$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft File: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft (raw, json) Hash identifier: pOnw0mC1zY90wIztoc6Qx0EtzwfwWf41HamXQL8IpzY= Subject key identifier: F9:0B:3D:0F:70:95:FE:A0:F8:EE:6C:E7:51:54:B0:15:64:CE:71:BC Authority key identifier: 08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B Certificate issuer: /CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Certificate serial: 3C7ABE5C8D4BA75FE23BE35D4BC51E8249EE403E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft Manifest number: BA Signing time: Thu 21 Nov 2024 14:12:16 +0000 Manifest this update: Thu 21 Nov 2024 14:07:16 +0000 Manifest next update: Fri 22 Nov 2024 17:44:16 +0000 Files and hashes: 1: 326131343a373538313a383030303a3a2f33362d3430203d3e203530333835.roa (hash: YXXvvIU6sxf9qW6atwDWro7los6iax4CaojFLxxUHU0=) 2: 0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl (hash: DnJ8c9GLMhyEzSuANunUZCR938rS5FBHL973CYkMNMI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:7a:be:5c:8d:4b:a7:5f:e2:3b:e3:5d:4b:c5:1e:82:49:ee:40:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0874801164DC95F0AB9CCD4BD304A3EF78E9F39B Validity Not Before: Nov 21 14:07:16 2024 GMT Not After : Nov 22 17:44:16 2024 GMT Subject: CN=F90B3D0F7095FEA0F8EE6CE75154B01564CE71BC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:bb:ca:7d:e0:26:32:26:0f:aa:cc:f4:ef:7f: 8c:a1:f8:78:75:ac:77:76:2e:ea:a4:8b:42:b6:32: 21:2c:0b:c8:54:22:de:0c:f5:6e:3a:8f:b8:79:1e: c7:7b:0f:09:c1:cc:91:90:61:7b:31:e6:0a:3b:b3: 15:16:9b:08:de:3e:52:7f:29:0e:0a:02:29:04:c1: db:a0:7e:bd:ce:b3:4e:d9:84:2c:d7:ac:7f:0c:fd: 16:90:c8:0b:3e:90:32:8f:5c:7a:67:3e:98:a9:0c: f0:ef:82:95:19:38:da:d1:d1:c5:36:71:dd:32:f5: 46:63:d3:af:7a:65:b9:02:38:f0:bf:ab:5d:00:86: 7c:ad:1b:04:1b:e2:9b:b8:bb:08:8b:02:f5:76:3b: 4b:db:2e:5b:da:d5:3d:35:fe:5a:19:94:1c:7c:fe: 0a:ae:5a:a8:6d:7e:0d:d1:6a:03:39:cd:0a:36:ef: 34:c8:f0:44:ff:93:c4:77:93:bb:b1:a2:7f:2d:34: d8:d0:a0:38:d5:05:60:70:82:2c:f1:bc:4b:87:22: 5a:39:81:2c:63:f4:3f:fb:75:bd:eb:a0:46:70:38: 21:a3:00:e3:64:46:59:60:9b:2d:cd:46:bf:d4:af: 25:ae:4b:0f:99:5e:de:9d:a3:2d:fa:cd:ba:87:11: 80:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F9:0B:3D:0F:70:95:FE:A0:F8:EE:6C:E7:51:54:B0:15:64:CE:71:BC X509v3 Authority Key Identifier: keyid:08:74:80:11:64:DC:95:F0:AB:9C:CD:4B:D3:04:A3:EF:78:E9:F3:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3c8e4e11-3aca-4305-acd4-f05e6c909115/1/0874801164DC95F0AB9CCD4BD304A3EF78E9F39B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5a:06:62:d9:bb:12:96:e0:f1:d2:25:0e:22:58:6e:42:0e:32: d0:61:54:93:b9:a8:cd:7b:04:51:05:45:76:fb:c8:3c:47:02: 25:4e:67:51:c8:54:9a:78:32:6e:b2:d3:4a:8b:52:1c:61:d7: 12:8b:f9:44:89:2e:a3:eb:bb:3d:5e:58:7c:67:c9:d2:80:f9: 2b:18:6f:21:39:fb:a1:38:89:3d:49:b9:9c:12:dc:01:8a:2c: ef:ae:25:c1:b8:59:f4:2c:be:b4:36:87:b0:3a:47:d0:9d:81: 22:84:04:be:76:78:d4:9f:71:50:4d:10:f5:ce:0d:04:4c:a7: 64:0f:c3:eb:63:be:c0:c4:f1:9f:97:6a:f4:2d:25:31:ec:ef: a3:1b:80:f6:f4:98:68:77:e4:30:7c:ee:9b:bd:ba:e8:19:a9: 1b:93:92:1d:ab:a0:43:c3:40:5c:80:49:91:fd:f7:f3:f3:4d: 13:ab:9b:45:cf:c2:7c:fc:94:5a:0f:c7:8c:3c:21:c4:18:2c: 8d:14:23:40:91:64:e8:d1:44:78:a2:94:93:ea:6c:f2:30:24: 22:92:c2:b0:0e:0e:bf:44:4b:9a:45:1a:46:99:ef:e0:0b:00: 64:ed:3c:95:a3:77:0a:8b:b6:4c:c1:bb:a3:26:65:0d:43:64: f9:dc:91:9e -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUPHq+XI1Lp1/iO+NdS8UegknuQD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3 OEU5RjM5QjAeFw0yNDExMjExNDA3MTZaFw0yNDExMjIxNzQ0MTZaMDMxMTAvBgNV BAMTKEY5MEIzRDBGNzA5NUZFQTBGOEVFNkNFNzUxNTRCMDE1NjRDRTcxQkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/u8p94CYyJg+qzPTvf4yh+Hh1 rHd2Luqki0K2MiEsC8hUIt4M9W46j7h5Hsd7DwnBzJGQYXsx5go7sxUWmwjePlJ/ KQ4KAikEwdugfr3Os07ZhCzXrH8M/RaQyAs+kDKPXHpnPpipDPDvgpUZONrR0cU2 cd0y9UZj0696ZbkCOPC/q10AhnytGwQb4pu4uwiLAvV2O0vbLlva1T01/loZlBx8 /gquWqhtfg3RagM5zQo27zTI8ET/k8R3k7uxon8tNNjQoDjVBWBwgizxvEuHIlo5 gSxj9D/7db3roEZwOCGjAONkRllgmy3NRr/UryWuSw+ZXt6doy36zbqHEYDrAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU+Qs9D3CV/qD47mznUVSwFWTOcbwwHwYDVR0j BBgwFoAUCHSAEWTclfCrnM1L0wSj73jp85swDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvM2M4ZTRlMTEtM2FjYS00MzA1LWFjZDQtZjA1ZTZjOTA5 MTE1LzEvMDg3NDgwMTE2NERDOTVGMEFCOUNDRDRCRDMwNEEzRUY3OEU5RjM5Qi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wODc0ODAxMTY0REM5NUYwQUI5Q0NENEJE MzA0QTNFRjc4RTlGMzlCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzNjOGU0ZTExLTNhY2EtNDMwNS1hY2Q0LWYwNWU2YzkwOTExNS8xLzA4NzQ4MDEx NjREQzk1RjBBQjlDQ0Q0QkQzMDRBM0VGNzhFOUYzOUIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBaBmLZ uxKW4PHSJQ4iWG5CDjLQYVSTuajNewRRBUV2+8g8RwIlTmdRyFSaeDJustNKi1Ic YdcSi/lEiS6j67s9Xlh8Z8nSgPkrGG8hOfuhOIk9SbmcEtwBiizvriXBuFn0LL60 NoewOkfQnYEihAS+dnjUn3FQTRD1zg0ETKdkD8PrY77AxPGfl2r0LSUx7O+jG4D2 9Jhod+QwfO6bvbroGakbk5Idq6BDw0BcgEmR/ffz800Tq5tFz8J8/JRaD8eMPCHE GCyNFCNAkWTo0UR4opST6mzyMCQiksKwDg6/REuaRRpGme/gCwBk7TyVo3cKi7ZM wbujJmUNQ2T53JGe -----END CERTIFICATE-----Generated at Thu Nov 21 16:17:52 2024 by rpki-client on console-fra.rpki-client.org