$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft File: p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft (raw, json) Hash identifier: fchdENNZk7afAfHNzMj3+Eg+OnRU9RWFRNf7JUAn6f8= Subject key identifier: D7:1B:7D:FE:C9:D8:84:4E:04:46:48:1F:A2:DB:0D:D9:8D:3E:A3:41 Authority key identifier: A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 Certificate issuer: /CN=a79bba2805a988954e4fec42570530f16f9e7093 Certificate serial: 01935508D528A215A78F1A0EA3ED9B2A28B8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft Manifest number: 1385 Signing time: Fri 22 Nov 2024 18:01:02 +0000 Manifest this update: Fri 22 Nov 2024 18:01:02 +0000 Manifest next update: Sat 23 Nov 2024 18:01:02 +0000 Files and hashes: 1: 0iJDMueCMaay1Alhf9r-BkjpaWY.roa (hash: 8gJ7bGuL++uz6IAsLG4A+wnRPmEZjMxhBBtsWmr93tw=) 2: E7Hr_kuUE4uMC7QMmyeuB1nJR9Q.roa (hash: JgiPK6P99+itNs2p1L3bKecXzmpKZymjih/0M7arJpw=) 3: M3avZySBAZ7TpMMqkyv7guSD7mY.roa (hash: CfBKyd1W22ODo5XyKNSD6jflCQopOzec/xAechy9+WQ=) 4: N8Rb5JHr87GkwQm263xFajKCvpE.roa (hash: SJ5RWxJiYvYfnQlMCjeyvnt0MTcP40ULrOZ2cDoKCig=) 5: Uyu6tpZVvzLIpVvOotOp7fQehTE.roa (hash: /LVjemBWKiwZ4wuYGjueXBDz8paHZN+ImSFZHgZMDh8=) 6: Y7ZXFlECQ6DJb7wmIhKQ8ftTRb4.roa (hash: OLLyaXp7AwEASltUKs5Nxqk8hHq7xpC+CTltRcEk32s=) 7: o_93VveXD5skInomD4a9k6-_q3c.roa (hash: 3jb6/W9aiWFeO5hWAkHcSNJ5cxlI8CbWx5M1CfBE2Ec=) 8: p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl (hash: qJKnFvWbyww+6z1P0jXL5TFSID/tJlozLa4ZXdmjamU=) 9: rMqgPmuTcX0uOPrau-nqkd-4TH8.roa (hash: vkg34KLbuhuegTOg1RpSfKiHEXGhXLQG2nJBi/zKyCk=) 10: tWoJe7_Z7p3CU90SCyB5K0gs6L0.roa (hash: VLR61oCuFMCpKIep5qLCnQ2saN43gYghVI8qPf/Mtoc=) 11: vKQuv-nXnqudrHQjBePtBEdooN4.roa (hash: U4SzS8gj9ZBFKJ2WdtgYDn8cryP7fY5+ap88XxuLbWE=) 12: vb3gssDjLTwTrPMKCLsaCi49ydc.roa (hash: dO008BwQ6cQsdIy387la4LhfeZYYlsJJs+zF4ezgNQE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:55:08:d5:28:a2:15:a7:8f:1a:0e:a3:ed:9b:2a:28:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a79bba2805a988954e4fec42570530f16f9e7093 Validity Not Before: Nov 22 18:01:02 2024 GMT Not After : Nov 23 18:01:02 2024 GMT Subject: CN=d71b7dfec9d8844e0446481fa2db0dd98d3ea341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:fd:3f:df:b9:a3:b0:6c:5f:d7:ea:7f:a9:1f: 2e:d2:e0:de:ec:59:81:ea:33:b4:cc:e5:b0:cf:13: 3d:e5:39:94:aa:87:c5:3d:12:3f:6d:e5:67:25:3b: 64:98:91:81:7c:2e:f9:fb:8b:2e:42:70:ee:73:b4: 7e:77:b8:11:f2:57:db:9d:07:d5:c6:25:c1:33:f1: b5:07:ab:04:2c:1c:c0:a7:f3:f7:b1:c1:9e:53:d9: eb:49:43:fe:d8:f0:b9:5c:96:61:18:5d:ab:97:41: ee:58:9a:b5:73:53:67:97:0c:f9:66:af:36:46:e9: f5:9b:25:a8:d4:2b:52:aa:0a:5e:89:49:54:3d:c2: c3:ec:5c:20:ac:5d:31:26:08:86:10:99:46:06:c6: 02:08:04:ea:50:a0:d3:5a:15:e2:59:39:09:e7:97: 19:c9:ca:44:98:75:66:ba:c9:cb:c1:cb:05:fc:00: 9c:22:81:f3:19:d0:1e:b9:33:c4:5b:4e:b1:8f:36: b3:a5:59:2e:d0:f4:2b:a9:4d:59:6b:fd:f5:52:71: 26:93:32:b7:a3:df:0a:57:f8:34:77:42:57:93:2c: 0e:6d:c1:4a:60:ad:ac:02:88:0a:12:1c:1c:83:a2: b2:47:33:ef:47:52:fc:8e:31:7a:04:d2:00:1f:e1: a4:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D7:1B:7D:FE:C9:D8:84:4E:04:46:48:1F:A2:DB:0D:D9:8D:3E:A3:41 X509v3 Authority Key Identifier: keyid:A7:9B:BA:28:05:A9:88:95:4E:4F:EC:42:57:05:30:F1:6F:9E:70:93 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5u6KAWpiJVOT-xCVwUw8W-ecJM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/d140fb-03ae-45d9-8ddc-e1ed9dd2a02a/1/p5u6KAWpiJVOT-xCVwUw8W-ecJM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 36:ed:14:1e:78:24:a0:55:ea:02:f0:65:c9:54:c1:de:72:19: 77:12:e7:77:99:98:76:4c:42:1f:3e:c2:b3:9f:21:77:0c:46: 69:d6:81:a7:54:97:c0:ce:46:be:99:b4:91:66:00:f2:21:ea: 73:a1:5e:48:24:77:62:02:2a:f8:6e:fe:40:5f:de:9f:c5:5d: 6c:b9:41:92:65:8e:cc:b0:f9:af:e4:7a:e0:ef:7a:e9:3b:08: b7:fc:78:2a:a0:e5:b4:a8:fb:80:83:fa:0f:2f:ef:5b:ff:3c: f6:88:4a:77:7e:4f:2a:32:f3:a9:45:f1:e1:27:8d:1a:22:3d: a9:97:a7:e8:aa:54:c1:78:82:49:34:85:01:13:27:9e:af:4a: a9:b9:94:ff:e7:83:e6:1c:54:2d:b9:79:76:2b:00:55:fc:0a: 5a:7a:80:5e:c8:fc:d5:98:6d:18:7e:cd:5e:e1:32:9c:67:0a: 61:15:c0:37:4b:f2:b6:ca:fa:71:ff:87:47:e4:47:97:db:b4: ec:4c:9d:cc:89:04:55:54:2a:71:49:6b:6d:df:c7:1c:ab:d2: 15:67:84:c8:22:ba:7b:ae:20:1f:3a:29:59:f9:d7:d0:78:aa: c7:b6:0b:57:7f:1c:10:2a:bb:a0:6e:8a:fc:59:4c:c5:5b:18: fd:26:ba:ce -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNVCNUoohWnjxoOo+2bKii4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGE3OWJiYTI4MDVhOTg4OTU0ZTRmZWM0MjU3MDUzMGYxNmY5 ZTcwOTMwHhcNMjQxMTIyMTgwMTAyWhcNMjQxMTIzMTgwMTAyWjAzMTEwLwYDVQQD EyhkNzFiN2RmZWM5ZDg4NDRlMDQ0NjQ4MWZhMmRiMGRkOThkM2VhMzQxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlv0/37mjsGxf1+p/qR8u0uDe7FmB 6jO0zOWwzxM95TmUqofFPRI/beVnJTtkmJGBfC75+4suQnDuc7R+d7gR8lfbnQfV xiXBM/G1B6sELBzAp/P3scGeU9nrSUP+2PC5XJZhGF2rl0HuWJq1c1Nnlwz5Zq82 Run1myWo1CtSqgpeiUlUPcLD7FwgrF0xJgiGEJlGBsYCCATqUKDTWhXiWTkJ55cZ ycpEmHVmusnLwcsF/ACcIoHzGdAeuTPEW06xjzazpVku0PQrqU1Za/31UnEmkzK3 o98KV/g0d0JXkywObcFKYK2sAogKEhwcg6KyRzPvR1L8jjF6BNIAH+GkYQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFNcbff7J2IROBEZIH6LbDdmNPqNBMB8GA1UdIwQY MBaAFKebuigFqYiVTk/sQlcFMPFvnnCTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMt ZTFlZDlkZDJhMDJhLzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iYy9kMTQwZmItMDNhZS00NWQ5LThkZGMtZTFlZDlkZDJhMDJh LzEvcDV1NktBV3BpSlZPVC14Q1Z3VXc4Vy1lY0pNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANu0UHngk oFXqAvBlyVTB3nIZdxLnd5mYdkxCHz7Cs58hdwxGadaBp1SXwM5Gvpm0kWYA8iHq c6FeSCR3YgIq+G7+QF/en8VdbLlBkmWOzLD5r+R64O966TsIt/x4KqDltKj7gIP6 Dy/vW/889ohKd35PKjLzqUXx4SeNGiI9qZen6KpUwXiCSTSFARMnnq9KqbmU/+eD 5hxULbl5disAVfwKWnqAXsj81ZhtGH7NXuEynGcKYRXAN0vytsr6cf+HR+RHl9u0 7EydzIkEVVQqcUlrbd/HHKvSFWeEyCK6e64gHzopWfnX0Hiqx7YLV38cECq7oG6K /FlMxVsY/Sa6zg== -----END CERTIFICATE-----Generated at Fri Nov 22 20:24:58 2024 by rpki-client on console-ams.rpki-client.org