$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: hZkCb42DMjJWkjNn8qL/4bMLJOuXVUn3pqb64+z/Pkc= Subject key identifier: 5C:58:91:9C:D0:AA:13:E3:A0:03:47:A5:11:53:87:DD:88:A9:80:D3 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 2CCB1A436B00F945E2589274919833C65C721505 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0107 Signing time: Thu 16 May 2024 14:37:19 +0000 Manifest this update: Thu 16 May 2024 14:32:19 +0000 Manifest next update: Fri 17 May 2024 15:19:19 +0000 Files and hashes: 1: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: mGETmRoGPKoifmpxuuMGxwJHdYMmSb8w/O+AjWAq+0M=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9PHwyvRKIN8CC6tqDO30+rEY1zs7yflQXhOG4HrGiyk=) 3: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: FjYvYO8OhRhy5xMwWCOsQCSTt4t7VD1f49kiToXw4CE=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: aKmrndl9lTv2GWQd+9qoP8HY5aUcpC8vFQNex5RBfBw=) 5: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: m1f4nPrGA7NIFsgD+MozFWSfEE7oftrO8GsKaqSdlt8=) 6: 3130392e3130372e33322e302f31392d3139203d3e203531303539.roa (hash: 2E4nBS5s2NGTijFuTBl7PtdK4ANb5WSsjCnYlIZeVaM=) 7: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: pW3PjbwuJyzTpYpurPQsfzJlZPcGx8XPQjJFj0683mU=) 8: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: sW19kQcAV5ZAQ3yWp0ElXJvpihn+YZBFEQGmo0pwVQE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 17 May 2024 14:49:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:cb:1a:43:6b:00:f9:45:e2:58:92:74:91:98:33:c6:5c:72:15:05 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 16 14:32:19 2024 GMT Not After : May 17 15:19:19 2024 GMT Subject: CN=5C58919CD0AA13E3A00347A5115387DD88A980D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:65:a9:08:fe:f8:dd:66:af:66:ea:d9:4c: 2e:80:df:6c:37:30:53:82:d7:29:c8:0c:a6:29:9b: 39:bc:a4:09:e6:fd:07:0a:55:06:1d:13:71:11:30: 2e:30:62:3f:0a:dd:eb:e4:21:7f:79:7d:4b:fe:58: 2e:5f:f2:f1:60:15:82:98:08:75:f7:1b:b0:0a:bb: 75:23:a0:a4:71:8a:9e:fb:97:73:35:cb:d8:9a:8f: a5:1a:98:df:59:26:16:96:37:46:2f:a1:c6:4e:31: d9:bc:b6:2e:01:35:ed:a8:de:88:b2:c2:d4:c6:b4: f3:2f:db:19:dd:4f:90:71:b8:1b:20:1d:a4:12:0e: 85:83:8a:7a:7f:d2:0e:9d:31:f3:f9:e1:1f:2e:45: 3e:e9:25:00:e4:63:5c:ae:69:a4:dd:b7:b0:21:bd: 78:46:82:9f:36:ea:c2:89:11:74:95:5d:e4:86:07: fb:b3:fa:30:d1:1d:61:00:bb:9a:bd:43:87:c7:ca: 68:e3:3d:3d:f3:a0:72:d6:ff:cf:2b:10:f4:91:e3: b4:da:1e:7f:65:2b:94:2c:df:2b:e8:61:cb:61:df: 89:90:9a:9a:a6:55:b9:d4:29:88:af:c4:67:1b:8e: d7:48:ec:e4:7b:7e:87:59:4f:99:df:fb:69:77:51: e5:79 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5C:58:91:9C:D0:AA:13:E3:A0:03:47:A5:11:53:87:DD:88:A9:80:D3 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:09:3c:06:aa:7f:11:ec:3f:1e:06:fb:86:ec:e3:5f:b3:aa: e5:67:3f:a7:1b:f6:47:c8:6b:3b:f2:7c:5f:11:f9:d4:f5:9a: c8:cc:61:2f:57:43:3e:d5:16:2a:dd:06:09:97:2d:3d:fe:b6: e0:5c:9b:a4:74:02:cf:48:c4:04:f5:01:e7:8c:a3:10:fa:c6: 4f:2d:87:4a:cd:ac:90:b3:ac:e4:a9:9d:38:b2:e7:37:c0:ae: 15:72:a1:14:cd:ca:e7:de:03:a7:b6:26:34:f4:ad:f6:c8:55: db:15:f5:c1:9d:aa:ad:9c:e5:c7:5e:7e:41:3c:1d:df:4b:9d: c4:ca:5a:53:ea:fd:74:8a:88:db:e7:9f:b5:68:95:c8:c6:93: 6b:9f:9a:f5:47:93:2a:c3:6f:89:32:c5:9f:03:ce:d1:39:52: b8:69:e5:d3:1b:96:db:e8:77:78:03:93:26:06:d4:f0:0c:fb: f2:49:bb:02:f5:44:e4:bc:ec:1c:99:6a:05:b7:1d:a8:a3:ab: b6:74:66:b5:cc:25:e6:57:55:fa:2b:6f:67:3f:11:42:78:63: 95:75:7e:53:27:7f:55:7d:b4:06:25:e5:98:d4:44:87:ae:81: 2b:cb:7e:c7:0f:5f:9c:70:98:cf:92:fb:57:22:b1:42:4d:26: 14:87:99:9d -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIULMsaQ2sA+UXiWJJ0kZgzxlxyFQUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNDA1MTYxNDMyMTlaFw0yNDA1MTcxNTE5MTlaMDMxMTAvBgNV BAMTKDVDNTg5MTlDRDBBQTEzRTNBMDAzNDdBNTExNTM4N0REODhBOTgwRDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxGWpCP743WavZurZTC6A32w3 MFOC1ynIDKYpmzm8pAnm/QcKVQYdE3ERMC4wYj8K3evkIX95fUv+WC5f8vFgFYKY CHX3G7AKu3UjoKRxip77l3M1y9iaj6UamN9ZJhaWN0YvocZOMdm8ti4BNe2o3oiy wtTGtPMv2xndT5BxuBsgHaQSDoWDinp/0g6dMfP54R8uRT7pJQDkY1yuaaTdt7Ah vXhGgp826sKJEXSVXeSGB/uz+jDRHWEAu5q9Q4fHymjjPT3zoHLW/88rEPSR47Ta Hn9lK5Qs3yvoYcth34mQmpqmVbnUKYivxGcbjtdI7OR7fodZT5nf+2l3UeV5AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUXFiRnNCqE+OgA0elEVOH3YipgNMwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgwk8Bqp/Eew/Hgb7huzj X7Oq5Wc/pxv2R8hrO/J8XxH51PWayMxhL1dDPtUWKt0GCZctPf624FybpHQCz0jE BPUB54yjEPrGTy2HSs2skLOs5KmdOLLnN8CuFXKhFM3K594Dp7YmNPSt9shV2xX1 wZ2qrZzlx15+QTwd30udxMpaU+r9dIqI2+eftWiVyMaTa5+a9UeTKsNviTLFnwPO 0TlSuGnl0xuW2+h3eAOTJgbU8Az78km7AvVE5LzsHJlqBbcdqKOrtnRmtcwl5ldV +itvZz8RQnhjlXV+Uyd/VX20BiXlmNREh66BK8t+xw9fnHCYz5L7VyKxQk0mFIeZ nQ== -----END CERTIFICATE-----Generated at Thu May 16 17:48:54 2024 by rpki-client on console-fra.rpki-client.org