$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft File: 09VvB74YTLpS9v3ASegRTSYWwyo.mft (raw, json) Hash identifier: VukQl/wG1WTl203/FFdrlOjBhTmEQtNLDIBEiVVNGvo= Subject key identifier: 8B:50:97:5D:5A:54:D6:AB:00:80:A4:B4:22:9B:8E:74:8A:51:27:D3 Authority key identifier: D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A Certificate issuer: /CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Certificate serial: 01935207211B4278FBBB24E1FE08EC8BF0D0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft Manifest number: 1374 Signing time: Fri 22 Nov 2024 04:00:19 +0000 Manifest this update: Fri 22 Nov 2024 04:00:19 +0000 Manifest next update: Sat 23 Nov 2024 04:00:19 +0000 Files and hashes: 1: 09VvB74YTLpS9v3ASegRTSYWwyo.crl (hash: t5wMBWh4fq+L2zou1jRB5up/febFWw5f4BjcEm7dBLE=) 2: 4RwI6WevS4urCzFA_HngsIiBAFY.roa (hash: vNotvFH5G7Xz5m1qc9HZ3myajKrSS0KGi8ZKpAHoNio=) 3: 4kwxaAOqnEHIuZQFRPC6_8gSKKE.roa (hash: 99snrJD/G2ltRGqQ+/55Rj4A63J+M56MMYDzsjhmZGE=) 4: 95pN0yHcRtmxt18Rl2fgi-EqbyE.roa (hash: qeWVh+yVSONdHJff9Qk6cELxT7YjB35/aGOijBnNDEg=) 5: AmnFz35OPLD6ZO7jkAaOMH1hS30.roa (hash: BqqDhJpF41pJN92YIwPMVjwMJ5Q4nSs3yGwRWvLfXT4=) 6: DBomSFjdsnGSdRSTAlH1YfT9Ejs.roa (hash: vXGy19cSvl4t7DXJkOiXI2Uq8cOcYunph6bONQ64hjk=) 7: HX_UHT2wr7WtrFst0qBPD3YFyI0.roa (hash: phznvmkkEPXra9EQR+Nk6jF+b0JA7NVv420tkkowjK4=) 8: LHj48PuI2t7PJoC8WTv33kxOuu4.roa (hash: arKrXa4VuhO5fFtTviEbEPPqYXWwkIuo0fU/xKoWydg=) 9: bOtAZUIH1GBd3lCpABCup7nxc_k.roa (hash: gh1+bC/A5QA3t7702qpBdfmtxneA+2zZBc61JKd8M+M=) 10: edWgAsYhXnjVK_ZAgZJv2EVg21M.roa (hash: yxVJ8y9zAMf82B6AUyRqMZYBE45lp/lxuUdAjgn0f2s=) 11: m2s95b-1_ZEgRJjD_uOhKRO4W8s.roa (hash: NcS3id4JsjklXpxPLmneh+iS/Mre/YyN9Q/zzm/49HY=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:93:52:07:21:1b:42:78:fb:bb:24:e1:fe:08:ec:8b:f0:d0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d3d56f07be184cba52f6fdc049e8114d2616c32a Validity Not Before: Nov 22 04:00:19 2024 GMT Not After : Nov 23 04:00:19 2024 GMT Subject: CN=8b50975d5a54d6ab0080a4b4229b8e748a5127d3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:17:fd:3b:e1:92:93:aa:12:4e:f5:1f:f6:b1: 05:27:4d:e8:f3:11:56:28:21:08:5b:28:ee:1e:ae: 48:69:b5:ed:b4:65:a6:f1:f6:a2:af:8d:74:f2:be: 30:8f:f6:38:84:2f:a1:bd:da:03:cd:3f:3e:b5:b4: 4a:82:03:5d:0a:7a:54:f6:93:a6:b3:b9:94:ab:90: b0:50:ea:83:9f:78:98:a1:7e:de:44:72:55:2c:6d: 48:f3:a6:07:f0:e9:62:87:e9:76:4d:7e:1a:b6:1a: b3:dc:13:b8:42:80:81:28:d3:09:c0:ac:c6:84:a2: 08:f5:34:68:12:af:1f:43:e5:e9:30:6c:0c:fe:b8: 47:06:58:68:cc:21:00:dc:d5:97:e4:73:0b:8b:07: fd:1a:22:ae:f8:ef:84:ff:50:58:dc:c1:fc:6b:66: 36:d8:26:f4:ae:27:87:12:8f:76:6a:b4:b9:ae:4f: 51:f4:fe:1e:77:bd:7a:43:15:c1:4c:82:3c:01:af: 5e:69:92:d0:0a:fc:a8:be:53:f9:a8:c5:a2:c3:b9: c2:96:24:19:ed:f6:c9:06:54:43:16:cc:42:7f:76: 57:17:b6:8d:cd:66:b3:20:3b:a9:c7:d8:19:a0:65: a5:51:26:7a:16:0c:fe:8d:76:af:49:0b:75:da:56: 58:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:50:97:5D:5A:54:D6:AB:00:80:A4:B4:22:9B:8E:74:8A:51:27:D3 X509v3 Authority Key Identifier: keyid:D3:D5:6F:07:BE:18:4C:BA:52:F6:FD:C0:49:E8:11:4D:26:16:C3:2A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/09VvB74YTLpS9v3ASegRTSYWwyo.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/5786ab-067e-440c-b276-1b06d1c704c1/1/09VvB74YTLpS9v3ASegRTSYWwyo.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 55:05:1a:24:2f:02:ba:c7:b6:28:03:1d:22:0e:67:a6:3a:f0: 65:da:36:9e:fc:28:9a:26:c0:6a:f0:ad:87:37:c9:06:e3:26: d8:fd:f0:b2:0e:11:d2:ec:ce:30:25:1a:d1:40:9e:ce:a7:e9: d4:35:54:8e:da:ce:cd:1f:88:cd:dd:00:ba:e4:3e:d7:4b:17: ca:fc:b0:c6:e7:c5:1a:1c:85:f7:07:35:f5:c2:64:e5:dd:d2: 94:34:7a:66:37:23:9e:4d:f8:27:fe:57:24:b0:40:43:ba:c6: 92:c2:63:f5:4d:c0:96:86:1d:31:59:f8:60:e1:8d:a8:93:d9: 93:f5:3f:b7:51:fe:38:be:9e:c8:28:e5:df:ef:29:70:ad:db: dc:7e:63:2b:5b:06:68:e9:a4:af:da:d0:50:ad:13:f6:96:9c: 58:4f:a2:d6:c5:25:2d:95:23:fc:53:63:7e:ae:a9:20:f8:cf: e8:66:6f:91:ae:9b:0c:11:01:dc:ae:5c:cc:8f:0d:43:9a:21: 5a:d2:05:2a:6a:6e:02:cf:ac:cc:fc:86:bc:ca:a3:12:ea:48: b0:54:4b:f5:47:5b:af:bc:24:29:5c:b3:7b:55:ed:68:ae:96: 56:03:34:2f:34:1a:3c:1b:88:82:ee:89:ac:23:1f:20:0e:9c: 9f:f1:b9:ac -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZNSByEbQnj7uyTh/gjsi/DQMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQzZDU2ZjA3YmUxODRjYmE1MmY2ZmRjMDQ5ZTgxMTRkMjYx NmMzMmEwHhcNMjQxMTIyMDQwMDE5WhcNMjQxMTIzMDQwMDE5WjAzMTEwLwYDVQQD Eyg4YjUwOTc1ZDVhNTRkNmFiMDA4MGE0YjQyMjliOGU3NDhhNTEyN2QzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmhf9O+GSk6oSTvUf9rEFJ03o8xFW KCEIWyjuHq5IabXttGWm8fair4108r4wj/Y4hC+hvdoDzT8+tbRKggNdCnpU9pOm s7mUq5CwUOqDn3iYoX7eRHJVLG1I86YH8Olih+l2TX4athqz3BO4QoCBKNMJwKzG hKII9TRoEq8fQ+XpMGwM/rhHBlhozCEA3NWX5HMLiwf9GiKu+O+E/1BY3MH8a2Y2 2Cb0rieHEo92arS5rk9R9P4ed716QxXBTII8Aa9eaZLQCvyovlP5qMWiw7nCliQZ 7fbJBlRDFsxCf3ZXF7aNzWazIDupx9gZoGWlUSZ6Fgz+jXavSQt12lZY+wIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFItQl11aVNarAICktCKbjnSKUSfTMB8GA1UdIwQY MBaAFNPVbwe+GEy6Uvb9wEnoEU0mFsMqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYt MWIwNmQxYzcwNGMxLzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9mZC81Nzg2YWItMDY3ZS00NDBjLWIyNzYtMWIwNmQxYzcwNGMx LzEvMDlWdkI3NFlUTHBTOXYzQVNlZ1JUU1lXd3lvLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVQUaJC8C use2KAMdIg5npjrwZdo2nvwomibAavCthzfJBuMm2P3wsg4R0uzOMCUa0UCezqfp 1DVUjtrOzR+Izd0AuuQ+10sXyvywxufFGhyF9wc19cJk5d3SlDR6Zjcjnk34J/5X JLBAQ7rGksJj9U3AloYdMVn4YOGNqJPZk/U/t1H+OL6eyCjl3+8pcK3b3H5jK1sG aOmkr9rQUK0T9pacWE+i1sUlLZUj/FNjfq6pIPjP6GZvka6bDBEB3K5czI8NQ5oh WtIFKmpuAs+szPyGvMqjEupIsFRL9Udbr7wkKVyze1XtaK6WVgM0LzQaPBuIgu6J rCMfIA6cn/G5rA== -----END CERTIFICATE-----Generated at Fri Nov 22 05:53:29 2024 by rpki-client on console-fra.rpki-client.org