$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft File: LRyqaTWPjJj3pxnyWX1drdvQAYw.mft (raw, json) Hash identifier: 5CqYB+0/zMg792YM14/1Yg9fjWTR374vL9IQdm2pVPU= Subject key identifier: 52:73:53:9D:46:D3:E2:22:9B:6B:45:0A:A8:6C:1A:1A:23:4C:95:26 Authority key identifier: 2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C Certificate issuer: /CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Certificate serial: 018F234AB190D024064CD44E375AE3179DA6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft Manifest number: 1092 Signing time: Sun 28 Apr 2024 06:00:48 +0000 Manifest this update: Sun 28 Apr 2024 06:00:48 +0000 Manifest next update: Mon 29 Apr 2024 06:00:48 +0000 Files and hashes: 1: 1-3MGbCH8ow8zqtYp4nULcx5PDwM.roa (hash: PGB/WVhSZYxlHG+xU4ItMtJ8Qehl1apV2tV04HXjy0E=) 2: 7Epwb0eksqzQI8okH1GMFfPmTaA.roa (hash: 4VBczVELhSrErQp+q7zJ5m6TyId49TqVoU37hq89zuw=) 3: A7xWbj9tfw1-IqbfhhM-F8_AsfE.roa (hash: SAAd3v0WxPGzVc8KTnqRHrBICtCukGZov+YlwzOD7As=) 4: FNGluFUdyMuD-OMIPb4Ao8KJ06o.roa (hash: i6yiWrQj78isOMLQ5FfxNbYE/+N01ZYjVvU/vvPVSqI=) 5: GVQ7yVEnB5zGtJssb6XNbidzcLk.roa (hash: zKpglyGxg8KYqMsj51OM9RX8UYUyTzhPMNyRGYkaHik=) 6: HklkB5lS8SFeN1WWpYwEHdDf7AE.roa (hash: v68Yt6CVW7abpipYcVLtsPyAhmV9QQTlK7NTuw1n9+k=) 7: LRyqaTWPjJj3pxnyWX1drdvQAYw.crl (hash: i6zZKXKlHrDsNvTsR5QOIDiHqqKB2iFRGhiOq+y8R38=) 8: QffxSGuMBYwQmiKgj6g99LmcRIU.roa (hash: z6Z6A7V0ApHNBvPfjcAHZQHxoZQKlqeD4PWHMCdZrEM=) 9: X9y-Un66Bjpq4D1CPUXai9zIJFE.roa (hash: lJXVLbbSM9oPlfblnlydn+oMvh/AQivxOQR5C7WA9No=) 10: fk9it40M-2RQGR7NTq2hjOBLIqM.roa (hash: +iC8xTpeOe/OUqD72MK8NMkaK8V+82IrpBGyj/f2tms=) 11: i6bL7j7FlzJhnHPfe-kyD-jL2R4.roa (hash: xH1b4WrvHmxOgstvK52+lTPyjfiSFBqcl26M3kPtmbo=) 12: j-kIw3IJxNpJ0fZJE-UzaQZKclw.roa (hash: bK4o3Dkjphy9hpukx6XpmHk4HpotNu4a8DmYIVeYYNM=) 13: jEJbwEPDxpTq4bAG91eSnLi8Y00.roa (hash: gjo6tfRAgvLDyHob5OIVO4aFNhfm+IP43RpPCjs5bSg=) 14: l9rXlP79Lqf98c_kSuaTcQtvkMU.roa (hash: 4W25I6PGXTyTpC4WeSTZLYQg46htBAfk4OI/VN4l/SY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 29 Apr 2024 05:00:26 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:23:4a:b1:90:d0:24:06:4c:d4:4e:37:5a:e3:17:9d:a6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2d1caa69358f8c98f7a719f2597d5daddbd0018c Validity Not Before: Apr 28 06:00:48 2024 GMT Not After : Apr 29 06:00:48 2024 GMT Subject: CN=5273539d46d3e2229b6b450aa86c1a1a234c9526 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9d:df:2d:39:15:94:72:22:6a:53:be:6a:08:f3: 70:6e:c8:7e:9f:a9:af:d8:a5:2b:9d:6a:13:db:ff: fd:3c:37:99:8b:39:e8:d7:37:e9:e4:94:cf:ed:40: de:03:f3:55:6b:a0:a4:dd:c4:f8:52:e3:a0:76:49: 1d:74:50:c9:31:06:a6:c6:0a:e9:c2:ef:da:af:0f: 9c:d0:d9:49:a4:9b:ae:81:13:ce:1e:61:2c:17:03: 62:fe:61:b7:4c:e0:6a:f8:55:20:bc:f8:ff:4b:ae: cf:c4:c3:0f:29:b5:fc:ac:dc:d7:06:dd:cd:bc:83: 2f:dd:27:67:c2:ca:94:dd:e6:f8:a2:2e:b2:32:d9: f5:9c:ef:88:e0:ae:9a:cc:5d:51:29:6e:57:6f:2b: 8f:4b:59:c4:0b:22:4b:18:31:d0:fa:dd:f5:1c:12: da:01:25:ae:a3:a3:c8:6f:f2:0c:88:9e:32:25:10: a9:40:cf:97:9f:67:bc:89:a4:bf:38:fc:ce:70:cb: c1:c0:2a:c7:2b:77:94:ef:f2:46:1d:27:a3:49:3b: 26:bf:67:69:1f:2c:ec:8a:be:bb:5e:02:80:ac:34: f7:4c:38:fb:d3:26:84:0f:9b:af:ec:3f:36:df:5c: 00:5b:16:ea:2c:dc:58:b2:d3:2c:2e:f3:58:a0:ed: f6:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:73:53:9D:46:D3:E2:22:9B:6B:45:0A:A8:6C:1A:1A:23:4C:95:26 X509v3 Authority Key Identifier: keyid:2D:1C:AA:69:35:8F:8C:98:F7:A7:19:F2:59:7D:5D:AD:DB:D0:01:8C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LRyqaTWPjJj3pxnyWX1drdvQAYw.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/df/a93699-188b-470a-96b7-29b085dd23ad/1/LRyqaTWPjJj3pxnyWX1drdvQAYw.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9c:35:4b:c9:3f:da:da:ef:e0:71:d4:73:13:ec:6e:90:ba:1f: e3:de:90:b9:0f:f9:61:e8:37:36:1e:29:df:7e:c4:a6:4e:c8: e5:64:da:da:a4:3e:ca:bf:cb:3c:ba:a4:d7:0e:2f:d4:d3:a2: be:99:4a:1f:cb:7b:5c:3f:48:a5:90:f0:0a:5e:90:54:fe:14: 34:ad:00:b7:2d:8b:7f:15:df:51:35:6b:c5:1d:23:a0:06:f9: a5:35:41:a1:b5:43:b5:3f:12:71:02:43:04:51:b7:fa:c0:15: 89:db:75:5a:ef:37:84:5f:11:a0:72:82:f3:7f:fc:cb:c2:3d: a4:b9:4d:a0:d0:38:59:a9:fb:61:9f:64:33:8e:12:7a:fd:b9: ff:e4:d0:29:df:12:07:b3:2c:61:ec:2a:67:02:d1:62:fe:e7: eb:79:17:f1:1a:a4:d3:d2:d5:c4:de:c6:0a:6b:44:cc:11:80: 20:f0:4e:9b:b0:c5:08:6c:83:60:23:ef:ab:d2:87:72:59:52: 5c:2a:46:16:56:09:2b:53:89:6b:d6:21:f8:b5:29:39:60:38: 51:f0:88:62:ed:2d:8c:55:53:9d:c7:c0:10:7c:64:12:1a:55: 4c:cb:5b:a5:3f:f1:6a:49:26:23:cc:a1:c9:a0:fa:74:a4:f1: c6:7e:c6:00 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY8jSrGQ0CQGTNRON1rjF52mMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJkMWNhYTY5MzU4ZjhjOThmN2E3MTlmMjU5N2Q1ZGFkZGJk MDAxOGMwHhcNMjQwNDI4MDYwMDQ4WhcNMjQwNDI5MDYwMDQ4WjAzMTEwLwYDVQQD Eyg1MjczNTM5ZDQ2ZDNlMjIyOWI2YjQ1MGFhODZjMWExYTIzNGM5NTI2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnd8tORWUciJqU75qCPNwbsh+n6mv 2KUrnWoT2//9PDeZizno1zfp5JTP7UDeA/NVa6Ck3cT4UuOgdkkddFDJMQamxgrp wu/arw+c0NlJpJuugRPOHmEsFwNi/mG3TOBq+FUgvPj/S67PxMMPKbX8rNzXBt3N vIMv3SdnwsqU3eb4oi6yMtn1nO+I4K6azF1RKW5XbyuPS1nECyJLGDHQ+t31HBLa ASWuo6PIb/IMiJ4yJRCpQM+Xn2e8iaS/OPzOcMvBwCrHK3eU7/JGHSejSTsmv2dp Hyzsir67XgKArDT3TDj70yaED5uv7D8231wAWxbqLNxYstMsLvNYoO323wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFFJzU51G0+Iim2tFCqhsGhojTJUmMB8GA1UdIwQY MBaAFC0cqmk1j4yY96cZ8ll9Xa3b0AGMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2Yjct MjliMDg1ZGQyM2FkLzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9kZi9hOTM2OTktMTg4Yi00NzBhLTk2YjctMjliMDg1ZGQyM2Fk LzEvTFJ5cWFUV1BqSmozcHhueVdYMWRyZHZRQVl3LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnDVLyT/a 2u/gcdRzE+xukLof496QuQ/5Yeg3Nh4p337Epk7I5WTa2qQ+yr/LPLqk1w4v1NOi vplKH8t7XD9IpZDwCl6QVP4UNK0Aty2LfxXfUTVrxR0joAb5pTVBobVDtT8ScQJD BFG3+sAVidt1Wu83hF8RoHKC83/8y8I9pLlNoNA4Wan7YZ9kM44Sev25/+TQKd8S B7MsYewqZwLRYv7n63kX8Rqk09LVxN7GCmtEzBGAIPBOm7DFCGyDYCPvq9KHcllS XCpGFlYJK1OJa9Yh+LUpOWA4UfCIYu0tjFVTncfAEHxkEhpVTMtbpT/xakkmI8yh yaD6dKTxxn7GAA== -----END CERTIFICATE-----Generated at Sun Apr 28 15:37:01 2024 by rpki-client on console-ams.rpki-client.org