$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft File: 451E20DA90C6D597951FEC29DF3771EAC47643EE.mft (raw, json) Hash identifier: /QhJQ6xWxyr/mqYCcrFp9uE+QNOuTEDHtYLm1s/q1TY= Subject key identifier: 2B:68:AD:ED:98:31:FB:EB:55:B7:56:B4:77:62:69:1C:A5:C2:FB:64 Authority key identifier: 45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE Certificate issuer: /CN=451E20DA90C6D597951FEC29DF3771EAC47643EE Certificate serial: 689453DED6BB23165FCA9B0E3D572C33E559EB72 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft Manifest number: 66 Signing time: Thu 21 Nov 2024 22:12:25 +0000 Manifest this update: Thu 21 Nov 2024 22:07:25 +0000 Manifest next update: Sat 23 Nov 2024 00:58:25 +0000 Files and hashes: 1: 326130613a363034343a376230313a3a2f34382d3438203d3e20323134373638.roa (hash: iF8Ye8vJ9K2gVh9mmhftlrMH0DGBAd4nVfgnpVtc6hw=) 2: 326130613a363034343a376230333a3a2f34382d3438203d3e20323134373638.roa (hash: yPAHiQMuvisKvZgTuxJWVNcL7IJSeHI4LfepvP7q8Ek=) 3: 326130613a363034343a376230323a3a2f34382d3438203d3e20323134373638.roa (hash: CR7rvXsMnSL0QDx0Xxq2kk+jhYk7murgLpP3U4Y9IXk=) 4: 326130613a363034343a376230303a3a2f34382d3438203d3e20323134373638.roa (hash: hopnfP4ixKItSG6CqL2CJ+Q8Oym3vKVP9EFvxnMVTo8=) 5: 451E20DA90C6D597951FEC29DF3771EAC47643EE.crl (hash: doy2+UitWo/ND0NcNt25rfq+BVfXjV78YWtwxblrgmg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 16:39:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:94:53:de:d6:bb:23:16:5f:ca:9b:0e:3d:57:2c:33:e5:59:eb:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=451E20DA90C6D597951FEC29DF3771EAC47643EE Validity Not Before: Nov 21 22:07:25 2024 GMT Not After : Nov 23 00:58:25 2024 GMT Subject: CN=2B68ADED9831FBEB55B756B47762691CA5C2FB64 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:cb:17:90:da:4c:ce:4f:37:57:85:73:76:1b: ee:f6:ef:f0:69:9b:53:0b:57:a4:dd:82:e7:4a:ca: 0f:69:db:30:c4:e8:85:4f:0c:37:7e:0e:1d:7e:0c: f9:72:84:a6:ce:bc:df:f1:87:1b:b1:68:ab:f6:20: a0:45:d2:b0:00:4c:45:47:2f:bf:77:0a:70:58:c1: 12:ff:75:be:d0:b9:34:8c:37:b3:b7:94:cd:12:39: 8a:29:d7:d8:7f:4c:82:f9:ce:12:f5:4a:a8:ee:9b: e5:92:5a:78:06:b0:6d:36:0f:e5:e2:ee:12:65:f0: 83:7b:27:41:09:6e:ee:b9:cb:04:87:dd:72:49:97: fa:f3:a8:63:0b:3a:2b:9f:c3:fd:f1:fe:0d:61:07: 8b:59:53:22:4e:b6:c5:df:b5:13:b9:31:73:6c:9c: 79:3a:7c:c2:8f:70:df:58:1e:df:79:f2:fa:51:be: f4:6d:05:b0:82:f5:9d:79:82:0e:6a:6c:5c:24:4a: 04:aa:64:28:8b:b6:41:a5:55:c5:ef:c9:69:89:dc: 80:67:ee:ec:7b:9c:17:fc:9e:b3:af:a3:a4:b9:f1: df:60:38:7f:20:69:07:a0:c0:91:53:43:7a:42:29: 2a:a1:de:01:52:66:0f:33:85:f0:ce:9b:5d:f3:54: ca:41 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2B:68:AD:ED:98:31:FB:EB:55:B7:56:B4:77:62:69:1C:A5:C2:FB:64 X509v3 Authority Key Identifier: keyid:45:1E:20:DA:90:C6:D5:97:95:1F:EC:29:DF:37:71:EA:C4:76:43:EE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/451E20DA90C6D597951FEC29DF3771EAC47643EE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/1/451E20DA90C6D597951FEC29DF3771EAC47643EE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0b:f4:7c:d3:e0:2e:dc:f6:a1:45:d1:3a:23:27:54:e6:56:3c: 41:f7:47:18:14:6f:3c:90:d1:f1:e9:50:e9:9b:3f:ab:d4:f0: 6e:a7:b8:f6:84:d5:9f:57:cb:08:e7:bf:9a:16:49:ad:b0:81: ec:c3:6d:19:ad:76:47:07:d6:98:2a:07:7a:fd:cd:cb:65:a4: 16:87:96:44:7a:34:e3:93:85:1b:93:5b:50:f5:1e:06:33:f7: 2f:b5:40:1d:80:f8:4e:89:7b:19:20:71:14:c5:d1:0b:6a:89: c0:e3:38:e9:44:4b:7b:8e:2e:11:e9:00:7b:53:28:f4:a3:44: d2:4a:6f:b7:f5:55:1f:7d:5c:91:b2:ed:d2:37:3c:16:cd:c7: bb:42:19:b0:00:c1:31:c7:c1:37:7a:15:20:93:1e:70:fa:5d: 3b:1c:ac:38:cc:73:5c:85:10:0b:e5:a5:c8:f6:31:28:5f:dc: 4b:08:ed:b4:95:bb:8d:20:c1:b5:88:a1:b9:b5:68:81:de:f5: 2c:8d:2e:cf:fc:e7:64:3c:08:69:a5:8f:16:9e:9b:c4:2c:bf: 20:a7:c8:33:bd:d1:d5:71:60:38:94:92:d5:fb:61:09:0d:9c: 12:5b:18:6d:da:e1:b0:0c:4b:0e:66:1a:5b:ed:26:09:13:ae: a7:c5:39:ee -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaJRT3ta7IxZfypsOPVcsM+VZ63IwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUxRTIwREE5MEM2RDU5Nzk1MUZFQzI5REYzNzcxRUFD NDc2NDNFRTAeFw0yNDExMjEyMjA3MjVaFw0yNDExMjMwMDU4MjVaMDMxMTAvBgNV BAMTKDJCNjhBREVEOTgzMUZCRUI1NUI3NTZCNDc3NjI2OTFDQTVDMkZCNjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYyxeQ2kzOTzdXhXN2G+727/Bp m1MLV6TdgudKyg9p2zDE6IVPDDd+Dh1+DPlyhKbOvN/xhxuxaKv2IKBF0rAATEVH L793CnBYwRL/db7QuTSMN7O3lM0SOYop19h/TIL5zhL1Sqjum+WSWngGsG02D+Xi 7hJl8IN7J0EJbu65ywSH3XJJl/rzqGMLOiufw/3x/g1hB4tZUyJOtsXftRO5MXNs nHk6fMKPcN9YHt958vpRvvRtBbCC9Z15gg5qbFwkSgSqZCiLtkGlVcXvyWmJ3IBn 7ux7nBf8nrOvo6S58d9gOH8gaQegwJFTQ3pCKSqh3gFSZg8zhfDOm13zVMpBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUK2it7Zgx++tVt1a0d2JpHKXC+2QwHwYDVR0j BBgwFoAURR4g2pDG1ZeVH+wp3zdx6sR2Q+4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdm ZTc5LzEvNDUxRTIwREE5MEM2RDU5Nzk1MUZFQzI5REYzNzcxRUFDNDc2NDNFRS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80NTFFMjBEQTkwQzZENTk3OTUxRkVDMjlE RjM3NzFFQUM0NzY0M0VFLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYzLTBmMzJiOGU3ZmU3OS8xLzQ1MUUyMERB OTBDNkQ1OTc5NTFGRUMyOURGMzc3MUVBQzQ3NjQzRUUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAL9HzT 4C7c9qFF0TojJ1TmVjxB90cYFG88kNHx6VDpmz+r1PBup7j2hNWfV8sI57+aFkmt sIHsw20ZrXZHB9aYKgd6/c3LZaQWh5ZEejTjk4Ubk1tQ9R4GM/cvtUAdgPhOiXsZ IHEUxdELaonA4zjpREt7ji4R6QB7Uyj0o0TSSm+39VUffVyRsu3SNzwWzce7Qhmw AMExx8E3ehUgkx5w+l07HKw4zHNchRAL5aXI9jEoX9xLCO20lbuNIMG1iKG5tWiB 3vUsjS7P/OdkPAhppY8WnpvELL8gp8gzvdHVcWA4lJLV+2EJDZwSWxht2uGwDEsO Zhpb7SYJE66nxTnu -----END CERTIFICATE-----Generated at Fri Nov 22 00:59:19 2024 by rpki-client on console-fra.rpki-client.org