$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft File: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft (raw, json) Hash identifier: VSm0y68Sp5aX2XaN+LzkO3hw2umkKqPVZX/11PIyMpQ= Subject key identifier: FD:F4:4C:51:5E:E9:64:A0:70:94:76:6B:F3:4F:BD:A1:DC:96:64:F8 Authority key identifier: 8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB Certificate issuer: /CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB Certificate serial: 708E879BFD5D42298608BC1164429D2FD9EDA521 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer Subject info access: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft Manifest number: 75 Signing time: Mon 13 Jan 2025 06:35:34 +0000 Manifest this update: Mon 13 Jan 2025 06:30:34 +0000 Manifest next update: Tue 14 Jan 2025 07:16:34 +0000 Files and hashes: 1: 8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl (hash: 7VINK2NN1XiuNe1h+xg7l/oN/tAluZy3lJnojNTAfvQ=) 2: 326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (hash: 12jNufED+FuODjx9LesNG0DO8etBYCymhmW5u/tLBiw=) Validation: OK Signature path: rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 13 Jan 2025 23:00:11 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:8e:87:9b:fd:5d:42:29:86:08:bc:11:64:42:9d:2f:d9:ed:a5:21 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB Validity Not Before: Jan 13 06:30:34 2025 GMT Not After : Jan 14 07:16:34 2025 GMT Subject: CN=FDF44C515EE964A07094766BF34FBDA1DC9664F8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:a4:d1:71:ff:7d:ce:99:dc:67:df:4e:96:0f: 01:c8:3c:5b:0d:9f:b0:78:d2:7d:5f:e5:cc:c1:cc: 78:32:88:36:0e:20:a3:20:3d:af:2d:d3:22:40:80: e1:6a:8f:6a:1c:a9:ca:4e:01:39:6e:91:af:eb:31: c5:25:b5:44:46:3e:ff:7c:44:46:05:32:c5:61:6e: 49:c5:24:e3:fd:98:bb:ed:c2:74:17:f1:94:56:a8: 5b:15:b8:86:7a:98:f9:d9:9c:83:48:6d:38:96:a7: 43:5b:60:75:19:11:16:33:dc:1e:3b:10:e0:15:c0: e2:3f:71:f2:55:ad:e2:fb:b8:11:7d:95:53:5e:ed: 0d:97:71:ec:aa:d6:9c:b4:c2:7b:bd:8d:f2:a0:40: f1:c3:c4:69:eb:43:81:be:84:3a:8b:e1:df:ad:49: 6a:56:af:d5:0b:d2:f4:ca:d7:11:3c:6f:cf:d1:4f: d8:55:5e:df:fe:19:c7:7f:da:ba:b2:75:34:7c:3d: 94:a1:26:14:62:44:7c:1f:52:19:e4:c1:04:50:a8: fd:4f:3e:7e:98:48:63:9b:7d:90:94:e7:e7:a2:e0: 1d:ad:72:dd:e4:16:0c:f3:ee:49:15:56:b3:6e:b6: 7e:59:fe:36:b9:2b:3f:6f:d3:54:d9:98:95:8b:19: 6b:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FD:F4:4C:51:5E:E9:64:A0:70:94:76:6B:F3:4F:BD:A1:DC:96:64:F8 X509v3 Authority Key Identifier: keyid:8C:B8:9C:F3:82:1B:2C:25:31:E4:CA:32:9A:BA:51:14:B2:C9:6E:DB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192bacb7abb7a28/2/8CB89CF3821B2C2531E4CA329ABA5114B2C96EDB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:07:c8:32:b9:3a:16:3d:bf:d8:b7:cf:10:2c:f7:9d:c8:d3: c8:1b:0b:d9:c1:ee:62:b0:ba:4c:96:30:19:f1:5b:74:b2:56: 31:d0:3b:b9:53:d0:64:83:af:7a:72:b9:80:50:fa:59:f8:37: ea:81:32:99:d9:89:b7:88:91:79:1c:f9:22:ea:04:ea:53:b3: 9d:c0:79:02:b5:47:0e:99:ce:0a:43:13:3e:bc:39:bf:6d:fd: d2:56:94:fc:e9:ee:c0:59:6e:ff:ba:d6:0a:03:aa:84:59:4e: 81:6b:9b:db:56:ca:3f:ee:1a:80:30:f3:85:b5:2d:8e:fa:6f: 62:a9:06:6c:86:62:52:a0:f1:9b:f4:cd:0a:1b:c6:e0:ff:75: bd:af:51:cd:2f:b9:db:60:29:a6:b3:d7:ca:ec:f5:00:56:6f: 58:cb:78:67:da:35:7a:e7:21:33:32:9c:3c:ad:29:e8:3c:79: 41:23:18:21:fc:bd:e3:f7:1c:1f:ab:09:a9:e9:1a:ae:b4:70: 6c:da:6e:2b:7e:3d:c3:a5:8b:75:20:03:77:56:91:4a:4a:21: 18:21:0f:63:01:c8:32:8e:a4:a0:c5:2d:87:8a:ef:b9:a9:7e: 83:1d:93:3e:f3:a9:db:39:bd:ad:16:9c:0e:43:67:07:0b:cc: a4:cb:4d:49 -----BEGIN CERTIFICATE----- MIIFXTCCBEWgAwIBAgIUcI6Hm/1dQimGCLwRZEKdL9ntpSEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOENCODlDRjM4MjFCMkMyNTMxRTRDQTMyOUFCQTUxMTRC MkM5NkVEQjAeFw0yNTAxMTMwNjMwMzRaFw0yNTAxMTQwNzE2MzRaMDMxMTAvBgNV BAMTKEZERjQ0QzUxNUVFOTY0QTA3MDk0NzY2QkYzNEZCREExREM5NjY0RjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtpNFx/33Omdxn306WDwHIPFsN n7B40n1f5czBzHgyiDYOIKMgPa8t0yJAgOFqj2ocqcpOATluka/rMcUltURGPv98 REYFMsVhbknFJOP9mLvtwnQX8ZRWqFsVuIZ6mPnZnINIbTiWp0NbYHUZERYz3B47 EOAVwOI/cfJVreL7uBF9lVNe7Q2Xceyq1py0wnu9jfKgQPHDxGnrQ4G+hDqL4d+t SWpWr9UL0vTK1xE8b8/RT9hVXt/+Gcd/2rqydTR8PZShJhRiRHwfUhnkwQRQqP1P Pn6YSGObfZCU5+ei4B2tct3kFgzz7kkVVrNutn5Z/ja5Kz9v01TZmJWLGWvTAgMB AAGjggJnMIICYzAdBgNVHQ4EFgQU/fRMUV7pZKBwlHZr80+9odyWZPgwHwYDVR0j BBgwFoAUjLic84IbLCUx5MoymrpRFLLJbtswDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv cnkvOGE4NDhhZGU5MWZiNDNiNDAxOTJiYWNiN2FiYjdhMjgvMi84Q0I4OUNGMzgy MUIyQzI1MzFFNENBMzI5QUJBNTExNEIyQzk2RURCLmNybDCBngYIKwYBBQUHAQEE gZEwgY4wgYsGCCsGAQUFBzAChn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2MxLTI3NjU0M2Ey NWM3ZC8xLzhDQjg5Q0YzODIxQjJDMjUzMUU0Q0EzMjlBQkE1MTE0QjJDOTZFREIu Y2VyMIGTBggrBgEFBQcBCwSBhjCBgzCBgAYIKwYBBQUHMAuGdHJzeW5jOi8vcnBr aS1ycHMuYXJpbi5uZXQvcmVwb3NpdG9yeS84YTg0OGFkZTkxZmI0M2I0MDE5MmJh Y2I3YWJiN2EyOC8yLzhDQjg5Q0YzODIxQjJDMjUzMUU0Q0EzMjlBQkE1MTE0QjJD OTZFREIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcB Af8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0G CSqGSIb3DQEBCwUAA4IBAQAzB8gyuToWPb/Yt88QLPedyNPIGwvZwe5isLpMljAZ 8Vt0slYx0Du5U9Bkg696crmAUPpZ+DfqgTKZ2Ym3iJF5HPki6gTqU7OdwHkCtUcO mc4KQxM+vDm/bf3SVpT86e7AWW7/utYKA6qEWU6Ba5vbVso/7hqAMPOFtS2O+m9i qQZshmJSoPGb9M0KG8bg/3W9r1HNL7nbYCmms9fK7PUAVm9Yy3hn2jV65yEzMpw8 rSnoPHlBIxgh/L3j9xwfqwmp6RqutHBs2m4rfj3DpYt1IAN3VpFKSiEYIQ9jAcgy jqSgxS2Hiu+5qX6DHZM+86nbOb2tFpwOQ2cHC8yky01J -----END CERTIFICATE-----Generated at Mon Jan 13 07:48:53 2025 by rpki-client on console-fra.rpki-client.org