$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft File: sa8S9cp1ySKkql2stJwEqTI39O0.mft (raw, json) Hash identifier: cyR9jBhnsPLTw1uNhbX2KEH1z0ct5MSzooankfowXrQ= Subject key identifier: 1E:B2:F4:43:5E:02:CD:1F:DB:CC:71:EE:8E:D2:9A:2F:B5:56:E7:83 Authority key identifier: B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED Certificate issuer: /CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Certificate serial: 019352078646301C4E8EE66856B27305942B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft Manifest number: 0F6E Signing time: Fri 22 Nov 2024 04:00:44 +0000 Manifest this update: Fri 22 Nov 2024 04:00:44 +0000 Manifest next update: Sat 23 Nov 2024 04:00:44 +0000 Files and hashes: 1: 02hc6JgWitJscQKFhogl4dZ92hc.roa (hash: pzOSGio3pWFX43S1mVvEXTZ8dGupKg0aN02/TVWGRTg=) 2: CO_0VE__NsDRRWgM22BpYj_P-2w.roa (hash: 9L7dPXppBRKZPIfj81oZDhRpj2/gGSzU+lLa3XMak6w=) 3: MaJbxX7lvgTSe8VYrkuHEDEjJ1c.roa (hash: nMkrejMTQudZWMPjWuiNB0rg0Bbk9m7eiUt5bCoHuXs=) 4: Q4aKzuKQcgX50MlBztxa6HU46jA.roa (hash: cbl/cso0tWlmSWlEs785PG36HyXKWDL4j4gIFNwLAGU=) 5: SEIOQ4mdZb_iSheEz1F1Bg-CtNU.roa (hash: 7Ej2rU0OZFZbGapajcLDwx0yeguHS93IaKcHLxYpbQw=) 6: _oUr7Rhxmgrw_t3mq_4wlq2-Ibo.roa (hash: nZbQ0HhgfysXLW0z9jWk6JcbyV2Nx7drLm7xDQQ8XOo=) 7: bhoYkN3pKblGPjYnNMM28QUpz4E.roa (hash: E28KJizivFfnHroqCGrPqW9LQVkUzuh2UOiIY+1nRsA=) 8: dL0XWuMWe_2-McofnGQYe3IpEEY.roa (hash: qG37sZz9RReQrTdvUDPZTM4LSjg11839PWfzjmfw/Cg=) 9: ddaqNnwzkA1UVhffHrdWE-QahMA.roa (hash: q8d1zIYgc9JeMgQqho+q2BFsy8ShX6RWpD5+PpGwVqA=) 10: heoykRXl7IUhde8E857nSji3u8Y.roa (hash: K3rCW5Dcu1FrDJY1HYWZW2W6XyZvEgLsxN88xAmRMuI=) 11: sa8S9cp1ySKkql2stJwEqTI39O0.crl (hash: h/gwTNmFk+OX2dlBqIueigX6RpTKTJfnauwObesZ298=) 12: tLAu2MNg_WCsJYkDt3cdfv_RIOY.roa (hash: GpIhjEUiDfDzAVFGrf7Oe+IL3e9PH3VSKFtDiC6V3ow=) 13: xfxwGRtmBoGNmwOOyh5eFNYPfXY.roa (hash: AyiP/FF2qci3BxbNXp3IVhC0+1I+8uj6Wg87qOzx0Zo=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:86:46:30:1c:4e:8e:e6:68:56:b2:73:05:94:2b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b1af12f5ca75c922a4aa5dacb49c04a93237f4ed Validity Not Before: Nov 22 04:00:44 2024 GMT Not After : Nov 23 04:00:44 2024 GMT Subject: CN=1eb2f4435e02cd1fdbcc71ee8ed29a2fb556e783 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:67:48:f4:4d:8d:18:a4:5e:71:e5:5c:40:8a: e7:ba:e9:22:dc:cd:3e:ac:bc:03:96:38:88:62:2d: d2:40:2e:be:13:b6:79:bc:a5:44:78:5c:66:c5:7a: e6:55:45:22:9d:6d:f4:42:50:1e:47:d9:08:8d:1d: 7a:fd:ed:88:f2:d5:b6:78:10:c4:85:dc:6c:65:8d: a3:c4:1a:25:13:19:4e:e3:e2:34:95:3e:b8:ea:57: 2c:1b:5d:20:a0:5d:33:d8:c2:7f:c6:2a:28:54:99: d9:f8:9e:1a:ff:1a:4a:0d:a0:59:0c:2d:56:d1:0c: 0b:0a:e6:5f:ed:2d:b0:83:81:58:8f:7a:af:ca:2b: b5:b0:31:20:6e:9a:2d:21:b1:73:8a:ff:9b:52:c2: 45:3f:fe:d7:bd:c0:de:bd:fa:f2:c5:47:72:81:33: 85:fa:d2:7d:e6:ad:cf:2f:74:4e:72:c6:88:3d:22: 22:86:63:47:5b:0a:6d:4d:9a:c0:a8:c6:1b:d0:a8: 5a:ed:f5:fb:a1:07:15:b4:d7:f1:e7:89:4c:0c:83: 62:52:bc:b7:64:ae:39:37:d9:f0:25:25:17:a1:c0: 41:c8:19:72:01:cb:e3:1b:68:b9:c9:c4:4b:91:38: 0c:83:1e:da:f5:07:f1:86:11:ef:9b:93:fe:05:80: fe:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1E:B2:F4:43:5E:02:CD:1F:DB:CC:71:EE:8E:D2:9A:2F:B5:56:E7:83 X509v3 Authority Key Identifier: keyid:B1:AF:12:F5:CA:75:C9:22:A4:AA:5D:AC:B4:9C:04:A9:32:37:F4:ED X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sa8S9cp1ySKkql2stJwEqTI39O0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/bd/cbcf68-7cbf-47f0-82ee-5760efbcc654/1/sa8S9cp1ySKkql2stJwEqTI39O0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 51:94:1b:3e:ff:da:9b:f7:2c:8e:f7:d4:e4:28:3b:da:d6:d1: 9e:c9:e9:f3:0e:dc:13:b4:aa:eb:4b:41:e2:53:cb:f9:1d:c4: c7:48:46:66:35:75:ce:61:bb:59:17:2b:d3:7c:6e:a4:9b:ee: cb:a5:f1:02:60:40:7b:29:cf:a9:ca:78:2a:e5:04:03:b1:1e: 07:dd:98:60:7d:34:85:f4:e1:7d:79:a6:6f:ec:10:8f:d1:01: 5c:6b:48:98:1b:c0:2c:fe:f5:36:3d:25:f8:f5:13:ce:5d:f4: 69:8c:3e:13:89:d6:a4:2b:33:50:55:45:1e:aa:cb:67:ab:4b: 2f:5c:04:a0:ed:99:08:e9:8a:42:a7:57:5a:e5:10:d7:dc:32: 93:1a:8a:59:53:8e:22:d1:70:7f:12:ff:33:53:3d:83:ca:fd: 1e:eb:4c:26:42:21:eb:68:ea:8d:80:4e:16:c3:17:db:ed:d0: 4b:33:51:9f:8f:09:22:aa:4c:c3:f4:c0:e7:e9:8f:6a:74:3f: af:28:1d:18:48:40:5f:24:13:d3:53:53:3c:23:d3:ec:7f:15: ee:7d:05:52:29:b6:63:56:fe:08:5a:86:86:72:8f:6d:94:24: 91:56:0f:df:bb:20:b9:dc:64:3f:55:dd:2b:b4:66:0e:68:2e: bf:cc:6f:d7 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSB4ZGMBxOjuZoVrJzBZQrMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIxYWYxMmY1Y2E3NWM5MjJhNGFhNWRhY2I0OWMwNGE5MzIz N2Y0ZWQwHhcNMjQxMTIyMDQwMDQ0WhcNMjQxMTIzMDQwMDQ0WjAzMTEwLwYDVQQD EygxZWIyZjQ0MzVlMDJjZDFmZGJjYzcxZWU4ZWQyOWEyZmI1NTZlNzgzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2dI9E2NGKReceVcQIrnuuki3M0+ rLwDljiIYi3SQC6+E7Z5vKVEeFxmxXrmVUUinW30QlAeR9kIjR16/e2I8tW2eBDE hdxsZY2jxBolExlO4+I0lT646lcsG10goF0z2MJ/xiooVJnZ+J4a/xpKDaBZDC1W 0QwLCuZf7S2wg4FYj3qvyiu1sDEgbpotIbFziv+bUsJFP/7XvcDevfryxUdygTOF +tJ95q3PL3ROcsaIPSIihmNHWwptTZrAqMYb0Kha7fX7oQcVtNfx54lMDINiUry3 ZK45N9nwJSUXocBByBlyAcvjG2i5ycRLkTgMgx7a9QfxhhHvm5P+BYD+uwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFB6y9ENeAs0f28xx7o7Smi+1VueDMB8GA1UdIwQY MBaAFLGvEvXKdckipKpdrLScBKkyN/TtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUt NTc2MGVmYmNjNjU0LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9iZC9jYmNmNjgtN2NiZi00N2YwLTgyZWUtNTc2MGVmYmNjNjU0 LzEvc2E4UzljcDF5U0trcWwyc3RKd0VxVEkzOU8wLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUZQbPv/a m/csjvfU5Cg72tbRnsnp8w7cE7Sq60tB4lPL+R3Ex0hGZjV1zmG7WRcr03xupJvu y6XxAmBAeynPqcp4KuUEA7EeB92YYH00hfThfXmmb+wQj9EBXGtImBvALP71Nj0l +PUTzl30aYw+E4nWpCszUFVFHqrLZ6tLL1wEoO2ZCOmKQqdXWuUQ19wykxqKWVOO ItFwfxL/M1M9g8r9HutMJkIh62jqjYBOFsMX2+3QSzNRn48JIqpMw/TA5+mPanQ/ rygdGEhAXyQT01NTPCPT7H8V7n0FUim2Y1b+CFqGhnKPbZQkkVYP37sgudxkP1Xd K7RmDmguv8xv1w== -----END CERTIFICATE-----Generated at Fri Nov 22 06:40:33 2024 by rpki-client on console-ams.rpki-client.org