$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft File: HJY-PSKEfUZsJiwgh4wngNiEAAM.mft (raw, json) Hash identifier: Di7PB/b66qD5YktvRXX0si1LwjWwQ8PXVlz43fQhwtg= Subject key identifier: 3C:AB:04:9A:8A:99:EB:F5:65:FF:D0:C8:35:FB:B7:27:82:60:5A:34 Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003 Certificate serial: 01935199E2E2E10A82EEED3F0E734FBF8FFC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft Manifest number: 02C3 Signing time: Fri 22 Nov 2024 02:00:59 +0000 Manifest this update: Fri 22 Nov 2024 02:00:59 +0000 Manifest next update: Sat 23 Nov 2024 02:00:59 +0000 Files and hashes: 1: 34wKC6qczoShaiF9v8M-QbITZWE.roa (hash: ayMvOsqoK+2LKCrBjo+2GY7/OO0O/vklIbEh+D/6SPE=) 2: 4FBRu-NgPiZzMU58DF5i4tNpFyY.roa (hash: lH0///ELMh/B6JJWYIzTqi6yozo9TggG2Mv90c8eY7U=) 3: 519k9f5y1H3bYrkrJB4BIzDKvbo.roa (hash: xJFxcxJ5Z/5MkOWiYdUe9xiWosCtYZ2+sg0BuK2I0NI=) 4: APTOy1F_afTC4xuqPHh4RPNafJI.roa (hash: s0FCu892VvkTE8UjctcWcg/2QTvNBI2KGC+hAOXFYk0=) 5: HJY-PSKEfUZsJiwgh4wngNiEAAM.crl (hash: CQvXbTVDUm2Hlmt9QF1H0r3l332jKeL2y65o4O2mhPA=) 6: ODH2hxl-s0M3f8s_tzFioVLMoSk.roa (hash: g3CFC3EvltkFUbtzSNdzsiUpKMH1MDpZdCXFHCYvPFQ=) 7: Pgo079B64VWqbkrQWiT2zYYrO90.roa (hash: T8htDdR8nW5KG/8RV3161Jg8q7heLnSSamsQgNeakqk=) 8: RxLkL94N4oAZ_uNuWn-lI_vjVvM.roa (hash: BPSTBmbkZVL9OPtjFeLZ//sBLb2PWfIBrc1JxouFtqI=) 9: WxPmBUxIn4r0TPD9qVkZFq8Y-R0.roa (hash: kd22nU5YScAp763wMSa5sg9SXYgEqw4BUIIiHZEKT/A=) 10: _yuoAy9njLKeb5tPlGNLxrAXaUI.roa (hash: rlzbWujbZ5/BRDanfhgMJKZatlxB0Zi99gvognK0Nng=) 11: bzPmXuaiTj37vHd0pjUBmFU1If4.roa (hash: D/7/XIJkILMvqhQzzfmhV4xY9bwiolycvClxmPfNvXQ=) 12: pSq_Nf15cLag2Z06xYN8CfDfEUk.roa (hash: 39NFI+vsnqYqPq1unMd65Nl5o3RHhyPs1Qpf5ZWwSLA=) 13: qrplbK8ufxPRfKo_kwcsvLG5-p4.roa (hash: a9ayu9Wf9sbrbMKxqqd4GM3zKugZzfSXJT454H1RuHc=) 14: rkcoN511e5yP-NlaeJ2TY_bk-FE.roa (hash: fX67gmuBDq/TVm/KLYFpjwHYMQ79M7h4unNG1INyNa4=) 15: upCJ80B1LznAzjDXxnVzxMD0OZw.roa (hash: XnAHAWPelWNRp+E5DciHSW3yVe3DEvU18gdryxaJkOM=) 16: wzrEb9tXV8dCC9KJF4-bYluirJg.roa (hash: +NXo0MCMWSNKXaxBTA93Bz/fUzqSnyWERexLVfSaozQ=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:e2:e2:e1:0a:82:ee:ed:3f:0e:73:4f:bf:8f:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003 Validity Not Before: Nov 22 02:00:59 2024 GMT Not After : Nov 23 02:00:59 2024 GMT Subject: CN=3cab049a8a99ebf565ffd0c835fbb72782605a34 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:c9:94:df:f6:bf:32:3c:e3:1b:76:36:75:f2: 74:d7:8f:62:61:fb:c1:86:b5:35:7f:c6:0a:f6:bc: 08:e5:54:a1:28:e2:93:a1:3b:3f:8d:36:7c:6b:18: 93:11:c9:12:05:44:57:73:c0:a2:27:27:34:7f:a9: f0:05:89:09:dc:3e:df:82:13:2c:46:8d:46:42:a4: 8b:d1:88:46:52:15:fb:2f:d2:51:85:f2:c2:75:ce: 0a:d9:da:69:e5:e2:39:2d:a5:30:71:b8:7a:05:54: f2:95:43:f1:d0:59:6d:63:78:ad:8a:24:1d:17:eb: af:c2:36:1d:8e:2e:64:7c:e5:23:4c:fd:30:89:b9: ce:7e:1c:5b:66:cf:70:4b:30:d1:35:90:fe:e9:83: af:3c:75:f4:79:56:dd:88:b0:d4:ac:2a:9b:9d:ca: 85:96:d8:04:20:ae:08:c1:a3:29:ff:3a:78:fe:83: 26:91:97:a5:69:ac:33:ce:b0:ca:b5:78:2f:47:17: 6a:ae:8d:51:7c:0c:3f:d9:e8:ee:f9:76:68:9c:45: cf:00:ed:77:a9:ff:de:bb:a6:a8:06:69:06:65:8e: 1c:1c:37:c3:fd:9a:b2:f7:e0:c8:c8:8b:a6:9f:31: fe:a8:f1:19:48:6a:9a:81:85:b9:95:1c:67:d8:54: 34:9d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3C:AB:04:9A:8A:99:EB:F5:65:FF:D0:C8:35:FB:B7:27:82:60:5A:34 X509v3 Authority Key Identifier: keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 56:03:88:53:2a:ce:b7:32:93:42:75:32:64:35:58:19:e1:54: 74:f9:d0:61:6b:1d:d9:f4:91:cc:72:08:66:76:10:cd:04:28: 8f:cc:83:2b:e1:1d:ea:7d:84:12:d0:9b:09:e4:ee:a1:68:6f: a8:a8:16:d2:86:b8:9d:f6:2f:a1:ac:e1:76:de:89:3d:2e:97: 27:0d:c7:60:10:b6:42:32:91:bb:01:cf:95:5a:01:b0:7d:72: ae:47:7a:87:7d:92:95:30:69:e6:8c:52:ac:35:a3:31:18:8e: 6a:d6:d5:d8:e1:f2:f7:24:72:ac:61:53:53:90:88:ae:07:0c: 89:72:ce:62:96:5b:19:86:0f:bb:b1:df:b1:86:38:58:04:39: 4d:5e:11:2e:cc:f5:2b:95:7f:18:92:be:73:75:15:47:27:ad: 4d:d9:76:e2:15:42:29:23:d2:d5:a7:34:d2:1c:a1:b5:ad:3e: 37:20:be:2b:1b:7b:a1:16:6e:97:2b:4e:c2:13:48:c0:46:84: be:3d:ff:3f:0e:ef:b2:ff:c3:1a:22:05:f1:19:95:53:21:3e: 90:85:24:00:16:1c:12:37:e5:ec:80:5b:b3:0f:b0:a0:ef:69: a4:bd:9f:28:99:d1:f5:fd:87:75:56:0c:cc:47:a9:17:7f:b6: 6b:b4:85:3b -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRmeLi4QqC7u0/DnNPv4/8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFjOTYzZTNkMjI4NDdkNDY2YzI2MmMyMDg3OGMyNzgwZDg4 NDAwMDMwHhcNMjQxMTIyMDIwMDU5WhcNMjQxMTIzMDIwMDU5WjAzMTEwLwYDVQQD EygzY2FiMDQ5YThhOTllYmY1NjVmZmQwYzgzNWZiYjcyNzgyNjA1YTM0MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyMmU3/a/MjzjG3Y2dfJ0149iYfvB hrU1f8YK9rwI5VShKOKToTs/jTZ8axiTEckSBURXc8CiJyc0f6nwBYkJ3D7fghMs Ro1GQqSL0YhGUhX7L9JRhfLCdc4K2dpp5eI5LaUwcbh6BVTylUPx0FltY3itiiQd F+uvwjYdji5kfOUjTP0wibnOfhxbZs9wSzDRNZD+6YOvPHX0eVbdiLDUrCqbncqF ltgEIK4IwaMp/zp4/oMmkZelaawzzrDKtXgvRxdqro1RfAw/2eju+XZonEXPAO13 qf/eu6aoBmkGZY4cHDfD/Zqy9+DIyIumnzH+qPEZSGqagYW5lRxn2FQ0nQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFDyrBJqKmev1Zf/QyDX7tyeCYFo0MB8GA1UdIwQY MBaAFByWPj0ihH1GbCYsIIeMJ4DYhAADMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQt MTQzOTY3YThmZTA4LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jMy8zOGYxMjgtZWE4Mi00NTU1LWI1MTQtMTQzOTY3YThmZTA4 LzEvSEpZLVBTS0VmVVpzSml3Z2g0d25nTmlFQUFNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVgOIUyrO tzKTQnUyZDVYGeFUdPnQYWsd2fSRzHIIZnYQzQQoj8yDK+Ed6n2EEtCbCeTuoWhv qKgW0oa4nfYvoazhdt6JPS6XJw3HYBC2QjKRuwHPlVoBsH1yrkd6h32SlTBp5oxS rDWjMRiOatbV2OHy9yRyrGFTU5CIrgcMiXLOYpZbGYYPu7HfsYY4WAQ5TV4RLsz1 K5V/GJK+c3UVRyetTdl24hVCKSPS1ac00hyhta0+NyC+Kxt7oRZulytOwhNIwEaE vj3/Pw7vsv/DGiIF8RmVUyE+kIUkABYcEjfl7IBbsw+woO9ppL2fKJnR9f2HdVYM zEepF3+2a7SFOw== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:33 2024 by rpki-client on console-ams.rpki-client.org