$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft File: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft (raw, json) Hash identifier: jWxsbvl5z1L9CcMpML86fbOvxdezMT+6CoNnT96CqDo= Subject key identifier: 19:90:8B:E2:34:3C:56:36:34:E0:20:58:D5:5E:A9:46:45:77:C1:24 Authority key identifier: CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD Certificate issuer: /CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Certificate serial: 466D2C25DDB34B3885FCB5256E6CFA7E391CD100 Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft Manifest number: 3B Signing time: Wed 23 Oct 2024 02:22:45 +0000 Manifest this update: Wed 23 Oct 2024 02:17:45 +0000 Manifest next update: Thu 24 Oct 2024 05:50:45 +0000 Files and hashes: 1: CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl (hash: 5OFHqtnbUkoQytYth7Pvl86ZnFTjMGcj/m89llZSVgM=) 2: 326130363a613030333a313131313a3a2f34382d3438203d3e20323030363736.roa (hash: Q5gjl44KzFA6g8+tW8lygBoA3oaZ4qvSEamF1iUuuio=) 3: 326130363a613030333a3a2f34382d3438203d3e20323030363736.roa (hash: ahz6gPUt4YrcLpOD9Ozfm8bYrgH1OTsLIpfe4cqXpMc=) 4: 326130363a613030333a666666663a3a2f34382d3438203d3e203530373535.roa (hash: 4NAkvNhOgG+FdQOl5H1HgnY8A0ca/GD2rGJr4GFMtSI=) 5: 39342e32342e3130382e302f32342d3234203d3e20323030363736.roa (hash: Nyn9oM7uD3t9zeyaIzVAMa0fIXr9id1B4aigY0eVgwU=) 6: 326130363a613030333a623030623a3a2f34382d3438203d3e20323030363736.roa (hash: wTqD67Uqf1W/idPthA4sHinaJ2FPLZ88IN640ixPrCU=) 7: 326130363a613030333a313333373a3a2f34382d3438203d3e20323030363736.roa (hash: vFXjegY0vnmzgiKwFkv4TNQvgCv0y7neNveGux2ZS+w=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 21:53:17 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:6d:2c:25:dd:b3:4b:38:85:fc:b5:25:6e:6c:fa:7e:39:1c:d1:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD Validity Not Before: Oct 23 02:17:45 2024 GMT Not After : Oct 24 05:50:45 2024 GMT Subject: CN=19908BE2343C563634E02058D55EA9464577C124 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:0c:39:af:f4:2f:be:73:8b:ef:34:a6:01:95: 43:d2:b0:dc:6c:9e:12:a7:67:d6:6f:dd:30:bc:5f: 44:d0:bb:b2:a7:50:c4:eb:a9:51:4d:b8:72:9d:82: 8f:83:d8:a3:74:5a:30:05:b8:49:e6:00:37:7e:55: a9:b2:d8:31:64:72:99:d9:cf:6f:b8:1c:65:74:44: 8a:49:99:83:21:dc:05:1e:cc:21:ed:64:88:ad:fa: 1b:bf:f4:d1:7d:01:4d:a1:d0:a8:c5:74:09:1b:50: 59:ac:6b:8f:f4:c0:21:bb:0f:b1:d5:47:9b:20:3d: 10:87:83:6d:80:43:91:02:fe:be:71:28:34:ce:82: 4b:90:03:4a:e4:c8:a7:45:2e:df:7f:f8:62:fe:e0: e6:57:83:31:e6:af:cf:1c:94:df:f8:02:22:bb:0a: 37:87:8e:48:0e:28:61:07:e5:26:b3:2f:ac:07:fe: 22:1e:bf:25:8d:fb:75:e1:3a:84:8a:26:ad:a7:3b: a1:94:68:3d:1f:9a:79:10:29:dd:c6:88:1c:f8:a4: 0e:93:63:25:01:f4:1a:7a:65:6f:0b:05:53:8b:da: 6b:88:83:22:ea:85:12:0b:ab:da:80:c2:04:3f:af: 7d:97:a2:99:a8:17:f7:56:fe:f0:bd:ed:77:27:71: 04:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 19:90:8B:E2:34:3C:56:36:34:E0:20:58:D5:5E:A9:46:45:77:C1:24 X509v3 Authority Key Identifier: keyid:CE:1B:4F:43:67:B6:A5:5F:34:CA:98:1A:0D:6C:A7:58:3F:95:51:CD X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/2aca3ca6-34cc-4772-bac0-a35dd0195ce7/1/CE1B4F4367B6A55F34CA981A0D6CA7583F9551CD.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 52:ce:07:24:bc:64:a2:1a:09:f5:86:be:a5:7b:ad:2b:d0:03: b2:69:35:6d:37:9c:1c:be:1d:b8:3f:40:a4:3f:7b:38:91:e6: 1d:b1:60:43:b4:46:f2:15:db:62:86:d2:a4:47:b6:90:7e:1e: f1:bb:37:ac:f7:b7:de:30:6f:e2:b5:52:39:05:ff:37:52:e3: d6:27:32:5b:67:2c:d2:63:e0:6a:37:82:26:e5:cd:3e:c4:92: 75:c0:c7:c3:6c:01:6c:29:08:a8:cc:35:e4:cc:7f:11:45:2a: be:d2:e3:ae:fd:0e:24:2f:ab:89:53:e8:c9:e2:00:99:86:b2: 54:09:e4:df:14:eb:85:6b:ce:e8:c6:9a:9d:fe:17:af:25:35: 0f:da:02:c7:e5:f0:f0:fb:83:3a:69:02:06:88:9d:51:9e:e1: 4a:d0:a5:4d:49:21:50:cf:aa:7f:43:ad:7f:1c:12:32:0b:a4: de:59:e1:4f:51:aa:42:b9:e1:0f:01:d1:e6:ce:26:81:78:f3: 1a:e2:d1:8d:36:89:8f:bf:ec:4a:f9:5a:3b:71:d3:6a:9e:99: 50:46:3d:b1:c6:90:70:cd:aa:ea:55:61:27:a6:88:5b:97:a9: 57:d5:c9:65:c6:87:cd:95:7a:ad:1c:60:c2:43:c3:91:c9:cb: 64:1f:02:64 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIURm0sJd2zSziF/LUlbmz6fjkc0QAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgz Rjk1NTFDRDAeFw0yNDEwMjMwMjE3NDVaFw0yNDEwMjQwNTUwNDVaMDMxMTAvBgNV BAMTKDE5OTA4QkUyMzQzQzU2MzYzNEUwMjA1OEQ1NUVBOTQ2NDU3N0MxMjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIDDmv9C++c4vvNKYBlUPSsNxs nhKnZ9Zv3TC8X0TQu7KnUMTrqVFNuHKdgo+D2KN0WjAFuEnmADd+Vamy2DFkcpnZ z2+4HGV0RIpJmYMh3AUezCHtZIit+hu/9NF9AU2h0KjFdAkbUFmsa4/0wCG7D7HV R5sgPRCHg22AQ5EC/r5xKDTOgkuQA0rkyKdFLt9/+GL+4OZXgzHmr88clN/4AiK7 CjeHjkgOKGEH5SazL6wH/iIevyWN+3XhOoSKJq2nO6GUaD0fmnkQKd3GiBz4pA6T YyUB9Bp6ZW8LBVOL2muIgyLqhRILq9qAwgQ/r32XopmoF/dW/vC97XcncQTTAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUGZCL4jQ8VjY04CBY1V6pRkV3wSQwHwYDVR0j BBgwFoAUzhtPQ2e2pV80ypgaDWynWD+VUc0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMmFjYTNjYTYtMzRjYy00NzcyLWJhYzAtYTM1ZGQwMTk1 Y2U3LzEvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1NTFDRC5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvQ0UxQjRGNDM2N0I2QTU1RjM0Q0E5ODFBMEQ2Q0E3NTgzRjk1 NTFDRC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8yYWNhM2NhNi0z NGNjLTQ3NzItYmFjMC1hMzVkZDAxOTVjZTcvMS9DRTFCNEY0MzY3QjZBNTVGMzRD QTk4MUEwRDZDQTc1ODNGOTU1MUNELm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUs4HJLxkohoJ9Ya+pXut K9ADsmk1bTecHL4duD9ApD97OJHmHbFgQ7RG8hXbYobSpEe2kH4e8bs3rPe33jBv 4rVSOQX/N1Lj1icyW2cs0mPgajeCJuXNPsSSdcDHw2wBbCkIqMw15Mx/EUUqvtLj rv0OJC+riVPoyeIAmYayVAnk3xTrhWvO6Maanf4XryU1D9oCx+Xw8PuDOmkCBoid UZ7hStClTUkhUM+qf0OtfxwSMguk3lnhT1GqQrnhDwHR5s4mgXjzGuLRjTaJj7/s SvlaO3HTap6ZUEY9scaQcM2q6lVhJ6aIW5epV9XJZcaHzZV6rRxgwkPDkcnLZB8C ZA== -----END CERTIFICATE-----Generated at Wed Oct 23 04:49:31 2024 by rpki-client on console-ams.rpki-client.org