$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft File: LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft (raw, json) Hash identifier: INfYN5CB249T/9Bhbi76N6DSkaNo9OnAQ1dDkDk0070= Subject key identifier: E8:CF:77:8E:F2:1B:89:67:D6:C3:3F:37:A9:A1:26:5B:0A:91:7A:D2 Authority key identifier: 2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 Certificate issuer: /CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Certificate serial: 01935387EF08A92D48A78AF005E235825F0A Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft Manifest number: 1141 Signing time: Fri 22 Nov 2024 11:00:37 +0000 Manifest this update: Fri 22 Nov 2024 11:00:37 +0000 Manifest next update: Sat 23 Nov 2024 11:00:37 +0000 Files and hashes: 1: Dh86mckR-Sq_nG2HRu6P6RwP-m0.roa (hash: DFafzPPWEbA15YDi1oBUS7ZktMxgLwp5obqEYx7nDtI=) 2: DmcsQO_MqsBD5IyQI5TM85DzcHQ.roa (hash: +G94vzPyikwtGL+BY2B/aToKLwHnEq88+CrkX9OHWTE=) 3: DrH5N5E5vgeb6QAVH-_XBjWA2oI.roa (hash: NrgdT0InydvtAEvuN+5X/MqDtPuAaFmeVPrSYpGA4iA=) 4: FxmeyogJg7kyhz55FJQjgXJMGAI.roa (hash: tRWxtmEnVG3Ydiy8gL4MH51MbqCjgJpcJL2q3ymtcR8=) 5: LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl (hash: CH2zTKZg2PHButBldjdkfcGnZUdu99KudsutuJ8FjEQ=) 6: OiptHQtYh19ufJZq6PSIZHLUI3c.roa (hash: For6t1sOwZyJ2e80rY19og+5LuRAnWhkgoU2b0sRKn8=) 7: Vc51oYD00Ayj5dxzzLSxXlfL_LA.roa (hash: ORdjLy64wb4elBqmsWac2hM7M7h5zmmfwOlQwvlFJFo=) 8: VpQjvoTc2s2iBmfgslvqcwOmHVU.roa (hash: aV5dHOgh5PGsHOOcByLGzg5yiS8gk8JntveM3ZqgnQ0=) 9: X0TEAeszgRB2Otcc1fBcMQN1rCk.roa (hash: kwWLkXaF6DHulc7W+U24Mw96j+L0Can30SfokLD0Kn4=) 10: cZ4tmDEHd9lmJNc399EvlXimVAk.roa (hash: KDeIB9RtahYFqxaU9DHGGHMry/VzQFSryqbFeyLlqbw=) 11: gzCzr_cRmbxEj6x4CRn4lWYVmxA.roa (hash: 887Bo3uiQ9wfYjIhcuYazDlrVa3aCPQpGuEbJTb7oUg=) 12: nyzY1cyMCN1hNlpJoPCb2I_5DW0.roa (hash: 12uIY2O8BLrzELdLdf5+XqiNHLcanFt3Ca2B88Zojyw=) 13: rK-O2bPaPejVHEV2uwNLhsbUB8k.roa (hash: iZLQ4+GX3qMUmsYbcbM6EVATGL0HA11Gh7vlEF2m/v8=) 14: rNCqbDioePgPQlJZ6p3Fd_6_1dU.roa (hash: 1TlQZd42NP0aZtVYUhHkBkqKH98N97+oEpPpZnJ73ow=) 15: s5hxLq5buMsdEifQmu7Y6C-GeBo.roa (hash: LNGNm9e4aoNPpiS3JuwJvhXc/aLoyxuyHGU62SeR6Qg=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 11:00:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:53:87:ef:08:a9:2d:48:a7:8a:f0:05:e2:35:82:5f:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2c71c96005e13a84a3f31ef1d991777f4b6e31a7 Validity Not Before: Nov 22 11:00:37 2024 GMT Not After : Nov 23 11:00:37 2024 GMT Subject: CN=e8cf778ef21b8967d6c33f37a9a1265b0a917ad2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:d4:4a:44:1c:99:4b:0d:ee:c8:af:76:d9:50: 69:03:fa:f3:d4:20:a5:db:98:21:fb:24:76:4f:a6: 60:30:c2:82:5e:78:6b:c2:28:51:20:cf:a1:f7:be: e8:98:b2:9d:4f:9a:d7:dc:b9:11:e9:15:a6:19:b6: e0:2d:58:a5:56:09:ff:2d:70:05:ed:58:bb:d4:ed: ab:6a:bb:40:a3:64:70:95:92:56:c7:6f:87:87:d7: 3c:ea:51:d6:7a:a6:79:05:b2:ca:58:49:1b:4b:38: 33:55:4f:20:79:44:db:42:d5:e9:01:62:22:35:c4: 9b:18:5f:c3:90:cd:4b:79:4e:d4:14:24:c0:61:ec: a0:ac:56:66:d1:3a:96:ca:95:38:d8:10:a7:4f:3b: 36:ab:2b:97:6c:04:73:fc:fc:8c:ec:6e:f2:d6:58: 09:96:92:63:29:b5:ef:ee:f9:c3:d7:4f:b1:60:af: 1e:68:38:42:e4:a8:63:7f:de:f3:7e:a5:23:0b:d3: e6:27:51:4d:11:99:28:78:84:08:7f:35:b0:b1:49: 34:1d:df:3f:c7:63:3b:26:08:60:d3:5c:ad:d3:44: 4e:ea:41:59:5c:cb:26:9b:0e:a5:4a:07:89:ff:ac: e4:15:28:e8:4e:b8:1f:c0:27:43:93:b8:49:6d:48: f5:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:CF:77:8E:F2:1B:89:67:D6:C3:3F:37:A9:A1:26:5B:0A:91:7A:D2 X509v3 Authority Key Identifier: keyid:2C:71:C9:60:05:E1:3A:84:A3:F3:1E:F1:D9:91:77:7F:4B:6E:31:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LHHJYAXhOoSj8x7x2ZF3f0tuMac.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/fa3544-1025-4e8f-a8fe-7a28af29cdc2/1/LHHJYAXhOoSj8x7x2ZF3f0tuMac.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 80:a0:c1:2c:43:db:bd:30:c9:e5:d1:2c:a4:6f:a0:c6:24:c9: 4a:c8:c8:a2:67:00:0b:13:40:94:fe:f2:f9:1e:4d:8b:e6:fd: 3f:4f:3c:da:a0:11:11:77:cb:57:c9:25:7c:b7:80:0b:e9:d0: 15:84:7d:44:43:93:b7:47:a5:52:64:9f:5e:12:70:5f:bd:42: 8b:48:00:7f:e2:3f:60:ee:e3:84:7e:b9:4c:ce:de:70:e3:3b: 83:8e:2d:0f:59:9e:44:9a:cf:cb:73:10:74:f9:51:a1:0f:99: eb:5b:9b:0f:c9:bd:72:34:b2:33:c2:4d:d0:28:d1:96:e1:d2: 57:82:f6:57:72:9b:30:50:b8:ab:c9:87:ef:0b:d7:be:51:d0: 0a:12:86:80:07:5b:28:a2:96:80:c9:1e:86:9f:e5:bd:b0:de: dd:62:dc:00:57:56:85:6e:02:c9:a2:d9:31:3c:9e:f9:8a:6b: d6:8a:d4:04:27:c3:73:0b:f5:9d:61:14:b1:f4:97:6c:b3:c8: 32:02:91:b2:c2:5f:c1:26:c2:3b:e1:2e:e5:b9:c3:a1:f7:ae: 93:a1:71:97:84:21:96:ee:fc:8e:c4:c8:ee:74:86:36:44:15: c2:32:78:d9:98:a8:44:d6:9a:5a:c3:dd:4a:f4:d4:6e:e0:6c: 10:9d:45:23 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNTh+8IqS1Ip4rwBeI1gl8KMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDJjNzFjOTYwMDVlMTNhODRhM2YzMWVmMWQ5OTE3NzdmNGI2 ZTMxYTcwHhcNMjQxMTIyMTEwMDM3WhcNMjQxMTIzMTEwMDM3WjAzMTEwLwYDVQQD EyhlOGNmNzc4ZWYyMWI4OTY3ZDZjMzNmMzdhOWExMjY1YjBhOTE3YWQyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9RKRByZSw3uyK922VBpA/rz1CCl 25gh+yR2T6ZgMMKCXnhrwihRIM+h977omLKdT5rX3LkR6RWmGbbgLVilVgn/LXAF 7Vi71O2rartAo2RwlZJWx2+Hh9c86lHWeqZ5BbLKWEkbSzgzVU8geUTbQtXpAWIi NcSbGF/DkM1LeU7UFCTAYeygrFZm0TqWypU42BCnTzs2qyuXbARz/PyM7G7y1lgJ lpJjKbXv7vnD10+xYK8eaDhC5Khjf97zfqUjC9PmJ1FNEZkoeIQIfzWwsUk0Hd8/ x2M7Jghg01yt00RO6kFZXMsmmw6lSgeJ/6zkFSjoTrgfwCdDk7hJbUj15QIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOjPd47yG4ln1sM/N6mhJlsKkXrSMB8GA1UdIwQY MBaAFCxxyWAF4TqEo/Me8dmRd39LbjGnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUt N2EyOGFmMjljZGMyLzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lZi9mYTM1NDQtMTAyNS00ZThmLWE4ZmUtN2EyOGFmMjljZGMy LzEvTEhISllBWGhPb1NqOHg3eDJaRjNmMHR1TWFjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgKDBLEPb vTDJ5dEspG+gxiTJSsjIomcACxNAlP7y+R5Ni+b9P0882qAREXfLV8klfLeAC+nQ FYR9REOTt0elUmSfXhJwX71Ci0gAf+I/YO7jhH65TM7ecOM7g44tD1meRJrPy3MQ dPlRoQ+Z61ubD8m9cjSyM8JN0CjRluHSV4L2V3KbMFC4q8mH7wvXvlHQChKGgAdb KKKWgMkehp/lvbDe3WLcAFdWhW4CyaLZMTye+Ypr1orUBCfDcwv1nWEUsfSXbLPI MgKRssJfwSbCO+Eu5bnDofeuk6Fxl4Qhlu78jsTI7nSGNkQVwjJ42ZioRNaaWsPd SvTUbuBsEJ1FIw== -----END CERTIFICATE-----Generated at Fri Nov 22 14:06:16 2024 by rpki-client on console-fra.rpki-client.org