$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft File: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft (raw, json) Hash identifier: KVZGHOJxIHG+/3yhiMHU9YyXXLXFi8btbca8PC5NaEs= Subject key identifier: D9:74:2F:49:49:0E:A9:89:5E:81:2E:D2:E9:20:81:6A:5E:0F:9F:39 Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB Certificate issuer: /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB Certificate serial: 6ADC4D1811080CA09883176AFC8E3F8443B634C2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft Manifest number: A1 Signing time: Thu 19 Sep 2024 16:02:46 +0000 Manifest this update: Thu 19 Sep 2024 15:57:46 +0000 Manifest next update: Fri 20 Sep 2024 20:00:46 +0000 Files and hashes: 1: 326130613a363034343a623062303a3a2f34342d3434203d3e20323135323136.roa (hash: hPbd4k29ivFHm5U0TITZAT0kaKm6DkOAv/scdulFqpo=) 2: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl (hash: /KMzisB9nfcx+85MGonekNkO5eGpUuRrah88uF4Rte8=) 3: 326130613a363034343a623030303a3a2f34302d3430203d3e2030.roa (hash: WoEoodpHHPQjYZ1nurqcWGEgzZiv+31vPY0yRIsxoMQ=) 4: 326130613a363034343a623030303a3a2f34342d3434203d3e20323135323136.roa (hash: XSdZ/3ujw8VKYw+c6yv2T1vcl8TZmipaKYVRnlmd6mk=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 07:41:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:dc:4d:18:11:08:0c:a0:98:83:17:6a:fc:8e:3f:84:43:b6:34:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB Validity Not Before: Sep 19 15:57:46 2024 GMT Not After : Sep 20 20:00:46 2024 GMT Subject: CN=D9742F49490EA9895E812ED2E920816A5E0F9F39 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:41:9a:d5:f3:97:6d:0f:8c:56:ca:22:22:43: 48:0b:45:4a:05:11:3e:6d:90:bd:6a:a9:cd:64:fd: 84:9e:63:44:66:9e:89:a8:68:1a:0c:b6:36:9d:17: e5:c8:40:c3:20:2b:f8:36:2f:fa:da:30:c9:08:32: 00:c0:bc:00:9f:c3:61:d2:07:6c:45:62:66:97:66: 3d:ae:b6:87:d5:a6:8b:ed:24:cc:ba:4e:e7:22:04: 47:9e:3f:1d:f2:04:b3:12:e5:7e:e4:f4:cc:99:9c: ce:32:73:d8:a9:77:eb:c1:d5:09:20:7a:46:0a:56: e3:d3:70:0a:24:87:50:fb:bc:ce:bd:8f:10:b6:f8: d0:d7:1f:9a:53:89:9d:c2:6e:d8:a6:11:7a:9e:c4: d2:e4:b5:a7:82:9c:dd:21:ed:f1:f2:53:aa:9c:e4: b4:65:97:83:8b:1e:aa:a4:ce:a2:da:1c:e8:2d:7c: da:d5:57:06:0c:d5:14:ba:b7:10:f2:f8:38:b2:0d: 43:13:ca:26:75:ad:43:51:a1:e1:5b:32:63:6c:ba: b2:84:1a:a2:a0:ea:5d:e5:0e:30:9e:61:cb:53:28: ce:7b:c2:d4:34:0d:94:9d:e0:8e:8d:79:1e:2e:6c: d5:07:e6:4a:ea:67:6a:ae:e2:e3:74:1e:15:63:bf: ce:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D9:74:2F:49:49:0E:A9:89:5E:81:2E:D2:E9:20:81:6A:5E:0F:9F:39 X509v3 Authority Key Identifier: keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 29:e6:c4:1b:0b:72:b5:4e:b0:bc:14:fc:52:03:ba:7d:fd:79: 71:a6:4b:b4:23:9e:9d:29:eb:3a:04:ef:ab:e7:21:6f:df:f6: 7a:02:99:da:9e:1f:d4:2e:03:b7:f2:0c:63:e8:27:17:e5:79: 4c:bb:19:1f:e1:ec:a7:7e:cf:57:31:b9:3f:7b:a9:47:23:58: 26:05:46:44:06:00:bc:de:df:57:0d:a0:80:3c:0c:07:ec:5a: af:65:25:e9:8b:e9:3d:64:32:52:29:d6:ac:27:61:5e:f6:ac: 3b:92:3b:f1:47:ab:ce:20:02:43:55:02:7d:15:0a:2d:2b:9f: 88:1c:68:8b:9e:05:56:31:6f:c1:ef:87:78:02:e4:31:97:bf: 50:41:45:21:f8:b0:54:37:13:03:e9:50:2d:7a:77:cf:7a:dd: 4f:e2:7d:fd:fb:d1:95:71:4b:76:a8:c4:87:65:80:a2:e1:a0: cd:26:7e:06:5c:0d:a9:cc:b7:eb:27:8a:d0:fc:68:61:6e:34: 1f:21:e5:65:69:47:3e:55:d2:83:f7:a4:4e:a3:88:58:f1:07: 4c:28:0a:bc:7b:2b:c2:53:46:d3:b8:a9:3b:5f:1c:da:93:59: 3d:06:47:03:4c:aa:f5:b5:5a:e7:0c:f5:61:8c:55:cf:0f:4b: d7:3f:db:3f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUatxNGBEIDKCYgxdq/I4/hEO2NMIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJD NTZGQzZBQjAeFw0yNDA5MTkxNTU3NDZaFw0yNDA5MjAyMDAwNDZaMDMxMTAvBgNV BAMTKEQ5NzQyRjQ5NDkwRUE5ODk1RTgxMkVEMkU5MjA4MTZBNUUwRjlGMzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDCQZrV85dtD4xWyiIiQ0gLRUoF ET5tkL1qqc1k/YSeY0RmnomoaBoMtjadF+XIQMMgK/g2L/raMMkIMgDAvACfw2HS B2xFYmaXZj2utofVpovtJMy6TuciBEeePx3yBLMS5X7k9MyZnM4yc9ipd+vB1Qkg ekYKVuPTcAokh1D7vM69jxC2+NDXH5pTiZ3CbtimEXqexNLktaeCnN0h7fHyU6qc 5LRll4OLHqqkzqLaHOgtfNrVVwYM1RS6txDy+DiyDUMTyiZ1rUNRoeFbMmNsurKE GqKg6l3lDjCeYctTKM57wtQ0DZSd4I6NeR4ubNUH5krqZ2qu4uN0HhVjv87lAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU2XQvSUkOqYlegS7S6SCBal4PnzkwHwYDVR0j BBgwFoAUvRwZzusMP2+EdASK7cjNAsVvxqswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw YWY1LzAvQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJDNTZGQzZBQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFF REM4Q0QwMkM1NkZDNkFCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzI0ZGI2ZTBlLTY5NmMtNGY4OS04ZDQ4LTI3NDU1OTcwMGFmNS8wL0JEMUMxOUNF RUIwQzNGNkY4NDc0MDQ4QUVEQzhDRDAyQzU2RkM2QUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAp5sQb C3K1TrC8FPxSA7p9/Xlxpku0I56dKes6BO+r5yFv3/Z6Apnanh/ULgO38gxj6CcX 5XlMuxkf4eynfs9XMbk/e6lHI1gmBUZEBgC83t9XDaCAPAwH7FqvZSXpi+k9ZDJS KdasJ2Fe9qw7kjvxR6vOIAJDVQJ9FQotK5+IHGiLngVWMW/B74d4AuQxl79QQUUh +LBUNxMD6VAtenfPet1P4n39+9GVcUt2qMSHZYCi4aDNJn4GXA2pzLfrJ4rQ/Ghh bjQfIeVlaUc+VdKD96ROo4hY8QdMKAq8eyvCU0bTuKk7Xxzak1k9BkcDTKr1tVrn DPVhjFXPD0vXP9s/ -----END CERTIFICATE-----Generated at Thu Sep 19 20:31:30 2024 by rpki-client on console-ams.rpki-client.org