$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft File: kiIItHtqhk2dH_M-BqqB0TgZp04.mft (raw, json) Hash identifier: dqgG2gX/Tn2qWp2gYcv1NnwGJNAO6oAJi2zmQt6jn2c= Subject key identifier: 10:48:FF:D0:E3:6C:37:0A:9A:46:22:64:CD:E2:AC:2F:C7:91:94:96 Authority key identifier: 92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E Certificate issuer: /CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Certificate serial: 01936331C3A9C647118363ED455D77788030 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft Manifest number: 13B5 Signing time: Mon 25 Nov 2024 12:00:25 +0000 Manifest this update: Mon 25 Nov 2024 12:00:25 +0000 Manifest next update: Tue 26 Nov 2024 12:00:25 +0000 Files and hashes: 1: 0Pz098o1dS9yk2YskdZRGAl_cJI.roa (hash: N6lMXlPqoen0FCYPz+HwWNeR6ovFG/5LJoekUKmc9ok=) 2: G0obgMV9-maIltZG_cb3UNBqvQE.roa (hash: nC743wZ9xrds+ez5J8t1bx96oI9bZUc3ci4roQzIDyo=) 3: HLW2FdYZ36s-5iireh5nBU6bk9U.roa (hash: qNA61ANyNXKYA5Y8eNxhXI5+LS7Qno+WCVIYsX6s+WI=) 4: HmKMu4EPt440QOirukTCdIEPNz4.roa (hash: 02ZXzKy/gLBMbTNUQnbBeuWG+8AzzTFJ4W1JAHkP8dE=) 5: M3hHUYdfm00J5Ktwfa_KUMhaiMg.roa (hash: EsVNsCUSWmqHQZPIM7WKfa/bL7Smd7fYzbl+X5ToUyk=) 6: OlQeRgkRXe0iWfDK0olC6lVJ_3g.roa (hash: KlDreL/xXUnliCHg1YiTxGsv6gVtQxSHShZ/8zLgjPA=) 7: SKKdcT2DKbR9sMb9jljfbISQb9Y.roa (hash: yCxr+6k/q9BnMUzwhVY48xlSgYzzIodnpWspX6Pk3C4=) 8: Wh3e5wNmHns1QYwyzP2IY-rZUAY.roa (hash: oOlAn/+MMgC+Wi3nXNLlX+uC+V5LxHWROIUA5cM2D5k=) 9: bAdJeDELcX7iZSe1Lt3b2OBmBEs.roa (hash: mtheu+1p88m2luoqeL8YbYjbUvb0A7SZ1yT7yfINW+g=) 10: ewaVCFvaAAsUba9Oexqnc-aZwuY.roa (hash: x4KprTKaONjJZu8plHS0FoFvNOL2bSTkg1HRRcZabIE=) 11: kgVbx6Patx1ikgdz2razbP9xDME.roa (hash: 4PK9/dC293Ny1ugslmAK+orWxiGre+5xA1pLvULqlLc=) 12: kiIItHtqhk2dH_M-BqqB0TgZp04.crl (hash: C3OhArS1BBrHA3gB+fIqXJXBsxCv82zYW388IW+9Uto=) 13: nhDoI7zn4PTIoRcRYe-3R-rsbvM.roa (hash: sFcCnboN9q0vVfAsT7BS0XpGzo5vppLF1tUfs/IOA7I=) 14: s2NePIH4u2oLs3zqGouCdDQweJY.roa (hash: 91Pl+84T1IIsYt+jl/+GXq7IrPcL6Exj43lb+M2O8uE=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 12:00:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:63:31:c3:a9:c6:47:11:83:63:ed:45:5d:77:78:80:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=922208b47b6a864d9d1ff33e06aa81d13819a74e Validity Not Before: Nov 25 12:00:25 2024 GMT Not After : Nov 26 12:00:25 2024 GMT Subject: CN=1048ffd0e36c370a9a462264cde2ac2fc7919496 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:bc:49:84:8d:b5:02:37:c8:3f:65:2a:76:6a: 7a:00:e2:ef:b9:7d:0f:74:72:b6:84:fc:b2:70:c4: a9:08:5b:d9:6a:f6:bd:3b:df:52:1d:14:0a:bb:5f: 7f:60:85:43:9e:51:c8:cb:db:90:55:19:1d:9b:7c: 49:19:5d:fd:34:fb:54:5e:7b:06:a0:8b:ed:3b:54: a3:1f:47:7f:08:27:42:e8:2a:69:6f:ba:04:bc:c0: ce:5d:55:00:b5:af:c5:17:b0:84:f3:22:23:6b:59: e0:e5:3e:f5:e1:94:0c:21:76:03:33:e2:2b:7d:da: d5:19:6b:d3:7f:a5:f2:78:19:d0:1d:e1:1c:22:b6: 81:bc:22:6f:30:aa:56:67:57:b6:87:60:08:f9:ee: 77:ea:a7:18:57:d4:e0:d3:84:a2:c5:48:dd:a8:75: df:ae:ae:98:d9:ae:a1:43:87:ca:ed:88:35:59:cc: 09:7f:e1:7f:ff:75:c7:ed:b4:9e:70:41:69:ab:1c: 22:ed:01:ef:ed:79:9a:c8:1f:92:9c:c4:d1:84:2a: cc:5a:35:ce:e6:f2:45:c1:b0:21:1f:99:69:a8:cc: 44:6a:f4:6b:68:ba:88:1e:81:c0:d8:e2:ec:a8:ad: 3a:c8:f3:1e:59:4b:3b:aa:df:36:1d:5a:ea:f7:82: 9b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:48:FF:D0:E3:6C:37:0A:9A:46:22:64:CD:E2:AC:2F:C7:91:94:96 X509v3 Authority Key Identifier: keyid:92:22:08:B4:7B:6A:86:4D:9D:1F:F3:3E:06:AA:81:D1:38:19:A7:4E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kiIItHtqhk2dH_M-BqqB0TgZp04.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/6990e9-c3c0-478a-9997-95b08e3660cf/1/kiIItHtqhk2dH_M-BqqB0TgZp04.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:bf:f0:cd:aa:4b:1c:c7:9c:30:c8:49:60:c7:a2:f3:65:18: a8:6f:2c:98:30:6f:5a:7d:c4:a9:31:db:8a:74:bf:5d:fa:83: b4:2e:ed:4a:3e:1d:8a:5a:b7:ea:52:c4:b7:4d:85:d2:2f:c9: df:7d:68:d9:36:74:db:7f:d2:7f:1b:8c:57:54:8e:fd:f5:69: 55:12:f4:b1:c2:28:03:94:94:02:a4:44:43:d7:88:b0:a4:a7: dc:9b:a6:70:cd:18:3b:49:f9:c1:aa:62:ec:f5:eb:ab:86:c5: 7a:47:6e:0d:96:26:af:b2:f0:f4:a5:eb:b9:a6:2f:3e:e5:de: 3b:75:98:67:bc:a6:46:28:d5:21:fd:71:ba:36:c9:9b:59:5a: dc:e7:fa:30:30:57:e3:fa:fe:f7:fd:de:b9:4c:01:54:ca:e8: be:46:d8:54:c4:49:02:f5:38:52:78:fb:c4:9b:b5:84:64:93: 05:9e:23:54:70:1f:06:9c:7b:e0:16:60:45:b5:3a:ff:9d:77: 7f:62:9e:b8:64:d9:78:c2:6b:92:fc:99:b5:cf:84:7a:ba:d4: c8:be:30:a6:e6:fc:5b:ab:08:2b:9d:a2:e2:84:ef:a2:d8:b0: 94:6b:03:a5:32:f1:4a:c2:39:bc:8a:1b:e8:f6:02:19:25:67: 93:d0:91:d8 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNjMcOpxkcRg2PtRV13eIAwMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDkyMjIwOGI0N2I2YTg2NGQ5ZDFmZjMzZTA2YWE4MWQxMzgx OWE3NGUwHhcNMjQxMTI1MTIwMDI1WhcNMjQxMTI2MTIwMDI1WjAzMTEwLwYDVQQD EygxMDQ4ZmZkMGUzNmMzNzBhOWE0NjIyNjRjZGUyYWMyZmM3OTE5NDk2MIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA67xJhI21AjfIP2Uqdmp6AOLvuX0P dHK2hPyycMSpCFvZava9O99SHRQKu19/YIVDnlHIy9uQVRkdm3xJGV39NPtUXnsG oIvtO1SjH0d/CCdC6Cppb7oEvMDOXVUAta/FF7CE8yIja1ng5T714ZQMIXYDM+Ir fdrVGWvTf6XyeBnQHeEcIraBvCJvMKpWZ1e2h2AI+e536qcYV9Tg04SixUjdqHXf rq6Y2a6hQ4fK7Yg1WcwJf+F//3XH7bSecEFpqxwi7QHv7XmayB+SnMTRhCrMWjXO 5vJFwbAhH5lpqMxEavRraLqIHoHA2OLsqK06yPMeWUs7qt82HVrq94KbAQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBBI/9DjbDcKmkYiZM3irC/HkZSWMB8GA1UdIwQY MBaAFJIiCLR7aoZNnR/zPgaqgdE4GadOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTct OTViMDhlMzY2MGNmLzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0Lm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mNS82OTkwZTktYzNjMC00NzhhLTk5OTctOTViMDhlMzY2MGNm LzEva2lJSXRIdHFoazJkSF9NLUJxcUIwVGdacDA0LmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAq7/wzapL HMecMMhJYMei82UYqG8smDBvWn3EqTHbinS/XfqDtC7tSj4dilq36lLEt02F0i/J 331o2TZ023/SfxuMV1SO/fVpVRL0scIoA5SUAqREQ9eIsKSn3JumcM0YO0n5wapi 7PXrq4bFekduDZYmr7Lw9KXruaYvPuXeO3WYZ7ymRijVIf1xujbJm1la3Of6MDBX 4/r+9/3euUwBVMrovkbYVMRJAvU4Unj7xJu1hGSTBZ4jVHAfBpx74BZgRbU6/513 f2KeuGTZeMJrkvyZtc+EerrUyL4wpub8W6sIK52i4oTvotiwlGsDpTLxSsI5vIob 6PYCGSVnk9CR2A== -----END CERTIFICATE-----Generated at Mon Nov 25 18:33:50 2024 by rpki-client on console-fra.rpki-client.org