$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft File: 81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft (raw, json) Hash identifier: X8wPgo78dBldAD1sGdfEccZdX4o4mXUNXZ+oRU4HFeg= Subject key identifier: 92:EE:F5:B8:FF:57:22:B6:5A:E9:A9:A3:EC:8C:B7:26:A8:D8:24:57 Authority key identifier: 81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F Certificate issuer: /CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F Certificate serial: 18A2526E90E6564B439DC62943EB750ECB210836 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft Manifest number: AB Signing time: Thu 21 Nov 2024 15:05:23 +0000 Manifest this update: Thu 21 Nov 2024 15:00:23 +0000 Manifest next update: Fri 22 Nov 2024 18:23:23 +0000 Files and hashes: 1: 326131343a373538313a366665303a3a2f34342d3438203d3e20323134383431.roa (hash: U0rfiUq9YDTkYI4V420VpJi+Erpt4ClH+3f2ybSKabQ=) 2: 81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl (hash: K0aLGdCeITCJWIyMWHjU3G2j65QG8d4O9gHufcxKCR4=) 3: 326131343a373538313a366664303a3a2f34342d3634203d3e20323135393334.roa (hash: W0J6pGpY7USt3uOGn+2U/+zzKb37zNSvY+tzxs3qCuc=) 4: 326131343a373538313a363030303a3a2f33362d3438203d3e20323034383434.roa (hash: BgYqorJS3JMSFw9edwIe+WRFHvfHgPoI33vzwRUQxGM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:a2:52:6e:90:e6:56:4b:43:9d:c6:29:43:eb:75:0e:cb:21:08:36 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=81E218874C7149A0F1BC56CDBEC9F94BF59C204F Validity Not Before: Nov 21 15:00:23 2024 GMT Not After : Nov 22 18:23:23 2024 GMT Subject: CN=92EEF5B8FF5722B65AE9A9A3EC8CB726A8D82457 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:b0:d0:c6:e2:a9:9f:4d:65:0f:69:cb:74:12: 45:5f:3f:bd:d7:bf:77:14:16:ea:6a:44:d0:eb:74: c4:a3:00:03:85:06:b3:46:e7:8d:66:f1:67:0d:17: 7e:cc:6c:30:b1:a0:3c:1c:95:6f:13:92:7d:41:40: f4:2f:27:97:a9:d4:be:16:03:c4:a3:1f:73:09:14: 6d:ac:97:f8:db:46:ce:80:7c:d3:45:04:9e:94:21: a2:84:64:bd:bc:24:95:f8:11:20:b1:f6:49:b8:af: f7:ca:a8:8b:46:cb:32:14:27:0f:ed:e2:d5:5c:09: 8a:0b:66:7d:6d:8f:65:bb:2b:0b:ee:dd:7b:56:01: 13:3d:b1:53:14:bd:a1:e8:67:16:f4:05:a4:67:56: d4:37:8c:71:46:80:1d:e4:89:c4:fb:d5:92:98:3e: 14:53:43:aa:4e:8e:94:f1:06:5e:d4:a0:1e:2e:9e: f8:1d:9f:57:35:86:1d:fc:e6:b6:e5:df:a5:b8:f6: cd:ed:c9:1c:a0:2b:d8:2d:cd:c5:80:c9:54:84:b7: 4b:6d:b9:49:c6:37:3e:c9:03:a3:fd:da:9c:0d:60: fe:15:50:86:6a:a2:56:d3:40:5a:44:2c:a0:dc:dc: 96:cd:2e:d8:ad:a7:c4:5c:69:33:1c:c5:a9:35:ca: 03:67 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 92:EE:F5:B8:FF:57:22:B6:5A:E9:A9:A3:EC:8C:B7:26:A8:D8:24:57 X509v3 Authority Key Identifier: keyid:81:E2:18:87:4C:71:49:A0:F1:BC:56:CD:BE:C9:F9:4B:F5:9C:20:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/09f71023-9049-4ecb-a8a5-7f08d8ead676/1/81E218874C7149A0F1BC56CDBEC9F94BF59C204F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8b:48:7a:36:58:9a:2a:a1:41:4b:54:30:e2:40:88:84:f5:7e: 91:40:70:0f:de:04:58:23:4c:bb:96:87:d1:c8:a1:bd:3d:18: b4:ec:b7:30:15:78:49:c5:28:e9:5c:ef:e4:bc:fe:93:d1:49: f7:50:76:9e:d5:b6:99:14:db:19:f8:32:9c:f8:39:78:22:ab: 90:2b:b0:94:d5:32:dc:e3:ae:c3:ee:37:af:db:d1:c0:2a:e9: c5:72:43:95:2f:69:ce:2b:0c:25:97:2e:01:7b:14:2f:51:6f: c0:79:7b:46:8a:98:a4:7f:4c:14:9d:b6:0a:34:ca:b6:44:be: 4c:13:2a:83:c0:5e:fc:05:2f:35:5e:de:2a:cc:4e:a0:2a:1a: 99:d6:c1:d0:c5:a0:98:c5:30:79:59:ab:bc:62:05:35:8b:b7: f8:d1:37:c4:1f:14:ee:59:83:fb:22:38:83:2c:ea:b0:2c:8c: d0:aa:10:0c:55:f9:f0:2b:92:25:49:a2:66:ce:ed:fc:9f:02: 63:56:26:f0:0d:b5:22:9d:e0:ee:d6:a6:d7:80:b9:d7:c2:4d: 02:61:34:91:bd:d7:5b:64:0b:28:52:fb:5b:ab:c2:e8:ed:86: d7:06:6c:a7:89:40:7f:26:13:c2:30:a0:e6:e4:db:4d:7f:56: 57:12:f3:e6 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGKJSbpDmVktDncYpQ+t1DsshCDYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODFFMjE4ODc0QzcxNDlBMEYxQkM1NkNEQkVDOUY5NEJG NTlDMjA0RjAeFw0yNDExMjExNTAwMjNaFw0yNDExMjIxODIzMjNaMDMxMTAvBgNV BAMTKDkyRUVGNUI4RkY1NzIyQjY1QUU5QTlBM0VDOENCNzI2QThEODI0NTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCesNDG4qmfTWUPact0EkVfP73X v3cUFupqRNDrdMSjAAOFBrNG541m8WcNF37MbDCxoDwclW8Tkn1BQPQvJ5ep1L4W A8SjH3MJFG2sl/jbRs6AfNNFBJ6UIaKEZL28JJX4ESCx9km4r/fKqItGyzIUJw/t 4tVcCYoLZn1tj2W7Kwvu3XtWARM9sVMUvaHoZxb0BaRnVtQ3jHFGgB3kicT71ZKY PhRTQ6pOjpTxBl7UoB4unvgdn1c1hh385rbl36W49s3tyRygK9gtzcWAyVSEt0tt uUnGNz7JA6P92pwNYP4VUIZqolbTQFpELKDc3JbNLtitp8RcaTMcxak1ygNnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUku71uP9XIrZa6amj7Iy3JqjYJFcwHwYDVR0j BBgwFoAUgeIYh0xxSaDxvFbNvsn5S/WcIE8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMDlmNzEwMjMtOTA0OS00ZWNiLWE4YTUtN2YwOGQ4ZWFk Njc2LzEvODFFMjE4ODc0QzcxNDlBMEYxQkM1NkNEQkVDOUY5NEJGNTlDMjA0Ri5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84MUUyMTg4NzRDNzE0OUEwRjFCQzU2Q0RC RUM5Rjk0QkY1OUMyMDRGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzA5ZjcxMDIzLTkwNDktNGVjYi1hOGE1LTdmMDhkOGVhZDY3Ni8xLzgxRTIxODg3 NEM3MTQ5QTBGMUJDNTZDREJFQzlGOTRCRjU5QzIwNEYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCLSHo2 WJoqoUFLVDDiQIiE9X6RQHAP3gRYI0y7lofRyKG9PRi07LcwFXhJxSjpXO/kvP6T 0Un3UHae1baZFNsZ+DKc+Dl4IquQK7CU1TLc467D7jev29HAKunFckOVL2nOKwwl ly4BexQvUW/AeXtGipikf0wUnbYKNMq2RL5MEyqDwF78BS81Xt4qzE6gKhqZ1sHQ xaCYxTB5Wau8YgU1i7f40TfEHxTuWYP7IjiDLOqwLIzQqhAMVfnwK5IlSaJmzu38 nwJjVibwDbUineDu1qbXgLnXwk0CYTSRvddbZAsoUvtbq8Lo7YbXBmyniUB/JhPC MKDm5NtNf1ZXEvPm -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:15 2024 by rpki-client on console-ams.rpki-client.org