$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft File: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft (raw, json) Hash identifier: PysI7MaINETUkUjHphEj/byD6CaCeU04zkR+QUo904k= Subject key identifier: 06:6B:33:A9:8F:B1:79:1A:CB:A5:F5:86:83:4F:05:8C:B5:6C:2E:EC Authority key identifier: BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB Certificate issuer: /CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB Certificate serial: 1A1C396D5465E02BB84B17EFEAC2F0A108609EA7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft Manifest number: F5 Signing time: Thu 21 Nov 2024 16:49:25 +0000 Manifest this update: Thu 21 Nov 2024 16:44:25 +0000 Manifest next update: Fri 22 Nov 2024 19:53:25 +0000 Files and hashes: 1: 326130613a363034343a623030303a3a2f34302d3430203d3e2030.roa (hash: WoEoodpHHPQjYZ1nurqcWGEgzZiv+31vPY0yRIsxoMQ=) 2: 326130613a363034343a623030303a3a2f34342d3434203d3e20323135323136.roa (hash: XSdZ/3ujw8VKYw+c6yv2T1vcl8TZmipaKYVRnlmd6mk=) 3: 326130613a363034343a623062303a3a2f34342d3434203d3e20323135323136.roa (hash: hPbd4k29ivFHm5U0TITZAT0kaKm6DkOAv/scdulFqpo=) 4: BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl (hash: iuEyvp28qFS4Jf2YPLLPfDHuGLt80Yw57VQbyXu8sVc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:1c:39:6d:54:65:e0:2b:b8:4b:17:ef:ea:c2:f0:a1:08:60:9e:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB Validity Not Before: Nov 21 16:44:25 2024 GMT Not After : Nov 22 19:53:25 2024 GMT Subject: CN=066B33A98FB1791ACBA5F586834F058CB56C2EEC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:ff:83:f2:fc:a5:c1:c7:6c:70:7b:4b:32:4d: 22:2c:27:26:33:fc:ae:4b:ac:ad:2b:64:ef:66:d0: 14:e6:ce:79:e4:9e:47:18:a7:71:e2:dd:f6:f2:32: 19:52:0d:81:a7:67:09:36:8f:6a:41:30:36:6b:fc: 99:28:68:bd:84:77:00:d8:a2:71:d9:03:62:43:13: 16:68:c1:5b:c3:55:5e:e5:65:e2:e3:45:39:b6:72: b1:66:e2:f2:75:43:78:2a:24:c6:04:fc:38:67:a8: e8:6b:6b:c1:e5:be:3c:bf:84:db:9a:f9:fc:53:84: 6a:17:d8:94:07:8c:bc:7c:db:82:0d:0b:c7:67:90: 7f:c7:2b:e5:9b:68:f7:52:8c:07:03:cf:2f:83:ca: b9:fb:92:1a:50:5f:24:d6:ba:97:02:0c:14:28:6c: b1:cd:7c:c2:75:ff:13:47:cb:20:ad:96:f5:17:50: 5e:83:64:dc:d2:10:be:13:f5:43:6e:5a:d6:99:f8: 47:b3:b3:1f:fc:07:a9:7d:d6:3c:06:26:1d:db:84: 79:28:0f:87:d6:c3:1e:1e:c2:09:58:10:b7:5a:2b: 32:f4:51:a2:48:a7:84:7a:77:b6:42:12:fa:44:9e: f0:9d:75:75:cf:82:05:74:cc:01:64:ad:74:f7:49: e4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:6B:33:A9:8F:B1:79:1A:CB:A5:F5:86:83:4F:05:8C:B5:6C:2E:EC X509v3 Authority Key Identifier: keyid:BD:1C:19:CE:EB:0C:3F:6F:84:74:04:8A:ED:C8:CD:02:C5:6F:C6:AB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/24db6e0e-696c-4f89-8d48-274559700af5/0/BD1C19CEEB0C3F6F8474048AEDC8CD02C56FC6AB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:d2:d7:2a:40:4c:5f:60:6e:5e:f4:41:ab:4c:9b:8c:c7:b2: e2:bb:42:71:93:10:d0:22:8c:e7:98:84:2e:33:99:e2:b5:05: e2:d1:25:05:14:9a:77:0a:e2:d8:23:98:cc:68:5d:46:16:63: 24:58:45:f3:54:4c:ea:2b:94:44:07:8b:fd:80:c1:bf:42:4b: bf:04:ef:08:5b:c4:2a:85:14:b5:15:0c:e4:f1:b6:bf:c8:c5: a3:04:c3:74:76:6a:7f:15:a7:17:36:ae:bf:e7:ec:1f:a1:65: 27:d4:34:6b:07:0c:d7:c0:e4:b5:08:3e:a0:d3:76:b3:8b:ca: f3:5d:7d:14:dd:07:6e:93:0b:4c:d5:d2:7b:75:f1:98:57:8b: 40:49:50:f2:3b:04:9b:3a:03:a3:19:0f:9a:e8:6c:14:07:66: 23:98:92:e9:51:c2:89:ba:d4:3d:98:f5:62:07:2b:76:99:7a: 60:54:c2:4d:f0:43:31:c8:06:e0:5e:4c:1d:10:de:58:64:b9: 2d:70:a6:da:d4:b2:28:4d:7c:ad:35:3c:40:4b:fd:c3:f0:dc: 96:34:ac:11:ae:47:48:52:1e:34:25:05:58:20:fe:40:99:45: 11:0a:df:3d:1c:7a:38:4d:cf:9c:18:9d:52:03:45:00:f3:ea: 21:f0:2e:89 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGhw5bVRl4Cu4Sxfv6sLwoQhgnqcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJD NTZGQzZBQjAeFw0yNDExMjExNjQ0MjVaFw0yNDExMjIxOTUzMjVaMDMxMTAvBgNV BAMTKDA2NkIzM0E5OEZCMTc5MUFDQkE1RjU4NjgzNEYwNThDQjU2QzJFRUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDO/4Py/KXBx2xwe0syTSIsJyYz /K5LrK0rZO9m0BTmznnknkcYp3Hi3fbyMhlSDYGnZwk2j2pBMDZr/JkoaL2EdwDY onHZA2JDExZowVvDVV7lZeLjRTm2crFm4vJ1Q3gqJMYE/DhnqOhra8Hlvjy/hNua +fxThGoX2JQHjLx824INC8dnkH/HK+WbaPdSjAcDzy+Dyrn7khpQXyTWupcCDBQo bLHNfMJ1/xNHyyCtlvUXUF6DZNzSEL4T9UNuWtaZ+Eezsx/8B6l91jwGJh3bhHko D4fWwx4ewglYELdaKzL0UaJIp4R6d7ZCEvpEnvCddXXPggV0zAFkrXT3SeT7AgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBmszqY+xeRrLpfWGg08FjLVsLuwwHwYDVR0j BBgwFoAUvRwZzusMP2+EdASK7cjNAsVvxqswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMjRkYjZlMGUtNjk2Yy00Zjg5LThkNDgtMjc0NTU5NzAw YWY1LzAvQkQxQzE5Q0VFQjBDM0Y2Rjg0NzQwNDhBRURDOENEMDJDNTZGQzZBQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CRDFDMTlDRUVCMEMzRjZGODQ3NDA0OEFF REM4Q0QwMkM1NkZDNkFCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzI0ZGI2ZTBlLTY5NmMtNGY4OS04ZDQ4LTI3NDU1OTcwMGFmNS8wL0JEMUMxOUNF RUIwQzNGNkY4NDc0MDQ4QUVEQzhDRDAyQzU2RkM2QUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAV0tcq QExfYG5e9EGrTJuMx7Liu0JxkxDQIoznmIQuM5nitQXi0SUFFJp3CuLYI5jMaF1G FmMkWEXzVEzqK5REB4v9gMG/Qku/BO8IW8QqhRS1FQzk8ba/yMWjBMN0dmp/FacX Nq6/5+wfoWUn1DRrBwzXwOS1CD6g03azi8rzXX0U3QdukwtM1dJ7dfGYV4tASVDy OwSbOgOjGQ+a6GwUB2YjmJLpUcKJutQ9mPViByt2mXpgVMJN8EMxyAbgXkwdEN5Y ZLktcKba1LIoTXytNTxAS/3D8NyWNKwRrkdIUh40JQVYIP5AmUURCt89HHo4Tc+c GJ1SA0UA8+oh8C6J -----END CERTIFICATE-----Generated at Thu Nov 21 18:06:08 2024 by rpki-client on console-fra.rpki-client.org