$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft File: Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft (raw, json) Hash identifier: x6DU9mfFnV+XkHnzkXKl8ek7YNlFDcj7I1Vyyy331X0= Subject key identifier: 3F:6B:05:8B:66:F1:FF:21:EE:3D:EB:02:EC:0D:DA:02:3D:8B:DA:82 Authority key identifier: 5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 Certificate issuer: /CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Certificate serial: 019350F48A19CFD0B6A39AE03BA785CA46EA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft Manifest number: 0F3E Signing time: Thu 21 Nov 2024 23:00:23 +0000 Manifest this update: Thu 21 Nov 2024 23:00:23 +0000 Manifest next update: Fri 22 Nov 2024 23:00:23 +0000 Files and hashes: 1: 2WvQosGMiD6t_b4ezeZy7hI87MI.roa (hash: TAgaTbKQgBvh9jEj1EIO1HkUy/WFOub8lE71pIQ9CTc=) 2: 4NuVu3Nq-e8MRvvtx94wEBMAJpI.roa (hash: BwZ4AypkDlEs/INH5WMO4BX3aWqiH8F0IX2ATDMf6q0=) 3: H-XMJrZrLLOTI-DEbCL4bHpbKCQ.roa (hash: 8+C0hEnQv51JZJGLlTEb9oFeieVdw5L0W2spWnd2PRo=) 4: J4ttYpa1W-CVQvNcwgXPI95G5BU.roa (hash: eezErR4Zh0xpLDvnA0xeOilTJyZeRO9jQJUNii1JWXA=) 5: MBpphB2xYxcgQsmw9fNhE41ypGk.roa (hash: zP2S6aPon3XgvaEBxXXNojD/HkiPfTPWAwGs50rtlIo=) 6: QyKEJr3cDU4Ag6V5m-EerYZW2XE.roa (hash: dIbvXwCO2XjHjXdgyhTTm8YOwxr5omR0uk2EObnFWMk=) 7: WH8qbuIiMBn0Mv6ygSBSKZpPy6E.roa (hash: 8/OPnD0LAMyuJ7n5Lqj6UUhCDvaWFKfvp34PRgOJQG0=) 8: Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl (hash: vuoBqk8snvL2la4QBWfkFBd8pV8eqskxv8bKCF9D+Bo=) 9: _gD8kA8ucmeRwoRsh_wIAl1avdE.roa (hash: buB1FI0GNFMYmJBN0FzUbkWwRu5yzo2kpfdYDEGgAnQ=) 10: pRlbtt-JLlul2edzBMgTaavdi0Y.roa (hash: LnYe45if4HRk5/CT88NCiDUZfNSJbAYzcCf5wQ2YyqM=) 11: pZZ3wnBxApb1KwligAZ4R37ajfY.roa (hash: wKFDbvvByNKOBObnqtXQ4D0MrP5IbC5928b62wl8kus=) 12: q-KNKWRFtL2pyoTDfaz-PW8Echc.roa (hash: SUKwsSzIyljogQCpCBNS4HpOYp5XPo9F4yY7nQh6rXo=) 13: sz6vsd806CfOUlgLUEuCeBWLVuk.roa (hash: BNMKNXkfxc/EhbofBk2OG48Zze/bfmIOxbYCblayCvI=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:50:f4:8a:19:cf:d0:b6:a3:9a:e0:3b:a7:85:ca:46:ea Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5dd6f6d299bcdec73d13f2d842fc1df4bc1ee2d3 Validity Not Before: Nov 21 23:00:23 2024 GMT Not After : Nov 22 23:00:23 2024 GMT Subject: CN=3f6b058b66f1ff21ee3deb02ec0dda023d8bda82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7d:e7:72:a2:0e:04:10:78:0d:12:d8:2b:64: a8:ad:b6:14:43:46:7f:d7:c4:d9:13:67:a3:e1:6c: 71:3c:af:54:c8:da:e0:39:dd:92:74:e3:1b:e4:0a: fb:08:bc:9f:1a:dd:7f:10:15:a2:cc:59:c4:e3:b0: b8:bd:dd:6a:65:85:86:62:88:bf:43:e5:c1:f0:e2: f4:19:ea:eb:33:cb:71:4a:3b:78:e0:43:de:a2:b1: 83:cb:ea:98:52:1d:f6:18:a9:61:6f:1a:3a:6c:81: 14:51:fb:5e:dc:12:dc:69:b9:58:c3:24:d7:42:b3: 2c:75:63:65:1f:6d:82:28:33:b1:af:04:01:38:11: 93:f2:77:21:fd:d8:a5:8f:ee:cb:31:52:e2:e6:b7: 5c:ec:6b:e4:79:98:e7:8a:21:d9:e3:ac:1c:59:ad: 7f:3b:a4:20:74:3e:d9:78:af:53:45:8c:54:7b:6c: 2b:da:5e:fc:03:66:6b:89:45:ce:33:8f:5f:0b:a3: 87:3c:4d:a9:fc:38:d2:65:f7:5f:fe:5b:48:03:19: 24:c8:c7:ad:d9:1b:80:55:c3:70:9d:07:76:42:1a: 3c:3e:c4:ca:d5:ed:53:de:3e:55:6c:2a:d0:c3:20: 5e:c0:dd:ef:21:91:47:6a:fa:28:cb:69:63:be:76: 78:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:6B:05:8B:66:F1:FF:21:EE:3D:EB:02:EC:0D:DA:02:3D:8B:DA:82 X509v3 Authority Key Identifier: keyid:5D:D6:F6:D2:99:BC:DE:C7:3D:13:F2:D8:42:FC:1D:F4:BC:1E:E2:D3 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xdb20pm83sc9E_LYQvwd9Lwe4tM.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/a4b446-bb72-45be-bc46-51f5ff81c117/1/Xdb20pm83sc9E_LYQvwd9Lwe4tM.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:fe:e2:94:16:11:8b:ea:da:04:90:74:d6:42:e9:06:39:1e: ac:f0:47:b3:2c:35:de:d4:a0:e5:c1:ba:3d:73:8f:1b:c9:a7: 06:f6:78:77:19:65:3d:06:af:c1:79:f0:c4:60:15:32:4a:45: cd:65:14:dc:c8:23:d4:e2:16:27:f7:e7:fa:40:f0:db:93:26: 11:6f:0f:68:b8:75:d2:04:df:60:27:52:0f:34:d9:10:2a:6a: 13:14:66:00:7b:74:f4:e4:a6:d9:00:d8:79:b2:4b:79:84:f2: ea:2c:a1:d8:00:5d:f1:90:9d:62:87:55:df:8f:fb:1c:1f:b0: 9c:2d:ef:b3:6e:6a:61:8b:7d:ff:be:57:a7:29:7a:cc:37:10: da:c4:56:d2:73:c8:6c:9d:1e:67:b3:16:57:59:72:d5:7d:dd: 5d:59:a8:01:5c:45:c5:ca:42:29:17:79:34:45:19:65:db:6f: 3d:23:6c:54:21:79:71:3c:d9:c8:92:73:c9:48:eb:86:0b:c5: 31:93:8b:b0:a1:92:6f:76:39:81:d4:59:05:ce:c2:36:65:f4: 09:3f:44:9b:02:18:40:c0:94:94:e2:7a:14:e8:a6:d0:70:79: cb:08:8f:a0:a1:9b:7a:6f:d5:d8:5e:16:01:8f:a0:50:b4:84: 14:5d:e1:8a -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNQ9IoZz9C2o5rgO6eFykbqMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDVkZDZmNmQyOTliY2RlYzczZDEzZjJkODQyZmMxZGY0YmMx ZWUyZDMwHhcNMjQxMTIxMjMwMDIzWhcNMjQxMTIyMjMwMDIzWjAzMTEwLwYDVQQD EygzZjZiMDU4YjY2ZjFmZjIxZWUzZGViMDJlYzBkZGEwMjNkOGJkYTgyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmn3ncqIOBBB4DRLYK2SorbYUQ0Z/ 18TZE2ej4WxxPK9UyNrgOd2SdOMb5Ar7CLyfGt1/EBWizFnE47C4vd1qZYWGYoi/ Q+XB8OL0GerrM8txSjt44EPeorGDy+qYUh32GKlhbxo6bIEUUfte3BLcablYwyTX QrMsdWNlH22CKDOxrwQBOBGT8nch/dilj+7LMVLi5rdc7GvkeZjniiHZ46wcWa1/ O6QgdD7ZeK9TRYxUe2wr2l78A2ZriUXOM49fC6OHPE2p/DjSZfdf/ltIAxkkyMet 2RuAVcNwnQd2Qho8PsTK1e1T3j5VbCrQwyBewN3vIZFHavooy2ljvnZ4uQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFD9rBYtm8f8h7j3rAuwN2gI9i9qCMB8GA1UdIwQY MBaAFF3W9tKZvN7HPRPy2EL8HfS8HuLTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYt NTFmNWZmODFjMTE3LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNC9hNGI0NDYtYmI3Mi00NWJlLWJjNDYtNTFmNWZmODFjMTE3 LzEvWGRiMjBwbTgzc2M5RV9MWVF2d2Q5THdlNHRNLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgP7ilBYR i+raBJB01kLpBjkerPBHsyw13tSg5cG6PXOPG8mnBvZ4dxllPQavwXnwxGAVMkpF zWUU3Mgj1OIWJ/fn+kDw25MmEW8PaLh10gTfYCdSDzTZECpqExRmAHt09OSm2QDY ebJLeYTy6iyh2ABd8ZCdYodV34/7HB+wnC3vs25qYYt9/75Xpyl6zDcQ2sRW0nPI bJ0eZ7MWV1ly1X3dXVmoAVxFxcpCKRd5NEUZZdtvPSNsVCF5cTzZyJJzyUjrhgvF MZOLsKGSb3Y5gdRZBc7CNmX0CT9EmwIYQMCUlOJ6FOim0HB5ywiPoKGbem/V2F4W AY+gULSEFF3hig== -----END CERTIFICATE-----Generated at Fri Nov 22 00:51:56 2024 by rpki-client on console-fra.rpki-client.org