$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft File: 1EC805E37C5B53351C6A182763530A50D9308C7E.mft (raw, json) Hash identifier: vnIwl7r1mXVOytz3o/+AxW9oXQZrZ5JODTJevSJfHmY= Subject key identifier: 9D:CF:F6:75:4A:20:25:B8:20:9D:74:50:EA:00:E3:71:8F:13:69:C3 Authority key identifier: 1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E Certificate issuer: /CN=1ec805e37c5b53351c6a182763530a50d9308c7e Certificate serial: 6999FC697550BE575D84BC195E1CC0420C2919B3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft Manifest number: 03A6 Signing time: Sat 23 Nov 2024 03:23:48 +0000 Manifest this update: Sat 23 Nov 2024 03:18:48 +0000 Manifest next update: Sun 24 Nov 2024 04:16:48 +0000 Files and hashes: 1: 1EC805E37C5B53351C6A182763530A50D9308C7E.crl (hash: 1yFgSKJx3v+uFYdA7KG9g3tbMFCTVTmWoDC7vS1h7K0=) 2: 323030313a3637633a6439303a3a2f34382d313238203d3e203437323732.roa (hash: uTPUCQz9NM7RIGhzUG6MCKkG039JfAOexvVnJkgzTF8=) 3: 323030313a3637633a6438343a3a2f34382d313238203d3e203437323732.roa (hash: rpwEvtHGqRDPmWV6bNZj3oMTb9CX92RBOVpgwihR8pI=) 4: 323030313a3637633a6438633a3a2f34382d313238203d3e203437323732.roa (hash: /jF4OiRKoSzGnVtZwuFYIxmTit/+rezvS+u0DWhSpDg=) 5: AS47272.asa (hash: Af5JYMDrBIExNwCNgLMsQJ8fuihtJeihyyQFotExjow=) 6: 323030313a3637633a6438383a3a2f34382d313238203d3e203437323732.roa (hash: 63gfoovPBYo7cWk3wqqhDZQwQYFTU+4m9e90gLjXrqA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 69:99:fc:69:75:50:be:57:5d:84:bc:19:5e:1c:c0:42:0c:29:19:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1ec805e37c5b53351c6a182763530a50d9308c7e Validity Not Before: Nov 23 03:18:48 2024 GMT Not After : Nov 24 04:16:48 2024 GMT Subject: CN=9DCFF6754A2025B8209D7450EA00E3718F1369C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:94:b9:77:72:72:ff:bc:da:b7:59:4b:99:02: da:6f:0c:5a:6e:c3:12:e9:56:db:bc:27:2d:b3:71: 96:90:16:c8:5c:70:ab:73:48:a5:51:8d:ee:75:33: c9:14:ce:8b:5d:fa:2f:a8:1c:76:b5:c2:2a:4f:e5: 20:24:cb:01:6b:a4:fc:c6:ed:0c:73:a2:db:d5:90: e2:e2:c9:f0:81:14:1d:08:f8:9d:08:44:a6:d4:b5: f6:2b:c1:d8:9d:18:ea:61:87:f9:f6:ef:46:16:03: b4:cb:31:10:30:aa:51:63:4f:05:07:95:53:79:23: 19:08:52:43:d5:b7:4b:d8:18:e5:83:a6:5b:9f:ac: 6f:c6:ed:12:d0:57:8e:6b:f5:f6:a3:c1:0a:59:69: 57:58:0b:27:4d:d5:17:93:5f:02:fd:f7:f4:75:ba: 73:f7:fb:0d:cd:ae:48:b0:72:ec:d2:53:48:97:b2: 53:54:e0:8f:a3:85:d2:35:c2:84:21:68:29:3f:8e: 2a:50:59:bd:13:b1:08:31:e6:70:9c:ee:d3:d1:6f: 75:00:22:bc:94:a3:93:ba:8d:d0:7d:98:d8:60:e4: 9f:8e:f9:9b:6e:55:34:36:10:43:cd:66:f2:f0:f2: 74:03:82:df:79:75:95:ab:11:f6:a6:75:96:1c:db: 4c:21 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9D:CF:F6:75:4A:20:25:B8:20:9D:74:50:EA:00:E3:71:8F:13:69:C3 X509v3 Authority Key Identifier: keyid:1E:C8:05:E3:7C:5B:53:35:1C:6A:18:27:63:53:0A:50:D9:30:8C:7E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HsgF43xbUzUcahgnY1MKUNkwjH4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/3/1EC805E37C5B53351C6A182763530A50D9308C7E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7d:fe:4b:cc:00:ac:09:cc:9d:1e:fd:15:8c:90:2b:01:14:7d: f0:3c:bf:3e:ad:c9:56:36:31:01:45:54:05:74:e3:7a:b4:a9: fb:b9:51:b3:fe:cf:3a:03:4a:29:13:63:57:73:25:54:fa:fd: 79:d0:bb:4e:a3:91:83:a2:5a:52:2e:97:7d:4b:54:9c:da:26: b6:de:78:87:3b:ae:a4:39:f5:64:7d:25:e5:87:eb:09:a2:20: 2e:f5:76:c5:e8:6e:c0:06:75:8a:fb:7c:97:fe:f0:88:5f:1c: 4d:a4:fa:a1:29:2f:64:34:37:d4:61:c5:53:1a:65:b4:5c:a2: 80:bf:96:e1:b7:7a:17:e0:03:65:85:6c:63:4d:a4:f4:3c:d9: d6:9d:10:24:d2:da:98:d2:d6:58:5b:3f:c8:85:b0:0d:99:3d: 51:1c:b8:13:d1:4f:59:46:72:7b:48:f3:d6:6a:9c:e5:f2:19: eb:f1:e8:39:0b:f3:3d:36:56:e3:0d:5b:cb:bd:07:58:97:c1: f3:cc:a2:85:50:22:97:37:51:b6:2b:ac:d2:74:c0:41:ae:9c: 58:bc:56:54:fe:c4:8b:3d:a2:6d:94:cf:ef:b4:4a:3c:f6:8d: c2:d6:2b:61:b5:ce:2f:33:46:e6:9f:1a:aa:45:1e:ee:a7:62: 05:54:81:42 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUaZn8aXVQvlddhLwZXhzAQgwpGbMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMWVjODA1ZTM3YzViNTMzNTFjNmExODI3NjM1MzBhNTBk OTMwOGM3ZTAeFw0yNDExMjMwMzE4NDhaFw0yNDExMjQwNDE2NDhaMDMxMTAvBgNV BAMTKDlEQ0ZGNjc1NEEyMDI1QjgyMDlENzQ1MEVBMDBFMzcxOEYxMzY5QzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDllLl3cnL/vNq3WUuZAtpvDFpu wxLpVtu8Jy2zcZaQFshccKtzSKVRje51M8kUzotd+i+oHHa1wipP5SAkywFrpPzG 7QxzotvVkOLiyfCBFB0I+J0IRKbUtfYrwdidGOphh/n270YWA7TLMRAwqlFjTwUH lVN5IxkIUkPVt0vYGOWDplufrG/G7RLQV45r9fajwQpZaVdYCydN1ReTXwL99/R1 unP3+w3NrkiwcuzSU0iXslNU4I+jhdI1woQhaCk/jipQWb0TsQgx5nCc7tPRb3UA IryUo5O6jdB9mNhg5J+O+ZtuVTQ2EEPNZvLw8nQDgt95dZWrEfamdZYc20whAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUnc/2dUogJbggnXRQ6gDjcY8TacMwHwYDVR0j BBgwFoAUHsgF43xbUzUcahgnY1MKUNkwjH4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1 YzdkLzMvMUVDODA1RTM3QzVCNTMzNTFDNkExODI3NjM1MzBBNTBEOTMwOEM3RS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0hzZ0Y0M3hiVXpVY2FoZ25ZMU1LVU5r d2pINC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1k NWJmLTQ1NDEtYmNjMS0yNzY1NDNhMjVjN2QvMy8xRUM4MDVFMzdDNUI1MzM1MUM2 QTE4Mjc2MzUzMEE1MEQ5MzA4QzdFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAff5LzACsCcydHv0VjJAr ARR98Dy/Pq3JVjYxAUVUBXTjerSp+7lRs/7POgNKKRNjV3MlVPr9edC7TqORg6Ja Ui6XfUtUnNomtt54hzuupDn1ZH0l5YfrCaIgLvV2xehuwAZ1ivt8l/7wiF8cTaT6 oSkvZDQ31GHFUxpltFyigL+W4bd6F+ADZYVsY02k9DzZ1p0QJNLamNLWWFs/yIWw DZk9URy4E9FPWUZye0jz1mqc5fIZ6/HoOQvzPTZW4w1by70HWJfB88yihVAilzdR tius0nTAQa6cWLxWVP7Eiz2ibZTP77RKPPaNwtYrYbXOLzNG5p8aqkUe7qdiBVSB Qg== -----END CERTIFICATE-----Generated at Sat Nov 23 06:18:03 2024 by rpki-client on console-ams.rpki-client.org