$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft File: 41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft (raw, json) Hash identifier: 87BiBQTxi7N6UrmtFDOtR+uDvcUYwwpAKTisltLvefY= Subject key identifier: 34:DC:83:A6:10:0F:37:7E:9D:F6:A6:FC:01:3F:77:F9:D9:3D:20:A9 Authority key identifier: 41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70 Certificate issuer: /CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570 Certificate serial: 038704D9806213A5A56A6858D2152AB61EDC3EFB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft Manifest number: 15 Signing time: Tue 02 Jul 2024 23:17:21 +0000 Manifest this update: Tue 02 Jul 2024 23:12:21 +0000 Manifest next update: Thu 04 Jul 2024 01:15:21 +0000 Files and hashes: 1: 41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl (hash: M+hv0L24dNPjux6W5pBNzGrcEqnOQP1I4GxrvY5I16E=) 2: 326130373a353463313a633530303a3a2f34302d3438203d3e20323134373537.roa (hash: zI/7RS5CULQs/eQeVEsRQEIfCAOBbTKX6vZdqlRmV9c=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 10:38:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:87:04:d9:80:62:13:a5:a5:6a:68:58:d2:15:2a:b6:1e:dc:3e:fb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41CF30FBDC220B6E4A6FA67792B3B248EECF6570 Validity Not Before: Jul 2 23:12:21 2024 GMT Not After : Jul 4 01:15:21 2024 GMT Subject: CN=34DC83A6100F377E9DF6A6FC013F77F9D93D20A9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:60:49:1d:b3:9e:c6:40:7b:0b:16:80:f4:a1: 8e:8a:91:f4:5f:7e:b3:ab:c6:b8:9c:24:8f:f5:3b: e9:34:97:9d:74:e7:02:27:4e:51:be:9b:fd:d1:39: 4f:1b:ed:00:a8:cd:03:6c:84:11:09:fb:31:62:bf: 92:ac:57:85:b6:07:08:fe:36:bb:d2:df:ae:0d:1a: 92:59:49:61:89:65:4a:49:42:35:a8:9e:fe:39:2f: 00:57:b7:fa:74:84:aa:be:6a:df:41:01:b6:22:9b: 87:cd:fb:f6:57:d5:1d:0e:0d:bd:95:db:32:6f:d9: a4:1a:01:1d:fb:82:dd:01:e6:49:81:7f:3a:93:e5: a7:a6:0c:7a:df:9c:2d:2f:1c:ce:0b:91:1f:3c:d8: 73:48:18:35:1e:e7:5c:b3:47:9d:98:49:94:f9:fb: 25:f8:39:6d:68:73:a2:fe:2f:4b:73:d7:44:2d:c8: 1a:7a:c3:74:b1:80:9a:85:b5:c6:89:14:95:f3:55: fd:61:23:68:3b:b5:1d:16:61:cb:b8:e9:a1:a0:8d: e1:47:85:f3:8f:c0:fe:ec:13:8b:99:6e:ed:c1:2b: 1e:3d:71:c0:32:6c:d2:96:54:25:4e:40:bd:77:60: bb:90:4b:54:4c:70:be:7d:43:2e:62:75:e1:e6:4c: c0:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:DC:83:A6:10:0F:37:7E:9D:F6:A6:FC:01:3F:77:F9:D9:3D:20:A9 X509v3 Authority Key Identifier: keyid:41:CF:30:FB:DC:22:0B:6E:4A:6F:A6:77:92:B3:B2:48:EE:CF:65:70 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7f5d2a1b-cacc-4e22-8af2-9f20a9329bcb/2/41CF30FBDC220B6E4A6FA67792B3B248EECF6570.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d1:91:6c:5f:9a:17:5b:88:e0:75:7d:6e:fd:0f:61:30:8e:42: 04:7d:2e:13:d0:cf:9c:78:44:7a:43:68:a4:c0:50:c4:5c:d1: 33:48:eb:d1:a5:a0:3e:d1:fd:e1:d5:68:be:cd:a1:69:8b:25: 79:7e:1a:68:8d:84:59:76:64:42:b1:2b:89:66:fc:33:2f:c6: 95:f1:72:e0:3c:56:88:0a:9b:5d:b0:3a:9a:33:48:7f:e4:e3: 3f:7a:83:bb:f0:a8:73:6e:1e:ce:94:7f:d4:93:8e:48:80:71: 14:37:bd:73:37:86:a7:12:f9:76:49:6c:14:3a:aa:92:0b:22: 2b:db:29:02:b2:47:d4:9f:a4:02:fd:f6:55:b5:fe:29:1a:88: e7:53:5c:ee:af:71:81:87:dc:99:56:67:13:39:7c:dd:eb:fa: a2:6e:17:f4:91:69:e1:03:15:ac:e9:16:99:3b:72:70:4f:a7: e7:ff:ea:dd:7b:50:34:dc:04:77:c9:e3:d7:3f:bc:17:78:de: 03:19:8e:0a:42:fb:fd:7a:24:73:a8:e6:03:85:73:73:70:ac: cd:03:9c:9e:d9:b2:12:18:19:5e:e9:77:49:06:24:e1:0a:e0: 7e:39:7e:1b:c9:b7:cd:66:ac:96:41:00:a1:ad:cf:4e:4c:d0: 95:f5:4e:5d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUA4cE2YBiE6WlamhY0hUqth7cPvswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDRjMwRkJEQzIyMEI2RTRBNkZBNjc3OTJCM0IyNDhF RUNGNjU3MDAeFw0yNDA3MDIyMzEyMjFaFw0yNDA3MDQwMTE1MjFaMDMxMTAvBgNV BAMTKDM0REM4M0E2MTAwRjM3N0U5REY2QTZGQzAxM0Y3N0Y5RDkzRDIwQTkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3YEkds57GQHsLFoD0oY6KkfRf frOrxricJI/1O+k0l5105wInTlG+m/3ROU8b7QCozQNshBEJ+zFiv5KsV4W2Bwj+ NrvS364NGpJZSWGJZUpJQjWonv45LwBXt/p0hKq+at9BAbYim4fN+/ZX1R0ODb2V 2zJv2aQaAR37gt0B5kmBfzqT5aemDHrfnC0vHM4LkR882HNIGDUe51yzR52YSZT5 +yX4OW1oc6L+L0tz10QtyBp6w3SxgJqFtcaJFJXzVf1hI2g7tR0WYcu46aGgjeFH hfOPwP7sE4uZbu3BKx49ccAybNKWVCVOQL13YLuQS1RMcL59Qy5ideHmTMBlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNNyDphAPN36d9qb8AT93+dk9IKkwHwYDVR0j BBgwFoAUQc8w+9wiC25Kb6Z3krOySO7PZXAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2Y1ZDJhMWItY2FjYy00ZTIyLThhZjItOWYyMGE5MzI5 YmNiLzIvNDFDRjMwRkJEQzIyMEI2RTRBNkZBNjc3OTJCM0IyNDhFRUNGNjU3MC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC80MUNGMzBGQkRDMjIwQjZFNEE2RkE2Nzc5 MkIzQjI0OEVFQ0Y2NTcwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzdmNWQyYTFiLWNhY2MtNGUyMi04YWYyLTlmMjBhOTMyOWJjYi8yLzQxQ0YzMEZC REMyMjBCNkU0QTZGQTY3NzkyQjNCMjQ4RUVDRjY1NzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDRkWxf mhdbiOB1fW79D2EwjkIEfS4T0M+ceER6Q2ikwFDEXNEzSOvRpaA+0f3h1Wi+zaFp iyV5fhpojYRZdmRCsSuJZvwzL8aV8XLgPFaICptdsDqaM0h/5OM/eoO78Khzbh7O lH/Uk45IgHEUN71zN4anEvl2SWwUOqqSCyIr2ykCskfUn6QC/fZVtf4pGojnU1zu r3GBh9yZVmcTOXzd6/qibhf0kWnhAxWs6RaZO3JwT6fn/+rde1A03AR3yePXP7wX eN4DGY4KQvv9eiRzqOYDhXNzcKzNA5ye2bISGBle6XdJBiThCuB+OX4bybfNZqyW QQChrc9OTNCV9U5d -----END CERTIFICATE-----Generated at Wed Jul 3 01:25:52 2024 by rpki-client on console-ams.rpki-client.org