$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft File: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft (raw, json) Hash identifier: mMnkqqJoNK8gFdvhPX12K3smzfB5tijy9eJWeP91W8Y= Subject key identifier: 63:1F:70:A3:43:EB:EB:EB:59:1E:4B:F3:39:E6:3E:12:47:40:ED:DA Authority key identifier: FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27 Certificate issuer: /CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027 Certificate serial: 32F0CA0FAFC76F43DB0C0AC24284DC4C3BD8657B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft Manifest number: C9 Signing time: Tue 02 Jul 2024 09:16:58 +0000 Manifest this update: Tue 02 Jul 2024 09:11:58 +0000 Manifest next update: Wed 03 Jul 2024 12:50:58 +0000 Files and hashes: 1: FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl (hash: TrLAvnySi4hS/dhe5s3W1+ANgJUwXbrEN2264QnaSGM=) 2: 326130663a383563313a3336323a3a2f34382d3438203d3e20323135363334.roa (hash: CctXxGwYEMXB41i0QfQsgQyWu/XR8fA8pXG+KuyL2Fg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 03 Jul 2024 07:00:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:f0:ca:0f:af:c7:6f:43:db:0c:0a:c2:42:84:dc:4c:3b:d8:65:7b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027 Validity Not Before: Jul 2 09:11:58 2024 GMT Not After : Jul 3 12:50:58 2024 GMT Subject: CN=631F70A343EBEBEB591E4BF339E63E124740EDDA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b4:b9:03:d7:ad:82:8e:39:bc:ae:46:96:2e: 44:fc:f7:e8:7f:be:8b:31:ad:0f:ec:33:2f:b4:d8: 0f:59:81:eb:01:a5:17:56:a2:c6:f7:b2:31:59:af: ad:84:11:33:b9:f5:97:e9:7a:bf:61:e6:23:76:85: aa:d1:60:63:6c:4e:c9:86:dc:fb:06:b1:93:da:6c: 3c:00:8b:29:ac:80:66:88:81:49:7e:3e:eb:eb:7a: 20:55:8d:dc:d1:d2:06:5b:2b:da:8b:6c:a5:a0:82: 8b:b6:93:5d:ea:51:5b:a5:3d:36:d9:7b:c9:a7:e9: 60:e0:bd:1a:7f:6c:28:03:37:0b:dd:69:84:44:46: 1c:83:58:08:a9:0e:65:4a:db:a7:2b:38:51:47:0f: dc:52:99:fe:6d:ce:a8:6f:3f:e6:77:ed:e2:66:3b: 87:cb:9d:5c:a2:b0:fc:3f:3e:12:03:56:99:f7:d0: 7f:d9:9a:c4:85:50:80:a5:1c:19:2f:76:92:24:0f: 48:81:5f:5a:f7:49:ea:ac:1e:35:b5:c6:db:95:cd: aa:81:cd:ab:ea:8d:5f:58:ae:56:a9:a6:9f:46:7d: 7c:c1:0a:ed:99:57:88:a1:30:01:dd:7e:40:03:8e: 75:ac:9d:c0:56:ec:9e:82:56:15:3a:29:43:94:cf: 3e:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:1F:70:A3:43:EB:EB:EB:59:1E:4B:F3:39:E6:3E:12:47:40:ED:DA X509v3 Authority Key Identifier: keyid:FB:DF:5C:81:A0:D6:F7:9C:3D:FB:8B:4E:DF:29:66:F3:52:60:60:27 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c974e2af-eaab-4d78-8d95-283144dda962/1/FBDF5C81A0D6F79C3DFB8B4EDF2966F352606027.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:e6:c5:4e:50:a2:61:3d:77:76:06:db:97:04:9a:c0:93:43: 6a:7d:00:79:bd:04:16:aa:0c:57:5b:77:1e:5e:b0:7b:84:33: e9:a6:08:49:9a:b4:15:1d:91:78:0f:a8:d2:e5:71:de:07:e6: ea:4d:9e:6e:b6:c2:0b:76:d0:08:83:72:d9:50:1a:61:4b:e8: a2:c3:1d:9d:b7:bc:29:3d:2b:fc:50:af:b4:e6:b9:39:83:5b: ca:63:f1:3f:9c:5c:b9:ee:47:0d:4f:e8:46:66:5a:97:ee:33: 6e:00:fe:83:16:51:eb:1b:23:be:f3:51:e9:fc:8c:48:b7:1f: 44:a6:41:ad:d6:3a:4b:9e:69:97:e8:33:a0:30:36:32:ce:e8: e8:11:dd:4a:02:b4:69:97:29:29:9a:47:1b:f6:19:28:de:b6: d5:e7:84:b8:68:da:f8:9d:d9:b2:46:f4:67:ae:1f:64:4e:9a: 63:d5:34:01:9c:f2:9c:26:a8:07:27:89:35:84:12:74:67:75: 4b:e1:0a:e8:68:ef:fd:16:5b:7c:7d:53:ea:b7:cd:19:68:8f: e9:e3:77:bf:ed:56:cb:ea:c5:03:a9:b9:9c:57:8b:c1:e5:23: d9:40:38:34:ff:56:82:2f:31:55:30:07:43:a4:e1:44:38:dc: a7:e5:57:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMvDKD6/Hb0PbDArCQoTcTDvYZXswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1 MjYwNjAyNzAeFw0yNDA3MDIwOTExNThaFw0yNDA3MDMxMjUwNThaMDMxMTAvBgNV BAMTKDYzMUY3MEEzNDNFQkVCRUI1OTFFNEJGMzM5RTYzRTEyNDc0MEVEREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDktLkD162Cjjm8rkaWLkT89+h/ vosxrQ/sMy+02A9ZgesBpRdWosb3sjFZr62EETO59Zfper9h5iN2harRYGNsTsmG 3PsGsZPabDwAiymsgGaIgUl+PuvreiBVjdzR0gZbK9qLbKWggou2k13qUVulPTbZ e8mn6WDgvRp/bCgDNwvdaYRERhyDWAipDmVK26crOFFHD9xSmf5tzqhvP+Z37eJm O4fLnVyisPw/PhIDVpn30H/ZmsSFUIClHBkvdpIkD0iBX1r3SeqsHjW1xtuVzaqB zavqjV9Yrlappp9GfXzBCu2ZV4ihMAHdfkADjnWsncBW7J6CVhU6KUOUzz7RAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYx9wo0Pr6+tZHkvzOeY+EkdA7dowHwYDVR0j BBgwFoAU+99cgaDW95w9+4tO3ylm81JgYCcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk3NGUyYWYtZWFhYi00ZDc4LThkOTUtMjgzMTQ0ZGRh OTYyLzEvRkJERjVDODFBMEQ2Rjc5QzNERkI4QjRFREYyOTY2RjM1MjYwNjAyNy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi YjItYTg0ZC01NWRhMjEyOGYxOTYvMC9GQkRGNUM4MUEwRDZGNzlDM0RGQjhCNEVE RjI5NjZGMzUyNjA2MDI3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5NzRlMmFmLWVhYWItNGQ3OC04ZDk1LTI4MzE0NGRkYTk2Mi8xL0ZCREY1Qzgx QTBENkY3OUMzREZCOEI0RURGMjk2NkYzNTI2MDYwMjcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBh5sVO UKJhPXd2BtuXBJrAk0NqfQB5vQQWqgxXW3ceXrB7hDPppghJmrQVHZF4D6jS5XHe B+bqTZ5utsILdtAIg3LZUBphS+iiwx2dt7wpPSv8UK+05rk5g1vKY/E/nFy57kcN T+hGZlqX7jNuAP6DFlHrGyO+81Hp/IxItx9EpkGt1jpLnmmX6DOgMDYyzujoEd1K ArRplykpmkcb9hko3rbV54S4aNr4ndmyRvRnrh9kTppj1TQBnPKcJqgHJ4k1hBJ0 Z3VL4QroaO/9Flt8fVPqt80ZaI/p43e/7VbL6sUDqbmcV4vB5SPZQDg0/1aCLzFV MAdDpOFEONyn5VeR -----END CERTIFICATE-----Generated at Tue Jul 2 11:42:50 2024 by rpki-client on console-fra.rpki-client.org