$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft File: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft (raw, json) Hash identifier: WNJFbMHe4qdFAGJgmFb98aewcFsgvss5uc/uLFJcd8o= Subject key identifier: 02:AA:32:A4:07:2A:D7:24:91:2A:91:8D:1B:C9:BF:5E:AD:E3:26:8C Authority key identifier: 19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 Certificate issuer: /CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Certificate serial: 018F437A943EB3D41A77D61D43A44709CE05 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft Manifest number: 053E Signing time: Sat 04 May 2024 12:00:57 +0000 Manifest this update: Sat 04 May 2024 12:00:57 +0000 Manifest next update: Sun 05 May 2024 12:00:57 +0000 Files and hashes: 1: 7yLSjr7pnPXqU33LDOP8RM1T0qk.roa (hash: monYW257XXYUhLGzLMp9GWW5F73CJEbtIr9Q8erBfCw=) 2: D7uEW9WGAaZ2k41Oqc9UboHP86U.roa (hash: rwV+JrA4GRDYYjzxki/pjkr/13Sfeecl8NBi6gWSbwA=) 3: G0059BjDQoChmH0y-RaQDUODtao.roa (hash: eeojMwLb6a6ikvEuebRyTQPBO/bfZT43fBShGzPjcF8=) 4: GNmzoqGfaWyJ0s9awzRZeqNc-h4.roa (hash: iGy850jwD3YMbQkl97HvHx+7MhaRHzkRHvGVgAcjxB8=) 5: Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl (hash: kMUZ5kE467AQyFa8FCbTixzO5cUC7jhNZgulxp0BJ3E=) 6: PInyJbOXAb3dx4UN-jRQGV4fPgs.roa (hash: v984AAHhW647Uw3llTHfACwD1kZV2RrmRxzVrshIMbo=) 7: PnmZwLXvQZiFOxIGA0_ufIJ2cmo.roa (hash: P/SMRdNitWat2SlRXTeIEY9FB+d/YobD9GtLAO+9iX0=) 8: R64S5hqSDAn5vvLiorAhZvWCJZk.roa (hash: eaOZ/WsXJa2OEzebbd5Yy0I4shcuuX+/NfM2+FJFrAE=) 9: SypWgCBWFQX4-ZAG8lG5XcjM8GU.roa (hash: A8wPer5j4z7Sn7Iq/Ipb+g7pq7iIT60lSmtMgAZJN4k=) 10: WasOD4ouVJwjLcR1ZlSopZdGFCs.roa (hash: UVNePGgCWrlnt1dub0GC8B6xDgoaOamSewboPW0LcbI=) 11: glZVmnY6S2V9NOfAg1osJZoRPkA.roa (hash: fc88FBnkxxlWRqMeC+6WyAVbGC7ij3+Ybyf5ZgHNVXA=) 12: nUheknKGfFzzrd-FhUAQL6s6-po.roa (hash: cRkw3ZAYyIj+F3+/vRnEJR4mG3fIgsXllWpE1ipg9Ro=) 13: qzIBuYrS-oQmdurG74Gd1Lg1Ttg.roa (hash: 68fRzmPROZ35tytutrvGKazTOX1aB7HviRXNbsIFKSk=) 14: tFdKCm2FroL6DCkd6W1juUGgKso.roa (hash: IM4l28KSO7eGAq10n6OXhHPkMKvs77gUWOVk3PynyXs=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 05:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:43:7a:94:3e:b3:d4:1a:77:d6:1d:43:a4:47:09:ce:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=19ee5f16fc144acb98977449faa0ab77de1bdcc9 Validity Not Before: May 4 12:00:57 2024 GMT Not After : May 5 12:00:57 2024 GMT Subject: CN=02aa32a4072ad724912a918d1bc9bf5eade3268c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:73:59:63:c9:2d:b6:a0:ed:aa:e1:b4:77:71: 32:74:d9:bd:f9:ca:24:d0:b1:15:9a:80:0e:b5:03: e5:e1:bd:f9:3f:f4:31:4c:be:b3:4e:75:10:c7:5b: dd:cd:9b:fa:57:ef:21:6a:a8:ee:f5:d0:19:c9:9e: 88:21:9b:20:f1:9a:44:a7:5f:b6:34:0e:fe:67:9a: 65:41:9f:44:62:8f:9f:02:1b:ad:60:c1:7b:00:d4: 97:7e:f4:29:5e:3e:fc:ab:8f:db:db:1a:6f:e8:e1: f9:87:59:66:cd:10:44:a8:71:3d:2d:d9:f1:72:27: 56:ef:cb:50:7a:90:14:3a:6e:1c:39:84:b9:3d:a5: bb:39:0d:ee:75:1c:62:b3:81:5e:da:6b:04:e6:64: c1:48:7e:cd:ef:74:af:e0:ad:fc:0a:e5:c0:2f:97: c3:43:f7:9e:c4:f0:47:b6:08:f1:6a:b9:a6:5c:78: 7c:68:35:e9:ec:03:ba:f9:05:36:30:87:f2:ec:ad: 66:ab:e2:11:1a:fc:18:84:fd:8a:90:8d:26:3c:51: 5c:24:8c:66:3e:95:a9:c0:96:6a:f3:4e:db:ce:62: 24:00:c4:03:b2:ae:f9:de:25:65:3e:99:9f:c8:e2: e7:eb:71:50:1d:12:8c:e5:0c:dc:91:90:cb:55:28: fe:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 02:AA:32:A4:07:2A:D7:24:91:2A:91:8D:1B:C9:BF:5E:AD:E3:26:8C X509v3 Authority Key Identifier: keyid:19:EE:5F:16:FC:14:4A:CB:98:97:74:49:FA:A0:AB:77:DE:1B:DC:C9 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/742370-e10f-4541-aa6c-61afb66d1e8c/1/Ge5fFvwUSsuYl3RJ-qCrd94b3Mk.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 74:27:e1:90:24:57:16:f9:30:83:33:ab:0c:fb:ea:e0:ab:08: 82:dd:6e:3c:1b:18:e1:24:0e:2c:c6:a9:18:fd:53:17:bd:20: bf:dd:c4:27:63:30:26:5a:3c:14:83:f7:d7:f7:f5:d3:3a:e9: 42:3c:9a:89:1e:86:4a:c8:d0:4f:a4:f0:ee:8a:39:fd:04:b2: 97:a1:8a:f1:d1:82:60:5c:be:49:2b:0e:4d:51:82:7a:d3:10: 56:35:04:e5:65:07:be:59:f0:20:b2:f3:f8:53:5a:21:02:a9: db:29:2b:96:9a:ca:f7:ab:fc:2b:6d:80:6e:f2:94:12:f7:f4: 8c:0d:ca:15:83:03:76:b0:f8:b3:7c:ca:8c:73:53:cf:15:a3: 85:b1:cf:73:c1:99:ad:dc:8b:6c:1e:f4:c6:d2:73:92:6d:f5: bf:54:70:20:a5:9d:ac:20:6d:66:e2:e1:25:3b:55:99:b8:00: d7:ac:60:50:c8:71:94:c1:88:32:3a:b8:fa:c1:2f:4b:f4:db: 2b:81:86:75:9b:21:3f:14:42:12:aa:40:d8:22:05:78:12:4c: a6:ca:b3:84:ef:64:30:9d:5a:f7:ad:ef:08:8f:3e:41:d9:54: 4f:d7:69:1f:20:bd:8d:bc:e2:47:77:5a:80:02:68:d6:85:b1: 5e:90:6b:73 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9DepQ+s9Qad9YdQ6RHCc4FMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDE5ZWU1ZjE2ZmMxNDRhY2I5ODk3NzQ0OWZhYTBhYjc3ZGUx YmRjYzkwHhcNMjQwNTA0MTIwMDU3WhcNMjQwNTA1MTIwMDU3WjAzMTEwLwYDVQQD EygwMmFhMzJhNDA3MmFkNzI0OTEyYTkxOGQxYmM5YmY1ZWFkZTMyNjhjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxHNZY8kttqDtquG0d3EydNm9+cok 0LEVmoAOtQPl4b35P/QxTL6zTnUQx1vdzZv6V+8haqju9dAZyZ6IIZsg8ZpEp1+2 NA7+Z5plQZ9EYo+fAhutYMF7ANSXfvQpXj78q4/b2xpv6OH5h1lmzRBEqHE9Ldnx cidW78tQepAUOm4cOYS5PaW7OQ3udRxis4Fe2msE5mTBSH7N73Sv4K38CuXAL5fD Q/eexPBHtgjxarmmXHh8aDXp7AO6+QU2MIfy7K1mq+IRGvwYhP2KkI0mPFFcJIxm PpWpwJZq807bzmIkAMQDsq753iVlPpmfyOLn63FQHRKM5QzckZDLVSj+OQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFAKqMqQHKtckkSqRjRvJv16t4yaMMB8GA1UdIwQY MBaAFBnuXxb8FErLmJd0Sfqgq3feG9zJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMt NjFhZmI2NmQxZThjLzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iMC83NDIzNzAtZTEwZi00NTQxLWFhNmMtNjFhZmI2NmQxZThj LzEvR2U1ZkZ2d1VTc3VZbDNSSi1xQ3JkOTRiM01rLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdCfhkCRX FvkwgzOrDPvq4KsIgt1uPBsY4SQOLMapGP1TF70gv93EJ2MwJlo8FIP31/f10zrp QjyaiR6GSsjQT6Tw7oo5/QSyl6GK8dGCYFy+SSsOTVGCetMQVjUE5WUHvlnwILLz +FNaIQKp2ykrlprK96v8K22AbvKUEvf0jA3KFYMDdrD4s3zKjHNTzxWjhbHPc8GZ rdyLbB70xtJzkm31v1RwIKWdrCBtZuLhJTtVmbgA16xgUMhxlMGIMjq4+sEvS/Tb K4GGdZshPxRCEqpA2CIFeBJMpsqzhO9kMJ1a963vCI8+QdlUT9dpHyC9jbziR3da gAJo1oWxXpBrcw== -----END CERTIFICATE-----Generated at Sat May 4 12:55:23 2024 by rpki-client on console-fra.rpki-client.org