$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft File: _97EpGpubk-aktC6Lgs6tWWL4b0.mft (raw, json) Hash identifier: 0dLDFHTZXo3ZC9wavVhlK8P5NMWAJyp+TZbpyY0vpsU= Subject key identifier: 79:6A:52:65:6B:E4:4F:91:72:11:A7:3E:4F:8D:B9:3E:9D:06:17:35 Authority key identifier: FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD Certificate issuer: /CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Certificate serial: 019351995D00360307A7EA2C5A8AFC30EE42 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft Manifest number: 1385 Signing time: Fri 22 Nov 2024 02:00:25 +0000 Manifest this update: Fri 22 Nov 2024 02:00:25 +0000 Manifest next update: Sat 23 Nov 2024 02:00:25 +0000 Files and hashes: 1: 4Y2NNYeHWAWVaPMmiN5WIBOeTsM.roa (hash: vjoEV1ogvv/WpFnv5AnJxorcEUvTJvyMT2+E2P24tEU=) 2: 6oaKMr3WKw8ddnergIVXX7vsJnk.roa (hash: qBVdIVNN3mpTtwcxTG8W5/u/eFE9MMRv2aAppDV564o=) 3: IOSllibqV1VAtKi4pcCBq6THH8Y.roa (hash: vQbnF2tURsvf7YkEYySUaBeQjumx095cllV+EVDhqdg=) 4: M0_vTS3zqHPW1i2kI__5N6549rs.roa (hash: Q3gQMOCiUL/p128tI+XIwI0qbVcdZfJ7UGnk3omt9Yw=) 5: MOb2f87wQ0A70JBiJbclglaU-dQ.roa (hash: cBZSYILiPxasH+zgyAA0XogyTz676AnLe0EqmWmRusc=) 6: Wz2y-O4BzW9kTTdxZpgus2cFU8A.roa (hash: 7HGW3d65+j2qzszlKD5caBSMaYEtANH6rFAT2aLD1Eg=) 7: _97EpGpubk-aktC6Lgs6tWWL4b0.crl (hash: NIJZKS5QCrFe0+XNUxd4/zz7XhNwxq0uGwz7Lzqa/Eo=) 8: a8RGwXdWoP6oFOEljBLA8oMBxmw.roa (hash: YLAaWYEMgueerdKKKNTs1ygUFG+W5J2pHFlfkNW6UAc=) 9: fWtzFGk8X8TPZKlaxbRkRZL5qX0.roa (hash: kczb4JsHB1+Xk+MuEf0cxa8ff9v0betAGUVhnpBGMJI=) 10: p1oPG2R_x0tSkl7GGzxwdEe8ttc.roa (hash: m2VeBGnjx5sRxe3FFBhIlnjgovGqSzsKC7KSiOexGTk=) 11: pUZzOdFBaRARHJnR9iae0-Dxc2I.roa (hash: BoNAybL6zuX9fIRbPxyP1YClHa9wb3D7hoQcPZS8UBc=) 12: yRY6aoqE-MS1qh53frCxFRB8mkQ.roa (hash: /4REbrWyWkmYFL/RmI1Pd9AyHisEIvREyaoktzqzGGo=) 13: ywO3inH8uRbqObf-KXhS8jV4gBs.roa (hash: p4RDTBd368w3k9IjoCJ9+5SbvsmClt83TVMbl2FBivw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 02:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:51:99:5d:00:36:03:07:a7:ea:2c:5a:8a:fc:30:ee:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ffdec4a46a6e6e4f9a92d0ba2e0b3ab5658be1bd Validity Not Before: Nov 22 02:00:25 2024 GMT Not After : Nov 23 02:00:25 2024 GMT Subject: CN=796a52656be44f917211a73e4f8db93e9d061735 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:3a:86:44:42:2f:e9:5d:87:bc:0b:70:b9:ad: 7b:37:15:7b:46:10:b0:8f:85:54:43:90:e1:45:fb: d0:09:a3:e7:8d:94:85:97:76:e4:11:96:1a:8d:e5: 58:04:43:3a:7a:39:f8:0c:08:b5:71:43:6a:57:2b: 37:5c:39:9e:48:81:61:ea:2b:3a:63:7a:cc:e4:03: 6e:3e:2a:9b:19:75:b4:5e:2a:21:e5:32:57:a1:e4: ed:5c:ba:8f:8b:3a:01:cc:ff:4d:37:d8:49:e7:49: 47:58:7c:7c:9e:c8:90:71:82:02:fb:62:ac:23:03: 97:3b:db:02:f9:5b:1a:a5:dc:3b:a4:c2:f5:85:35: 37:3d:79:64:f7:ad:50:8b:57:4a:50:1d:65:c2:55: 7a:9f:4f:fb:7f:a3:30:13:39:c2:ff:6f:99:53:8b: 7b:3f:5a:de:02:54:63:cc:c9:d7:55:36:5b:96:c9: 23:11:61:19:c4:32:77:26:b6:49:12:eb:92:7b:39: 87:2a:f7:61:a6:ed:64:5c:e2:09:81:86:d9:37:18: 5c:0c:4d:80:8b:29:fc:42:e0:6e:57:a6:21:12:ee: fd:62:e0:40:f0:99:42:60:92:bf:bc:ad:50:f5:12: 2f:97:81:15:9b:45:1d:dd:9e:54:2a:96:c5:d1:cb: 06:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 79:6A:52:65:6B:E4:4F:91:72:11:A7:3E:4F:8D:B9:3E:9D:06:17:35 X509v3 Authority Key Identifier: keyid:FF:DE:C4:A4:6A:6E:6E:4F:9A:92:D0:BA:2E:0B:3A:B5:65:8B:E1:BD X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_97EpGpubk-aktC6Lgs6tWWL4b0.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/11e5b3-43aa-4279-9441-7e8c6d4d9bef/1/_97EpGpubk-aktC6Lgs6tWWL4b0.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bf:ca:28:09:4f:8f:a3:60:2f:03:ea:3f:82:14:87:da:f4:18: 4d:76:92:1b:e3:31:ba:ee:c1:6c:7e:d8:97:b8:95:e2:7b:86: 18:55:34:b7:23:c2:b1:21:61:d2:50:e4:38:a1:ed:e4:45:9d: 8a:2d:9e:02:12:bf:7f:b2:3a:5c:a7:21:4e:90:f1:b1:ed:10: fe:18:fc:11:a5:12:6c:c0:82:c7:40:08:af:13:d0:17:88:a3: 43:9f:a2:2c:b4:b1:79:fd:d2:ac:f3:8a:c0:d2:1c:3a:73:60: 55:91:02:e2:d2:5b:5e:0a:56:82:db:ac:b8:05:f0:b7:0e:a0: b9:d9:25:d4:f8:6e:27:f3:7d:90:d1:af:6c:8c:61:a8:9f:76: 08:ac:48:01:f9:a7:e4:71:8c:96:6f:33:48:10:8d:60:44:0e: df:dc:5c:77:b3:8b:86:d8:8f:2b:88:bd:f3:38:ae:bc:bf:cd: e1:b7:c9:07:de:f8:9c:46:d6:5c:a7:88:25:2c:13:d3:9b:34: bd:ba:f7:93:fa:58:e3:64:e2:3c:8f:dc:64:6d:bb:7c:11:54: 2c:b3:65:2f:03:e2:72:2e:e6:84:c8:00:a2:94:3b:59:3a:94: b3:3f:98:58:d5:b1:50:a6:01:83:8c:f3:31:84:15:3e:5a:9c: d8:d7:68:22 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNRmV0ANgMHp+osWor8MO5CMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGZmZGVjNGE0NmE2ZTZlNGY5YTkyZDBiYTJlMGIzYWI1NjU4 YmUxYmQwHhcNMjQxMTIyMDIwMDI1WhcNMjQxMTIzMDIwMDI1WjAzMTEwLwYDVQQD Eyg3OTZhNTI2NTZiZTQ0ZjkxNzIxMWE3M2U0ZjhkYjkzZTlkMDYxNzM1MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxjqGREIv6V2HvAtwua17NxV7RhCw j4VUQ5DhRfvQCaPnjZSFl3bkEZYajeVYBEM6ejn4DAi1cUNqVys3XDmeSIFh6is6 Y3rM5ANuPiqbGXW0Xioh5TJXoeTtXLqPizoBzP9NN9hJ50lHWHx8nsiQcYIC+2Ks IwOXO9sC+Vsapdw7pML1hTU3PXlk961Qi1dKUB1lwlV6n0/7f6MwEznC/2+ZU4t7 P1reAlRjzMnXVTZblskjEWEZxDJ3JrZJEuuSezmHKvdhpu1kXOIJgYbZNxhcDE2A iyn8QuBuV6YhEu79YuBA8JlCYJK/vK1Q9RIvl4EVm0Ud3Z5UKpbF0csGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFHlqUmVr5E+RchGnPk+NuT6dBhc1MB8GA1UdIwQY MBaAFP/exKRqbm5PmpLQui4LOrVli+G9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEt N2U4YzZkNGQ5YmVmLzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNC8xMWU1YjMtNDNhYS00Mjc5LTk0NDEtN2U4YzZkNGQ5YmVm LzEvXzk3RXBHcHViay1ha3RDNkxnczZ0V1dMNGIwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAv8ooCU+P o2AvA+o/ghSH2vQYTXaSG+Mxuu7BbH7Yl7iV4nuGGFU0tyPCsSFh0lDkOKHt5EWd ii2eAhK/f7I6XKchTpDxse0Q/hj8EaUSbMCCx0AIrxPQF4ijQ5+iLLSxef3SrPOK wNIcOnNgVZEC4tJbXgpWgtusuAXwtw6gudkl1PhuJ/N9kNGvbIxhqJ92CKxIAfmn 5HGMlm8zSBCNYEQO39xcd7OLhtiPK4i98ziuvL/N4bfJB974nEbWXKeIJSwT05s0 vbr3k/pY42TiPI/cZG27fBFULLNlLwPici7mhMgAopQ7WTqUsz+YWNWxUKYBg4zz MYQVPlqc2NdoIg== -----END CERTIFICATE-----Generated at Fri Nov 22 10:06:37 2024 by rpki-client on console-ams.rpki-client.org