$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft File: 547BC28C92A229A5AC78C0DE287D89CE37726409.mft (raw, json) Hash identifier: GzI0mgcsyfRKzUnb9n59r+MhaUcgReJ7B3Lg9LS2AEk= Subject key identifier: E2:E6:E2:76:18:46:4D:2D:42:CF:94:52:27:03:3E:A3:26:36:A2:40 Authority key identifier: 54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 Certificate issuer: /CN=547bc28c92a229a5ac78c0de287d89ce37726409 Certificate serial: D2B1E8CA6C5077C7B9EB3D1C4B6D083B319031 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft Manifest number: 3A Signing time: Sat 28 Sep 2024 12:25:19 +0000 Manifest this update: Sat 28 Sep 2024 12:20:19 +0000 Manifest next update: Sun 29 Sep 2024 15:29:19 +0000 Files and hashes: 1: AS204931.asa (hash: mjmEdZgmj+BXkWpIt5aZmdkAsVD4VtcK2Ogxa+QnMrQ=) 2: 323030313a3637383a6362303a3a2f34382d3438203d3e203630343331.roa (hash: qPQeu/7M50ShpMjQ7Dkik+VbeEdUIQ58WUoPL4CU+wI=) 3: 323030313a3637383a6362303a3a2f34382d3438203d3e20323034393331.roa (hash: nR48aVSXVSZvCd3jlcODIB7um6yNk/WjtYd9EtNwPFs=) 4: 547BC28C92A229A5AC78C0DE287D89CE37726409.crl (hash: G2xLnkdzfKG0Kr0wId3sM5gLyAd2Zvlq5O785dnvFN8=) 5: AS60431.asa (hash: 1yjN11917GW0TSCe8YRjY6h1qeAEgaExsIF6mAie8ns=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: d2:b1:e8:ca:6c:50:77:c7:b9:eb:3d:1c:4b:6d:08:3b:31:90:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=547bc28c92a229a5ac78c0de287d89ce37726409 Validity Not Before: Sep 28 12:20:19 2024 GMT Not After : Sep 29 15:29:19 2024 GMT Subject: CN=E2E6E27618464D2D42CF945227033EA32636A240 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:97:9e:76:57:f5:78:46:2e:c3:37:00:e4:b2: 92:a9:bb:9a:a9:c6:15:4c:34:c6:c7:37:88:9f:8e: 2d:ee:32:cc:ca:a6:ab:36:66:c5:a1:fc:42:32:b3: 88:d2:d5:ed:fb:ef:2c:db:3d:82:26:8e:d4:27:5d: 54:27:16:aa:6e:36:9b:f7:25:74:05:44:75:53:3d: bc:03:bd:16:7e:6d:a4:27:9b:cb:9d:f7:49:59:59: df:5a:ab:9b:b2:b2:c8:2f:6c:22:3b:bd:cd:04:bb: c7:de:33:11:04:c1:2f:c1:e8:a2:f2:7a:7d:00:d2: 17:97:81:e9:9b:f1:95:50:be:5c:2b:5c:9f:ef:69: 61:0e:ae:9a:62:ed:9d:a8:81:ae:e6:94:f5:0f:17: 0d:e9:50:c3:c9:e6:7e:46:97:88:6f:7e:7c:29:14: 63:71:1b:b5:a1:0a:a0:e7:36:43:fb:41:c6:d8:4a: 55:29:59:0a:2c:87:51:7e:6d:c5:46:50:26:5e:d4: 4e:d3:7d:f4:67:45:83:71:2c:64:c1:16:4c:54:2a: ea:a8:ae:3e:52:8b:6f:30:e4:26:ac:09:a2:44:67: 10:c1:a1:88:b9:09:7b:cd:2b:c7:93:b5:5e:ae:42: 3b:75:7b:0c:c1:bd:e3:91:b6:f5:e8:21:8e:62:92: 1e:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E2:E6:E2:76:18:46:4D:2D:42:CF:94:52:27:03:3E:A3:26:36:A2:40 X509v3 Authority Key Identifier: keyid:54:7B:C2:8C:92:A2:29:A5:AC:78:C0:DE:28:7D:89:CE:37:72:64:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHvCjJKiKaWseMDeKH2JzjdyZAk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/df49d7f7-bb3f-4187-be29-59ef2d89039a/0/547BC28C92A229A5AC78C0DE287D89CE37726409.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 99:27:bd:10:20:ac:b8:52:d0:34:d1:86:43:62:95:28:cf:ab: c6:d4:09:a2:d3:7c:ea:08:fb:9c:5a:87:5a:2f:4a:c4:c0:5c: b5:f2:e9:67:2e:d5:08:23:8c:88:93:9c:7d:51:13:26:0a:1d: f2:18:0e:20:f3:b5:06:5c:8e:b1:6e:d8:68:e9:f1:bc:90:25: 90:35:64:3b:96:b1:42:74:e5:f6:af:b7:9b:37:02:e2:ed:43: 0c:5c:76:50:7f:95:99:25:96:86:55:51:9f:e2:40:f3:65:bd: dd:9a:d2:2d:bb:7d:e8:79:61:bc:1c:04:64:fc:aa:a7:2a:b6: b3:74:7e:79:3f:37:f9:bb:8a:e6:de:e6:2c:34:98:2c:4b:bb: b1:ab:e8:5c:d9:03:22:88:1c:a8:b6:f2:94:2f:ee:f6:21:f7: ff:13:6a:5c:fb:47:9f:90:d7:2c:69:e7:a4:c6:52:dc:95:8a: 76:38:23:da:c1:02:ef:50:cf:ea:d4:40:53:7b:2e:18:28:02: 45:fd:c3:73:86:ec:1f:1e:a2:2a:8c:08:8d:36:5c:8c:f2:5f: 61:7a:48:e9:f8:c9:0d:1f:1d:a7:6d:9f:6f:71:8d:c5:d8:15: 9f:10:3c:05:dd:e5:23:96:48:d7:9e:92:9e:bd:47:eb:fd:9d: 9f:87:00:89 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUANKx6MpsUHfHues9HEttCDsxkDEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTQ3YmMyOGM5MmEyMjlhNWFjNzhjMGRlMjg3ZDg5Y2Uz NzcyNjQwOTAeFw0yNDA5MjgxMjIwMTlaFw0yNDA5MjkxNTI5MTlaMDMxMTAvBgNV BAMTKEUyRTZFMjc2MTg0NjREMkQ0MkNGOTQ1MjI3MDMzRUEzMjYzNkEyNDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDal552V/V4Ri7DNwDkspKpu5qp xhVMNMbHN4ifji3uMszKpqs2ZsWh/EIys4jS1e377yzbPYImjtQnXVQnFqpuNpv3 JXQFRHVTPbwDvRZ+baQnm8ud90lZWd9aq5uyssgvbCI7vc0Eu8feMxEEwS/B6KLy en0A0heXgemb8ZVQvlwrXJ/vaWEOrppi7Z2oga7mlPUPFw3pUMPJ5n5Gl4hvfnwp FGNxG7WhCqDnNkP7QcbYSlUpWQosh1F+bcVGUCZe1E7TffRnRYNxLGTBFkxUKuqo rj5Si28w5CasCaJEZxDBoYi5CXvNK8eTtV6uQjt1ewzBveORtvXoIY5ikh7zAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU4ubidhhGTS1Cz5RSJwM+oyY2okAwHwYDVR0j BBgwFoAUVHvCjJKiKaWseMDeKH2JzjdyZAkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGY0OWQ3ZjctYmIzZi00MTg3LWJlMjktNTllZjJkODkw MzlhLzAvNTQ3QkMyOEM5MkEyMjlBNUFDNzhDMERFMjg3RDg5Q0UzNzcyNjQwOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1ZIdkNqSktpS2FXc2VNRGVLSDJKempk eVpBay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZjQ5ZDdmNy1i YjNmLTQxODctYmUyOS01OWVmMmQ4OTAzOWEvMC81NDdCQzI4QzkyQTIyOUE1QUM3 OEMwREUyODdEODlDRTM3NzI2NDA5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSe9ECCsuFLQNNGGQ2KV KM+rxtQJotN86gj7nFqHWi9KxMBctfLpZy7VCCOMiJOcfVETJgod8hgOIPO1BlyO sW7YaOnxvJAlkDVkO5axQnTl9q+3mzcC4u1DDFx2UH+VmSWWhlVRn+JA82W93ZrS Lbt96HlhvBwEZPyqpyq2s3R+eT83+buK5t7mLDSYLEu7savoXNkDIogcqLbylC/u 9iH3/xNqXPtHn5DXLGnnpMZS3JWKdjgj2sEC71DP6tRAU3suGCgCRf3Dc4bsHx6i KowIjTZcjPJfYXpI6fjJDR8dp22fb3GNxdgVnxA8Bd3lI5ZI156Snr1H6/2dn4cA iQ== -----END CERTIFICATE-----Generated at Sat Sep 28 13:04:58 2024 by rpki-client on console-fra.rpki-client.org