZT0ac.roa (hash: rizA2dpR8L0tC/RBpZoe0aJfPS43CTxgZY5C6xxxcCg=) 4: 9dF_4EitZ1J07YGbeXFQlYYh8XY.roa (hash: npHlZbox5TOFolc/Tk0Qw06/OxE/Up61FdH9zEZe3Nk=) 5: DNWHcnRTx5MZmIlbtQc1KCfOK6U.roa (hash: rEdzU+7souDsu//Az6Qwl+Qnja/PRb0Cxok3Y4ZwHrE=) 6: JTCK21eBGQI-YQ8qQbemxIvFfMA.roa (hash: 5ljMnRR/qxV2BIEeVeyADifSgSuimlDUroBi5IjFBOo=) 7: LDaCa6CdPx-uY6TqPi5fa1D8Vjk.roa (hash: nx5pC2zPNM5Cupu3aW0DKCNjhqocaLL7AJKbLXWjAG0=) 8: PJzGqwr2DDKSABQ5lSwl55tjc_M.roa (hash: h2CHA2LF5Ot0zzSLb6Ha9PJQ1PoyhS0vv3tO+hZHeg0=) 9: ckEG2hwoZ1z6GOyZS435szyVXsk.roa (hash: YQQRC0LtxY8ZSfOY9BuTcn2djaIggfX/IpYDNYpE23k=) 10: dLfAm8FmEXnE9iBGtQe1N3Vh-W4.roa (hash: HNgddQ/fdz1VKx/y9STyInQb6q6e1qo8sz5NthWoy8Y=) 11: hhwZNeX2yGniDaymhwF-dTbtdbM.roa (hash: r60aHVAumfJJcGBMM/7OB5weVpwdXs4yYnEuIzl5WGQ=) 12: rhKH25KvOiagVH3dS3CjidhSqqI.roa (hash: QHUzThHtq38etnjZHSjVtfEZO1oVp+gm5hirL5UmP9A=) 13: ufGHHZxjbc3dyClA4kTzp3FYXm8.roa (hash: jP9+CVsOXbs4kfW/yjl9wXNS906L5TNpJk0cXzyd/Vc=) 14: xMVb0s7CP_lNVBLRkmeonMUuWA8.roa (hash: WzFa+ykAXlKyozZKXfT2CHjNHgr8ZGIQZp1TsHPEOp8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 11 May 2024 13:02:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:62:98:a2:6e:c6:f8:96:1c:e4:68:7a:f4:48:8c:fb:99 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e754c347d68d15493de71bb962f0a567e134d603 Validity Not Before: May 10 13:02:01 2024 GMT Not After : May 11 13:02:01 2024 GMT Subject: CN=2323d4c36cbe761cb2fe94619c43e3bd887a157a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:48:22:15:c8:76:37:90:12:b3:06:bd:c4:1f: 2b:f0:d2:19:c9:2b:b5:3b:e9:0c:5d:8b:00:2b:ef: d7:b2:51:ba:53:d5:75:a7:c4:91:44:02:dc:be:7e: 44:a4:1c:89:bf:10:b0:0d:e1:9a:5b:15:cc:a1:f0: 5c:b5:b0:55:98:fc:c0:29:b8:15:5d:4f:aa:42:04: 97:9a:3d:c8:bb:8b:e9:ae:39:59:91:e4:65:94:a6: 32:9a:46:89:1a:c2:08:ec:d6:53:f4:77:21:12:ed: 56:24:4d:ac:e8:56:88:bd:fb:98:1c:91:88:31:61: b9:7d:ab:3a:95:90:c1:ad:b2:2b:10:29:46:f1:02: e4:93:99:e9:b8:83:0f:91:41:c3:46:9c:2c:d7:6b: b3:97:c6:76:07:43:cb:36:d9:7e:b8:8b:6a:08:ca: c6:76:c3:32:9d:13:09:cb:b2:ea:98:7a:b8:e1:3a: df:4d:1a:14:7b:30:cd:c9:06:72:e2:6b:fd:df:85: 91:a2:64:dc:7e:2d:94:f5:62:a4:65:82:08:76:84: 89:5e:3a:5c:09:b4:f0:5f:25:1a:cb:40:21:83:c7: 8c:e4:3f:7f:4b:e8:96:f8:3d:81:cb:83:00:1b:85: 2e:b1:f2:aa:79:f8:7d:91:c5:67:05:19:10:01:eb: 74:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:23:D4:C3:6C:BE:76:1C:B2:FE:94:61:9C:43:E3:BD:88:7A:15:7A X509v3 Authority Key Identifier: keyid:E7:54:C3:47:D6:8D:15:49:3D:E7:1B:B9:62:F0:A5:67:E1:34:D6:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/51TDR9aNFUk95xu5YvClZ-E01gM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/46db3a-a573-4f28-b43b-37b62d223924/1/51TDR9aNFUk95xu5YvClZ-E01gM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:d4:a8:1c:75:85:14:21:ba:28:c4:44:33:d8:3e:a9:d1:12: 82:2a:3b:be:57:02:90:f4:7a:1b:17:6e:fe:f0:86:fe:ff:6a: 10:48:b4:2a:18:c3:77:4f:87:c1:0e:72:d2:5f:44:64:d6:cb: e9:d4:e3:d2:45:94:c2:37:5e:83:80:1a:5b:f5:ef:21:cd:4c: aa:a8:3b:d5:ee:a3:fe:5b:41:b8:a7:f2:3f:ee:46:cf:ae:36: 48:05:6c:ed:2a:b2:12:db:1c:9c:7e:cb:c3:f8:80:04:20:c4: fa:cb:fe:b7:e4:65:f2:a5:ab:7d:04:3c:03:48:e7:fb:4a:4e: 2e:3a:99:cf:c6:ec:f2:4e:83:cd:f0:bb:2a:9b:bf:d6:65:9c: 32:39:9e:c8:b3:d5:da:84:2c:ae:4a:40:00:0a:75:c8:d3:06: 4c:6b:66:d3:1d:07:e1:13:ce:f0:73:4b:46:f3:93:de:2a:1b: 6d:aa:86:02:95:8a:f4:b0:08:c0:03:c3:f2:37:c6:00:3d:3c: 4e:cc:41:88:61:7e:dc:62:2e:a9:8b:2a:e0:66:19:d4:9b:d2: ca:fe:62:e2:65:41:73:3b:7f:e2:13:d1:44:cb:40:21:be:67: a9:72:ef:7b:91:d7:79:2b:de:77:75:fe:c0:10:6e:4b:f8:98: 4b:e4:e0:d6 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9imKJuxviWHORoevRIjPuZMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU3NTRjMzQ3ZDY4ZDE1NDkzZGU3MWJiOTYyZjBhNTY3ZTEz NGQ2MDMwHhcNMjQwNTEwMTMwMjAxWhcNMjQwNTExMTMwMjAxWjAzMTEwLwYDVQQD EygyMzIzZDRjMzZjYmU3NjFjYjJmZTk0NjE5YzQzZTNiZDg4N2ExNTdhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0giFch2N5ASswa9xB8r8NIZySu1 O+kMXYsAK+/XslG6U9V1p8SRRALcvn5EpByJvxCwDeGaWxXMofBctbBVmPzAKbgV XU+qQgSXmj3Iu4vprjlZkeRllKYymkaJGsII7NZT9HchEu1WJE2s6FaIvfuYHJGI MWG5fas6lZDBrbIrEClG8QLkk5npuIMPkUHDRpws12uzl8Z2B0PLNtl+uItqCMrG dsMynRMJy7LqmHq44TrfTRoUezDNyQZy4mv934WRomTcfi2U9WKkZYIIdoSJXjpc CbTwXyUay0Ahg8eM5D9/S+iW+D2By4MAG4UusfKqefh9kcVnBRkQAet0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFCMj1MNsvnYcsv6UYZxD472IehV6MB8GA1UdIwQY MBaAFOdUw0fWjRVJPecbuWLwpWfhNNYDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2It MzdiNjJkMjIzOTI0LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC80NmRiM2EtYTU3My00ZjI4LWI0M2ItMzdiNjJkMjIzOTI0 LzEvNTFURFI5YU5GVWs5NXh1NVl2Q2xaLUUwMWdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh9SoHHWF FCG6KMREM9g+qdESgio7vlcCkPR6Gxdu/vCG/v9qEEi0KhjDd0+HwQ5y0l9EZNbL 6dTj0kWUwjdeg4AaW/XvIc1Mqqg71e6j/ltBuKfyP+5Gz642SAVs7SqyEtscnH7L w/iABCDE+sv+t+Rl8qWrfQQ8A0jn+0pOLjqZz8bs8k6DzfC7Kpu/1mWcMjmeyLPV 2oQsrkpAAAp1yNMGTGtm0x0H4RPO8HNLRvOT3iobbaqGApWK9LAIwAPD8jfGAD08 TsxBiGF+3GIuqYsq4GYZ1JvSyv5i4mVBczt/4hPRRMtAIb5nqXLve5HXeSved3X+ wBBuS/iYS+Tg1g== -----END CERTIFICATE-----Generated at Fri May 10 17:51:24 2024 by rpki-client on console-ams.rpki-client.org