$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: 5t3Puxfd97/1docg89EiIApuuDN9sRc3hVxyOUds464= Subject key identifier: 2F:EE:7B:E4:DB:31:F3:D0:70:41:3F:C2:D3:00:0E:70:68:89:36:8D Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 5DB4E91DC5176F16ED0C3FD46390FAA4DCB61E0A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 01C9 Signing time: Sat 28 Sep 2024 05:31:10 +0000 Manifest this update: Sat 28 Sep 2024 05:26:10 +0000 Manifest next update: Sun 29 Sep 2024 06:21:10 +0000 Files and hashes: 1: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: 3a4LH8f5jeXlPdsIkioq1V+hqiK338mibg/VsUQrPuo=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: fpULdXXomBi49YY6WqsyqWL1nOL+0TN0NiWW3AYGJho=) 3: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: pVty80Nt/fiJEmjKmTfUwz4vss/3XyO67jlwlxEkXEQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 14:34:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5d:b4:e9:1d:c5:17:6f:16:ed:0c:3f:d4:63:90:fa:a4:dc:b6:1e:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Sep 28 05:26:10 2024 GMT Not After : Sep 29 06:21:10 2024 GMT Subject: CN=2FEE7BE4DB31F3D070413FC2D3000E706889368D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:a7:96:5c:f9:8c:51:ac:90:cf:82:f9:ee:fe: e4:d0:c6:f6:fd:49:f9:f3:1e:2d:4a:5a:76:14:44: 19:5b:43:d1:f1:c7:41:22:ee:e7:5c:8e:10:79:e3: f7:8d:c7:c4:c8:fc:f8:b9:2a:c7:b0:30:79:b1:3c: 9a:a7:c2:b1:e9:c6:75:10:e9:b0:87:34:1d:ee:3c: 21:56:a0:bc:56:8e:aa:56:e5:46:2f:e9:64:bf:40: 1c:2e:1c:c4:7d:dd:52:77:f9:94:21:b7:5b:e1:41: 3f:d3:43:66:70:ed:5e:68:84:69:c5:17:d1:77:09: 33:61:70:e1:b4:0d:72:cf:a2:f5:e6:e3:a7:c9:00: d2:cf:24:b6:1d:c5:60:c2:67:2d:3d:ba:7e:4f:10: 71:dd:df:10:b8:5e:4b:43:50:ee:64:fb:85:fb:90: 6f:53:cf:3a:fb:b5:16:18:8c:92:c1:53:86:0a:92: b7:77:1c:0f:a4:7b:7b:f8:da:93:de:1f:0a:e6:a1: 6d:32:e8:89:8e:18:f3:55:cb:54:a1:25:0c:1f:f8: c9:5a:b1:ce:f7:a9:92:f1:5e:c4:c1:4f:e7:6e:58: fa:11:66:be:d7:b0:46:d3:fa:d9:4a:a0:c9:9b:56: 78:a7:1b:6f:76:bd:f4:4d:bd:87:e0:0b:8f:16:44: 81:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:EE:7B:E4:DB:31:F3:D0:70:41:3F:C2:D3:00:0E:70:68:89:36:8D X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:63:1a:2c:0b:1a:c9:be:40:81:41:7b:f6:87:f9:55:9b:7f: bf:6f:78:10:ac:70:12:51:6c:0d:dd:d6:00:da:f0:f5:f6:ad: a6:2b:14:90:75:f5:a0:1c:34:b6:47:9d:0c:52:1e:df:e0:8e: dd:ae:52:d5:ae:d0:1e:d6:8e:30:e5:79:57:de:f6:5e:54:f1: 2b:c1:b6:73:3d:f5:fc:ed:eb:c9:45:2e:20:d6:1f:3b:24:3d: b9:12:c0:1e:26:8f:62:d7:c1:4c:68:91:af:2c:b4:17:51:24: 45:ce:2d:ad:65:42:d7:83:88:9f:63:fd:de:a2:4d:c7:29:9e: ac:0f:88:0a:4e:14:c5:5f:fd:fa:85:67:9c:a1:12:54:31:3b: d8:91:3b:a8:a1:d3:3f:48:f1:14:80:b4:ab:52:ad:1e:b8:13: 4a:de:3b:4b:97:e3:38:55:50:0e:79:34:15:77:6b:a1:d0:67: 23:c9:61:bc:2b:8a:1b:03:c1:20:48:06:4b:1f:db:20:67:f4: 6d:d2:0b:95:a7:ca:d4:e1:32:2e:e1:8e:d0:2a:48:a5:84:df: 48:99:33:0e:07:0f:19:81:31:ca:40:b6:49:01:fc:ea:39:e3: cd:2a:a7:94:bf:bb:18:b5:ee:c3:7c:18:ca:67:28:16:a9:8b: 22:3d:40:32 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXbTpHcUXbxbtDD/UY5D6pNy2HgowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNDA5MjgwNTI2MTBaFw0yNDA5MjkwNjIxMTBaMDMxMTAvBgNV BAMTKDJGRUU3QkU0REIzMUYzRDA3MDQxM0ZDMkQzMDAwRTcwNjg4OTM2OEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbp5Zc+YxRrJDPgvnu/uTQxvb9 SfnzHi1KWnYURBlbQ9Hxx0Ei7udcjhB54/eNx8TI/Pi5KsewMHmxPJqnwrHpxnUQ 6bCHNB3uPCFWoLxWjqpW5UYv6WS/QBwuHMR93VJ3+ZQht1vhQT/TQ2Zw7V5ohGnF F9F3CTNhcOG0DXLPovXm46fJANLPJLYdxWDCZy09un5PEHHd3xC4XktDUO5k+4X7 kG9Tzzr7tRYYjJLBU4YKkrd3HA+ke3v42pPeHwrmoW0y6ImOGPNVy1ShJQwf+Mla sc73qZLxXsTBT+duWPoRZr7XsEbT+tlKoMmbVninG292vfRNvYfgC48WRIEHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUL+575Nsx89BwQT/C0wAOcGiJNo0wHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAOYxos CxrJvkCBQXv2h/lVm3+/b3gQrHASUWwN3dYA2vD19q2mKxSQdfWgHDS2R50MUh7f 4I7drlLVrtAe1o4w5XlX3vZeVPErwbZzPfX87evJRS4g1h87JD25EsAeJo9i18FM aJGvLLQXUSRFzi2tZULXg4ifY/3eok3HKZ6sD4gKThTFX/36hWecoRJUMTvYkTuo odM/SPEUgLSrUq0euBNK3jtLl+M4VVAOeTQVd2uh0GcjyWG8K4obA8EgSAZLH9sg Z/Rt0guVp8rU4TIu4Y7QKkilhN9ImTMOBw8ZgTHKQLZJAfzqOePNKqeUv7sYte7D fBjKZygWqYsiPUAy -----END CERTIFICATE-----Generated at Sat Sep 28 06:56:37 2024 by rpki-client on console-fra.rpki-client.org