$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft File: A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft (raw, json) Hash identifier: mkuxRRI3b4uxVCNNSzuWdyjdM8vEWEcBDyb7kdmtQb0= Subject key identifier: B1:93:7A:EA:A7:89:33:89:EE:B2:0A:EF:B4:C4:F9:F9:36:42:88:16 Authority key identifier: A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1 Certificate issuer: /CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1 Certificate serial: 2F8C7BB33D8BF2779073838FEA34B159B454E716 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft Manifest number: 0153 Signing time: Thu 19 Sep 2024 03:36:20 +0000 Manifest this update: Thu 19 Sep 2024 03:31:20 +0000 Manifest next update: Fri 20 Sep 2024 06:20:20 +0000 Files and hashes: 1: 326130353a646663313a336630303a3a2f34302d3430203d3e20313939353832.roa (hash: z74avPSKcJKytxYlrd57W77A2vT4WHAPDkMfkdPrZyw=) 2: A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl (hash: u27XZ018uc67HiedFRLhQGnP4ldTcLgjDKcJ0A9On6U=) 3: 326130353a646663313a313438303a3a2f34312d3431203d3e20323134393330.roa (hash: DisLBeD5UYoHuVO4itXlxTDbjFdQ+cuiB6NlT84wLk8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 12:36:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:8c:7b:b3:3d:8b:f2:77:90:73:83:8f:ea:34:b1:59:b4:54:e7:16 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1 Validity Not Before: Sep 19 03:31:20 2024 GMT Not After : Sep 20 06:20:20 2024 GMT Subject: CN=B1937AEAA7893389EEB20AEFB4C4F9F936428816 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:91:e0:37:9c:7f:f2:10:d5:84:f5:4d:c4:6c:b1: 94:02:19:84:a5:ea:a4:2a:50:0c:78:46:0a:42:fe: 76:58:44:8e:88:fe:8a:92:2c:fe:84:21:71:38:7b: 62:6e:06:8d:ee:1f:5a:9e:2f:1a:b9:43:8e:83:8e: f6:81:8e:e6:f0:d4:93:4a:49:e5:d2:f2:4b:87:2e: 14:70:80:63:ea:01:e5:8d:4b:8b:19:bb:69:ab:9b: bc:e7:f2:50:3e:1a:45:c9:87:35:c9:49:5f:df:66: 3a:6c:f1:b7:ea:09:e3:57:dd:c5:1a:2a:27:bd:84: 8a:36:08:bc:57:27:44:61:a3:10:68:d0:3e:2a:17: cd:9f:70:55:da:74:ba:40:79:b4:ec:79:df:ce:b5: 2d:78:9a:4c:18:74:0b:40:97:be:35:08:d9:83:d0: 76:6d:96:9c:52:e4:92:19:36:24:01:3d:25:e0:43: 91:a5:a7:23:ed:ff:e6:95:ce:df:6b:e5:1d:7c:a3: 90:da:ba:c4:15:57:f9:d5:2c:cb:5d:a5:66:b4:b8: a2:7d:66:89:cd:5c:b2:59:1d:12:5d:86:52:67:b4: 0b:76:52:05:d4:e3:fc:e5:30:d4:5d:29:14:37:19: 2a:2c:69:f5:ee:97:0b:57:82:c7:bb:87:76:c0:31: 0e:19 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:93:7A:EA:A7:89:33:89:EE:B2:0A:EF:B4:C4:F9:F9:36:42:88:16 X509v3 Authority Key Identifier: keyid:A8:45:D8:47:B2:7C:18:D2:A8:C4:3F:47:ED:AA:EE:AB:5C:CC:0B:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/1d20be4c-8db3-45e1-8169-0f2e4084132c/1/A845D847B27C18D2A8C43F47EDAAEEAB5CCC0BE1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7e:ab:0f:c6:ae:4c:ae:89:82:ca:4e:39:b5:6a:a4:ff:91:60: ab:17:12:31:7d:ef:b8:aa:30:63:99:c7:7c:6a:b1:fa:30:24: cd:9b:e8:e0:8e:2f:15:44:33:3b:d7:96:bc:45:ec:0d:70:98: 8b:1f:9d:dc:0b:c8:38:01:7e:95:5e:a6:6e:cd:aa:80:aa:09: e1:a9:1f:79:ca:dc:96:4e:04:98:70:e9:38:95:88:84:6b:81: 3a:3a:21:2b:a7:83:1f:4f:74:cc:c4:42:3e:0f:34:ae:38:a5: a4:4f:15:74:0e:da:cb:a3:6f:d9:49:1f:c7:7a:cb:51:a3:e7: 1a:2b:b8:b4:cb:eb:ca:71:83:8c:19:7d:93:c5:13:02:81:de: a2:58:67:37:fe:81:48:3c:cd:76:ce:b4:7b:07:00:3f:83:ee: df:d8:a7:32:a6:f2:ef:c5:26:c5:a4:02:3d:13:8d:77:97:73: 86:20:cf:3d:2c:21:53:aa:4f:a1:63:75:59:1e:96:37:43:4a: af:94:fa:07:4d:dd:80:d6:a2:f8:fa:ff:17:f0:4f:34:0f:a7: 71:63:ad:6d:00:5a:90:d4:14:41:a0:bd:a4:4d:78:25:7e:72: 05:fe:88:6f:2a:6d:9f:c9:f4:90:e2:9c:b1:35:73:49:22:b4: 19:9d:67:1e -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUL4x7sz2L8neQc4OP6jSxWbRU5xYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTg0NUQ4NDdCMjdDMThEMkE4QzQzRjQ3RURBQUVFQUI1 Q0NDMEJFMTAeFw0yNDA5MTkwMzMxMjBaFw0yNDA5MjAwNjIwMjBaMDMxMTAvBgNV BAMTKEIxOTM3QUVBQTc4OTMzODlFRUIyMEFFRkI0QzRGOUY5MzY0Mjg4MTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCR4Decf/IQ1YT1TcRssZQCGYSl 6qQqUAx4RgpC/nZYRI6I/oqSLP6EIXE4e2JuBo3uH1qeLxq5Q46DjvaBjubw1JNK SeXS8kuHLhRwgGPqAeWNS4sZu2mrm7zn8lA+GkXJhzXJSV/fZjps8bfqCeNX3cUa Kie9hIo2CLxXJ0RhoxBo0D4qF82fcFXadLpAebTsed/OtS14mkwYdAtAl741CNmD 0HZtlpxS5JIZNiQBPSXgQ5GlpyPt/+aVzt9r5R18o5DausQVV/nVLMtdpWa0uKJ9 ZonNXLJZHRJdhlJntAt2UgXU4/zlMNRdKRQ3GSosafXulwtXgse7h3bAMQ4ZAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUsZN66qeJM4nusgrvtMT5+TZCiBYwHwYDVR0j BBgwFoAUqEXYR7J8GNKoxD9H7aruq1zMC+EwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQwODQx MzJjLzEvQTg0NUQ4NDdCMjdDMThEMkE4QzQzRjQ3RURBQUVFQUI1Q0NDMEJFMS5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0E4NDVEODQ3QjI3QzE4 RDJBOEM0M0Y0N0VEQUFFRUFCNUNDQzBCRTEuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvMWQyMGJlNGMtOGRiMy00NWUxLTgxNjktMGYyZTQwODQxMzJj LzEvQTg0NUQ4NDdCMjdDMThEMkE4QzQzRjQ3RURBQUVFQUI1Q0NDMEJFMS5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAH6rD8auTK6JgspOObVqpP+RYKsXEjF977iqMGOZx3xqsfowJM2b6OCO LxVEMzvXlrxF7A1wmIsfndwLyDgBfpVepm7NqoCqCeGpH3nK3JZOBJhw6TiViIRr gTo6ISungx9PdMzEQj4PNK44paRPFXQO2sujb9lJH8d6y1Gj5xoruLTL68pxg4wZ fZPFEwKB3qJYZzf+gUg8zXbOtHsHAD+D7t/YpzKm8u/FJsWkAj0TjXeXc4Ygzz0s IVOqT6FjdVkeljdDSq+U+gdN3YDWovj6/xfwTzQPp3FjrW0AWpDUFEGgvaRNeCV+ cgX+iG8qbZ/J9JDinLE1c0kitBmdZx4= -----END CERTIFICATE-----Generated at Thu Sep 19 07:23:30 2024 by rpki-client on console-ams.rpki-client.org