$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft File: b8UNDUIGe3arGi6OUz_4SbZdVvU.mft (raw, json) Hash identifier: wfcuunERjNG+VTuzoCRCFNYYReVAQZO4I7gp31myQwg= Subject key identifier: 51:83:A9:39:A8:CB:DB:FD:33:86:BC:85:75:BB:D5:BA:61:63:EB:3E Authority key identifier: 6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 Certificate issuer: /CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Certificate serial: 019352AE4B96CDC5626D7B268B510007B403 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft Manifest number: 1390 Signing time: Fri 22 Nov 2024 07:02:54 +0000 Manifest this update: Fri 22 Nov 2024 07:02:54 +0000 Manifest next update: Sat 23 Nov 2024 07:02:54 +0000 Files and hashes: 1: HBm_fq0udEkVTTkSlETg4gyYIas.roa (hash: wlJAudbn0gApE7T9CyWbWwf7CeQD1ASTAWGg7VDDQvs=) 2: LzvFlUKI2yXkJjU4l60IBSw4Qzk.roa (hash: XttCDjpt+cw+AsgAEgGOByO8DVJyVhIJ/a1QBBgYATQ=) 3: TbVD9-XpBk6W0yrlgWh0V-ewBQc.roa (hash: hCNLIAwnqSjOs2mAP7RsckyeEPf9EBpeIb7Qp4DpJk4=) 4: XNSPEidrLViPOnU_ylEcsNRIkSM.roa (hash: fVY8M+sOAQkYtWYmGStjgbj5+XvrK8ZmGdagOJ5rJcY=) 5: YHsnAG0EdnvN0gD9DJyoep_vJVs.roa (hash: QFghRz7dmgkFjUE/RnwZZEZCq5tdLndI8biFEGtAaDY=) 6: _49C6TA6x0LOvw1qizYAp7ZGHLU.roa (hash: 6/S0qWN4lveLNFDQBJtpnvIRZHA3M1UT48bPO4F15bM=) 7: b8UNDUIGe3arGi6OUz_4SbZdVvU.crl (hash: HHwiQEGCvEh1Rzk+JgCB81QOHCXGCDCLJRvETNv6j/4=) 8: frueZYdhCCQjGZUB04kfHcGiGYU.roa (hash: RN2HbCmlQCxR6APVX75uNTqLP8m9StKKZHygYQy5WY0=) 9: gNUGOINF8Al0SndkW22SDCPn4Mo.roa (hash: N5/Lkl9eMzqBmSorEW8dvsYKdFhAmMAb/hIs+QkdRB4=) 10: irsEQQbqphrKxjsPBtuq5v1hdy8.roa (hash: UmWcb2DyiJFXiEe9YXiKWWrC90xK6c9mb3EZAx4itt4=) 11: pPEQvd8Aji_mINzbYqPZfOHkyNg.roa (hash: F4Tac2cXOFIexVMrkzPegP91z9mnQ6Tf9gz3YC6XVnQ=) 12: qlZXqLIYmGOoim6-ok_kbhdC1sg.roa (hash: /PvzmRjnPZKuwj3dLKhEZCX0Qd+yOdoIwwmjuD4Rwlw=) 13: woKGq2-Rc8_AH4pPFz1pk1_mm9g.roa (hash: 0Fc2BA94frrLlmZzCIOj+EFyvv9YfYmX6rrn2syRA/U=) 14: wqE_qsGs5euOyhiNJXiWCOcbHkA.roa (hash: GBUNoO8FaTB+lUnjTqxDQ1DWXSigFrKazEFoRfpeIiM=) 15: z1w7flMSnlsN-clqegHhsuje7xw.roa (hash: Nbd4CukJwQ1oi5fYZh0xh4qKmha4bc8rDliKC46655o=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:ae:4b:96:cd:c5:62:6d:7b:26:8b:51:00:07:b4:03 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6fc50d0d42067b76ab1a2e8e533ff849b65d56f5 Validity Not Before: Nov 22 07:02:54 2024 GMT Not After : Nov 23 07:02:54 2024 GMT Subject: CN=5183a939a8cbdbfd3386bc8575bbd5ba6163eb3e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:b0:69:cc:43:42:17:35:51:4d:36:71:8e:6a: 65:e8:db:84:5a:4a:dd:dc:33:0a:b2:91:31:4d:b8: 2f:db:97:bc:05:06:d9:d2:37:3d:c0:02:45:06:01: f8:7e:b4:66:af:0f:99:75:37:a6:15:b4:71:a2:23: 05:80:ea:61:4d:6e:0f:95:ee:35:99:8e:29:e5:35: 5e:79:9d:8e:32:09:5e:5d:b8:71:38:ee:fe:96:ae: ff:58:0f:9e:92:a1:5d:44:30:4a:38:c1:70:63:e9: d1:59:11:06:be:93:80:23:45:63:c2:3e:3b:4d:14: 17:6d:64:c1:57:58:07:fc:ad:7c:0a:47:da:76:d2: f6:d1:41:17:e6:5b:ad:29:f1:70:56:5c:22:b1:03: ef:9c:ff:fe:4b:f9:b0:8a:c6:18:3b:87:cc:ff:99: d0:39:7f:59:52:f0:63:de:db:96:d3:01:13:e8:18: 7d:d0:f1:1d:5c:d5:2d:23:5d:50:f4:d6:c7:71:1c: 27:ab:af:93:d0:df:12:ab:01:b2:cf:49:46:94:bf: 5a:27:1f:02:47:97:90:d9:31:ee:15:c8:15:44:07: 1c:ba:cf:00:e4:0d:51:c2:88:7f:21:b0:7d:d5:49: 4e:ba:46:2f:a8:2f:f6:5b:aa:de:33:08:87:09:f5: 7f:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:83:A9:39:A8:CB:DB:FD:33:86:BC:85:75:BB:D5:BA:61:63:EB:3E X509v3 Authority Key Identifier: keyid:6F:C5:0D:0D:42:06:7B:76:AB:1A:2E:8E:53:3F:F8:49:B6:5D:56:F5 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8UNDUIGe3arGi6OUz_4SbZdVvU.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/de/f2bd6c-4843-4ead-aa09-3c16ff841ab2/1/b8UNDUIGe3arGi6OUz_4SbZdVvU.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:18:2f:93:c5:6d:fa:46:76:fd:90:09:7f:7e:cd:c8:e5:9f: d6:07:f0:fe:95:d1:09:a8:9d:88:57:40:1f:45:a7:98:be:d0: 54:49:5e:b0:10:6f:fc:94:37:32:67:36:a2:24:c0:11:5e:ca: 2d:9d:6c:5f:fb:12:c7:49:0b:05:7b:cc:15:de:f7:75:14:8c: ce:e3:e7:03:1e:f8:b0:d6:7e:1b:dc:f2:68:a6:f9:58:e3:2a: 58:f6:26:56:e2:99:98:a4:bc:ca:7e:16:ce:ab:d5:00:db:fe: 4e:53:75:03:86:2b:cd:04:05:a9:12:20:18:c7:43:f2:0f:dc: 7a:1a:1d:67:a5:fe:cc:91:2d:12:3b:67:64:72:ea:48:59:38: 01:30:0e:85:2f:f9:a3:0b:63:f2:8c:02:56:7e:7f:02:94:48: 36:92:2c:1c:f7:6a:57:b2:cb:c4:2b:42:cd:d5:4f:c5:a1:16: 76:16:8f:2c:47:26:c7:5c:d1:37:c1:3d:f0:1f:32:ed:cd:42: 25:7b:8c:6b:54:44:ce:a7:65:ed:73:fa:73:45:2f:57:aa:94: 47:78:a7:42:ec:23:e1:02:a4:ef:b7:4d:7f:f8:40:88:47:32: 10:04:65:a9:48:22:8e:32:9d:71:f6:85:8d:82:7f:ca:b9:57: f6:3e:5b:f4 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSrkuWzcVibXsmi1EAB7QDMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDZmYzUwZDBkNDIwNjdiNzZhYjFhMmU4ZTUzM2ZmODQ5YjY1 ZDU2ZjUwHhcNMjQxMTIyMDcwMjU0WhcNMjQxMTIzMDcwMjU0WjAzMTEwLwYDVQQD Eyg1MTgzYTkzOWE4Y2JkYmZkMzM4NmJjODU3NWJiZDViYTYxNjNlYjNlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLBpzENCFzVRTTZxjmpl6NuEWkrd 3DMKspExTbgv25e8BQbZ0jc9wAJFBgH4frRmrw+ZdTemFbRxoiMFgOphTW4Ple41 mY4p5TVeeZ2OMgleXbhxOO7+lq7/WA+ekqFdRDBKOMFwY+nRWREGvpOAI0Vjwj47 TRQXbWTBV1gH/K18CkfadtL20UEX5lutKfFwVlwisQPvnP/+S/mwisYYO4fM/5nQ OX9ZUvBj3tuW0wET6Bh90PEdXNUtI11Q9NbHcRwnq6+T0N8SqwGyz0lGlL9aJx8C R5eQ2THuFcgVRAccus8A5A1Rwoh/IbB91UlOukYvqC/2W6reMwiHCfV/jQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFGDqTmoy9v9M4a8hXW71bphY+s+MB8GA1UdIwQY MBaAFG/FDQ1CBnt2qxoujlM/+Em2XVb1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDkt M2MxNmZmODQxYWIyLzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZS9mMmJkNmMtNDg0My00ZWFkLWFhMDktM2MxNmZmODQxYWIy LzEvYjhVTkRVSUdlM2FyR2k2T1V6XzRTYlpkVnZVLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATBgvk8Vt +kZ2/ZAJf37NyOWf1gfw/pXRCaidiFdAH0WnmL7QVElesBBv/JQ3Mmc2oiTAEV7K LZ1sX/sSx0kLBXvMFd73dRSMzuPnAx74sNZ+G9zyaKb5WOMqWPYmVuKZmKS8yn4W zqvVANv+TlN1A4YrzQQFqRIgGMdD8g/cehodZ6X+zJEtEjtnZHLqSFk4ATAOhS/5 owtj8owCVn5/ApRINpIsHPdqV7LLxCtCzdVPxaEWdhaPLEcmx1zRN8E98B8y7c1C JXuMa1REzqdl7XP6c0UvV6qUR3inQuwj4QKk77dNf/hAiEcyEARlqUgijjKdcfaF jYJ/yrlX9j5b9A== -----END CERTIFICATE-----Generated at Fri Nov 22 08:13:00 2024 by rpki-client on console-ams.rpki-client.org