$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft File: F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft (raw, json) Hash identifier: rAsci7jWVKbIniJ6BRxpUsnszhn7XV9I+GxwqGJt8+0= Subject key identifier: 2A:77:F6:E8:C3:91:37:95:1A:49:68:08:BA:6F:D3:05:51:EC:3D:D4 Authority key identifier: F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0 Certificate issuer: /CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0 Certificate serial: 29AEE9A78119AEADE8F4490AF68D4FFB61A658E5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft Manifest number: 0129 Signing time: Sun 24 Nov 2024 23:24:24 +0000 Manifest this update: Sun 24 Nov 2024 23:19:24 +0000 Manifest next update: Tue 26 Nov 2024 02:55:24 +0000 Files and hashes: 1: 326130363a313238313a393030303a3a2f33362d3438203d3e20313938303136.roa (hash: k3np5n3Q94jk1AEUCgIpsYJ425S2HhruwkTMaUrfj9I=) 2: F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl (hash: x7RRyyyise+CGcfWuMABXYv1A7vmMzfKdCsx3wkLBhY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 17:48:16 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:ae:e9:a7:81:19:ae:ad:e8:f4:49:0a:f6:8d:4f:fb:61:a6:58:e5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F8B2DD948C881B517A20B8566758AB4ABC7B72D0 Validity Not Before: Nov 24 23:19:24 2024 GMT Not After : Nov 26 02:55:24 2024 GMT Subject: CN=2A77F6E8C39137951A496808BA6FD30551EC3DD4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:ff:ff:d8:0d:40:ef:04:0f:27:35:02:f9:0b: e4:21:42:10:e3:38:42:8d:ba:de:77:76:c7:da:c5: 64:64:13:eb:95:2f:86:1f:3c:93:ba:36:6e:07:07: 23:87:73:ba:c1:4f:da:cf:22:35:ea:60:07:e2:02: e5:c8:a5:83:0a:f3:0a:cc:1e:1d:d0:b1:e4:84:aa: 08:ca:e1:2c:2b:9c:35:ad:fa:99:a6:ac:05:df:bd: 83:b8:0d:03:12:c1:cd:c9:5f:cb:a8:62:d2:86:da: 1e:35:dc:fd:18:8f:e9:72:a8:cf:3d:cd:86:7f:11: d1:a9:73:12:ae:89:c5:a2:00:23:ec:7b:85:26:3f: dd:12:31:c5:07:73:b1:4d:21:d7:a3:98:21:58:e6: 22:58:e0:92:cf:40:3e:8f:f9:57:32:61:62:a7:95: b8:2f:6e:a8:e3:0b:d6:ce:a9:01:06:e8:35:c8:65: c4:0a:8d:74:af:76:56:08:0e:fa:9e:83:a0:2c:b6: 85:f9:c8:32:ab:ff:3a:9e:f2:e4:82:b9:40:8d:3b: 0a:ff:8f:3f:e2:aa:39:f2:cb:45:cc:1e:3e:92:79: a3:88:2c:7d:fc:57:6f:c7:46:04:e4:65:fb:8a:64: 7f:15:fe:99:65:71:b8:34:2e:f1:e7:21:cf:6d:12: df:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:77:F6:E8:C3:91:37:95:1A:49:68:08:BA:6F:D3:05:51:EC:3D:D4 X509v3 Authority Key Identifier: keyid:F8:B2:DD:94:8C:88:1B:51:7A:20:B8:56:67:58:AB:4A:BC:7B:72:D0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/0/F8B2DD948C881B517A20B8566758AB4ABC7B72D0.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:11:89:db:b0:71:79:72:05:59:f3:cd:52:74:27:f8:d8:ad: 00:f8:4c:be:4a:cb:4d:a0:20:45:66:41:93:a7:40:a9:8b:a3: ea:d4:86:ad:8d:b7:bc:0f:57:c9:eb:08:66:3b:cf:44:c0:c8: d6:38:2c:4d:8e:72:e3:03:75:d1:31:d9:d0:4e:ea:73:99:9a: 03:30:51:54:d9:b5:22:09:58:b5:e3:66:85:be:36:19:8e:ab: 23:76:0e:81:53:57:af:aa:1b:42:2b:29:aa:a9:cb:f1:0d:d5: 12:e1:9b:fd:b2:c5:6d:ca:e2:b7:7f:68:88:4e:bf:19:cd:38: f7:23:83:14:30:74:1f:49:07:16:7c:9b:fb:ff:47:1e:50:d8: 2a:b3:89:8d:74:eb:ba:18:89:15:e0:24:2c:39:b2:57:38:ff: e5:97:d7:25:21:ed:1a:f4:78:45:e2:e3:dd:13:c3:37:46:89: ec:58:35:1e:de:f0:53:8c:a0:78:97:b4:ab:bd:7f:30:03:70: c6:b5:6e:52:62:c6:1c:20:a6:0d:fc:cd:2b:53:50:62:e4:09: cd:1e:e6:60:c9:28:cb:6c:59:ae:26:48:4a:32:60:6a:50:a5: 5c:f9:b1:11:2a:51:da:c3:0d:f0:da:3a:79:89:f3:97:c4:09: 6e:13:72:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKa7pp4EZrq3o9EkK9o1P+2GmWOUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjhCMkREOTQ4Qzg4MUI1MTdBMjBCODU2Njc1OEFCNEFC QzdCNzJEMDAeFw0yNDExMjQyMzE5MjRaFw0yNDExMjYwMjU1MjRaMDMxMTAvBgNV BAMTKDJBNzdGNkU4QzM5MTM3OTUxQTQ5NjgwOEJBNkZEMzA1NTFFQzNERDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDI///YDUDvBA8nNQL5C+QhQhDj OEKNut53dsfaxWRkE+uVL4YfPJO6Nm4HByOHc7rBT9rPIjXqYAfiAuXIpYMK8wrM Hh3QseSEqgjK4SwrnDWt+pmmrAXfvYO4DQMSwc3JX8uoYtKG2h413P0Yj+lyqM89 zYZ/EdGpcxKuicWiACPse4UmP90SMcUHc7FNIdejmCFY5iJY4JLPQD6P+VcyYWKn lbgvbqjjC9bOqQEG6DXIZcQKjXSvdlYIDvqeg6AstoX5yDKr/zqe8uSCuUCNOwr/ jz/iqjnyy0XMHj6SeaOILH38V2/HRgTkZfuKZH8V/pllcbg0LvHnIc9tEt8ZAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKnf26MORN5UaSWgIum/TBVHsPdQwHwYDVR0j BBgwFoAU+LLdlIyIG1F6ILhWZ1irSrx7ctAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMGM3MDQwMWMtN2Y0MS00YTZiLTk0MzQtY2M4MGRjYTA5 M2U2LzAvRjhCMkREOTQ4Qzg4MUI1MTdBMjBCODU2Njc1OEFCNEFCQzdCNzJEMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GOEIyREQ5NDhDODgxQjUxN0EyMEI4NTY2 NzU4QUI0QUJDN0I3MkQwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzBjNzA0MDFjLTdmNDEtNGE2Yi05NDM0LWNjODBkY2EwOTNlNi8wL0Y4QjJERDk0 OEM4ODFCNTE3QTIwQjg1NjY3NThBQjRBQkM3QjcyRDAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADEYnb sHF5cgVZ881SdCf42K0A+Ey+SstNoCBFZkGTp0Cpi6Pq1Iatjbe8D1fJ6whmO89E wMjWOCxNjnLjA3XRMdnQTupzmZoDMFFU2bUiCVi142aFvjYZjqsjdg6BU1evqhtC KymqqcvxDdUS4Zv9ssVtyuK3f2iITr8ZzTj3I4MUMHQfSQcWfJv7/0ceUNgqs4mN dOu6GIkV4CQsObJXOP/ll9clIe0a9HhF4uPdE8M3RonsWDUe3vBTjKB4l7SrvX8w A3DGtW5SYsYcIKYN/M0rU1Bi5AnNHuZgySjLbFmuJkhKMmBqUKVc+bERKlHaww3w 2jp5ifOXxAluE3LO -----END CERTIFICATE-----Generated at Mon Nov 25 01:46:55 2024 by rpki-client on console-fra.rpki-client.org