$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft File: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft (raw, json) Hash identifier: Hj7U38Mpd4/6SWOrnDGimrXvQ619o1OJpDsKagin374= Subject key identifier: 0B:3E:49:9C:2A:34:1E:E6:6C:16:29:56:C2:DE:97:CA:3A:42:D3:26 Authority key identifier: B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 Certificate issuer: /CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Certificate serial: 1FBFA2A6BADD88098B3157C73EF140A1D71AEA57 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft Manifest number: ED Signing time: Thu 21 Nov 2024 08:14:28 +0000 Manifest this update: Thu 21 Nov 2024 08:09:28 +0000 Manifest next update: Fri 22 Nov 2024 08:45:28 +0000 Files and hashes: 1: 326130613a363034343a383730333a3a2f34382d3438203d3e20323134353138.roa (hash: WxEbtOA91d9OHO9aT2g6iowjYN6K5+szyzBhDcVl8YM=) 2: 326130613a363034343a383530303a3a2f34302d3430203d3e20323134383039.roa (hash: BW6ky+6CFugwvR5bM9gBM+2MBg3Zgjy+mVE9dRIKmpw=) 3: 326130613a363034343a383030303a3a2f33362d3438203d3e20323135363035.roa (hash: rfBVKVeDolW2xuJXtIBW3+sb6n+RTsWvOaIU0c6mIxY=) 4: B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl (hash: ZniWgFHQ9coO6NTV/Cz93DyGHxH44T3hRwQFKQYJkYE=) 5: 326130613a363034343a386666303a3a2f34342d3438203d3e20323134333933.roa (hash: 5mtKnsi0eiuLOj/vuPgtBHrR4ubrh7kZVKE+RU5MUcA=) 6: 92E983F766C144A0CEAC0B6FC5C20934091D7E02.cer (hash: H13hcP/r4wxGw08Jc5sOHEEMFksM7Dg89XlhlYKqWC0=) 7: 326130613a363034343a386666653a3a2f34382d3438203d3e2038303735.roa (hash: EXuK08+oqHk8pQl69db4apbuttuLFsyV61jf2S7CeW0=) 8: 326130613a363034343a386666663a3a2f34382d3438203d3e2038303735.roa (hash: 1zLEB1ySqLG6O8dK77EoS7uCQ9LHKZ/5i0AbZm+a9vI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 17:01:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:bf:a2:a6:ba:dd:88:09:8b:31:57:c7:3e:f1:40:a1:d7:1a:ea:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B89BFA84DC5AFE05076A0800B960FEA22FC90D09 Validity Not Before: Nov 21 08:09:28 2024 GMT Not After : Nov 22 08:45:28 2024 GMT Subject: CN=0B3E499C2A341EE66C162956C2DE97CA3A42D326 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:cf:e7:1c:52:a5:c0:07:83:ff:d4:c9:ef:39: 6b:a7:ce:e6:30:07:e5:19:8a:ca:74:22:30:df:ab: 90:7a:d2:b6:b6:fc:46:1f:2e:b1:a8:2d:12:b3:72: bc:d3:73:d5:53:ae:98:d8:ef:19:22:28:9f:78:c7: 11:39:1a:3e:73:8c:62:a3:e5:18:20:1f:27:20:01: 83:70:bc:ad:a6:c5:02:2d:a2:80:14:aa:2c:79:cb: aa:5d:f6:10:a8:a8:9a:d2:77:de:67:9e:25:6e:e2: 8a:dd:7d:b9:38:60:9a:69:80:79:cd:c9:2a:2e:2d: 74:34:af:d5:ae:29:f0:65:18:7a:13:81:7b:f3:1d: fa:ff:51:01:bf:13:50:14:51:15:9d:0d:b7:c0:70: c6:d6:dd:52:fd:0e:4f:76:58:31:72:69:61:0e:f0: e7:b8:0a:16:0f:17:72:cd:a1:ee:1e:fb:8f:53:9b: c5:6e:48:5f:77:5e:f5:11:3f:27:64:2c:96:9a:70: 4d:40:63:92:e8:ec:f0:51:f8:43:04:4e:33:15:76: ae:67:3b:97:e1:bc:2f:1e:37:f2:2a:86:18:85:b2: 4f:22:62:37:23:cc:51:3e:df:86:58:4b:ce:24:3e: 62:a9:0d:e4:81:0e:f6:7e:29:4a:d2:93:68:e4:bd: bd:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0B:3E:49:9C:2A:34:1E:E6:6C:16:29:56:C2:DE:97:CA:3A:42:D3:26 X509v3 Authority Key Identifier: keyid:B8:9B:FA:84:DC:5A:FE:05:07:6A:08:00:B9:60:FE:A2:2F:C9:0D:09 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/491a43bc-76ec-4abe-ba7d-e73e90d662cb/1/B89BFA84DC5AFE05076A0800B960FEA22FC90D09.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:d4:53:23:be:5e:a8:df:55:c5:94:9e:79:ba:4e:8a:44:47: 9f:ba:db:59:2e:a2:05:48:42:6c:75:97:86:43:f9:2e:aa:4c: 64:a5:52:49:62:13:31:96:60:48:7f:77:66:55:e8:95:46:03: eb:aa:71:8e:6d:18:5e:6d:bb:8a:11:8d:b3:8a:f5:08:a6:9d: 7a:2a:f2:a3:5d:ff:c5:66:97:97:72:be:9c:bb:6c:0e:61:a0: 07:c8:e8:d9:1c:55:a8:8b:97:71:64:a7:f1:17:36:a8:02:f7: f7:de:23:be:95:52:a4:99:fa:5f:44:36:57:73:7a:7b:bb:18: d4:b9:fd:27:17:bc:9b:4a:72:9c:4a:85:be:30:9d:8c:15:4f: 3b:79:c5:98:fc:bd:a9:31:a2:10:27:7a:0c:49:9a:ef:87:5c: ae:2f:ef:54:f2:39:e6:f8:ee:bb:1e:69:e3:fb:b1:a6:b1:45: 2e:46:10:7f:8a:ef:9a:af:cb:03:4a:f6:2d:cb:86:5b:a3:ef: 0c:c7:77:ff:19:4c:b0:3d:0c:4f:7a:d2:b7:d6:56:b9:8d:91: 99:35:de:e7:9e:8a:c5:bd:d9:f4:99:8b:28:9f:30:bf:fb:00: 53:45:78:6c:65:f4:e6:3a:45:d9:32:a9:9e:09:dc:83:0a:12: d8:5c:4a:c8 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUH7+iprrdiAmLMVfHPvFAodca6lcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIy RkM5MEQwOTAeFw0yNDExMjEwODA5MjhaFw0yNDExMjIwODQ1MjhaMDMxMTAvBgNV BAMTKDBCM0U0OTlDMkEzNDFFRTY2QzE2Mjk1NkMyREU5N0NBM0E0MkQzMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPz+ccUqXAB4P/1MnvOWunzuYw B+UZisp0IjDfq5B60ra2/EYfLrGoLRKzcrzTc9VTrpjY7xkiKJ94xxE5Gj5zjGKj 5RggHycgAYNwvK2mxQItooAUqix5y6pd9hCoqJrSd95nniVu4ordfbk4YJppgHnN ySouLXQ0r9WuKfBlGHoTgXvzHfr/UQG/E1AUURWdDbfAcMbW3VL9Dk92WDFyaWEO 8Oe4ChYPF3LNoe4e+49Tm8VuSF93XvURPydkLJaacE1AY5Lo7PBR+EMETjMVdq5n O5fhvC8eN/IqhhiFsk8iYjcjzFE+34ZYS84kPmKpDeSBDvZ+KUrSk2jkvb0JAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUCz5JnCo0HuZsFilWwt6XyjpC0yYwHwYDVR0j BBgwFoAUuJv6hNxa/gUHaggAuWD+oi/JDQkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDkxYTQzYmMtNzZlYy00YWJlLWJhN2QtZTczZTkwZDY2 MmNiLzEvQjg5QkZBODREQzVBRkUwNTA3NkEwODAwQjk2MEZFQTIyRkM5MEQwOS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9CODlCRkE4NERDNUFGRTA1MDc2QTA4MDBC OTYwRkVBMjJGQzkwRDA5LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzQ5MWE0M2JjLTc2ZWMtNGFiZS1iYTdkLWU3M2U5MGQ2NjJjYi8xL0I4OUJGQTg0 REM1QUZFMDUwNzZBMDgwMEI5NjBGRUEyMkZDOTBEMDkubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBn1FMj vl6o31XFlJ55uk6KREefuttZLqIFSEJsdZeGQ/kuqkxkpVJJYhMxlmBIf3dmVeiV RgPrqnGObRhebbuKEY2zivUIpp16KvKjXf/FZpeXcr6cu2wOYaAHyOjZHFWoi5dx ZKfxFzaoAvf33iO+lVKkmfpfRDZXc3p7uxjUuf0nF7ybSnKcSoW+MJ2MFU87ecWY /L2pMaIQJ3oMSZrvh1yuL+9U8jnm+O67Hmnj+7GmsUUuRhB/iu+ar8sDSvYty4Zb o+8Mx3f/GUywPQxPetK31la5jZGZNd7nnorFvdn0mYsonzC/+wBTRXhsZfTmOkXZ MqmeCdyDChLYXErI -----END CERTIFICATE-----Generated at Thu Nov 21 09:46:55 2024 by rpki-client on console-ams.rpki-client.org