$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft File: 069FAF47FF48AEF4C98F5097074530A74C111AB9.mft (raw, json) Hash identifier: Klz+Rde651BOtS6yK66kAz50si9c3wLAlt3uaDND/ic= Subject key identifier: 63:3B:26:9B:D8:03:34:28:23:BB:71:BF:97:A8:EE:43:05:F8:86:BC Authority key identifier: 06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 Certificate issuer: /CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Certificate serial: 4FDA6F2B402E2320E1B184858968F3663C551982 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft Manifest number: 0117 Signing time: Sat 22 Jun 2024 04:42:38 +0000 Manifest this update: Sat 22 Jun 2024 04:37:38 +0000 Manifest next update: Sun 23 Jun 2024 08:14:38 +0000 Files and hashes: 1: 326130663a383563313a3630303a3a2f34302d3430203d3e20323136333234.roa (hash: /HAH9nC8dPQ7yd0oAcO7DOwkfVMv8S3IiLfZ728qwqU=) 2: 326130663a383563313a3335313a3a2f34382d3438203d3e20323135373239.roa (hash: vb9xXREoRs+xO/QpI/IXxg73iwc4uf/4wgvPzNsJ2SM=) 3: 069FAF47FF48AEF4C98F5097074530A74C111AB9.crl (hash: 1UkyNPV2LfPTXji8nJPathddKd4EeL3Vk6yzyDUInNg=) 4: 326130663a383563313a3335373a3a2f34382d3438203d3e20323135363137.roa (hash: YMu8WLqfkBVQv/xJG5P8ezCvqvqY3s+/ZmFue5GzF4w=) 5: 326130663a383563313a3336333a3a2f34382d3438203d3e20323135363137.roa (hash: UbNylh5P6nuf5cNR2u+/87y22yS7yGAzdkJKrmcwv2M=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 22:52:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:da:6f:2b:40:2e:23:20:e1:b1:84:85:89:68:f3:66:3c:55:19:82 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=069FAF47FF48AEF4C98F5097074530A74C111AB9 Validity Not Before: Jun 22 04:37:38 2024 GMT Not After : Jun 23 08:14:38 2024 GMT Subject: CN=633B269BD803342823BB71BF97A8EE4305F886BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e3:5b:f0:29:ff:f0:78:06:b3:68:27:df:df:23: 58:d8:84:1a:4f:f1:16:5b:07:c7:f7:bb:14:17:5e: d9:a0:73:84:e7:1f:56:ac:28:84:fb:dd:1c:f4:17: a8:b9:a2:5d:fe:f9:93:f2:fb:25:8d:a8:5f:8c:41: 3f:d0:9b:fb:73:2d:c2:5d:41:a8:cb:c9:8f:38:3c: 76:6a:7a:98:03:37:55:f4:3e:b0:bc:0f:fb:42:4c: 06:d8:d2:12:76:83:b8:18:39:d4:9f:05:11:8e:66: 31:83:d6:37:2a:56:1b:b8:fc:b0:b4:2b:9a:76:e9: 4d:e8:c0:49:47:0f:c1:dd:ee:0c:b1:96:5a:7a:e3: 09:69:d1:42:1f:7a:16:44:9d:67:56:93:b3:07:9d: 9c:0c:1c:2b:5c:1c:87:11:da:a8:1d:9f:de:51:94: b8:67:06:3e:fd:d1:12:62:f4:0c:f4:f7:27:03:59: 05:25:37:85:2f:fb:a5:b1:ff:e8:af:dc:af:bf:04: 7c:c1:03:98:9c:be:fd:06:78:b8:0f:c8:35:f8:bd: 7a:97:52:70:a6:8c:a4:32:c9:2a:02:98:cb:3a:fe: a5:ce:63:60:49:d3:56:d0:a1:01:4d:f4:01:2b:6b: 19:5e:df:e0:24:3a:d6:d8:76:17:43:3b:1d:71:a2: 5e:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:3B:26:9B:D8:03:34:28:23:BB:71:BF:97:A8:EE:43:05:F8:86:BC X509v3 Authority Key Identifier: keyid:06:9F:AF:47:FF:48:AE:F4:C9:8F:50:97:07:45:30:A7:4C:11:1A:B9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/069FAF47FF48AEF4C98F5097074530A74C111AB9.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/23d5f682-b51b-4812-b8b1-430e38683748/2/069FAF47FF48AEF4C98F5097074530A74C111AB9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 2b:36:ac:c9:ec:df:b8:01:94:55:cd:1b:13:2a:0b:6e:43:d8: 68:30:a2:0f:a1:84:89:49:2c:67:50:14:88:73:a3:7b:7d:6c: 1b:62:27:51:10:d1:bf:04:48:90:24:25:de:9c:67:d6:ad:44: 26:dd:31:ad:3b:42:2f:8e:bc:c1:e4:02:07:76:6e:18:d2:0f: 1f:62:6c:a9:3f:90:54:e6:cb:77:c7:8a:61:1b:7f:21:cd:b6: 02:d2:64:5b:c7:19:06:d1:07:b3:64:b9:f8:02:3f:2f:e8:23: b3:9d:bc:3d:77:3d:09:2b:49:d0:22:ae:ae:e4:33:74:02:0f: 32:55:7c:95:00:6d:28:cf:b0:b6:ad:6d:d9:48:a1:c9:50:16: 42:68:a6:be:bb:5f:e6:66:ec:66:0c:10:15:5d:f3:7b:f4:96: 18:74:51:90:5f:95:97:56:f5:a1:c7:94:65:67:2d:5c:d8:18: ca:31:4b:77:66:8c:ac:0f:0b:b7:e0:99:19:04:86:2b:76:a5: 42:a4:8b:d9:1f:34:14:f7:67:37:df:a7:18:bd:0d:f1:a0:cc: 5d:22:6b:77:a4:e9:d8:8f:0a:6b:d2:1a:5f:37:60:b2:75:35: f7:3e:46:34:fb:dd:32:6e:2f:2e:7b:fd:4c:65:8a:39:4d:be: 0a:05:38:ee -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUT9pvK0AuIyDhsYSFiWjzZjxVGYIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0 QzExMUFCOTAeFw0yNDA2MjIwNDM3MzhaFw0yNDA2MjMwODE0MzhaMDMxMTAvBgNV BAMTKDYzM0IyNjlCRDgwMzM0MjgyM0JCNzFCRjk3QThFRTQzMDVGODg2QkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDjW/Ap//B4BrNoJ9/fI1jYhBpP 8RZbB8f3uxQXXtmgc4TnH1asKIT73Rz0F6i5ol3++ZPy+yWNqF+MQT/Qm/tzLcJd QajLyY84PHZqepgDN1X0PrC8D/tCTAbY0hJ2g7gYOdSfBRGOZjGD1jcqVhu4/LC0 K5p26U3owElHD8Hd7gyxllp64wlp0UIfehZEnWdWk7MHnZwMHCtcHIcR2qgdn95R lLhnBj790RJi9Az09ycDWQUlN4Uv+6Wx/+iv3K+/BHzBA5icvv0GeLgPyDX4vXqX UnCmjKQyySoCmMs6/qXOY2BJ01bQoQFN9AEraxle3+AkOtbYdhdDOx1xol7rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUYzsmm9gDNCgju3G/l6juQwX4hrwwHwYDVR0j BBgwFoAUBp+vR/9IrvTJj1CXB0Uwp0wRGrkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjNkNWY2ODItYjUxYi00ODEyLWI4YjEtNDMwZTM4Njgz NzQ4LzIvMDY5RkFGNDdGRjQ4QUVGNEM5OEY1MDk3MDc0NTMwQTc0QzExMUFCOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8wNjlGQUY0N0ZGNDhBRUY0Qzk4RjUwOTcw NzQ1MzBBNzRDMTExQUI5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzIzZDVmNjgyLWI1MWItNDgxMi1iOGIxLTQzMGUzODY4Mzc0OC8yLzA2OUZBRjQ3 RkY0OEFFRjRDOThGNTA5NzA3NDUzMEE3NEMxMTFBQjkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQArNqzJ 7N+4AZRVzRsTKgtuQ9hoMKIPoYSJSSxnUBSIc6N7fWwbYidRENG/BEiQJCXenGfW rUQm3TGtO0IvjrzB5AIHdm4Y0g8fYmypP5BU5st3x4phG38hzbYC0mRbxxkG0Qez ZLn4Aj8v6COznbw9dz0JK0nQIq6u5DN0Ag8yVXyVAG0oz7C2rW3ZSKHJUBZCaKa+ u1/mZuxmDBAVXfN79JYYdFGQX5WXVvWhx5RlZy1c2BjKMUt3ZoysDwu34JkZBIYr dqVCpIvZHzQU92c336cYvQ3xoMxdImt3pOnYjwpr0hpfN2CydTX3PkY0+90ybi8u e/1MZYo5Tb4KBTju -----END CERTIFICATE-----Generated at Sat Jun 22 05:18:12 2024 by rpki-client on console-fra.rpki-client.org