$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft File: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft (raw, json) Hash identifier: A2asbzUN7sefNfdluPcxl5zZkiegQeLMa98EaDOKEe8= Subject key identifier: 4C:94:09:C3:0B:4E:4A:13:DE:7F:6A:11:04:14:7E:D9:36:0F:E3:08 Authority key identifier: 24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 Certificate issuer: /CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Certificate serial: 77927E857F8273CA944B1407FC2EC8B17FEE9F80 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft Manifest number: 01EE Signing time: Tue 14 May 2024 01:07:03 +0000 Manifest this update: Tue 14 May 2024 01:02:03 +0000 Manifest next update: Wed 15 May 2024 05:05:03 +0000 Files and hashes: 1: 34362e3138332e32362e302f32342d3234203d3e2039303039.roa (hash: rC2FvchwzfGA4vzUPkVFGhR46h/VRe0cV/cq1q/zL0c=) 2: 34362e3138332e33312e302f32342d3234203d3e203439393831.roa (hash: 4SgUg02tThJbdAaEmVPuS6soKb1hRdiyWl1jwdMe4YE=) 3: 34362e3138332e32342e302f32332d3234203d3e20383334.roa (hash: YPW+AYg/pNJ8t2pRaCdpVryq43u+UNJU+NYKBEiUHvk=) 4: 34362e3138332e32392e302f32342d3234203d3e203631333137.roa (hash: OolOIvkaB9Md8NHNINguq6Wo683/C1eDnvTqeTT3Vi8=) 5: 34362e3138332e32372e302f32342d3234203d3e20383334.roa (hash: xjxEfQFhHGqkc/C44qRTxTTSUKOtUUcK4K06YC//jrY=) 6: 34362e3138332e33312e302f32342d3234203d3e203537303433.roa (hash: QlWLXUph8uK9agUThltuDVNduQEWWszYWQo8eJekwTM=) 7: 34362e3138332e32382e302f32342d3234203d3e203631333137.roa (hash: aSZAIwoF07kPLrJji/69rIWgvlwTyb+yCaUxBLal5qI=) 8: 24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl (hash: 5gOYaVS3rKnKnNnlw/koqAtLMbz+N4nfWPel0/yc4M4=) 9: 34362e3138332e33302e302f32342d3234203d3e203631333137.roa (hash: 8R595puKJ0M4M5VLU1I4/6SdoVkcdzW3Y7T3hy1EG7c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 14 May 2024 20:27:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:92:7e:85:7f:82:73:ca:94:4b:14:07:fc:2e:c8:b1:7f:ee:9f:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=24e53788bd4efa23b1a8207b7e74a8e1cc677b00 Validity Not Before: May 14 01:02:03 2024 GMT Not After : May 15 05:05:03 2024 GMT Subject: CN=4C9409C30B4E4A13DE7F6A1104147ED9360FE308 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:8c:68:4e:ef:da:0a:bf:56:1c:41:92:7c: 19:29:e0:94:a8:c7:cb:1d:12:66:d6:e0:ed:82:b3: 4f:44:14:7f:84:72:1c:b8:61:32:08:2b:24:b2:03: b0:16:fb:25:79:b1:60:52:c7:f6:a3:fa:29:09:77: b6:c8:f4:88:38:de:ec:d2:20:68:9f:60:20:6d:2b: e8:de:3e:90:c1:ec:82:c6:8c:cf:71:a0:2a:7c:c8: 34:3e:35:e8:ec:8b:4b:0c:05:98:4d:ab:32:b5:3d: 64:67:e7:24:43:2e:86:65:db:2f:ec:ae:0b:01:32: 2c:54:bb:cb:46:12:02:87:33:b0:cc:ff:df:4d:d0: c0:68:a0:03:2a:8b:b9:f5:93:52:48:cc:f0:89:9f: 78:ab:e3:ca:cd:a3:8e:ea:85:48:a5:0d:32:15:31: b1:df:c3:09:bb:d4:ac:d0:66:57:45:ad:c0:e4:9d: 60:e0:49:85:dd:3e:74:81:25:a4:93:ef:a3:53:c0: 4a:5a:79:23:35:60:c1:8d:41:ff:80:5d:bd:23:47: 0f:5a:5c:69:70:80:e9:b5:bd:d2:0c:58:9b:2e:23: 4b:e7:a0:85:6a:7f:c2:31:4e:a7:c1:45:c0:6e:73: 4b:fd:7a:c5:f4:0a:c7:81:3b:14:35:69:b6:1f:dc: a6:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4C:94:09:C3:0B:4E:4A:13:DE:7F:6A:11:04:14:7E:D9:36:0F:E3:08 X509v3 Authority Key Identifier: keyid:24:E5:37:88:BD:4E:FA:23:B1:A8:20:7B:7E:74:A8:E1:CC:67:7B:00 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JOU3iL1O-iOxqCB7fnSo4cxnewA.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/16acb9a0-6d1e-4ae4-9177-d938e9804395/0/24E53788BD4EFA23B1A8207B7E74A8E1CC677B00.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3a:69:14:ae:0e:0e:56:c5:b1:bd:12:73:0f:b6:e7:b4:0f:8b: f5:f6:4a:c3:bf:69:5d:21:fa:47:62:57:40:0e:5d:e5:5a:ad: 31:ca:cb:26:08:2c:27:d3:74:74:f6:30:a7:c9:9f:73:62:0a: 12:6b:02:98:99:38:d9:95:e6:5a:c3:74:90:f4:3f:38:c1:5a: 04:0e:a0:81:76:9d:c8:fe:f8:8e:21:e6:b3:0c:cd:60:af:8e: 8d:00:71:0e:96:f3:c4:00:15:3a:e5:a9:27:1f:eb:d9:56:0e: c2:57:6b:98:19:a3:92:21:e9:31:27:31:e9:d7:20:d7:1d:36: 43:05:5b:69:de:51:81:58:52:5d:59:c0:97:80:19:0a:fa:29: e9:eb:6a:f8:7a:2d:e6:df:eb:a7:18:83:6c:c6:4b:df:3a:8b: f2:6a:53:58:c9:80:4a:0a:4d:d8:9a:1c:e7:bc:f2:5e:bf:f0: ea:3e:1c:e6:ae:d2:cd:8b:8d:cb:48:12:e6:a4:32:82:dd:48: f6:53:2d:cb:18:73:e4:d7:5b:f8:f4:5a:c7:c3:42:ff:e3:a8: ea:76:95:ab:95:c2:c6:40:d4:93:7d:d1:26:5b:5b:e6:1d:7f: d0:08:42:52:2c:8a:ed:75:b6:65:c6:d9:29:6c:ec:0e:93:bd: a3:72:3c:5d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd5J+hX+Cc8qUSxQH/C7IsX/un4AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjRlNTM3ODhiZDRlZmEyM2IxYTgyMDdiN2U3NGE4ZTFj YzY3N2IwMDAeFw0yNDA1MTQwMTAyMDNaFw0yNDA1MTUwNTA1MDNaMDMxMTAvBgNV BAMTKDRDOTQwOUMzMEI0RTRBMTNERTdGNkExMTA0MTQ3RUQ5MzYwRkUzMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPz4xoTu/aCr9WHEGSfBkp4JSo x8sdEmbW4O2Cs09EFH+Echy4YTIIKySyA7AW+yV5sWBSx/aj+ikJd7bI9Ig43uzS IGifYCBtK+jePpDB7ILGjM9xoCp8yDQ+Nejsi0sMBZhNqzK1PWRn5yRDLoZl2y/s rgsBMixUu8tGEgKHM7DM/99N0MBooAMqi7n1k1JIzPCJn3ir48rNo47qhUilDTIV MbHfwwm71KzQZldFrcDknWDgSYXdPnSBJaST76NTwEpaeSM1YMGNQf+AXb0jRw9a XGlwgOm1vdIMWJsuI0vnoIVqf8IxTqfBRcBuc0v9esX0CseBOxQ1abYf3Kb5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUTJQJwwtOShPef2oRBBR+2TYP4wgwHwYDVR0j BBgwFoAUJOU3iL1O+iOxqCB7fnSo4cxnewAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTZhY2I5YTAtNmQxZS00YWU0LTkxNzctZDkzOGU5ODA0 Mzk1LzAvMjRFNTM3ODhCRDRFRkEyM0IxQTgyMDdCN0U3NEE4RTFDQzY3N0IwMC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0pPVTNpTDFPLWlPeHFDQjdmblNvNGN4 bmV3QS5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xNmFjYjlhMC02 ZDFlLTRhZTQtOTE3Ny1kOTM4ZTk4MDQzOTUvMC8yNEU1Mzc4OEJENEVGQTIzQjFB ODIwN0I3RTc0QThFMUNDNjc3QjAwLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOmkUrg4OVsWxvRJzD7bn tA+L9fZKw79pXSH6R2JXQA5d5VqtMcrLJggsJ9N0dPYwp8mfc2IKEmsCmJk42ZXm WsN0kPQ/OMFaBA6ggXadyP74jiHmswzNYK+OjQBxDpbzxAAVOuWpJx/r2VYOwldr mBmjkiHpMScx6dcg1x02QwVbad5RgVhSXVnAl4AZCvop6etq+Hot5t/rpxiDbMZL 3zqL8mpTWMmASgpN2Joc57zyXr/w6j4c5q7SzYuNy0gS5qQygt1I9lMtyxhz5Ndb +PRax8NC/+Oo6naVq5XCxkDUk33RJltb5h1/0AhCUiyK7XW2ZcbZKWzsDpO9o3I8 XQ== -----END CERTIFICATE-----Generated at Tue May 14 02:20:53 2024 by rpki-client on console-fra.rpki-client.org