$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft File: 71fC2dk6x8-bLxfKp4WbaYWzm50.mft (raw, json) Hash identifier: WyUFxQS/ipZpUHPBHtxKXbe4OzxpzYF5UNp4MU03xok= Subject key identifier: 97:25:A4:BB:DF:39:3A:01:38:9C:40:E6:1C:75:2C:16:99:65:92:C7 Authority key identifier: EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D Certificate issuer: /CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Certificate serial: 018E82941016F3AA8BD8B502A3B895CB11E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft Manifest number: 0D1D Signing time: Thu 28 Mar 2024 01:02:05 +0000 Manifest this update: Thu 28 Mar 2024 01:02:05 +0000 Manifest next update: Fri 29 Mar 2024 01:02:05 +0000 Files and hashes: 1: 71fC2dk6x8-bLxfKp4WbaYWzm50.crl (hash: e9fJiq9KkUl3GetwroKW3aaR/1KU9iWSugI29U5i1u8=) 2: Cobgh31dSmzB77t5-dEi5g23Trg.roa (hash: R/vIX5DcQkOFnzpCwz6QTEkw7AWHiE/qDeJ5ph7OBqU=) 3: J8cuiXT2g23wndNvyFrcpWzDdHA.roa (hash: e4hAOCwWTrgP6ZknxGcjGruv+CU8DSN/CkQFqjnHcNk=) 4: Mh_GNcUVa16oNJqbCfhW0lARbN0.roa (hash: FhhVHvEE/akBu8v4hdr0V5LN8DiDXi08oVRjC0Bfwl4=) 5: Sj1iz-ORdmMwnbJR6Eyd7ELrV10.roa (hash: uIsmt14DqfuKdzUgJdLi1h/N7QwTs4eZvC3Nw8GW7Ww=) 6: ZwkyChbsSJk1g6Ao-Hw5oMvDT8E.roa (hash: 86lwT6T3LJpC1lcuBkxP5xpAKi98U70K0aUiQUMk0FA=) 7: _oABcb0n5WSIZkIhiobbcyZ5r9w.roa (hash: RQl5WSMc121555H89RB4jV89hHPt9PZ67+uo3vfSN1E=) 8: aRyYS4UuUN8w4eHt-qmuglDNkpM.roa (hash: LEWFYdysHP5aW1SkQg2Jak7e7B61JGjKOpwDVfX5PRc=) 9: cSBdOpyT4vS_FSzoHThF-s1N-6E.roa (hash: /pBx+9bnc82fpcCYrtBaMJ75KE5GQ0RgRhMn8iP2X4o=) 10: eapc41tjJa0hfHId5ykkkfvMMRs.roa (hash: zZNPbqe/vwD/MRbkiLPjy5F7oHm/SGU+BxBbBkXNjlo=) 11: jEeiCwltrxPpbVEHb94obdjMcrk.roa (hash: fUJj9nT0ugSKDwluLx5uy1Eqdk24fEqOm2lzvTrvoG8=) 12: m0AkQ3FD0f8X5Fms9-GGs1xaDjI.roa (hash: kLxjz+5rtR2uerqz4/mY/4+3eNRPvhyTf6GMIor1IWg=) 13: q4W4R39oVDcSRR5MWA-eZrOybEw.roa (hash: jEOG0tI2nOd3Y6E02scIxq/iOfKnAzDuSPjPlqsYKB0=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 29 Mar 2024 01:02:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8e:82:94:10:16:f3:aa:8b:d8:b5:02:a3:b8:95:cb:11:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ef57c2d9d93ac7cf9b2f17caa7859b6985b39b9d Validity Not Before: Mar 28 01:02:05 2024 GMT Not After : Mar 29 01:02:05 2024 GMT Subject: CN=9725a4bbdf393a01389c40e61c752c16996592c7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:2d:88:b7:d6:a8:c2:1d:bc:ea:30:f6:ad:b0: 63:c8:fa:02:86:75:79:3c:2e:f0:2f:1b:83:de:19: 9a:65:5d:e6:65:c3:b4:8c:c0:97:d1:03:03:c5:b1: 8f:d3:ac:cf:44:8d:91:8f:9f:3b:3a:7f:0d:3d:22: ab:ab:40:e8:e3:32:b0:a0:60:f0:2d:44:57:bd:0a: 7f:9e:e2:f1:7e:9a:9c:c0:e1:8c:b6:8b:b9:32:2a: 2d:b9:7a:a7:dc:12:64:ac:11:b8:73:14:f2:f0:88: 51:dc:e3:f8:49:4f:e8:08:3e:b9:b5:60:5c:78:d1: f3:52:c8:c5:3f:7b:39:64:ff:ce:63:12:32:67:b1: ab:35:11:1f:a6:84:a6:3f:ec:35:14:06:9b:32:07: cf:af:75:14:25:65:86:98:ca:c2:ce:03:b3:48:61: 54:0e:e1:79:4e:95:d4:86:aa:57:7b:08:89:6c:2d: 64:cf:03:93:c0:3b:e1:42:55:08:fd:56:4c:dd:db: 7a:4d:75:2a:e2:1c:cf:eb:de:3c:e8:e2:be:0d:54: 9d:ff:a8:15:31:67:cb:9b:0e:c5:b8:48:c2:e2:f8: cc:86:27:f6:b5:15:a1:8a:18:b6:0d:00:d9:ba:de: 82:f3:07:90:61:52:36:da:ff:42:85:4a:1d:51:1a: bc:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 97:25:A4:BB:DF:39:3A:01:38:9C:40:E6:1C:75:2C:16:99:65:92:C7 X509v3 Authority Key Identifier: keyid:EF:57:C2:D9:D9:3A:C7:CF:9B:2F:17:CA:A7:85:9B:69:85:B3:9B:9D X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/71fC2dk6x8-bLxfKp4WbaYWzm50.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/1e04b8-1031-43f9-9667-8e6f878db5f4/1/71fC2dk6x8-bLxfKp4WbaYWzm50.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:1f:66:aa:7b:69:bf:ee:d7:cd:03:f9:23:be:01:e4:1d:0f: 58:94:d9:58:2b:30:55:ea:a3:16:30:df:0e:9b:4d:21:6d:c5: c9:79:df:3e:b8:a7:5e:46:d9:d2:50:5a:ad:dc:d7:0f:f5:d6: a5:2b:43:06:47:d9:ef:76:67:63:17:bd:70:0c:bc:e3:76:91: d6:74:de:aa:82:8e:47:bd:b9:55:18:79:ac:f7:4f:9d:a1:c6: 4c:b8:c6:7c:70:4c:3a:7c:7a:5c:6a:6d:a6:93:b9:65:4b:f7: da:04:15:79:62:cc:73:4d:19:8b:73:42:83:66:9e:33:eb:e6: 22:ca:4f:f7:53:84:ad:d0:59:ac:4d:c8:f1:2c:07:35:b7:62: 52:b2:da:75:74:6c:32:d9:8d:c5:71:2c:13:c2:fa:07:2b:d2: 28:31:f3:df:9d:71:86:ec:12:8b:bb:1e:3e:d6:41:42:4d:13: c5:dc:b7:da:50:49:40:9d:39:05:00:8e:2c:7d:42:4f:99:17: e5:d0:cc:31:88:8e:9a:9c:97:82:8a:23:3b:28:72:fc:03:74: f7:73:73:96:8e:92:f9:91:9f:df:cb:de:a5:84:90:07:b3:8e: 2f:d9:ae:79:30:ef:7d:d2:71:71:aa:a4:f3:a1:3b:f3:82:d5: cf:a1:ec:6a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY6ClBAW86qL2LUCo7iVyxHnMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGVmNTdjMmQ5ZDkzYWM3Y2Y5YjJmMTdjYWE3ODU5YjY5ODVi MzliOWQwHhcNMjQwMzI4MDEwMjA1WhcNMjQwMzI5MDEwMjA1WjAzMTEwLwYDVQQD Eyg5NzI1YTRiYmRmMzkzYTAxMzg5YzQwZTYxYzc1MmMxNjk5NjU5MmM3MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqC2It9aowh286jD2rbBjyPoChnV5 PC7wLxuD3hmaZV3mZcO0jMCX0QMDxbGP06zPRI2Rj587On8NPSKrq0Do4zKwoGDw LURXvQp/nuLxfpqcwOGMtou5MiotuXqn3BJkrBG4cxTy8IhR3OP4SU/oCD65tWBc eNHzUsjFP3s5ZP/OYxIyZ7GrNREfpoSmP+w1FAabMgfPr3UUJWWGmMrCzgOzSGFU DuF5TpXUhqpXewiJbC1kzwOTwDvhQlUI/VZM3dt6TXUq4hzP69486OK+DVSd/6gV MWfLmw7FuEjC4vjMhif2tRWhihi2DQDZut6C8weQYVI22v9ChUodURq8YQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJclpLvfOToBOJxA5hx1LBaZZZLHMB8GA1UdIwQY MBaAFO9XwtnZOsfPmy8XyqeFm2mFs5udMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2Njct OGU2Zjg3OGRiNWY0LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kMC8xZTA0YjgtMTAzMS00M2Y5LTk2NjctOGU2Zjg3OGRiNWY0 LzEvNzFmQzJkazZ4OC1iTHhmS3A0V2JhWVd6bTUwLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATh9mqntp v+7XzQP5I74B5B0PWJTZWCswVeqjFjDfDptNIW3FyXnfPrinXkbZ0lBardzXD/XW pStDBkfZ73ZnYxe9cAy843aR1nTeqoKOR725VRh5rPdPnaHGTLjGfHBMOnx6XGpt ppO5ZUv32gQVeWLMc00Zi3NCg2aeM+vmIspP91OErdBZrE3I8SwHNbdiUrLadXRs MtmNxXEsE8L6ByvSKDHz351xhuwSi7sePtZBQk0Txdy32lBJQJ05BQCOLH1CT5kX 5dDMMYiOmpyXgoojOyhy/AN093Nzlo6S+ZGf38vepYSQB7OOL9mueTDvfdJxcaqk 86E784LVz6Hsag== -----END CERTIFICATE-----Generated at Thu Mar 28 07:02:40 2024 by rpki-client on console-ams.rpki-client.org