$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft File: BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft (raw, json) Hash identifier: RqYTi9fXvNAbnl+CDA0ig0uzE2bjD8yBxaec2qraV5Q= Subject key identifier: F4:9E:29:99:48:AE:7C:AA:96:D6:8F:0A:EC:3C:A5:17:5F:A6:CB:93 Authority key identifier: BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D Certificate issuer: /CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D Certificate serial: 71F76D269BAB5804ED1D88440FEBAF0557631AAF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft Manifest number: 1F Signing time: Tue 02 Jul 2024 20:52:21 +0000 Manifest this update: Tue 02 Jul 2024 20:47:21 +0000 Manifest next update: Wed 03 Jul 2024 22:12:21 +0000 Files and hashes: 1: BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl (hash: QRfld/VA2iREVF1Abf1Ue+L3kq+zjmf1JZ8mvf7jIgI=) 2: 326130613a363034343a616337303a3a2f34342d3438203d3e20323134373537.roa (hash: kTsgSKbRiL4aYX5SJXPuLKVktTLoWke+1YY/18wC8Yo=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 14:20:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 71:f7:6d:26:9b:ab:58:04:ed:1d:88:44:0f:eb:af:05:57:63:1a:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BB5C68696BDEF6289D58B3C0958E37E0DA23930D Validity Not Before: Jul 2 20:47:21 2024 GMT Not After : Jul 3 22:12:21 2024 GMT Subject: CN=F49E299948AE7CAA96D68F0AEC3CA5175FA6CB93 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:b3:10:e3:7e:21:eb:e1:3e:ad:3b:1c:22:42: c8:9a:af:2d:fa:f8:d0:ed:b2:63:8b:d4:b2:27:c3: 9f:a9:59:2a:1d:8b:b7:af:56:e0:e4:fc:59:63:28: 3d:57:d2:55:d0:6f:3a:1f:10:6a:35:ad:7c:09:de: d7:08:74:00:99:60:bf:ae:61:69:e2:ad:51:7c:e0: 08:0e:84:81:dd:68:40:e6:90:9e:70:7b:cc:7e:0e: 95:20:2a:8a:b3:e9:b3:0b:16:84:ab:7d:b7:0b:a5: 73:c3:b2:91:08:9c:ca:da:34:52:5e:04:84:cd:4b: 1a:9a:51:ed:af:18:f8:dc:55:74:27:8c:b0:9a:8b: da:4d:e3:d9:c0:a6:5b:af:df:20:e8:81:4e:91:13: 7e:24:17:9d:18:a4:73:a5:cd:8b:cb:c8:a0:d9:ed: a0:a1:8f:cd:c4:08:89:f0:c9:4c:8e:51:3f:fe:77: a9:f1:76:cc:51:74:96:d6:fe:2d:cb:c2:4e:42:15: 13:e0:69:55:91:12:ab:c3:f5:2c:68:7e:b9:de:f3: 57:a3:a6:3a:29:47:33:af:9a:42:35:d7:0b:25:93: 58:e9:05:73:9d:0d:52:92:fd:52:9d:37:19:b7:37: a3:1c:f3:d8:f0:6a:c4:57:cf:a8:93:e8:4a:06:26: 7f:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:9E:29:99:48:AE:7C:AA:96:D6:8F:0A:EC:3C:A5:17:5F:A6:CB:93 X509v3 Authority Key Identifier: keyid:BB:5C:68:69:6B:DE:F6:28:9D:58:B3:C0:95:8E:37:E0:DA:23:93:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/1/BB5C68696BDEF6289D58B3C0958E37E0DA23930D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 73:d3:17:89:7c:49:0c:a0:6b:5a:ca:9f:88:a6:6d:e4:27:26: 85:fb:34:97:af:6b:45:78:8e:16:99:e7:cf:a2:23:90:d1:9b: 70:b4:6d:43:2b:65:56:05:97:42:bf:3e:89:c6:2d:90:41:f7: ce:c5:5d:5a:1b:8e:f5:b0:87:86:3f:48:ae:2a:07:f2:27:42: ec:5e:0c:06:72:1e:f5:5a:b8:24:e1:f2:0c:1d:8e:dc:c4:eb: 28:8d:8f:60:b0:b6:e7:50:37:ac:a5:17:af:22:66:8c:c2:ea: 52:2c:36:22:c0:90:f6:1f:d1:a0:33:0b:2d:19:d9:39:a1:be: e9:a4:81:df:c7:db:e2:c9:17:de:ce:2f:84:c8:de:1e:2c:ae: 19:1e:9a:0b:ee:db:8d:ae:41:15:4b:a7:a1:04:ca:c0:3b:ed: e4:eb:9e:82:65:37:a0:53:24:3a:25:42:23:0d:16:04:c1:e1: 17:74:f7:55:b9:80:45:da:e2:66:eb:64:49:74:77:72:64:2d: af:1f:6a:7d:dc:59:0e:0f:2a:15:15:c6:db:83:a6:15:3e:96: f3:52:4e:b9:82:3f:30:c2:62:a5:43:8e:54:81:76:11:a0:d1: 90:c5:03:56:3f:c9:91:0a:ea:7f:8e:ae:c8:21:fe:64:bf:39: 1a:74:61:71 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUcfdtJpurWATtHYhED+uvBVdjGq8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkI1QzY4Njk2QkRFRjYyODlENThCM0MwOTU4RTM3RTBE QTIzOTMwRDAeFw0yNDA3MDIyMDQ3MjFaFw0yNDA3MDMyMjEyMjFaMDMxMTAvBgNV BAMTKEY0OUUyOTk5NDhBRTdDQUE5NkQ2OEYwQUVDM0NBNTE3NUZBNkNCOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfsxDjfiHr4T6tOxwiQsiary36 +NDtsmOL1LInw5+pWSodi7evVuDk/FljKD1X0lXQbzofEGo1rXwJ3tcIdACZYL+u YWnirVF84AgOhIHdaEDmkJ5we8x+DpUgKoqz6bMLFoSrfbcLpXPDspEInMraNFJe BITNSxqaUe2vGPjcVXQnjLCai9pN49nApluv3yDogU6RE34kF50YpHOlzYvLyKDZ 7aChj83ECInwyUyOUT/+d6nxdsxRdJbW/i3Lwk5CFRPgaVWREqvD9Sxofrne81ej pjopRzOvmkI11wslk1jpBXOdDVKS/VKdNxm3N6Mc89jwasRXz6iT6EoGJn/PAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU9J4pmUiufKqW1o8K7DylF1+my5MwHwYDVR0j BBgwFoAUu1xoaWve9iidWLPAlY434Nojkw0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5 YmNiLzEvQkI1QzY4Njk2QkRFRjYyODlENThCM0MwOTU4RTM3RTBEQTIzOTMwRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CQjVDNjg2OTZCREVGNjI4OUQ1OEIzQzA5 NThFMzdFMERBMjM5MzBELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzdmNWQyYTFiLWNhY2MtNGUyMi04YWYyLTlmMjBhOTMyOWJjYi8xL0JCNUM2ODY5 NkJERUY2Mjg5RDU4QjNDMDk1OEUzN0UwREEyMzkzMEQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBz0xeJ fEkMoGtayp+Ipm3kJyaF+zSXr2tFeI4WmefPoiOQ0ZtwtG1DK2VWBZdCvz6Jxi2Q QffOxV1aG471sIeGP0iuKgfyJ0LsXgwGch71Wrgk4fIMHY7cxOsojY9gsLbnUDes pRevImaMwupSLDYiwJD2H9GgMwstGdk5ob7ppIHfx9viyRfezi+EyN4eLK4ZHpoL 7tuNrkEVS6ehBMrAO+3k656CZTegUyQ6JUIjDRYEweEXdPdVuYBF2uJm62RJdHdy ZC2vH2p93FkODyoVFcbbg6YVPpbzUk65gj8wwmKlQ45UgXYRoNGQxQNWP8mRCup/ jq7IIf5kvzkadGFx -----END CERTIFICATE-----Generated at Tue Jul 2 22:21:45 2024 by rpki-client on console-fra.rpki-client.org