$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft File: B6366F3DD14AC5399103961C30642E6779892C6C.mft (raw, json) Hash identifier: /N8Ci5A7tOzYtFDI5ncEl+udBX1Mkr4i7M+gdIMEfhg= Subject key identifier: 53:A5:DE:4E:38:2F:DD:AA:41:33:4F:AA:DE:72:30:02:3B:76:3E:E3 Authority key identifier: B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C Certificate issuer: /CN=B6366F3DD14AC5399103961C30642E6779892C6C Certificate serial: 37F14C227EEE8566633A19DD0B6C7BE5425B1426 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft Manifest number: 0F Signing time: Sat 28 Sep 2024 09:36:35 +0000 Manifest this update: Sat 28 Sep 2024 09:31:35 +0000 Manifest next update: Sun 29 Sep 2024 11:47:35 +0000 Files and hashes: 1: 326130363a313238333a633131303a3a2f34342d3434203d3e20323135313437.roa (hash: Inap52a8v+7lZSU2U9FJt7+07oCq4V2h+j6RGecoYbQ=) 2: B6366F3DD14AC5399103961C30642E6779892C6C.crl (hash: IzFWzZjOk7SsZEwK0z/JtdVbS5P/9uazGtJM18/jCPI=) 3: 326130363a313238333a383030303a3a2f33362d3336203d3e20323135313437.roa (hash: oRKMLvHS215EkQ1BfQ7ODboxSPqhfEeLodlN+AtmdPM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.crl rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/20595BDBAD09C7D604202305854D1DF14F190959.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/20595BDBAD09C7D604202305854D1DF14F190959.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 28 Sep 2024 22:02:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:f1:4c:22:7e:ee:85:66:63:3a:19:dd:0b:6c:7b:e5:42:5b:14:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B6366F3DD14AC5399103961C30642E6779892C6C Validity Not Before: Sep 28 09:31:35 2024 GMT Not After : Sep 29 11:47:35 2024 GMT Subject: CN=53A5DE4E382FDDAA41334FAADE7230023B763EE3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:9f:3a:69:ef:da:9c:8e:f1:8e:3a:d7:86:18: b4:8c:b2:41:a8:c8:46:aa:c9:09:33:e2:c8:c4:1c: 74:e1:c8:97:01:98:cb:c4:b4:0e:53:a1:1b:76:58: d1:e4:88:90:b7:5e:ff:5d:dd:74:82:db:56:af:c4: ff:0f:1d:90:c0:09:2b:63:01:15:05:22:48:46:21: 52:6c:0a:81:22:47:f7:69:0e:a2:9d:ab:4e:91:71: fa:5a:5f:c9:31:f0:17:ac:2a:9e:66:19:7c:09:6b: a3:be:19:34:88:a4:94:4e:fb:8d:d7:6c:ba:fb:90: da:d0:41:ce:6a:18:02:ed:67:3e:5b:b1:83:bf:f2: 73:28:d8:5f:dd:b9:33:54:dc:5d:da:ac:d4:7a:ba: 2d:93:3f:a2:e0:3f:35:7d:0d:fd:6d:44:91:9f:8b: 7c:0b:ba:f1:83:25:73:43:6a:ab:5c:03:8d:c6:41: 5c:d4:f1:1e:99:38:6e:92:fb:75:94:fb:7e:10:34: b8:38:b8:9e:05:ac:f0:3d:b0:0e:e4:1e:3a:49:21: 0f:df:45:fa:8e:3d:85:2e:f1:ac:3c:dd:e5:65:df: f0:d0:a9:42:15:e6:2c:a8:b0:e3:5d:bc:98:65:ee: 11:f8:9f:8e:b8:83:c6:50:80:a1:10:14:66:e3:fa: b5:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 53:A5:DE:4E:38:2F:DD:AA:41:33:4F:AA:DE:72:30:02:3B:76:3E:E3 X509v3 Authority Key Identifier: keyid:B6:36:6F:3D:D1:4A:C5:39:91:03:96:1C:30:64:2E:67:79:89:2C:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/2af73a9c-2058-43bb-9ac6-5ab42dfbf409/1/B6366F3DD14AC5399103961C30642E6779892C6C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/68ababbb-f048-4de1-9206-8d40f071808b/2/B6366F3DD14AC5399103961C30642E6779892C6C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4a:fa:53:94:ca:75:6f:e3:d5:9a:96:f8:3b:09:3f:77:1d:eb: e8:fd:b3:e6:07:33:37:2a:8d:4a:4e:30:9b:3f:5f:0f:d6:5d: cd:e5:ba:6e:0b:c1:3b:46:0b:d0:5d:8a:4a:cf:5a:a6:b9:e9: 66:fc:1c:7a:aa:cb:4d:65:ac:12:33:a3:80:e8:82:fc:4e:9c: 5b:8a:c5:05:a9:e4:26:0e:9f:af:36:8e:df:56:8f:59:02:3e: ff:78:4f:f9:b1:5b:32:eb:2b:16:0f:60:04:e9:2a:16:e0:6e: bd:f9:90:4d:36:79:cd:05:04:49:44:25:1c:50:68:72:4c:f1: 2d:9d:d0:75:9c:71:b7:f3:9b:eb:8b:64:39:48:41:3c:1d:73: b1:e0:d1:1c:13:97:57:92:66:35:49:70:e4:f4:d3:cb:86:e2: 65:01:d3:22:c9:59:ed:16:ae:48:38:2d:ba:a8:45:8e:c1:a2: e4:b1:37:05:ad:86:68:c6:c3:fa:aa:0f:cf:68:2b:4f:26:4d: 14:6b:65:86:64:e4:50:ec:57:a4:95:31:2f:40:29:3c:3d:c8: 52:39:5c:59:20:fe:a7:f0:80:43:95:15:1a:2a:02:64:6f:10: b3:a4:39:ae:66:7d:96:7e:7e:4b:6e:6f:aa:cf:2a:f8:f6:29: ed:1b:36:bb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUN/FMIn7uhWZjOhndC2x75UJbFCYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3 OTg5MkM2QzAeFw0yNDA5MjgwOTMxMzVaFw0yNDA5MjkxMTQ3MzVaMDMxMTAvBgNV BAMTKDUzQTVERTRFMzgyRkREQUE0MTMzNEZBQURFNzIzMDAyM0I3NjNFRTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0nzpp79qcjvGOOteGGLSMskGo yEaqyQkz4sjEHHThyJcBmMvEtA5ToRt2WNHkiJC3Xv9d3XSC21avxP8PHZDACStj ARUFIkhGIVJsCoEiR/dpDqKdq06RcfpaX8kx8BesKp5mGXwJa6O+GTSIpJRO+43X bLr7kNrQQc5qGALtZz5bsYO/8nMo2F/duTNU3F3arNR6ui2TP6LgPzV9Df1tRJGf i3wLuvGDJXNDaqtcA43GQVzU8R6ZOG6S+3WU+34QNLg4uJ4FrPA9sA7kHjpJIQ/f RfqOPYUu8aw83eVl3/DQqUIV5iyosONdvJhl7hH4n464g8ZQgKEQFGbj+rVvAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUU6XeTjgv3apBM0+q3nIwAjt2PuMwHwYDVR0j BBgwFoAUtjZvPdFKxTmRA5YcMGQuZ3mJLGwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjhhYmFiYmItZjA0OC00ZGUxLTkyMDYtOGQ0MGYwNzE4 MDhiLzIvQjYzNjZGM0REMTRBQzUzOTkxMDM5NjFDMzA2NDJFNjc3OTg5MkM2Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWY3M2E5Yy0yMDU4LTQz YmItOWFjNi01YWI0MmRmYmY0MDkvMS9CNjM2NkYzREQxNEFDNTM5OTEwMzk2MUMz MDY0MkU2Nzc5ODkyQzZDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY4YWJhYmJiLWYwNDgtNGRlMS05MjA2LThkNDBmMDcxODA4Yi8yL0I2MzY2RjNE RDE0QUM1Mzk5MTAzOTYxQzMwNjQyRTY3Nzk4OTJDNkMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBK+lOU ynVv49Walvg7CT93Hevo/bPmBzM3Ko1KTjCbP18P1l3N5bpuC8E7RgvQXYpKz1qm uelm/Bx6qstNZawSM6OA6IL8TpxbisUFqeQmDp+vNo7fVo9ZAj7/eE/5sVsy6ysW D2AE6SoW4G69+ZBNNnnNBQRJRCUcUGhyTPEtndB1nHG385vri2Q5SEE8HXOx4NEc E5dXkmY1SXDk9NPLhuJlAdMiyVntFq5IOC26qEWOwaLksTcFrYZoxsP6qg/PaCtP Jk0Ua2WGZORQ7FeklTEvQCk8PchSOVxZIP6n8IBDlRUaKgJkbxCzpDmuZn2Wfn5L bm+qzyr49intGza7 -----END CERTIFICATE-----Generated at Sat Sep 28 10:58:31 2024 by rpki-client on console-fra.rpki-client.org