$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft File: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft (raw, json) Hash identifier: +Pax0yGAjrgLHZBOoS0dprGOB9JFFdIcbQeBsyyQics= Subject key identifier: D6:1C:44:6B:0A:71:C3:F3:78:13:D0:02:0D:AF:A4:1D:CB:AB:57:F2 Authority key identifier: 41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B Certificate issuer: /CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Certificate serial: 3811EB6D74DAA3609F9170524F7A940F8B4E34EF Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft Manifest number: 2E Signing time: Thu 21 Nov 2024 21:57:46 +0000 Manifest this update: Thu 21 Nov 2024 21:52:46 +0000 Manifest next update: Fri 22 Nov 2024 22:06:46 +0000 Files and hashes: 1: 326131343a373538303a623030303a3a2f34382d3438203d3e20323134343531.roa (hash: 8e6qsVLbhhSzQEyv+jVflD+xc2a0nkXLrF/N0bMcfFY=) 2: 41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl (hash: vzknVZ7yeGljcV1Eh8HZbJCZr2/eZugb+5cHCWHfpl0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:11:eb:6d:74:da:a3:60:9f:91:70:52:4f:7a:94:0f:8b:4e:34:ef Signature Algorithm: sha256WithRSAEncryption Issuer: CN=41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B Validity Not Before: Nov 21 21:52:46 2024 GMT Not After : Nov 22 22:06:46 2024 GMT Subject: CN=D61C446B0A71C3F37813D0020DAFA41DCBAB57F2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:5f:9d:8d:2e:26:3a:a7:5d:4a:9f:07:3b:5e: 13:70:e8:3f:34:28:17:6e:07:a5:29:b4:e4:46:0c: 8e:6f:f0:81:b3:09:a2:b2:12:35:75:f2:7f:0c:ed: 6a:0d:92:12:49:12:6e:da:9e:c3:cb:6e:26:34:07: cf:a7:fc:76:01:f0:c0:12:67:9e:df:e7:26:7a:ab: 83:49:f4:91:35:9f:e1:82:ec:b0:42:f4:76:c4:6d: 85:40:3b:13:a5:a9:fa:42:95:b1:7d:69:c8:66:59: 94:77:6e:ee:03:d7:3c:b4:eb:ea:4a:5d:40:f0:98: 29:67:43:b5:e5:5f:87:c2:9d:42:5f:88:74:60:60: fd:52:ef:52:c3:55:03:89:33:46:dd:96:ac:9a:f7: 29:ca:ea:7e:15:eb:9a:0b:87:12:1e:07:2a:7b:cd: 41:17:c6:80:35:27:a9:49:0a:ff:37:b1:4b:e6:13: d4:80:4d:95:d8:a5:09:da:b1:dc:0b:59:d0:2a:8a: 97:e0:20:6b:f4:d1:ea:c9:e5:47:dc:09:13:2f:37: 73:83:3e:73:15:b1:30:08:76:58:22:c0:51:e6:ca: a7:8e:a9:ff:35:64:7c:23:39:ae:c6:05:12:d2:94: 51:35:1a:83:af:df:dd:3f:63:53:f7:6a:84:87:0b: 39:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D6:1C:44:6B:0A:71:C3:F3:78:13:D0:02:0D:AF:A4:1D:CB:AB:57:F2 X509v3 Authority Key Identifier: keyid:41:C6:B5:56:7A:DB:76:46:22:2A:1B:9F:1A:A7:03:8F:0C:2D:4B:4B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/1/41C6B5567ADB7646222A1B9F1AA7038F0C2D4B4B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:99:69:c6:32:fd:4f:7f:f8:73:5e:5f:e5:cb:d4:28:6d:74: d9:19:26:4d:c8:16:a6:19:eb:1b:aa:ab:88:56:2f:2c:d8:e1: cf:5b:60:94:0e:bd:93:41:70:68:33:5f:8d:73:f9:f8:e0:c9: 35:fa:7b:ac:43:f1:34:a9:24:95:35:60:b7:12:77:39:3a:d9: 91:a1:69:be:72:23:65:82:ea:b9:fb:df:94:21:f1:cd:79:e9: f0:06:cd:e8:78:c6:e8:54:0f:2a:57:f7:cf:f2:a8:3f:42:55: a7:49:fc:5a:0a:15:56:9e:be:94:30:5a:48:ac:b6:35:d1:50: b5:a9:24:b9:d7:fc:78:8e:df:26:5d:d1:fa:f2:4f:5b:36:15: 7d:07:aa:bd:4a:11:d1:4f:98:e6:ee:80:0e:d6:c5:e9:b4:4b: 94:f2:03:65:c1:6c:83:ee:7d:21:c9:80:ea:54:fe:80:d5:69: 20:f3:30:66:e7:80:b0:09:a6:2d:26:1e:e6:84:27:4b:ef:84: cc:36:e2:f9:d8:63:a8:e8:a0:5e:b4:8a:02:97:8e:00:df:e0: c5:a9:d7:07:d7:c8:62:e0:cf:80:05:d0:6d:f9:ed:7e:52:f8: 7c:a6:30:ea:9e:f5:fa:12:a5:d1:09:70:32:c5:f2:b1:5e:8c: d0:c2:7a:cb -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOBHrbXTao2CfkXBST3qUD4tONO8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYw QzJENEI0QjAeFw0yNDExMjEyMTUyNDZaFw0yNDExMjIyMjA2NDZaMDMxMTAvBgNV BAMTKEQ2MUM0NDZCMEE3MUMzRjM3ODEzRDAwMjBEQUZBNDFEQ0JBQjU3RjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDXX52NLiY6p11Knwc7XhNw6D80 KBduB6UptORGDI5v8IGzCaKyEjV18n8M7WoNkhJJEm7ansPLbiY0B8+n/HYB8MAS Z57f5yZ6q4NJ9JE1n+GC7LBC9HbEbYVAOxOlqfpClbF9achmWZR3bu4D1zy06+pK XUDwmClnQ7XlX4fCnUJfiHRgYP1S71LDVQOJM0bdlqya9ynK6n4V65oLhxIeByp7 zUEXxoA1J6lJCv83sUvmE9SATZXYpQnasdwLWdAqipfgIGv00erJ5UfcCRMvN3OD PnMVsTAIdlgiwFHmyqeOqf81ZHwjOa7GBRLSlFE1GoOv390/Y1P3aoSHCznRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU1hxEawpxw/N4E9ACDa+kHcurV/IwHwYDVR0j BBgwFoAUQca1VnrbdkYiKhufGqcDjwwtS0swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzEvNDFDNkI1NTY3QURCNzY0NjIyMkExQjlGMUFBNzAzOEYwQzJENEI0Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MUM2QjU1NjdBREI3NjQ2MjIyQTFCOUYx QUE3MDM4RjBDMkQ0QjRCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8xLzQxQzZCNTU2 N0FEQjc2NDYyMjJBMUI5RjFBQTcwMzhGMEMyRDRCNEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQASmWnG Mv1Pf/hzXl/ly9QobXTZGSZNyBamGesbqquIVi8s2OHPW2CUDr2TQXBoM1+Nc/n4 4Mk1+nusQ/E0qSSVNWC3Enc5OtmRoWm+ciNlguq5+9+UIfHNeenwBs3oeMboVA8q V/fP8qg/QlWnSfxaChVWnr6UMFpIrLY10VC1qSS51/x4jt8mXdH68k9bNhV9B6q9 ShHRT5jm7oAO1sXptEuU8gNlwWyD7n0hyYDqVP6A1Wkg8zBm54CwCaYtJh7mhCdL 74TMNuL52GOo6KBetIoCl44A3+DFqdcH18hi4M+ABdBt+e1+Uvh8pjDqnvX6EqXR CXAyxfKxXozQwnrL -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org