$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft File: 3_JHJt8-d_b0yOBDZhOzURDurzg.mft (raw, json) Hash identifier: uOahSBUeE+aL890tqNylKChpnGEmmuZuhpUyEO2yh18= Subject key identifier: 63:7D:AD:B4:14:C6:11:DC:BE:60:35:A1:06:A2:73:B1:E9:6A:A4:3C Authority key identifier: DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 Certificate issuer: /CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Certificate serial: 018F460DE86E092F6ED8DE4AECDF5949A11E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft Manifest number: 0D47 Signing time: Sun 05 May 2024 00:01:07 +0000 Manifest this update: Sun 05 May 2024 00:01:07 +0000 Manifest next update: Mon 06 May 2024 00:01:07 +0000 Files and hashes: 1: 3_JHJt8-d_b0yOBDZhOzURDurzg.crl (hash: b2LaK5IR5nk4rwuSvtNb81ehMZbn5rXZaVfBq5YZrzU=) 2: 52260QRoB-4_m-PMGSxSH2oOuyo.roa (hash: 6qYOemPkovWo55Sz1b7HL6924u9s4+Obo/QDkX1RaK8=) 3: 79JfelMRcTCXmBNIor2H3uJ2Kd0.roa (hash: 7UuEitctFimrF0rcrvKSJu6b91LRg3A5frAymixn9EE=) 4: Ii2KONkSvjEDSADOkDvUUCy1Udg.roa (hash: U9a+hMVNY0eevxLMs7ErjZx3u8JYYLPQyE9+GnNmwzc=) 5: MuGZ8xUSn7wRFMQ7Gimk6QIB5Zw.roa (hash: fQMppXQBkxx0yVfl0/g50gLoxw7SWIIZyfUdTddLEN4=) 6: PVGPS6BnZtYxNljqp_oHw6LVHp8.roa (hash: 6DM0XzCUJ88Bmdq7S9hIbxK4LtK0WFea7QJzYI6G+xk=) 7: Tt-ecC7Y4rfqSqNT2mYseRSBEF8.roa (hash: ZTMcfVv+oLE90UAlExDwFgn1hk7gCKFMHw8L7H8PwTM=) 8: V7-YTRKJRALqpFUqDidbvbrLbXI.roa (hash: BONvHtGZIJJ0/dUeupg9dLcOF9iD3W6krxZ/rbX0kPE=) 9: _hXGXNbkYgo-iSToXBOgHSiv4sY.roa (hash: LCAngRFHUBVu329bbLNcfmnHNQqDpgfKNMXWN8StZck=) 10: aeuGtrhgVLHS7sKUpwOULfaEc6o.roa (hash: 0BXBwkgqWKhNHZmZFB2+UrhvtvTqey8atlD9jvWhbG4=) 11: oBIL-LKtPT9b3a5Dj45Izr6S6eY.roa (hash: X81jPSzOFnYa6DzkVRLIvKAm0YHR7bfpg+B/NpzB3TA=) 12: qBzD8GhRA2Dtcoe6CRB6AMW5IvA.roa (hash: 34tFQ0Eu3GEE0uP6GuEKNgu7TiHylOICOZy95MskedY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 05 May 2024 23:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:46:0d:e8:6e:09:2f:6e:d8:de:4a:ec:df:59:49:a1:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=dff24726df3e77f6f4c8e0436613b35110eeaf38 Validity Not Before: May 5 00:01:07 2024 GMT Not After : May 6 00:01:07 2024 GMT Subject: CN=637dadb414c611dcbe6035a106a273b1e96aa43c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:cc:51:bf:64:30:70:d5:58:15:28:e2:e3:d0: 05:f1:a0:97:d9:af:b2:7a:e9:b1:91:8b:d9:d3:23: 02:7d:5c:35:3b:5a:a6:58:10:38:aa:a4:8c:19:01: 3e:f4:13:93:f8:ac:1f:3c:b5:29:db:89:49:05:81: 2d:62:be:fe:f6:38:2e:bd:7f:d1:65:54:e0:85:fe: 09:42:78:c5:65:81:2d:2b:f1:f3:9e:73:95:c7:70: fe:48:05:8a:ed:13:c8:d9:f4:dc:08:74:a6:f0:7b: 6b:06:22:a2:b5:98:3f:49:44:d5:9e:31:62:fc:cf: 35:b4:10:50:4d:36:68:08:cb:ea:cb:c8:e0:0a:64: 71:ed:87:0f:06:0d:13:26:c7:b0:a7:40:c0:f2:83: dd:ab:b3:1d:e9:11:e3:57:af:e4:32:a8:09:83:7c: dc:c8:66:30:dd:fb:0d:80:1f:d0:82:09:d0:05:97: c8:f0:e7:f8:3a:68:5c:ff:77:21:54:9a:88:fa:3c: 7d:3b:24:7c:3a:20:b5:c2:4c:fa:f6:3e:c8:10:7f: a9:84:3e:1b:d5:e4:f8:ec:7c:11:98:72:9f:95:d6: 96:d9:ab:b8:d4:80:b7:fc:03:59:1b:85:04:5e:c0: aa:cc:b5:13:9d:e0:5b:0a:fd:32:20:c6:aa:3a:11: 6c:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:7D:AD:B4:14:C6:11:DC:BE:60:35:A1:06:A2:73:B1:E9:6A:A4:3C X509v3 Authority Key Identifier: keyid:DF:F2:47:26:DF:3E:77:F6:F4:C8:E0:43:66:13:B3:51:10:EE:AF:38 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3_JHJt8-d_b0yOBDZhOzURDurzg.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a96024-6555-4e8d-af37-62bb6d63e59d/1/3_JHJt8-d_b0yOBDZhOzURDurzg.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 81:98:b7:37:3f:b3:a1:08:cf:7b:9a:ad:be:66:12:fa:83:0a: b6:f5:48:f7:40:9f:0d:43:c4:e7:e7:47:2f:7e:4c:e9:38:42: 05:d2:16:3a:6b:fe:a9:f7:c8:55:cf:be:de:48:82:d8:50:2e: e1:a1:26:be:90:86:45:21:d5:a4:f5:11:ce:ba:40:e6:16:7e: ce:67:10:da:f5:f8:b4:70:a6:e6:b1:71:16:3e:65:c3:7c:05: a9:99:78:dc:74:94:9f:2b:68:a9:4c:f1:ad:84:7a:da:71:b1: 1a:43:c4:df:d1:f6:d3:83:a7:9b:f2:31:5a:4b:22:54:ca:6c: a6:d9:cb:78:ce:6f:2e:69:ad:c3:82:84:b7:6a:ee:a3:66:8e: 80:90:78:4d:89:aa:d8:3d:0e:5f:08:9a:a5:df:12:ec:22:d5: 24:0e:e6:93:c5:48:4f:3c:17:8c:63:b2:bd:34:7a:c1:5e:e0: 65:d7:fd:d2:ea:f5:9a:20:c1:76:4a:c0:5e:c9:1b:a8:01:68: c2:c5:17:de:a9:69:2c:5d:5e:47:06:b1:9a:76:44:1a:12:70: e8:b5:42:4d:a9:8a:f0:0b:1b:6e:d9:e6:6f:8a:20:b3:06:61: 90:23:3e:9c:b2:b5:41:b6:ec:af:03:c2:02:f0:70:d6:e5:d8: 45:15:61:95 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY9GDehuCS9u2N5K7N9ZSaEeMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGRmZjI0NzI2ZGYzZTc3ZjZmNGM4ZTA0MzY2MTNiMzUxMTBl ZWFmMzgwHhcNMjQwNTA1MDAwMTA3WhcNMjQwNTA2MDAwMTA3WjAzMTEwLwYDVQQD Eyg2MzdkYWRiNDE0YzYxMWRjYmU2MDM1YTEwNmEyNzNiMWU5NmFhNDNjMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv8xRv2QwcNVYFSji49AF8aCX2a+y eumxkYvZ0yMCfVw1O1qmWBA4qqSMGQE+9BOT+KwfPLUp24lJBYEtYr7+9jguvX/R ZVTghf4JQnjFZYEtK/HznnOVx3D+SAWK7RPI2fTcCHSm8HtrBiKitZg/SUTVnjFi /M81tBBQTTZoCMvqy8jgCmRx7YcPBg0TJsewp0DA8oPdq7Md6RHjV6/kMqgJg3zc yGYw3fsNgB/QggnQBZfI8Of4Omhc/3chVJqI+jx9OyR8OiC1wkz69j7IEH+phD4b 1eT47HwRmHKfldaW2au41IC3/ANZG4UEXsCqzLUTneBbCv0yIMaqOhFsCwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFGN9rbQUxhHcvmA1oQaic7HpaqQ8MB8GA1UdIwQY MBaAFN/yRybfPnf29MjgQ2YTs1EQ7q84MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzct NjJiYjZkNjNlNTlkLzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9jOC9hOTYwMjQtNjU1NS00ZThkLWFmMzctNjJiYjZkNjNlNTlk LzEvM19KSEp0OC1kX2IweU9CRFpoT3pVUkR1cnpnLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgZi3Nz+z oQjPe5qtvmYS+oMKtvVI90CfDUPE5+dHL35M6ThCBdIWOmv+qffIVc++3kiC2FAu 4aEmvpCGRSHVpPURzrpA5hZ+zmcQ2vX4tHCm5rFxFj5lw3wFqZl43HSUnytoqUzx rYR62nGxGkPE39H204Onm/IxWksiVMpsptnLeM5vLmmtw4KEt2ruo2aOgJB4TYmq 2D0OXwiapd8S7CLVJA7mk8VITzwXjGOyvTR6wV7gZdf90ur1miDBdkrAXskbqAFo wsUX3qlpLF1eRwaxmnZEGhJw6LVCTamK8Asbbtnmb4ogswZhkCM+nLK1QbbsrwPC AvBw1uXYRRVhlQ== -----END CERTIFICATE-----Generated at Sun May 5 07:09:00 2024 by rpki-client on console-ams.rpki-client.org