$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft File: LDljuiquWr04pu7QnamFYR8bUCE.mft (raw, json) Hash identifier: hykH6ppelu1IG88q3moo5RORugWW+HT6RyE8Nti3Iac= Subject key identifier: A6:B0:08:1E:8B:82:C3:98:4D:F6:C2:EB:F4:30:5D:3F:22:2A:69:43 Authority key identifier: 2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 Certificate issuer: /CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Certificate serial: 018F87B6120ACCA955D6A5162C05E3ED8D86 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft Manifest number: 1180 Signing time: Fri 17 May 2024 18:00:07 +0000 Manifest this update: Fri 17 May 2024 18:00:07 +0000 Manifest next update: Sat 18 May 2024 18:00:07 +0000 Files and hashes: 1: 1eGw_eSFtEpxPSUaC0VpDW0KI5k.roa (hash: T82TmXuLlOcarKFujN9vzb118dALFzekfWVmFHNXBwM=) 2: 1ufctCDUnIAm8_K0vTpfsX5T7l4.roa (hash: h5rV3Jx59f1kVwg5UDCeJBscGDXJK5v9zvUWortTb14=) 3: 354XAWHns0l8Hb1NgeiUkG-OKHc.roa (hash: zooyP87bZLsVfsdiFwj5YzAkac+vIAoiFyYmqNqbwP8=) 4: 7SSzJj03qPrwFuKTHgN1uHL3CV4.roa (hash: U3jrRr1hP52cKm3CfAXYP8tXCMgNcj8Z9XItWKQhMNM=) 5: AMCH7gudrHbGvZQSFrGlz74oMSU.roa (hash: /2GM51FpMWybnNXPeu+ADauUDVZ0ZlsHb5piprQ7g8E=) 6: LDljuiquWr04pu7QnamFYR8bUCE.crl (hash: DLF6qzpGLJ2GP0Oa0zn57iB9VdDMm/eiW5hS43nuyWo=) 7: Sdhb_6SvZjLm1TEgIHqMk3JqGeA.roa (hash: oBHNCkUE46Jr3IaJk4x+V08k7JdSHjwNhE7/1ux9Sk4=) 8: _0KoleCX6QFdOW5_zg0gMjffr0I.roa (hash: ZIa+JCintZKaOC4LppIp3dw4hgqJtyfEaPRKdyqcP9A=) 9: a_3d322DGG9t9FNVMlgLBzbb0Gs.roa (hash: +ErxTpNos2VTcyOLVNorAOultfeC1ePNBSXmlh/A90A=) 10: d0GDpvEKLFwcJ1ATucz-ay4vcQQ.roa (hash: /mgAGHbNgWQUe087vez6GTKr150C2Lw9fj3xT0KnG+A=) 11: nE68Tpolw96WYEnosN3YvKelj8k.roa (hash: QpIqMBYrKSLRx01eEqpkW7pe74zjopU0Nzi2oZnWlFA=) 12: yQNmFqV3SLZzlSL4uNSxaQyaIC0.roa (hash: OMxZqbBrph8Z+2aZ6pyEcCIr0gjyUBQCI7+0pDGgcFA=) 13: yVqkt8ZzhvIoDK4bLMSalNbpeTM.roa (hash: QEJCQxg80mU8aV0UcLCIXovF7FaJGiunwnM7s36hRys=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 16:46:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:87:b6:12:0a:cc:a9:55:d6:a5:16:2c:05:e3:ed:8d:86 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c3963ba2aae5abd38a6eed09da985611f1b5021 Validity Not Before: May 17 18:00:07 2024 GMT Not After : May 18 18:00:07 2024 GMT Subject: CN=a6b0081e8b82c3984df6c2ebf4305d3f222a6943 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:d6:36:0f:f2:c7:fe:1f:9b:ab:ba:aa:b1:5b: 0d:da:06:d3:5b:98:9a:89:f9:13:b6:94:3c:5b:05: 33:95:de:74:9c:3f:7e:7d:89:d5:dd:e4:d6:29:55: af:ac:48:6d:c3:5a:3a:c4:52:48:98:65:03:5f:69: 70:16:07:2a:58:0a:43:3b:24:e5:82:40:ea:45:0d: f7:79:51:46:22:d3:03:22:4a:12:88:62:e4:07:d1: bf:47:47:4b:44:32:59:3a:4a:d0:9f:95:70:d5:54: f7:ac:a9:8b:c6:5f:b5:5b:29:59:2b:45:d7:43:82: fd:96:92:06:72:b5:38:5f:45:9a:36:c9:4c:02:04: e9:80:ba:2b:48:18:b5:39:92:f3:df:8f:77:27:b8: 70:43:34:bb:5a:32:cc:4f:0a:fd:cb:e9:78:de:5d: 7e:91:a1:73:f8:74:84:66:98:c0:91:d3:f6:ac:2c: 1f:7b:6f:b9:1c:93:85:8d:0d:06:19:0a:94:bb:33: ca:7b:9d:3b:5c:36:e7:53:48:f0:5d:ad:85:1b:ad: 63:a3:39:65:e4:83:15:f2:14:ca:a6:ff:72:07:39: 47:d7:15:c3:bd:e9:b0:9b:81:b9:24:e3:18:06:c7: ac:f6:06:3a:77:af:8a:ce:cb:22:06:52:d3:68:2d: a6:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:B0:08:1E:8B:82:C3:98:4D:F6:C2:EB:F4:30:5D:3F:22:2A:69:43 X509v3 Authority Key Identifier: keyid:2C:39:63:BA:2A:AE:5A:BD:38:A6:EE:D0:9D:A9:85:61:1F:1B:50:21 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LDljuiquWr04pu7QnamFYR8bUCE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/381ecc-9d75-41ba-85f6-17693e7ea67a/1/LDljuiquWr04pu7QnamFYR8bUCE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:1f:27:ad:c1:9c:0e:48:41:0d:5a:85:65:c5:53:10:fb:9b: 41:15:f0:6c:22:69:0c:33:e4:6e:fa:e5:67:60:e3:c1:4d:9f: 3d:38:12:e9:51:1d:f9:9f:dd:f6:b6:a2:5c:7a:ba:c7:d4:36: 74:50:4c:96:5d:98:ed:00:88:77:fe:b1:45:3c:89:8f:37:93: 0e:96:f1:11:5a:9d:50:2b:e6:56:b8:6f:e7:88:28:3a:db:a0: 01:77:57:67:e4:ba:81:40:bf:2d:74:51:e6:ce:f9:68:fa:7c: 3d:75:0e:15:6b:6f:21:8f:cb:bc:de:29:6d:db:04:1c:6f:f4: cc:cd:61:6d:8f:2d:e4:5b:7d:c1:a9:54:6d:4e:87:1a:e3:31: dc:81:f1:a9:f5:70:b1:e9:33:2b:94:00:cf:17:18:82:ba:f4: 99:9e:7f:af:ac:c4:e7:9b:2b:1e:10:c5:3f:e7:bc:19:9b:c0: 8b:5e:97:a8:b8:88:aa:e2:ea:69:d7:cd:8b:db:5e:5d:44:21: 8e:c9:74:61:0e:59:77:a3:e0:ab:d5:14:43:79:2b:e8:48:30: 55:07:7c:6e:7b:d3:dd:d9:8c:34:a0:c2:e1:f3:86:2b:c0:df: 52:e4:66:c2:80:fe:31:71:8d:3f:4f:73:0c:d4:eb:1f:60:6b: da:22:a2:12 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+HthIKzKlV1qUWLAXj7Y2GMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjMzk2M2JhMmFhZTVhYmQzOGE2ZWVkMDlkYTk4NTYxMWYx YjUwMjEwHhcNMjQwNTE3MTgwMDA3WhcNMjQwNTE4MTgwMDA3WjAzMTEwLwYDVQQD EyhhNmIwMDgxZThiODJjMzk4NGRmNmMyZWJmNDMwNWQzZjIyMmE2OTQzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNY2D/LH/h+bq7qqsVsN2gbTW5ia ifkTtpQ8WwUzld50nD9+fYnV3eTWKVWvrEhtw1o6xFJImGUDX2lwFgcqWApDOyTl gkDqRQ33eVFGItMDIkoSiGLkB9G/R0dLRDJZOkrQn5Vw1VT3rKmLxl+1WylZK0XX Q4L9lpIGcrU4X0WaNslMAgTpgLorSBi1OZLz3493J7hwQzS7WjLMTwr9y+l43l1+ kaFz+HSEZpjAkdP2rCwfe2+5HJOFjQ0GGQqUuzPKe507XDbnU0jwXa2FG61jozll 5IMV8hTKpv9yBzlH1xXDvemwm4G5JOMYBses9gY6d6+KzssiBlLTaC2mqwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFKawCB6LgsOYTfbC6/QwXT8iKmlDMB8GA1UdIwQY MBaAFCw5Y7oqrlq9OKbu0J2phWEfG1AhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYt MTc2OTNlN2VhNjdhLzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kYy8zODFlY2MtOWQ3NS00MWJhLTg1ZjYtMTc2OTNlN2VhNjdh LzEvTERsanVpcXVXcjA0cHU3UW5hbUZZUjhiVUNFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyh8nrcGc DkhBDVqFZcVTEPubQRXwbCJpDDPkbvrlZ2DjwU2fPTgS6VEd+Z/d9raiXHq6x9Q2 dFBMll2Y7QCId/6xRTyJjzeTDpbxEVqdUCvmVrhv54goOtugAXdXZ+S6gUC/LXRR 5s75aPp8PXUOFWtvIY/LvN4pbdsEHG/0zM1hbY8t5Ft9walUbU6HGuMx3IHxqfVw sekzK5QAzxcYgrr0mZ5/r6zE55srHhDFP+e8GZvAi16XqLiIquLqadfNi9teXUQh jsl0YQ5Zd6Pgq9UUQ3kr6EgwVQd8bnvT3dmMNKDC4fOGK8DfUuRmwoD+MXGNP09z DNTrH2Br2iKiEg== -----END CERTIFICATE-----Generated at Fri May 17 20:19:57 2024 by rpki-client on console-fra.rpki-client.org