$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft File: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft (raw, json) Hash identifier: wu2FsjwoM/KpFWXDaH+LKX2yUuQwsYnz0iQq5w6o3KI= Subject key identifier: 51:F0:86:39:C2:CA:33:9E:2F:01:0C:F3:45:96:A8:4B:F6:A8:E0:2E Authority key identifier: F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 Certificate issuer: /CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Certificate serial: 4C77904481ED64DEE952107A0983BE70AB8B7445 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft Manifest number: 19 Signing time: Thu 21 Nov 2024 08:32:51 +0000 Manifest this update: Thu 21 Nov 2024 08:27:51 +0000 Manifest next update: Fri 22 Nov 2024 12:00:51 +0000 Files and hashes: 1: F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl (hash: 4BHLA0iGkyTvd7Oo9tmDr8pOAVGovSFwdm50nLwsRwM=) 2: 326131343a373538303a663330303a3a2f34302d3438203d3e20323135343730.roa (hash: X3xnYiPWfIm3B+YPQOjYhBFBsBXuQLEeAv0Jg3YQ+nw=) 3: 326131343a373538303a663331303a3a2f34342d3438203d3e20323134303834.roa (hash: 7Ht9ysaUQlknniITxiGGZVb7FReUYStDZL1yen2prNE=) 4: 326131343a373538303a663333303a3a2f34342d3438203d3e20323134303330.roa (hash: E8taggS6sI4q0LKjH6/GmLcIK3Cj0Fw4lwLi8ILdzT4=) 5: 326131343a373538303a383030303a3a2f33362d3438203d3e20323135343730.roa (hash: ibb68AQAVWJMES3NYRBIOdUeHnGKp+tFUocAxCKgPEU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:77:90:44:81:ed:64:de:e9:52:10:7a:09:83:be:70:ab:8b:74:45 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4 Validity Not Before: Nov 21 08:27:51 2024 GMT Not After : Nov 22 12:00:51 2024 GMT Subject: CN=51F08639C2CA339E2F010CF34596A84BF6A8E02E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:ea:3b:3f:3a:11:43:e2:4c:2f:8d:82:45:a5: 6c:a2:9d:19:e4:80:21:98:9a:6a:6b:67:ac:1f:61: a1:da:78:3e:84:ed:69:1d:31:42:86:12:2d:bd:78: ff:ac:99:c1:03:ba:d9:43:18:64:c7:42:da:50:26: e8:7a:d6:45:ba:75:bc:dc:48:06:ed:85:31:ce:5a: d0:ea:63:bf:28:cb:c2:83:84:e9:48:0d:0d:c0:78: 94:16:67:68:02:eb:13:34:c3:8b:87:8c:26:3d:fc: a7:73:28:8d:3d:d6:03:08:a5:8b:fe:b4:c7:f6:7d: 3b:97:4a:76:47:c1:0f:8a:c4:81:39:a1:4f:6a:95: 0b:3c:07:c8:4d:30:42:20:6d:43:5a:78:17:d8:5b: e0:5a:79:1d:06:a9:1d:e8:52:58:e9:50:6a:65:f5: 2a:b0:25:7c:1a:61:65:dd:93:7f:7a:a2:31:01:12: b2:25:aa:11:0b:82:ec:82:97:b7:9a:9c:da:ee:57: 7c:c5:69:b8:39:57:34:60:8d:30:e5:57:00:f4:3e: e3:c3:92:cd:a0:64:47:04:17:5f:fa:f2:f2:1d:2c: ef:ff:80:58:52:17:73:e7:0b:ea:2e:d7:0f:2f:81: 66:52:69:e3:c4:84:33:97:0b:49:e8:38:7a:45:20: 43:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 51:F0:86:39:C2:CA:33:9E:2F:01:0C:F3:45:96:A8:4B:F6:A8:E0:2E X509v3 Authority Key Identifier: keyid:F4:00:72:FF:DC:0F:1B:15:A6:9E:5B:C7:9A:2F:58:8C:F9:39:F4:F4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/19aa9da7-f1e4-4d98-bf95-9fdfcf448f77/0/F40072FFDC0F1B15A69E5BC79A2F588CF939F4F4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 25:95:1f:f0:bc:cd:a5:b0:76:c5:09:0b:7e:43:d0:e7:59:07: 43:23:9f:22:f8:e8:b2:84:91:16:2f:36:e4:ee:71:09:6a:4f: dd:5c:02:71:19:5f:6f:c4:a1:20:86:4e:93:0f:c4:0c:35:4e: bb:85:d9:17:c6:e5:fc:fb:a7:d2:6e:1b:43:37:36:3f:49:67: ce:6c:29:9c:73:3c:18:2f:5e:74:dd:67:c7:db:48:5a:e7:87: 78:fe:46:11:c3:29:b4:15:94:cf:5b:b7:de:cd:9f:77:25:d3: de:cf:ba:c7:bc:e0:0a:34:8c:f2:5f:16:ce:da:a8:60:66:4b: a3:a4:4c:4e:28:b4:b7:bd:39:6a:f5:b9:24:48:da:6f:e1:d7: b7:e0:d2:69:95:51:13:08:e1:de:5c:0f:6d:83:bc:7a:a6:0f: cd:13:c5:d1:f4:e9:68:5c:c9:a7:89:fc:1a:42:17:92:89:16: 36:db:cd:b8:31:bb:f6:3a:ab:f7:5c:95:f4:34:01:06:e1:fd: 6e:3a:85:5d:34:4b:e1:7b:f8:4a:bf:66:a2:cf:db:6c:43:50: b2:cb:24:7d:24:c9:8d:5b:d6:75:a0:81:1d:c2:e2:d7:e8:57: 41:b9:da:1c:78:7a:3e:40:15:b5:4a:c5:17:6c:c2:1e:7f:0b: 0d:8e:0f:88 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUTHeQRIHtZN7pUhB6CYO+cKuLdEUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENG OTM5RjRGNDAeFw0yNDExMjEwODI3NTFaFw0yNDExMjIxMjAwNTFaMDMxMTAvBgNV BAMTKDUxRjA4NjM5QzJDQTMzOUUyRjAxMENGMzQ1OTZBODRCRjZBOEUwMkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq6js/OhFD4kwvjYJFpWyinRnk gCGYmmprZ6wfYaHaeD6E7WkdMUKGEi29eP+smcEDutlDGGTHQtpQJuh61kW6dbzc SAbthTHOWtDqY78oy8KDhOlIDQ3AeJQWZ2gC6xM0w4uHjCY9/KdzKI091gMIpYv+ tMf2fTuXSnZHwQ+KxIE5oU9qlQs8B8hNMEIgbUNaeBfYW+BaeR0GqR3oUljpUGpl 9SqwJXwaYWXdk396ojEBErIlqhELguyCl7eanNruV3zFabg5VzRgjTDlVwD0PuPD ks2gZEcEF1/68vIdLO//gFhSF3PnC+ou1w8vgWZSaePEhDOXC0noOHpFIENxAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUUfCGOcLKM54vAQzzRZaoS/ao4C4wHwYDVR0j BBgwFoAU9ABy/9wPGxWmnlvHmi9YjPk59PQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMTlhYTlkYTctZjFlNC00ZDk4LWJmOTUtOWZkZmNmNDQ4 Zjc3LzAvRjQwMDcyRkZEQzBGMUIxNUE2OUU1QkM3OUEyRjU4OENGOTM5RjRGNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC9GNDAwNzJGRkRDMEYxQjE1QTY5RTVCQzc5 QTJGNTg4Q0Y5MzlGNEY0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzE5YWE5ZGE3LWYxZTQtNGQ5OC1iZjk1LTlmZGZjZjQ0OGY3Ny8wL0Y0MDA3MkZG REMwRjFCMTVBNjlFNUJDNzlBMkY1ODhDRjkzOUY0RjQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAllR/w vM2lsHbFCQt+Q9DnWQdDI58i+OiyhJEWLzbk7nEJak/dXAJxGV9vxKEghk6TD8QM NU67hdkXxuX8+6fSbhtDNzY/SWfObCmcczwYL1503WfH20ha54d4/kYRwym0FZTP W7fezZ93JdPez7rHvOAKNIzyXxbO2qhgZkujpExOKLS3vTlq9bkkSNpv4de34NJp lVETCOHeXA9tg7x6pg/NE8XR9OloXMmnifwaQheSiRY22824Mbv2Oqv3XJX0NAEG 4f1uOoVdNEvhe/hKv2aiz9tsQ1CyyyR9JMmNW9Z1oIEdwuLX6FdBudoceHo+QBW1 SsUXbMIefwsNjg+I -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org