$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft File: BD36051F9A727996CE309FAF4E5757E504EB2C46.mft (raw, json) Hash identifier: 7iKDONh9TS9mcOV3JqiwgJH43jDiw+GOt1yHtb8l+8U= Subject key identifier: AD:D4:89:43:0C:55:40:9A:CE:DA:30:AC:6D:32:BD:76:A2:3F:70:83 Authority key identifier: BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46 Certificate issuer: /CN=BD36051F9A727996CE309FAF4E5757E504EB2C46 Certificate serial: 09BC27FEF510EEA59009653401DC88C119ECE26F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft Manifest number: 2C Signing time: Thu 21 Nov 2024 22:17:46 +0000 Manifest this update: Thu 21 Nov 2024 22:12:46 +0000 Manifest next update: Fri 22 Nov 2024 23:02:46 +0000 Files and hashes: 1: 326130393a353463363a383030303a3a2f34372d3437203d3e20323134343531.roa (hash: e0au/5cGv1Pv+omA08EMMw/+Xqdlaj4f052UKrYUHYI=) 2: BD36051F9A727996CE309FAF4E5757E504EB2C46.crl (hash: 5tQVGJS6H5ALs23/bbeq6v3OTHrpPDVezhZ8g0qq3ek=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.crl rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 16:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:bc:27:fe:f5:10:ee:a5:90:09:65:34:01:dc:88:c1:19:ec:e2:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD36051F9A727996CE309FAF4E5757E504EB2C46 Validity Not Before: Nov 21 22:12:46 2024 GMT Not After : Nov 22 23:02:46 2024 GMT Subject: CN=ADD489430C55409ACEDA30AC6D32BD76A23F7083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:01:fe:a5:e1:04:39:d5:26:a8:93:4b:3f:7a: 0d:84:e6:1c:49:49:a4:ee:ef:59:89:25:cc:b7:03: c6:3a:d3:3a:98:c6:c1:e1:4f:4e:fd:38:7f:38:58: 98:2d:63:87:e9:b2:1d:55:75:a3:05:c5:48:6b:c1: 76:5a:10:8e:80:40:de:ff:92:05:ec:9a:50:48:25: 61:7d:55:bd:a4:ff:54:7e:bb:d7:c6:e9:3e:9d:7d: a9:31:25:19:cf:d0:44:45:93:e6:4e:12:79:c8:d3: 02:62:6e:1d:15:bb:b1:2d:98:64:d6:8f:18:ce:89: 9f:6e:26:78:53:89:c0:cf:9d:3e:cb:e3:59:73:a8: 06:b3:b9:52:b9:29:4b:de:86:8a:44:e7:a3:85:dc: 11:59:c8:42:3b:76:7b:06:8e:7c:97:d1:ac:23:20: 1a:d5:7a:25:2d:a9:57:a4:50:77:92:4e:5f:37:67: 8c:eb:5b:85:09:3e:06:2d:50:b0:5b:5e:29:07:2f: 16:4d:79:56:02:af:79:31:1c:93:fa:2a:cf:4b:30: d8:6d:20:f8:c0:72:57:68:c4:c1:39:47:7d:65:5c: b1:7a:24:a6:fb:9a:5d:41:62:71:d3:e7:fe:2b:f4: ed:3f:79:b7:92:c5:39:20:5a:e2:6a:23:fd:91:9b: 29:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AD:D4:89:43:0C:55:40:9A:CE:DA:30:AC:6D:32:BD:76:A2:3F:70:83 X509v3 Authority Key Identifier: keyid:BD:36:05:1F:9A:72:79:96:CE:30:9F:AF:4E:57:57:E5:04:EB:2C:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD36051F9A727996CE309FAF4E5757E504EB2C46.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/22cf8ba7-cb02-418b-be04-4d9f3a07e950/2/BD36051F9A727996CE309FAF4E5757E504EB2C46.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 53:17:e8:2a:99:db:70:7d:60:ce:83:38:00:84:de:02:16:f5: 37:c4:f1:08:76:13:6f:f2:6b:99:a3:f7:29:f9:03:99:03:e3: 88:6d:e0:b9:18:c1:5d:d1:10:40:e8:41:36:48:35:cc:e0:67: ab:59:d9:1d:02:9a:7a:86:f2:66:ce:0c:a9:01:67:8e:fe:57: 6d:17:4f:96:0e:0f:01:85:46:54:f2:06:03:70:3c:c0:6a:58: 32:39:ba:ab:52:70:9c:67:b6:87:fa:10:4f:85:4f:4a:5b:c9: 4d:7b:20:47:85:87:bb:bb:67:69:a6:fd:c7:2b:05:9f:5b:2e: 29:d8:c5:ff:3c:3c:60:98:8b:d7:fd:e6:00:4c:42:95:0e:d1: 39:d2:59:ca:79:7d:3d:f6:24:57:de:8d:b8:3b:22:74:9d:fa: 21:07:db:7f:50:6a:7f:06:26:00:89:05:29:8d:30:c5:21:b3: 66:cb:88:ae:88:4b:69:7a:80:19:74:ec:a2:4a:90:d5:08:58: 45:80:d0:dd:42:39:46:c3:b3:7b:20:95:1f:30:f0:7c:c3:3e: bd:2d:a4:8e:6a:62:b0:88:59:5b:5a:5a:f1:a1:7a:ca:ee:42: 57:7f:e7:ea:e1:f7:58:43:66:dd:7a:e2:0b:aa:7b:d3:ae:f4: 62:19:de:a2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUCbwn/vUQ7qWQCWU0AdyIwRns4m8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQzNjA1MUY5QTcyNzk5NkNFMzA5RkFGNEU1NzU3RTUw NEVCMkM0NjAeFw0yNDExMjEyMjEyNDZaFw0yNDExMjIyMzAyNDZaMDMxMTAvBgNV BAMTKEFERDQ4OTQzMEM1NTQwOUFDRURBMzBBQzZEMzJCRDc2QTIzRjcwODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1Af6l4QQ51Saok0s/eg2E5hxJ SaTu71mJJcy3A8Y60zqYxsHhT079OH84WJgtY4fpsh1VdaMFxUhrwXZaEI6AQN7/ kgXsmlBIJWF9Vb2k/1R+u9fG6T6dfakxJRnP0ERFk+ZOEnnI0wJibh0Vu7EtmGTW jxjOiZ9uJnhTicDPnT7L41lzqAazuVK5KUvehopE56OF3BFZyEI7dnsGjnyX0awj IBrVeiUtqVekUHeSTl83Z4zrW4UJPgYtULBbXikHLxZNeVYCr3kxHJP6Ks9LMNht IPjAcldoxME5R31lXLF6JKb7ml1BYnHT5/4r9O0/ebeSxTkgWuJqI/2RmykpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrdSJQwxVQJrO2jCsbTK9dqI/cIMwHwYDVR0j BBgwFoAUvTYFH5pyeZbOMJ+vTldX5QTrLEYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjJjZjhiYTctY2IwMi00MThiLWJlMDQtNGQ5ZjNhMDdl OTUwLzIvQkQzNjA1MUY5QTcyNzk5NkNFMzA5RkFGNEU1NzU3RTUwNEVCMkM0Ni5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDM2MDUxRjlBNzI3OTk2Q0UzMDlGQUY0 RTU3NTdFNTA0RUIyQzQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIyY2Y4YmE3LWNiMDItNDE4Yi1iZTA0LTRkOWYzYTA3ZTk1MC8yL0JEMzYwNTFG OUE3Mjc5OTZDRTMwOUZBRjRFNTc1N0U1MDRFQjJDNDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBTF+gq mdtwfWDOgzgAhN4CFvU3xPEIdhNv8muZo/cp+QOZA+OIbeC5GMFd0RBA6EE2SDXM 4GerWdkdApp6hvJmzgypAWeO/ldtF0+WDg8BhUZU8gYDcDzAalgyObqrUnCcZ7aH +hBPhU9KW8lNeyBHhYe7u2dppv3HKwWfWy4p2MX/PDxgmIvX/eYATEKVDtE50lnK eX099iRX3o24OyJ0nfohB9t/UGp/BiYAiQUpjTDFIbNmy4iuiEtpeoAZdOyiSpDV CFhFgNDdQjlGw7N7IJUfMPB8wz69LaSOamKwiFlbWlrxoXrK7kJXf+fq4fdYQ2bd euILqnvTrvRiGd6i -----END CERTIFICATE-----Generated at Fri Nov 22 00:15:23 2024 by rpki-client on console-ams.rpki-client.org