$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft File: h0v4BwzuQwXRo4npEPtRArvMGUE.mft (raw, json) Hash identifier: PxI/DOPYZrac5z2CBOy6TzZTUEAgR9d1ToX3ixBeNT8= Subject key identifier: 29:70:17:0C:A3:8B:9E:D9:42:B1:D3:C6:8F:FB:ED:C8:6B:2E:CC:FE Authority key identifier: 87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 Certificate issuer: /CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Certificate serial: 018F83D98D7E249D323FAA3994BF0FAA2F6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft Manifest number: 0AFF Signing time: Fri 17 May 2024 00:00:23 +0000 Manifest this update: Fri 17 May 2024 00:00:23 +0000 Manifest next update: Sat 18 May 2024 00:00:23 +0000 Files and hashes: 1: 1-InmWxA1g0a24o1TXNz4TCDsmw.roa (hash: r7woN8WzdzbGAkb7UOY1CCoeBvIcDUIwaLOW9NATcOI=) 2: KGLVA7rydQC7m2R8pGkYmdASlos.roa (hash: G62jHh0YDTIrX8RX3JqirZDeQukCfIhXSsvfxYa4z9Q=) 3: QqW7SMdGMFu_5bIXPUJUPSvu1dU.roa (hash: Ppii4MECwmpIoPoG1l1kTZZc2JGVbCajQiFvktkxQ4k=) 4: _vmzF7rXlHfuayZZmyZTKkhe0Sg.roa (hash: G2d5hZLKkJN22BLGgQAAKLRlSsFRadMZIhyAdkngxOo=) 5: e-PH4T2SbuJ2fuplFeAJelt2uZI.roa (hash: olIZHsC0PIIvt6QiXCcrGrFQyO8GIrGegMeY2nXxKjI=) 6: es6VLfm2TIdYuPHBH9ijk3V2lUY.roa (hash: 2DgOSyOPsNn7NyqgWF83JIWh6Xi7k8uN59XaH25SGdQ=) 7: h0v4BwzuQwXRo4npEPtRArvMGUE.crl (hash: Cxu/yhbVrU6YWFjdbZJUhUKiP9MtbC/L+Lu2ea+JCCk=) 8: hVqJnh0F8o5TQDYtUEcWzYDbmQU.roa (hash: zUPd5WdXG2A4hIO1afS7Uk6HDXAzCsML8/0945SiN7A=) 9: pi3vE3MyCfqb6uVGiDMp7PSYJPY.roa (hash: 0KI2wL3A+htgMzQzuIJF8bKBGzc5BsW3Cr9jWVj29kA=) 10: yLEMZF9hKWuki8HfnAnJv3ZrJ6k.roa (hash: CpSnwk163fTo1M6Cngtge9vWLBK3A0quqdcc3JDoPXA=) 11: yU61vylArWjzQFbTMYFSuj5QHcs.roa (hash: Wnm1G8IMc7iTbsO/CviHeXmF06kYHfR3q60vPHf50iA=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:8f:83:d9:8d:7e:24:9d:32:3f:aa:39:94:bf:0f:aa:2f:6b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=874bf8070cee4305d1a389e910fb5102bbcc1941 Validity Not Before: May 17 00:00:23 2024 GMT Not After : May 18 00:00:23 2024 GMT Subject: CN=2970170ca38b9ed942b1d3c68ffbedc86b2eccfe Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:bc:26:7c:93:3e:ca:33:e3:e4:d3:6b:a5:58: 1a:93:dd:82:db:90:53:2c:0f:5b:34:39:c4:4f:4c: ca:93:18:5c:9e:e6:fd:f4:71:5f:4d:34:89:0c:12: 78:10:0c:9c:ee:2e:3d:0b:71:14:3e:9c:1a:fe:74: 2e:30:33:ec:ef:58:41:2b:5f:fe:95:d1:50:f7:06: 91:74:28:e0:ac:63:7a:fc:64:21:34:57:4f:a9:42: 3e:90:cf:e2:3d:d9:c0:23:89:47:2b:45:6d:d5:e7: 62:eb:9c:72:eb:c9:f3:32:c6:8b:9b:0c:5a:55:db: 9d:47:74:b1:eb:c3:f6:88:e7:ea:3b:bb:02:d8:59: d4:9c:ee:d4:08:e2:52:41:05:ee:60:86:f6:8f:b9: 0f:eb:6a:0c:3f:41:3d:fc:09:d6:98:b0:63:2c:23: e5:05:d1:ab:19:03:af:49:ac:3b:ad:4e:ba:f6:18: 48:8a:78:a6:f5:42:61:cc:d3:52:87:86:e9:55:3b: ab:d7:81:8c:ec:cf:ea:9e:2a:61:d7:36:03:ee:75: fd:12:b7:7f:5b:90:20:82:5c:d9:de:26:ba:2c:bc: 34:cd:79:d6:11:13:5a:49:40:31:58:e4:b4:f5:cf: ea:eb:59:99:6e:53:a6:bf:bc:4d:be:ce:d5:99:fb: 1a:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:70:17:0C:A3:8B:9E:D9:42:B1:D3:C6:8F:FB:ED:C8:6B:2E:CC:FE X509v3 Authority Key Identifier: keyid:87:4B:F8:07:0C:EE:43:05:D1:A3:89:E9:10:FB:51:02:BB:CC:19:41 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h0v4BwzuQwXRo4npEPtRArvMGUE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/eee131-bb8c-4887-869b-6fe4d8fed160/1/h0v4BwzuQwXRo4npEPtRArvMGUE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:6e:23:cc:1b:5a:01:13:08:65:76:6a:0e:e2:d3:f0:7f:35: f0:86:4b:fe:86:4d:12:8a:57:3e:ce:b1:1e:5a:ad:4e:15:60: 50:23:7b:19:38:8d:6e:02:aa:f7:7b:e2:90:fb:5c:60:42:5e: 06:d3:dd:0f:b4:e8:a5:00:3e:e3:31:38:dd:66:39:73:dd:4c: 93:d0:0e:e4:a3:6a:e1:0b:be:e2:a8:ac:f7:06:71:25:9b:c2: 72:35:b5:a7:8a:02:e8:9d:df:ce:f7:cb:b1:9b:54:74:80:0d: 42:ad:4a:c9:33:f1:11:02:6c:d0:02:15:f4:c0:f9:ec:8a:a6: 08:06:47:41:38:12:e0:81:10:9c:bb:16:76:e1:0d:1e:41:30: 2c:c0:f8:4f:19:ce:5b:2a:3f:c8:b2:08:4f:77:5c:70:fd:32: e3:9a:10:dd:5b:f1:6c:87:6b:c8:83:68:39:96:1b:de:4f:a1: e5:c9:40:26:5f:0f:fa:ab:93:7a:b9:c8:bb:25:60:f5:25:96: af:b6:00:d4:f2:21:fb:47:94:55:5c:6a:72:ee:b2:26:ac:f1: 25:7f:c9:9c:d0:88:5d:62:e5:88:2d:07:aa:17:7f:31:51:6c: b5:f3:63:46:42:37:f7:af:3c:c0:d5:f6:ca:fb:20:3e:73:58: 71:bc:3f:54 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAY+D2Y1+JJ0yP6o5lL8Pqi9rMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDg3NGJmODA3MGNlZTQzMDVkMWEzODllOTEwZmI1MTAyYmJj YzE5NDEwHhcNMjQwNTE3MDAwMDIzWhcNMjQwNTE4MDAwMDIzWjAzMTEwLwYDVQQD EygyOTcwMTcwY2EzOGI5ZWQ5NDJiMWQzYzY4ZmZiZWRjODZiMmVjY2ZlMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoLwmfJM+yjPj5NNrpVgak92C25BT LA9bNDnET0zKkxhcnub99HFfTTSJDBJ4EAyc7i49C3EUPpwa/nQuMDPs71hBK1/+ ldFQ9waRdCjgrGN6/GQhNFdPqUI+kM/iPdnAI4lHK0Vt1edi65xy68nzMsaLmwxa VdudR3Sx68P2iOfqO7sC2FnUnO7UCOJSQQXuYIb2j7kP62oMP0E9/AnWmLBjLCPl BdGrGQOvSaw7rU669hhIinim9UJhzNNSh4bpVTur14GM7M/qniph1zYD7nX9Erd/ W5AgglzZ3ia6LLw0zXnWERNaSUAxWOS09c/q61mZblOmv7xNvs7VmfsaNwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFClwFwyji57ZQrHTxo/77chrLsz+MB8GA1UdIwQY MBaAFIdL+AcM7kMF0aOJ6RD7UQK7zBlBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWIt NmZlNGQ4ZmVkMTYwLzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lYi9lZWUxMzEtYmI4Yy00ODg3LTg2OWItNmZlNGQ4ZmVkMTYw LzEvaDB2NEJ3enVRd1hSbzRucEVQdFJBcnZNR1VFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKW4jzBta ARMIZXZqDuLT8H818IZL/oZNEopXPs6xHlqtThVgUCN7GTiNbgKq93vikPtcYEJe BtPdD7TopQA+4zE43WY5c91Mk9AO5KNq4Qu+4qis9wZxJZvCcjW1p4oC6J3fzvfL sZtUdIANQq1KyTPxEQJs0AIV9MD57IqmCAZHQTgS4IEQnLsWduENHkEwLMD4TxnO Wyo/yLIIT3dccP0y45oQ3VvxbIdryINoOZYb3k+h5clAJl8P+quTernIuyVg9SWW r7YA1PIh+0eUVVxqcu6yJqzxJX/JnNCIXWLliC0Hqhd/MVFstfNjRkI39688wNX2 yvsgPnNYcbw/VA== -----END CERTIFICATE-----Generated at Fri May 17 05:28:24 2024 by rpki-client on console-fra.rpki-client.org