$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft File: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft (raw, json) Hash identifier: r/tH9gyOzJovfdD9zpg3WGvp3FEElidiE6Xw6HaXjz8= Subject key identifier: 85:04:4F:E6:1E:13:5D:D1:5F:D6:75:57:95:ED:79:0F:EE:19:4D:D6 Authority key identifier: 53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 Certificate issuer: /CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Certificate serial: 59729542431F8D5CC64C89CBA69D3DE99A78469F Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft Manifest number: 0158 Signing time: Sun 02 Jun 2024 14:08:47 +0000 Manifest this update: Sun 02 Jun 2024 14:03:47 +0000 Manifest next update: Mon 03 Jun 2024 14:44:47 +0000 Files and hashes: 1: 326130353a646663313a393530303a3a2f34302d3438203d3e20323030313739.roa (hash: uHjkLxfLryVxk+EGLXhyq0SFDKEzQBHb9mjNodbPHdI=) 2: 53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl (hash: VPIMqFe1h3brR4UCxRoUTPVtDXT8+Xa6dm4vJf2wyYQ=) 3: 326130613a363034303a353430303a3a2f34302d3438203d3e20323032323031.roa (hash: Ro3pbI2p0ZDJtjLOMHF4khB1v5vC9zs7FMMP7FfVK7g=) 4: 326130613a363034303a343930303a3a2f34302d3438203d3e20323030313739.roa (hash: 2zW7FUfufzUtSfzDyqzozswKwOz7JYWLwNZyMHG9MN4=) 5: 326130613a363034303a353430303a3a2f34302d3438203d3e20323030313739.roa (hash: uCQ/gX5NRu/NuIkhTSnrbMad4/mMH2j3YDNXC35QHP0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 03 Jun 2024 13:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 59:72:95:42:43:1f:8d:5c:c6:4c:89:cb:a6:9d:3d:e9:9a:78:46:9f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=53BAB8A9F833789B353D2ACC15CE37270E3D60E3 Validity Not Before: Jun 2 14:03:47 2024 GMT Not After : Jun 3 14:44:47 2024 GMT Subject: CN=85044FE61E135DD15FD6755795ED790FEE194DD6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:8d:75:8a:64:19:8d:2b:59:63:f3:10:6f:1c: 66:f4:10:55:63:75:cf:2d:04:d2:e1:2c:f6:8d:c2: 94:63:17:5c:38:d3:53:25:93:06:f6:27:69:9a:6e: d7:02:e0:ca:86:21:e1:87:9a:41:b7:2e:7a:74:9a: 10:dc:73:7b:04:bb:87:66:9a:36:76:1f:6b:86:70: 44:f1:71:1e:dd:0a:1c:26:ad:d2:ac:aa:e3:42:c2: 80:a4:f9:4a:d8:a9:71:94:36:2f:80:de:c0:e3:30: b7:fd:ae:05:58:46:00:0e:ee:ef:89:16:72:d9:99: c5:62:d1:ca:d2:d3:2c:8d:f0:76:3d:2b:8c:25:a8: 9b:e4:47:1b:f6:02:21:32:21:7a:9d:0f:aa:fd:e8: dc:d7:6b:46:f9:e5:c2:51:88:c2:15:f5:07:b9:8a: bd:35:df:b4:fd:a6:6c:c0:3f:68:98:da:b0:3f:18: f6:a5:ee:d9:b7:5f:7a:08:1b:97:b7:48:5d:f7:f9: 4e:2e:a7:c1:2e:7b:c8:dd:b5:cd:9c:6c:83:b8:4c: 47:82:41:5b:c0:40:84:34:a8:a4:66:30:94:3c:31: b0:c6:21:69:2c:cb:53:a3:cd:af:d1:93:ea:97:32: 12:2c:d1:5e:58:75:9e:18:95:ed:2c:5e:f4:ed:b5: 9e:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:04:4F:E6:1E:13:5D:D1:5F:D6:75:57:95:ED:79:0F:EE:19:4D:D6 X509v3 Authority Key Identifier: keyid:53:BA:B8:A9:F8:33:78:9B:35:3D:2A:CC:15:CE:37:27:0E:3D:60:E3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/01791a64-a36a-4eb9-a6ff-e1c4078a7ca3/0/53BAB8A9F833789B353D2ACC15CE37270E3D60E3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:49:8c:2e:01:59:ea:ef:43:fa:f7:35:c1:bd:01:e6:ca:b6: 36:2a:da:da:db:2d:9f:dc:17:de:e1:74:d4:4d:d2:e9:2d:a2: 70:9f:31:a7:c4:a9:f3:35:28:5d:47:0c:5f:8d:68:68:c4:e9: c5:6e:9b:3d:16:c7:55:9f:29:ad:3a:8a:0b:c0:7c:dd:d6:e7: bd:58:7d:e0:e7:51:e2:85:f3:0c:33:cf:d7:6b:ab:bd:42:62: 55:f9:50:f2:98:be:8e:92:8d:e3:0a:d5:65:70:6b:5f:49:62: b6:f2:c5:79:1a:85:32:cc:e1:ac:ca:0e:6e:e6:0b:06:93:ec: d1:f3:3e:a9:f9:66:2e:93:f1:e6:9f:16:2c:9c:0d:18:f6:5f: ca:e6:1e:59:30:2b:23:06:50:9f:31:28:42:0b:5e:72:27:68: 48:a4:09:60:3a:61:31:a5:26:b7:92:fd:92:34:7c:ff:3f:cb: b0:7e:0a:a3:90:b4:c3:db:dc:37:1a:ec:c0:df:ff:7a:f3:94: b7:39:58:6f:25:d7:50:dd:af:76:c3:88:70:1f:19:08:ff:a9: 5c:27:6b:27:95:5d:9e:54:67:27:c6:c1:09:14:ab:89:12:c4: 1a:2f:a9:fe:e9:cb:2d:e7:da:c4:48:33:37:c4:ce:72:ea:07: 3b:1c:74:73 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUWXKVQkMfjVzGTInLpp096Zp4Rp8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3Mjcw RTNENjBFMzAeFw0yNDA2MDIxNDAzNDdaFw0yNDA2MDMxNDQ0NDdaMDMxMTAvBgNV BAMTKDg1MDQ0RkU2MUUxMzVERDE1RkQ2NzU1Nzk1RUQ3OTBGRUUxOTRERDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6jXWKZBmNK1lj8xBvHGb0EFVj dc8tBNLhLPaNwpRjF1w401Mlkwb2J2mabtcC4MqGIeGHmkG3Lnp0mhDcc3sEu4dm mjZ2H2uGcETxcR7dChwmrdKsquNCwoCk+UrYqXGUNi+A3sDjMLf9rgVYRgAO7u+J FnLZmcVi0crS0yyN8HY9K4wlqJvkRxv2AiEyIXqdD6r96NzXa0b55cJRiMIV9Qe5 ir0137T9pmzAP2iY2rA/GPal7tm3X3oIG5e3SF33+U4up8Eue8jdtc2cbIO4TEeC QVvAQIQ0qKRmMJQ8MbDGIWksy1Ojza/Rk+qXMhIs0V5YdZ4Yle0sXvTttZ6vAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUhQRP5h4TXdFf1nVXle15D+4ZTdYwHwYDVR0j BBgwFoAUU7q4qfgzeJs1PSrMFc43Jw49YOMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3 Y2EzLzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzUzQkFCOEE5RjgzMzc4 OUIzNTNEMkFDQzE1Q0UzNzI3MEUzRDYwRTMuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMDE3OTFhNjQtYTM2YS00ZWI5LWE2ZmYtZTFjNDA3OGE3Y2Ez LzAvNTNCQUI4QTlGODMzNzg5QjM1M0QyQUNDMTVDRTM3MjcwRTNENjBFMy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAJVJjC4BWervQ/r3NcG9AebKtjYq2trbLZ/cF97hdNRN0uktonCfMafE qfM1KF1HDF+NaGjE6cVumz0Wx1WfKa06igvAfN3W571YfeDnUeKF8wwzz9drq71C YlX5UPKYvo6SjeMK1WVwa19JYrbyxXkahTLM4azKDm7mCwaT7NHzPqn5Zi6T8eaf FiycDRj2X8rmHlkwKyMGUJ8xKEILXnInaEikCWA6YTGlJreS/ZI0fP8/y7B+CqOQ tMPb3Dca7MDf/3rzlLc5WG8l11Ddr3bDiHAfGQj/qVwnayeVXZ5UZyfGwQkUq4kS xBovqf7pyy3n2sRIMzfEznLqBzscdHM= -----END CERTIFICATE-----Generated at Sun Jun 2 19:59:22 2024 by rpki-client on console-ams.rpki-client.org