$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft File: sMIK4drMoxgVsnRwKSfBpanbx7M.mft (raw, json) Hash identifier: gkQohEpo6h5ZNdfp40Lw22HH3E5BpSV09OHiRK8+910= Subject key identifier: 1B:BE:3D:98:84:80:53:A2:BF:CC:F1:0C:21:08:05:E9:57:B8:C3:A3 Authority key identifier: B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 Certificate issuer: /CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Certificate serial: 0193549BA7A16E2568A2DA3FDF9A62D091FC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft Manifest number: 1382 Signing time: Fri 22 Nov 2024 16:01:47 +0000 Manifest this update: Fri 22 Nov 2024 16:01:47 +0000 Manifest next update: Sat 23 Nov 2024 16:01:47 +0000 Files and hashes: 1: 1gqUxqgUn2J2yUfphn8_eh_c78I.roa (hash: Wg24wxLdJ2LIWsBpTs+5MRjvTYj1eCfiPR3apwTJab0=) 2: 5SEq9tqIZ31oCkILPpPvtUc9zDQ.roa (hash: J9rEG7UFH4iktFH0Cny3i+W8HFwoUVlcfhz3v1F6Yuw=) 3: 60htSXVdIE64_r55gTnuS6cHuTM.roa (hash: E7gTtgGFynRqE4aX/zmVDHVtG88DD62+2778VGcacOE=) 4: PtsXXx2ls7hCbLBPAS4MNTG28Zo.roa (hash: XHMY7zQy6wr71DLBIZA9qFAsJDYs54tGUJpVNoTHa5A=) 5: Y5tBOnYBsjtqPhDcLgPZiyIj9M4.roa (hash: 2RYCQ7+7DKVhEvwDSDftTOwFc/fPpUinfyMS4D8jTxg=) 6: YOwN-I--XY-TILUrPHq5w9CDRs0.roa (hash: Tl6UyGz5chIyqkC+4aY+8IzMpOpox+9jHVzHoCchbWE=) 7: bhx6bRQJbK4_5KO0IIRJ0ybwSaw.roa (hash: as/qS6HjB0x5pdSeNPVxPaLsP7zaGO6ndfjuFlUp2SA=) 8: eh2BSnNDXx41FEXbDV8ULInuLWI.roa (hash: 7l4u6AywmuvOLBschjBB2FyGGckffiZbYTBdv+G3ZDE=) 9: ldXu6LKJDB1I-ZmpFNOUL8AQSOc.roa (hash: 7RJU1BejIWwWtBME6/P6S3dmPtZeW5nA4GmcGUhxuxA=) 10: qSyqT6U8amppKFyeuWplKDvDgQ4.roa (hash: bQ6MzH911Ty487GI9eBuCFHFItUmaVVulHsJdXwl0Us=) 11: sMIK4drMoxgVsnRwKSfBpanbx7M.crl (hash: NUCyh3w9CFJUn8XRfTCtl2gp86pCUHIxBNzl43rPze8=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 12:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:54:9b:a7:a1:6e:25:68:a2:da:3f:df:9a:62:d0:91:fc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b0c20ae1dacca31815b274702927c1a5a9dbc7b3 Validity Not Before: Nov 22 16:01:47 2024 GMT Not After : Nov 23 16:01:47 2024 GMT Subject: CN=1bbe3d98848053a2bfccf10c210805e957b8c3a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:4b:d3:11:d4:51:f1:4d:94:4c:4a:d3:5c:5a: c4:6d:33:29:81:7e:6c:b2:d7:3b:da:a9:5c:9e:25: 16:a7:91:8a:7b:17:b9:dc:f5:ae:bf:ca:27:5f:69: d7:3c:5f:88:94:7e:b0:c1:b7:14:95:54:9d:f1:f7: 3a:33:5a:a8:76:93:9e:fb:8a:87:0e:6a:bc:a1:e3: 2a:06:6c:1b:0a:eb:06:88:35:aa:07:dc:84:88:62: f6:de:88:ea:7d:45:5d:b6:b1:ee:05:5d:d3:5a:41: 92:43:ff:fd:00:57:29:2f:f8:1c:35:ee:bd:a9:c1: a1:fe:1c:6b:35:d9:1a:69:b0:6f:6e:0e:80:1a:5b: f9:1b:28:37:85:c3:b1:58:30:f7:0f:c4:ff:b7:2d: 27:e5:66:26:e8:52:7f:75:11:e8:07:09:ce:87:a7: 5b:ac:82:3f:66:0b:9a:ec:44:f8:d2:07:e2:33:65: e6:fa:03:92:65:38:73:dc:20:5e:98:5e:87:c7:83: 7f:4a:0a:11:fb:72:30:30:98:e9:8c:59:51:2b:9a: 11:07:cf:ed:86:23:c1:f7:e4:d7:4b:33:83:f0:f4: 91:56:d7:c3:73:bd:fc:b8:53:dc:d5:e5:69:67:49: db:dc:54:41:cd:26:fb:24:25:b5:d0:77:59:05:b3: d3:d9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:BE:3D:98:84:80:53:A2:BF:CC:F1:0C:21:08:05:E9:57:B8:C3:A3 X509v3 Authority Key Identifier: keyid:B0:C2:0A:E1:DA:CC:A3:18:15:B2:74:70:29:27:C1:A5:A9:DB:C7:B3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sMIK4drMoxgVsnRwKSfBpanbx7M.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/888869-7a65-415b-b68f-5484402ceb7a/1/sMIK4drMoxgVsnRwKSfBpanbx7M.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:50:55:5e:15:7e:af:3f:dc:73:40:50:e5:0c:9e:89:12:3d: 45:a2:e4:65:e4:e1:35:c2:34:0e:94:42:05:0c:14:d7:e9:58: 77:b9:88:15:64:1e:d9:c9:33:6e:ee:45:fd:de:63:b3:dc:a2: 7b:f2:37:86:c4:d5:7a:6e:fe:b9:2d:cf:07:5d:bf:4e:63:a7: 9f:46:db:11:1b:86:a2:09:93:cf:fc:77:06:78:8c:2d:d7:5f: 47:6e:0c:e7:38:7c:1d:ee:3b:25:17:da:7c:d5:38:48:47:4c: 4d:29:7d:f1:0b:fd:9a:65:cb:07:42:52:1d:4e:c7:d8:ce:61: d4:25:22:df:36:8c:47:c9:54:66:c3:78:a6:32:b5:b6:ac:b6: f5:95:8f:1e:22:75:e8:7a:41:79:64:0f:ef:7e:87:ac:25:5b: 22:33:97:25:07:e8:2e:96:b1:ed:a3:ce:22:99:3f:7a:93:dd: 4c:b2:ad:f5:cd:e5:9a:17:43:e6:d5:f8:83:6f:80:d1:08:9f: 91:bc:01:3e:c5:6c:37:a4:98:a9:58:ee:69:fc:fc:47:4c:d8: 78:58:be:64:bf:7b:d4:0b:b4:c1:e3:bc:a9:80:95:ad:d8:75: eb:af:4a:35:2f:fd:f1:0c:c8:5f:7b:c0:d0:75:a9:e0:c3:6f: dd:bd:38:a0 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNUm6ehbiVooto/35pi0JH8MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGIwYzIwYWUxZGFjY2EzMTgxNWIyNzQ3MDI5MjdjMWE1YTlk YmM3YjMwHhcNMjQxMTIyMTYwMTQ3WhcNMjQxMTIzMTYwMTQ3WjAzMTEwLwYDVQQD EygxYmJlM2Q5ODg0ODA1M2EyYmZjY2YxMGMyMTA4MDVlOTU3YjhjM2EzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUvTEdRR8U2UTErTXFrEbTMpgX5s stc72qlcniUWp5GKexe53PWuv8onX2nXPF+IlH6wwbcUlVSd8fc6M1qodpOe+4qH Dmq8oeMqBmwbCusGiDWqB9yEiGL23ojqfUVdtrHuBV3TWkGSQ//9AFcpL/gcNe69 qcGh/hxrNdkaabBvbg6AGlv5Gyg3hcOxWDD3D8T/ty0n5WYm6FJ/dRHoBwnOh6db rII/Zgua7ET40gfiM2Xm+gOSZThz3CBemF6Hx4N/SgoR+3IwMJjpjFlRK5oRB8/t hiPB9+TXSzOD8PSRVtfDc738uFPc1eVpZ0nb3FRBzSb7JCW10HdZBbPT2QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBu+PZiEgFOiv8zxDCEIBelXuMOjMB8GA1UdIwQY MBaAFLDCCuHazKMYFbJ0cCknwaWp28ezMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYt NTQ4NDQwMmNlYjdhLzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jNS84ODg4NjktN2E2NS00MTViLWI2OGYtNTQ4NDQwMmNlYjdh LzEvc01JSzRkck1veGdWc25Sd0tTZkJwYW5ieDdNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1BVXhV+ rz/cc0BQ5QyeiRI9RaLkZeThNcI0DpRCBQwU1+lYd7mIFWQe2ckzbu5F/d5js9yi e/I3hsTVem7+uS3PB12/TmOnn0bbERuGogmTz/x3BniMLddfR24M5zh8He47JRfa fNU4SEdMTSl98Qv9mmXLB0JSHU7H2M5h1CUi3zaMR8lUZsN4pjK1tqy29ZWPHiJ1 6HpBeWQP736HrCVbIjOXJQfoLpax7aPOIpk/epPdTLKt9c3lmhdD5tX4g2+A0Qif kbwBPsVsN6SYqVjuafz8R0zYeFi+ZL971Au0weO8qYCVrdh1669KNS/98QzIX3vA 0HWp4MNv3b04oA== -----END CERTIFICATE-----Generated at Fri Nov 22 18:24:17 2024 by rpki-client on console-fra.rpki-client.org