$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft File: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft (raw, json) Hash identifier: rxi8giQ7E05qXtP4zsuEk8CpzvMHZ5XaJVt6ePI+8dY= Subject key identifier: 01:31:34:22:01:FE:35:D0:A8:10:20:6E:F5:90:9B:F1:AE:1E:01:EB Authority key identifier: FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D Certificate issuer: /CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Certificate serial: 7E93D6CB1BDF12C33F9CD637B93F8BDBDCAAB14F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft Manifest number: 11 Signing time: Sat 28 Dec 2024 18:27:28 +0000 Manifest this update: Sat 28 Dec 2024 18:22:28 +0000 Manifest next update: Sun 29 Dec 2024 20:02:28 +0000 Files and hashes: 1: FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl (hash: DHXq+TlbcmWqVI67J74OGkDdT6VnFv8WydjhPq3OUro=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/da272869-5127-4af6-8053-b8617ccb9de3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 29 Dec 2024 20:02:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:93:d6:cb:1b:df:12:c3:3f:9c:d6:37:b9:3f:8b:db:dc:aa:b1:4f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80 Validity Not Before: Dec 28 18:22:28 2024 GMT Not After : Dec 29 20:02:28 2024 GMT Subject: CN=0131342201FE35D0A810206EF5909BF1AE1E01EB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ad:38:f9:b0:7d:16:24:18:83:b5:f1:44:ef: 75:43:9d:90:24:51:04:bb:dc:76:38:d7:29:96:5e: 65:db:f3:2d:a8:b3:5e:bf:a3:8f:15:04:b9:c5:3f: db:2d:38:29:d2:a4:15:28:1e:a7:de:9f:f0:fd:b4: 6f:69:12:fd:a2:7f:18:20:98:a1:9c:56:5f:9f:7d: b5:c1:08:19:ef:2c:df:33:82:24:52:ce:d0:7d:7a: f1:a6:c4:94:0e:cf:c9:08:1a:26:a0:15:6c:94:37: 9d:8f:89:89:75:63:8c:b2:cd:ed:5e:3b:ae:ba:85: a3:60:e8:d9:83:e6:f8:23:8f:80:2e:08:2d:be:10: e5:98:f3:1a:8b:93:58:cb:4e:99:df:6b:3e:e9:56: 75:3e:ed:4b:41:e2:19:00:13:5f:70:a5:ff:a3:d8: 2e:54:ac:14:77:5e:bc:66:ef:19:93:7b:31:79:a1: cb:93:fe:6e:c2:fc:d3:d7:ce:7e:bc:50:2c:a4:4a: 76:90:cc:68:38:e2:c3:2f:01:b5:b2:39:a9:71:c9: 36:20:c0:5e:5a:f8:4c:4a:14:45:81:c9:ce:87:46: 0b:49:55:24:24:07:47:42:0c:91:62:80:91:9d:d7: 01:c7:57:7b:fe:dc:25:b9:3e:06:a4:27:d1:a9:ed: 08:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 01:31:34:22:01:FE:35:D0:A8:10:20:6E:F5:90:9B:F1:AE:1E:01:EB X509v3 Authority Key Identifier: keyid:FA:A6:C4:25:29:3C:8A:7F:9C:2F:C9:84:EF:0E:26:A2:76:3D:97:7D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/da272869-5127-4af6-8053-b8617ccb9de3/03068cbe8894d5d735f91edb9e43375cc57c36d1324285aa80.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23cdf9ca-dd64-4f31-abf3-0f32b8e7fe79/3/FAA6C425293C8A7F9C2FC984EF0E26A2763D977D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 41:65:1b:ba:3b:f1:9e:f1:ee:35:33:be:98:b7:da:73:e5:bd: 99:ec:55:7c:de:36:49:ac:57:ba:07:0d:c4:c2:80:3e:2f:ec: c3:f6:81:9a:60:4c:42:f2:79:29:f9:09:1a:2e:49:e1:08:26: 8d:82:e2:77:87:f0:96:9c:eb:b4:59:7a:4e:5b:9c:fd:95:30: 08:04:6e:78:98:12:fc:11:62:e4:3c:85:17:f0:5b:aa:2a:81: 3e:fc:e2:cc:00:18:d6:63:51:b3:93:1c:e0:ed:ff:31:0f:a9: f2:d2:8f:ae:45:5b:57:ec:05:14:4b:f5:cc:e5:d5:aa:2d:c3: 85:20:86:36:83:fe:b9:cf:1a:30:10:83:65:eb:60:4a:38:ce: 70:f2:94:fc:6a:50:5a:fe:53:11:cf:e7:30:0d:8e:ec:af:23: 40:f8:77:27:e6:4f:fc:ce:80:ce:f2:7e:5e:2a:12:ef:d9:51: ed:6d:65:f2:2f:25:ad:ea:3d:02:3b:f3:45:8f:ad:60:d3:52: 19:74:d4:dc:22:cf:40:fb:01:22:d3:8d:4c:ab:9a:d6:65:26: 91:bf:fd:5d:65:4a:b7:0a:76:a9:55:7d:aa:c8:c8:5f:93:76: 1d:85:ff:3d:52:47:54:c5:45:2a:b1:09:8b:1d:76:82:39:12: 89:d6:5e:f3 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUfpPWyxvfEsM/nNY3uT+L29yqsU8wDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNj NTdjMzZkMTMyNDI4NWFhODAwHhcNMjQxMjI4MTgyMjI4WhcNMjQxMjI5MjAwMjI4 WjAzMTEwLwYDVQQDEygwMTMxMzQyMjAxRkUzNUQwQTgxMDIwNkVGNTkwOUJGMUFF MUUwMUVCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzq04+bB9FiQY g7XxRO91Q52QJFEEu9x2ONcpll5l2/MtqLNev6OPFQS5xT/bLTgp0qQVKB6n3p/w /bRvaRL9on8YIJihnFZfn321wQgZ7yzfM4IkUs7QfXrxpsSUDs/JCBomoBVslDed j4mJdWOMss3tXjuuuoWjYOjZg+b4I4+ALggtvhDlmPMai5NYy06Z32s+6VZ1Pu1L QeIZABNfcKX/o9guVKwUd168Zu8Zk3sxeaHLk/5uwvzT185+vFAspEp2kMxoOOLD LwG1sjmpcck2IMBeWvhMShRFgcnOh0YLSVUkJAdHQgyRYoCRndcBx1d7/twluT4G pCfRqe0ImQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFAExNCIB/jXQqBAgbvWQm/Gu HgHrMB8GA1UdIwQYMBaAFPqmxCUpPIp/nC/JhO8OJqJ2PZd9MA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzIzY2RmOWNhLWRkNjQtNGYzMS1hYmYz LTBmMzJiOGU3ZmU3OS8zL0ZBQTZDNDI1MjkzQzhBN0Y5QzJGQzk4NEVGMEUyNkEy NzYzRDk3N0QuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmIt NGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kYTI3Mjg2OS01MTI3LTRhZjYtODA1My1i ODYxN2NjYjlkZTMvMDMwNjhjYmU4ODk0ZDVkNzM1ZjkxZWRiOWU0MzM3NWNjNTdj MzZkMTMyNDI4NWFhODAuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MjNjZGY5Y2EtZGQ2NC00ZjMxLWFiZjMtMGYzMmI4ZTdmZTc5LzMvRkFBNkM0MjUy OTNDOEE3RjlDMkZDOTg0RUYwRTI2QTI3NjNEOTc3RC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEFlG7o7 8Z7x7jUzvpi32nPlvZnsVXzeNkmsV7oHDcTCgD4v7MP2gZpgTELyeSn5CRouSeEI Jo2C4neH8Jac67RZek5bnP2VMAgEbniYEvwRYuQ8hRfwW6oqgT784swAGNZjUbOT HODt/zEPqfLSj65FW1fsBRRL9czl1aotw4UghjaD/rnPGjAQg2XrYEo4znDylPxq UFr+UxHP5zANjuyvI0D4dyfmT/zOgM7yfl4qEu/ZUe1tZfIvJa3qPQI780WPrWDT Uhl01Nwiz0D7ASLTjUyrmtZlJpG//V1lSrcKdqlVfarIyF+Tdh2F/z1SR1TFRSqx CYsddoI5EonWXvM= -----END CERTIFICATE-----Generated at Sat Dec 28 21:07:29 2024 by rpki-client on console-ams.rpki-client.org