$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: VSIQNh+hvL3zvtXTPjuzNTO+GEpaE/gW2jqTnuH0QNI= Subject key identifier: 72:97:6D:C5:83:B5:1D:45:EF:5B:B4:B3:5C:0C:2A:AB:46:4A:3C:CE Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 2345BD820B60F58274AE87AF84CC0C0F9918D0CF Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 0231 Signing time: Thu 21 Nov 2024 19:28:26 +0000 Manifest this update: Thu 21 Nov 2024 19:23:26 +0000 Manifest next update: Fri 22 Nov 2024 22:05:26 +0000 Files and hashes: 1: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: iJpluoF3HoeICJtyNSVX2W7UjOGIKihBFoLXBu2iRVU=) 2: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: B12DmFls+H0qkH0yc3239fgwixjYfGQa/u7XVxErqzQ=) 3: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: tBCbEpr+oJ1RFgpk9g+qD3+yfAoxP+nrSqRPHhwlJ+w=) 4: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: 2Kypkgau7WE1qh3MH/LM82A+pj4p83jIhHnYd1jey7c=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: rgKv78KNBaeBobwea7KnBLuciKXlgVnivSyvettjEmc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:45:bd:82:0b:60:f5:82:74:ae:87:af:84:cc:0c:0f:99:18:d0:cf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: Nov 21 19:23:26 2024 GMT Not After : Nov 22 22:05:26 2024 GMT Subject: CN=72976DC583B51D45EF5BB4B35C0C2AAB464A3CCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:5f:47:00:a1:15:65:88:1f:ba:a9:e5:9c:6e: 2b:30:a1:f3:63:c9:bc:5a:db:39:6e:79:64:d8:47: 78:06:8b:8d:60:ed:b4:26:9c:f7:b4:86:b9:c8:79: c3:ea:ec:86:89:22:05:ce:8a:34:13:5b:4e:56:8a: 82:b3:56:2c:cb:55:68:4a:21:e6:7e:18:37:8a:4c: e4:95:c6:83:1b:47:e9:35:72:9e:b5:e2:53:cd:01: 2e:a5:a7:e4:87:7b:08:98:45:92:7d:c1:3d:70:1f: d4:03:ed:28:79:24:17:2f:6e:a7:70:37:92:96:46: 16:38:68:c6:a2:5c:21:f7:ec:bb:80:68:96:d9:af: fd:72:16:5b:4b:e9:24:31:87:96:d9:7d:77:a1:87: 20:6e:eb:25:00:d6:9c:d1:15:cb:ff:33:11:b7:78: 61:33:ed:3f:2e:6b:83:51:f5:bf:0e:81:15:c6:bd: a2:f8:d5:35:34:1d:f2:21:53:d7:fe:28:7a:59:14: 4a:ea:ff:37:3b:56:ef:09:7a:6d:b1:ca:3b:84:c2: 89:5b:bf:10:26:ac:c9:fa:56:79:c5:16:04:15:7e: 96:50:ac:5f:a4:12:b2:10:02:c6:fb:35:8e:80:b2: 3d:fa:3e:af:c0:4b:22:70:6b:71:33:57:5a:24:b7: 01:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 72:97:6D:C5:83:B5:1D:45:EF:5B:B4:B3:5C:0C:2A:AB:46:4A:3C:CE X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ad:a5:63:57:d6:d0:a7:b0:bd:31:8f:aa:e2:96:55:f2:23:d4: 95:db:b9:5b:d8:f2:77:74:49:6c:cb:fb:94:20:14:35:b3:ab: b3:01:ca:aa:0e:f4:ce:59:48:e4:2a:33:ca:b4:d3:24:13:58: ed:4c:a4:69:5d:9e:dd:09:e5:88:da:66:e4:a5:84:36:4b:09: ff:bc:8e:84:0e:cf:55:d2:cb:a7:ef:de:ff:ef:95:8c:67:20: cb:9d:95:da:66:a4:3c:ee:28:21:d2:14:5e:6f:5d:37:88:fd: 91:25:9a:25:86:a6:d3:c9:4a:ae:3b:63:0a:f9:d5:3b:91:9b: 65:e2:0d:d8:a0:c2:cf:48:4a:02:fc:34:6e:53:0f:13:f8:e6: 07:42:85:f3:98:37:52:db:f8:ec:04:79:68:06:eb:29:de:d1: f7:b5:c1:29:a5:d8:ec:18:41:5d:c9:98:f5:f2:29:95:c1:6b: 36:fb:aa:73:24:98:13:d9:24:c9:d7:32:36:1e:03:f3:c8:86: a6:9b:17:5b:6d:7d:4e:7f:d8:13:cd:4f:a7:c8:4d:2e:d3:48: 05:6f:19:dc:56:50:a0:d2:21:a2:6c:5a:50:9e:c3:67:28:2f: 76:7f:66:53:7e:d9:bd:7a:d2:5f:91:b3:ce:ca:ae:54:7b:63: 44:cd:ea:53 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUI0W9ggtg9YJ0roevhMwMD5kY0M8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNDExMjExOTIzMjZaFw0yNDExMjIyMjA1MjZaMDMxMTAvBgNV BAMTKDcyOTc2REM1ODNCNTFENDVFRjVCQjRCMzVDMEMyQUFCNDY0QTNDQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpX0cAoRVliB+6qeWcbiswofNj ybxa2zlueWTYR3gGi41g7bQmnPe0hrnIecPq7IaJIgXOijQTW05WioKzVizLVWhK IeZ+GDeKTOSVxoMbR+k1cp614lPNAS6lp+SHewiYRZJ9wT1wH9QD7Sh5JBcvbqdw N5KWRhY4aMaiXCH37LuAaJbZr/1yFltL6SQxh5bZfXehhyBu6yUA1pzRFcv/MxG3 eGEz7T8ua4NR9b8OgRXGvaL41TU0HfIhU9f+KHpZFErq/zc7Vu8Jem2xyjuEwolb vxAmrMn6VnnFFgQVfpZQrF+kErIQAsb7NY6Asj36Pq/ASyJwa3EzV1oktwFlAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUcpdtxYO1HUXvW7SzXAwqq0ZKPM4wHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAK2lY1fW0KewvTGPquKWVfIj1JXbuVvY8nd0SWzL+5QgFDWzq7MByqoO 9M5ZSOQqM8q00yQTWO1MpGldnt0J5YjaZuSlhDZLCf+8joQOz1XSy6fv3v/vlYxn IMudldpmpDzuKCHSFF5vXTeI/ZElmiWGptPJSq47Ywr51TuRm2XiDdigws9ISgL8 NG5TDxP45gdChfOYN1Lb+OwEeWgG6yne0fe1wSml2OwYQV3JmPXyKZXBazb7qnMk mBPZJMnXMjYeA/PIhqabF1ttfU5/2BPNT6fITS7TSAVvGdxWUKDSIaJsWlCew2co L3Z/ZlN+2b160l+Rs87KrlR7Y0TN6lM= -----END CERTIFICATE-----Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org