$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft File: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft (raw, json) Hash identifier: zgn8uVXobcQJJczZlhK0vTy5nJQrFN4ClrQiyd2tSSA= Subject key identifier: BB:AA:1F:B3:EA:A4:F5:52:21:EE:88:89:89:DA:72:82:AD:F9:34:C4 Authority key identifier: 10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 Certificate issuer: /CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Certificate serial: 27432F4F7D5157CBAFAD5C2450C5F51678414178 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft Manifest number: 01AE Signing time: Thu 21 Nov 2024 16:48:28 +0000 Manifest this update: Thu 21 Nov 2024 16:43:28 +0000 Manifest next update: Fri 22 Nov 2024 19:08:28 +0000 Files and hashes: 1: 10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl (hash: sD4gTeLTDRSLoibHofKLscXzA1TbhP1weGkX5omKhNM=) 2: 323630323a663939653a3a2f33362d3336203d3e203233313235.roa (hash: iX2MCjbjhqr0rE/NtAYCR3oaA5Ny0HNtEjLgw+TtHUc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 19:08:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 27:43:2f:4f:7d:51:57:cb:af:ad:5c:24:50:c5:f5:16:78:41:41:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39 Validity Not Before: Nov 21 16:43:28 2024 GMT Not After : Nov 22 19:08:28 2024 GMT Subject: CN=BBAA1FB3EAA4F55221EE888989DA7282ADF934C4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:95:ca:9d:a0:c0:db:e8:08:6b:17:e8:6b:17:2a: 8e:c5:4a:bc:c2:a0:0a:90:36:fb:22:13:4e:6a:e3: 1d:af:a9:02:92:af:f2:9c:49:7f:55:25:ab:9c:06: ce:e9:12:ff:38:22:57:4f:3f:43:1d:c9:e3:d5:33: 06:35:27:c2:60:ae:95:41:7b:3d:27:b6:e5:2b:7e: 3d:dd:85:0f:c4:7d:1b:07:d5:7d:f4:88:34:0c:d4: a2:8f:9f:e4:28:bf:56:9e:1c:11:9b:d0:5b:63:0b: 53:2f:c4:49:8a:6a:1f:45:10:a9:1e:c7:97:a1:2f: 48:3f:68:2a:28:3f:fa:2e:53:83:5a:0b:84:42:72: cf:8b:50:e0:0c:ae:60:cf:e1:3d:fb:a3:48:36:74: 12:ca:5d:12:74:f6:5c:61:da:ef:8e:e7:10:c8:bb: d6:c9:0c:91:0b:85:53:fa:ee:f1:ee:52:fa:af:f6: 96:fa:fb:b7:7a:59:c4:82:b5:06:bd:a6:8e:ff:b5: fe:2f:36:2a:2b:ef:49:5e:b6:4b:dd:47:4d:57:57: c4:49:67:29:08:36:f3:7e:ef:32:fc:6b:ab:ea:9e: 30:51:83:ee:2a:32:80:59:e0:0e:f3:14:7b:19:7f: ad:bc:e3:15:fd:a8:79:ae:f9:1f:cd:6d:3c:12:2a: 65:d5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:AA:1F:B3:EA:A4:F5:52:21:EE:88:89:89:DA:72:82:AD:F9:34:C4 X509v3 Authority Key Identifier: keyid:10:FA:AD:7B:D8:08:78:1E:33:0C:17:FD:6D:0A:AB:1D:F1:C6:9E:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4b92cbc5-48e6-4e59-b9e4-d0055609895d/1a1feb7f05bbd87f010f191667fc5b223c83632b9bbca33e39.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3da4d8b4-a157-4634-ab18-3ef9d0982352/3/10FAAD7BD808781E330C17FD6D0AAB1DF1C69ED4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b9:32:8c:d7:14:67:2d:ec:6f:8e:2e:8b:26:ca:91:a6:67:df: f1:92:a9:f3:8d:80:ae:6c:8b:a3:61:35:cf:b4:af:96:2c:fa: 13:21:66:32:7d:69:a4:54:a6:c5:f5:f5:c0:27:06:ba:8a:67: e3:1f:89:aa:67:e3:58:3e:e2:21:b5:f8:fd:75:64:e7:9c:9b: 01:0e:76:6b:d5:0c:d3:98:9e:f9:98:1b:00:13:c6:90:b3:5b: a8:52:87:d3:30:6f:04:48:67:57:70:f8:69:6b:0f:cb:ce:40: 22:52:bc:91:1c:41:bc:be:5e:95:82:11:f2:7c:ad:c4:aa:0c: 29:94:6f:69:36:56:1a:bd:3d:71:8c:47:7d:fb:b3:9f:79:b8: f6:36:d5:f6:e5:66:0b:f7:56:c9:d9:78:a1:bc:2c:d4:a0:16: 16:fa:de:6f:31:99:16:7d:f8:50:ad:ef:35:11:c2:e0:d1:59: 33:03:d1:73:68:8c:5e:07:9b:be:66:07:f1:d5:87:07:e1:51: 65:a8:2b:eb:3a:9b:2f:69:2d:9e:4c:f9:a8:a3:c9:be:cf:1c: fe:b9:ae:61:36:5d:a2:a9:2e:08:4f:d1:b4:8b:8c:1b:95:14: cc:ac:b4:ec:b8:58:47:ca:ca:e5:fb:cb:8a:0f:65:46:94:44: c4:27:d3:03 -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUJ0MvT31RV8uvrVwkUMX1FnhBQXgwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIz YzgzNjMyYjliYmNhMzNlMzkwHhcNMjQxMTIxMTY0MzI4WhcNMjQxMTIyMTkwODI4 WjAzMTEwLwYDVQQDEyhCQkFBMUZCM0VBQTRGNTUyMjFFRTg4ODk4OURBNzI4MkFE RjkzNEM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcqdoMDb6Ahr F+hrFyqOxUq8wqAKkDb7IhNOauMdr6kCkq/ynEl/VSWrnAbO6RL/OCJXTz9DHcnj 1TMGNSfCYK6VQXs9J7blK3493YUPxH0bB9V99Ig0DNSij5/kKL9WnhwRm9BbYwtT L8RJimofRRCpHseXoS9IP2gqKD/6LlODWguEQnLPi1DgDK5gz+E9+6NINnQSyl0S dPZcYdrvjucQyLvWyQyRC4VT+u7x7lL6r/aW+vu3elnEgrUGvaaO/7X+LzYqK+9J XrZL3UdNV1fESWcpCDbzfu8y/Gur6p4wUYPuKjKAWeAO8xR7GX+tvOMV/ah5rvkf zW08Eipl1QIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFLuqH7PqpPVSIe6IiYnacoKt +TTEMB8GA1UdIwQYMBaAFBD6rXvYCHgeMwwX/W0Kqx3xxp7UMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzNkYTRkOGI0LWExNTctNDYzNC1hYjE4 LTNlZjlkMDk4MjM1Mi8zLzEwRkFBRDdCRDgwODc4MUUzMzBDMTdGRDZEMEFBQjFE RjFDNjlFRDQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YjkyY2JjNS00OGU2LTRlNTktYjllNC1k MDA1NTYwOTg5NWQvMWExZmViN2YwNWJiZDg3ZjAxMGYxOTE2NjdmYzViMjIzYzgz NjMyYjliYmNhMzNlMzkuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv M2RhNGQ4YjQtYTE1Ny00NjM0LWFiMTgtM2VmOWQwOTgyMzUyLzMvMTBGQUFEN0JE ODA4NzgxRTMzMEMxN0ZENkQwQUFCMURGMUM2OUVENC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBALkyjNcU Zy3sb44uiybKkaZn3/GSqfONgK5si6NhNc+0r5Ys+hMhZjJ9aaRUpsX19cAnBrqK Z+Mfiapn41g+4iG1+P11ZOecmwEOdmvVDNOYnvmYGwATxpCzW6hSh9MwbwRIZ1dw +GlrD8vOQCJSvJEcQby+XpWCEfJ8rcSqDCmUb2k2Vhq9PXGMR337s595uPY21fbl Zgv3VsnZeKG8LNSgFhb63m8xmRZ9+FCt7zURwuDRWTMD0XNojF4Hm75mB/HVhwfh UWWoK+s6my9pLZ5M+aijyb7PHP65rmE2XaKpLghP0bSLjBuVFMystOy4WEfKyuX7 y4oPZUaURMQn0wM= -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:16 2024 by rpki-client on console-ams.rpki-client.org