$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft File: 5b86csrW9LPcMFtMvjEIcFHZg_Y.mft (raw, json) Hash identifier: AdAZ0OQWZtC3Fe3PBViZT3T6Fs56sWEBWzXS/L7Rzio= Subject key identifier: B1:55:25:67:00:03:14:51:99:22:CA:BE:9B:D8:50:07:68:8A:16:73 Authority key identifier: E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 Certificate issuer: /CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Certificate serial: 01935199D0EB386D390DBA7A23F56D9D3DB7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft Manifest number: 0C6B Signing time: Fri 22 Nov 2024 02:00:55 +0000 Manifest this update: Fri 22 Nov 2024 02:00:55 +0000 Manifest next update: Sat 23 Nov 2024 02:00:55 +0000 Files and hashes: 1: 3paVuMyPWE53sDy5b5Gdk6YcWoY.roa (hash: jit8cJtV0cwAHZqzMQcxev+bSOkQBiR6qgmY87bH89o=) 2: 5b86csrW9LPcMFtMvjEIcFHZg_Y.crl (hash: gDVSc9LJ7rQ9UKCf9UCjS+5qFukIqiciLp76G4jEItY=) 3: EYvGMSd4wAYUR6skIPYy7CQ4A-M.roa (hash: p7a2aIinISZWjTlcx052BVjdozk5L4aeg0EGcvmagUQ=) 4: JI-Cdf0kmPjyFyocOMbzQ8yEZ5A.roa (hash: ageVUM05nNArcPQ4TNkYWe9ZmcbBITr8+kPTwFcuBao=) 5: MwiBLKTah_MGY-RC_77XOD8MCvI.roa (hash: HFXhYBPkyV7Hb+mGVJ5NUdwcbm93bs0R4XjIxZXFw6Q=) 6: NOQzUR_OJGx_rycG3xwaq--UwsU.roa (hash: JSfXS+fmw4Cb8dZCrB+6kB0DXv44DNwYJaaByDTCdiM=) 7: OH58xhpWMtQAvnvF7QFfUrjs6c8.roa (hash: HM9GsrzX1civM/UIBmZ757rKFYKLDJOOLu3+7ypGM6Y=) 8: WZzVmK_vnHnl-o4XvYrhg0Wmx_M.roa (hash: 5p97U/2CgZmUMwU08DUSF9RsUCJV+Z+Yp2zRU+UcXGQ=) 9: ZhXFh7ybPBwsATvgPQRZFg9fWvA.roa (hash: lkDNgjmHCH48Ue3+so8zVkUfr70z4cZuNdlsXc+l1LI=) 10: aCgDvocUKfI05oFVse5QHrrSCbw.roa (hash: JGMazpxsiggfjtLz7FzniAsSIVgABFXYe5BCsKifm8I=) 11: dYrzsYQ2wQpmQU8IX3gTHzhco6c.roa (hash: BXG4QOkUzGhisHoTrVSXoTcZbT/74xSRgkE18OZH9aI=) 12: jAcrNe6TSKKWSbYErzudPjSLidk.roa (hash: BFeWQ1A29nhMiT+MIUTNsBkuuTBMHL8zS8AmTUXTXdw=) 13: nsKfFsvaguNgkpoGs_fT3uLJLLc.roa (hash: 7P3BwXuchThRInjj0HMs3g8KEcVFcNDr1mryFw+xF7s=) 14: rA9u7_aCYD5rgPP81hsKwgB0qMc.roa (hash: +vdy4wYdw0j7WKHyFdKJ9/kzdqrbhtCSwMffImjqyss=) 15: ynCWUyfbJnTUiKxeySGl7jLw7_A.roa (hash: YVEdGzV6nStbfKY2Db/9ujcFGts1GAoDMMgGkOs/dNQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:d0:eb:38:6d:39:0d:ba:7a:23:f5:6d:9d:3d:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=e5bf3a72cad6f4b3dc305b4cbe31087051d983f6 Validity Not Before: Nov 22 02:00:55 2024 GMT Not After : Nov 23 02:00:55 2024 GMT Subject: CN=b1552567000314519922cabe9bd85007688a1673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:a0:73:9c:a7:a6:7b:5e:11:ee:24:35:b0:45: 5e:9d:30:14:c6:44:1d:b1:12:3b:21:20:b6:e8:5b: 46:29:fc:db:56:74:ea:c7:43:d2:f9:b9:1a:22:b8: 66:4b:b6:da:e0:eb:42:06:fb:ea:9a:45:2d:af:e0: 75:7a:0f:cd:36:f3:62:a1:7f:b4:8d:a5:19:a6:03: 08:a1:45:00:36:23:7c:e9:fb:4c:b2:f0:16:42:52: f4:c4:83:88:c0:95:38:15:63:b5:e3:27:8a:7a:f3: 6b:30:1b:2d:cb:ad:a7:9f:36:c5:37:21:44:8f:ef: 1e:c7:f3:70:fd:23:51:4c:83:eb:39:b4:df:e4:dc: 5a:db:9a:c3:9f:16:4b:6e:26:c8:ab:85:07:e6:05: b1:76:0b:28:b2:d1:fd:3a:72:57:db:37:59:6a:89: d0:ee:db:0a:28:3a:ce:a9:3e:77:6b:96:b0:a7:2c: b3:d7:22:eb:9c:6c:8d:ff:72:0a:9a:d8:4a:83:af: 47:87:4d:1b:39:57:43:10:2f:b4:94:f5:a8:25:2a: f3:60:9c:ea:77:4c:f8:56:04:c2:fa:3a:e5:f6:bb: 9f:05:ba:50:b6:5c:61:1d:22:75:17:60:23:9e:05: c1:5c:61:31:9b:e0:49:d2:f3:cc:8c:15:4b:51:c1: ba:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:55:25:67:00:03:14:51:99:22:CA:BE:9B:D8:50:07:68:8A:16:73 X509v3 Authority Key Identifier: keyid:E5:BF:3A:72:CA:D6:F4:B3:DC:30:5B:4C:BE:31:08:70:51:D9:83:F6 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b86csrW9LPcMFtMvjEIcFHZg_Y.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/2313b8-de02-4228-900a-09be9db11f66/1/5b86csrW9LPcMFtMvjEIcFHZg_Y.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:96:f3:9d:6e:05:9a:d8:f1:75:f3:98:d5:59:70:96:e7:ea: e3:b0:b9:4e:d2:15:2c:00:b0:dd:78:5f:0b:e1:84:ab:73:83: b5:54:07:3a:80:45:49:48:e6:18:52:32:ee:c2:a5:22:18:1d: 2c:44:5c:ca:f6:5f:8a:45:6e:42:ca:31:18:90:ee:3f:f0:c7: d0:3e:53:8d:82:50:7d:20:f9:79:90:cf:34:79:1b:be:0e:34: cb:19:89:fe:96:10:86:6f:8f:83:1d:f7:ac:91:02:0e:13:6e: 63:d6:64:ad:af:fb:6d:d8:9e:35:3a:50:d5:f1:d8:ed:92:df: cf:66:78:1d:45:9b:c2:7a:22:fa:42:a5:db:f5:8f:db:27:2f: 78:3e:05:70:03:ef:c8:9d:3b:61:9a:e1:57:b2:b6:4e:00:72: 40:94:40:6f:84:c5:97:79:4d:6c:97:0a:f4:1d:08:1c:76:a2: 6a:24:53:86:de:64:32:f4:20:e0:65:4c:b0:a4:eb:eb:1f:62: 23:68:76:3b:67:7a:86:54:82:eb:f0:55:c7:5d:0d:1c:9e:00: ee:0c:b9:a6:84:8e:a2:c2:de:fa:dc:54:d4:16:b8:41:4e:b1: 47:50:7e:b6:8d:69:81:43:02:92:8a:7e:a0:c7:ae:ee:7d:77: e0:6d:35:dc -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRmdDrOG05Dbp6I/VtnT23MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGU1YmYzYTcyY2FkNmY0YjNkYzMwNWI0Y2JlMzEwODcwNTFk OTgzZjYwHhcNMjQxMTIyMDIwMDU1WhcNMjQxMTIzMDIwMDU1WjAzMTEwLwYDVQQD EyhiMTU1MjU2NzAwMDMxNDUxOTkyMmNhYmU5YmQ4NTAwNzY4OGExNjczMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6BznKeme14R7iQ1sEVenTAUxkQd sRI7ISC26FtGKfzbVnTqx0PS+bkaIrhmS7ba4OtCBvvqmkUtr+B1eg/NNvNioX+0 jaUZpgMIoUUANiN86ftMsvAWQlL0xIOIwJU4FWO14yeKevNrMBsty62nnzbFNyFE j+8ex/Nw/SNRTIPrObTf5Nxa25rDnxZLbibIq4UH5gWxdgsostH9OnJX2zdZaonQ 7tsKKDrOqT53a5awpyyz1yLrnGyN/3IKmthKg69Hh00bOVdDEC+0lPWoJSrzYJzq d0z4VgTC+jrl9rufBbpQtlxhHSJ1F2AjngXBXGExm+BJ0vPMjBVLUcG6+QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFLFVJWcAAxRRmSLKvpvYUAdoihZzMB8GA1UdIwQY MBaAFOW/OnLK1vSz3DBbTL4xCHBR2YP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEt MDliZTlkYjExZjY2LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMC8yMzEzYjgtZGUwMi00MjI4LTkwMGEtMDliZTlkYjExZjY2 LzEvNWI4NmNzclc5TFBjTUZ0TXZqRUljRkhaZ19ZLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgJbznW4F mtjxdfOY1Vlwlufq47C5TtIVLACw3XhfC+GEq3ODtVQHOoBFSUjmGFIy7sKlIhgd LERcyvZfikVuQsoxGJDuP/DH0D5TjYJQfSD5eZDPNHkbvg40yxmJ/pYQhm+Pgx33 rJECDhNuY9Zkra/7bdieNTpQ1fHY7ZLfz2Z4HUWbwnoi+kKl2/WP2ycveD4FcAPv yJ07YZrhV7K2TgByQJRAb4TFl3lNbJcK9B0IHHaiaiRTht5kMvQg4GVMsKTr6x9i I2h2O2d6hlSC6/BVx10NHJ4A7gy5poSOosLe+txU1Ba4QU6xR1B+to1pgUMCkop+ oMeu7n134G013A== -----END CERTIFICATE-----Generated at Fri Nov 22 04:57:09 2024 by rpki-client on console-ams.rpki-client.org