$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft File: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft (raw, json) Hash identifier: vNE9GShD+Etb3sRTZefFiTuPwk2IqH4YKVzp0DswmQ8= Subject key identifier: 6E:68:60:6C:8C:D7:5B:2D:63:D2:FE:55:8F:09:F9:0F:63:74:B3:41 Authority key identifier: 2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97 Certificate issuer: /CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297 Certificate serial: 58D6F3D725233FC6514519ADEF47653A0DD0D9A8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft Manifest number: 49 Signing time: Mon 25 Nov 2024 03:42:21 +0000 Manifest this update: Mon 25 Nov 2024 03:37:21 +0000 Manifest next update: Tue 26 Nov 2024 05:42:21 +0000 Files and hashes: 1: 2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl (hash: wjF1610YWUWkdY/2xlT0DY0l8bxO9+g01ELKzOhNNkk=) 2: 326130623a346530373a316330313a3a2f34382d3438203d3e20313531373034.roa (hash: Nh5XT638Xw3szIHzPWQzM5n7CuKdiXjt2Xw+j5HN5b4=) 3: 326130623a346530373a316330303a3a2f34382d3438203d3e20313531373034.roa (hash: lmNISwXtJNWjiKcmw5GjTGP7+E6qXcw7mfSumJB2dso=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 16:23:08 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:d6:f3:d7:25:23:3f:c6:51:45:19:ad:ef:47:65:3a:0d:d0:d9:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297 Validity Not Before: Nov 25 03:37:21 2024 GMT Not After : Nov 26 05:42:21 2024 GMT Subject: CN=6E68606C8CD75B2D63D2FE558F09F90F6374B341 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:c3:01:5f:cd:d8:f5:77:6d:86:c8:ea:6b:50: 42:09:31:86:65:82:8a:77:21:3d:7f:fc:e4:5f:7d: 80:42:80:a6:83:d2:ad:ef:87:f3:cd:0d:15:31:53: 2b:17:70:e0:88:7c:3b:a0:57:55:44:3d:e4:f0:bb: 45:b9:a5:8c:b7:d6:68:ad:4e:1c:d1:0c:9a:19:66: 1e:47:23:0f:f0:17:b1:b0:8f:81:4e:51:19:b1:45: 65:c8:29:1a:62:92:0c:9b:05:4b:46:11:72:52:a7: ea:8c:e5:3a:ea:4b:6c:2c:17:fa:5a:74:44:bc:98: 68:f4:86:31:a2:70:d5:cc:4a:40:bf:dd:60:4b:4d: 96:c2:c2:ae:85:26:57:a7:40:4e:2c:01:71:04:b0: 4e:9e:09:48:0f:7c:7d:fb:1b:0a:f1:55:f0:29:d0: 84:ce:40:15:03:c4:f9:01:6e:f9:77:f8:a5:5f:20: 9a:c4:8c:e1:36:2d:c0:ad:51:54:55:2e:c6:ce:87: 5b:bc:e6:49:e2:11:9c:69:94:fb:a2:7f:c4:de:ab: d5:24:28:e1:7d:5b:8d:df:9a:ed:73:ce:2b:bc:80: fc:16:f5:ba:7a:22:07:5d:4d:22:44:82:ce:82:d2: 60:84:1b:c9:9f:26:6d:c9:0d:c8:df:4a:e1:83:97: 1c:c7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6E:68:60:6C:8C:D7:5B:2D:63:D2:FE:55:8F:09:F9:0F:63:74:B3:41 X509v3 Authority Key Identifier: keyid:2F:A9:A8:9E:E8:A4:D0:3C:0C:E0:DD:35:0E:B3:39:95:DD:DC:52:97 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/531e9720-0b62-43a8-8e1f-230684eaf9af/1/2FA9A89EE8A4D03C0CE0DD350EB33995DDDC5297.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:fe:58:95:ef:cf:49:60:f8:06:16:36:f0:36:d2:07:27:2a: f3:c9:2a:8f:f2:62:2e:1e:6e:6d:24:32:78:8d:31:47:dd:fb: 95:c1:1c:75:b1:cb:88:91:10:6f:ca:dc:9f:37:97:98:9a:cb: 3e:2e:c2:87:a4:de:d0:fd:e0:3d:b6:77:58:98:f9:8f:f2:4d: bb:9e:39:68:37:a5:da:80:d3:9f:1b:f2:56:32:e2:7b:7d:e1: 43:63:c4:9e:4b:47:4b:4c:ab:84:63:df:15:7e:02:26:0d:13: 5c:91:ef:c0:8b:4d:e0:a5:95:88:aa:d0:09:63:d9:de:20:53: 7c:c2:8d:e6:02:e9:6e:67:55:6c:77:5c:62:c3:b7:1d:c1:96: f9:b8:9d:5c:9f:f7:df:b4:65:97:6e:4e:2f:81:b7:58:15:cd: 91:e5:cd:dc:2a:bb:43:9e:a9:53:aa:74:50:ad:df:4e:75:18: 4d:34:a0:ca:79:a5:c6:15:57:fb:d4:25:b2:f1:70:8d:91:db: 75:73:d9:21:2a:d3:58:6f:0b:6c:d5:be:02:34:79:7b:18:27: 24:6c:8d:da:c0:b5:45:08:43:cb:79:02:a4:c3:05:92:cb:54: 7b:4f:3a:90:7f:cc:c6:d5:20:c8:fe:59:55:37:ba:f8:10:fa: 33:08:2f:9b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUWNbz1yUjP8ZRRRmt70dlOg3Q2agwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkZBOUE4OUVFOEE0RDAzQzBDRTBERDM1MEVCMzM5OTVE RERDNTI5NzAeFw0yNDExMjUwMzM3MjFaFw0yNDExMjYwNTQyMjFaMDMxMTAvBgNV BAMTKDZFNjg2MDZDOENENzVCMkQ2M0QyRkU1NThGMDlGOTBGNjM3NEIzNDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVwwFfzdj1d22GyOprUEIJMYZl gop3IT1//ORffYBCgKaD0q3vh/PNDRUxUysXcOCIfDugV1VEPeTwu0W5pYy31mit ThzRDJoZZh5HIw/wF7Gwj4FOURmxRWXIKRpikgybBUtGEXJSp+qM5TrqS2wsF/pa dES8mGj0hjGicNXMSkC/3WBLTZbCwq6FJlenQE4sAXEEsE6eCUgPfH37GwrxVfAp 0ITOQBUDxPkBbvl3+KVfIJrEjOE2LcCtUVRVLsbOh1u85kniEZxplPuif8Teq9Uk KOF9W43fmu1zziu8gPwW9bp6IgddTSJEgs6C0mCEG8mfJm3JDcjfSuGDlxzHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUbmhgbIzXWy1j0v5Vjwn5D2N0s0EwHwYDVR0j BBgwFoAUL6monuik0DwM4N01DrM5ld3cUpcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTMxZTk3MjAtMGI2Mi00M2E4LThlMWYtMjMwNjg0ZWFm OWFmLzEvMkZBOUE4OUVFOEE0RDAzQzBDRTBERDM1MEVCMzM5OTVERERDNTI5Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi8yRkE5QTg5RUU4QTREMDNDMENFMEREMzUw RUIzMzk5NUREREM1Mjk3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzUzMWU5NzIwLTBiNjItNDNhOC04ZTFmLTIzMDY4NGVhZjlhZi8xLzJGQTlBODlF RThBNEQwM0MwQ0UwREQzNTBFQjMzOTk1REREQzUyOTcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAn/liV 789JYPgGFjbwNtIHJyrzySqP8mIuHm5tJDJ4jTFH3fuVwRx1scuIkRBvytyfN5eY mss+LsKHpN7Q/eA9tndYmPmP8k27njloN6XagNOfG/JWMuJ7feFDY8SeS0dLTKuE Y98VfgImDRNcke/Ai03gpZWIqtAJY9neIFN8wo3mAuluZ1Vsd1xiw7cdwZb5uJ1c n/fftGWXbk4vgbdYFc2R5c3cKrtDnqlTqnRQrd9OdRhNNKDKeaXGFVf71CWy8XCN kdt1c9khKtNYbwts1b4CNHl7GCckbI3awLVFCEPLeQKkwwWSy1R7TzqQf8zG1SDI /llVN7r4EPozCC+b -----END CERTIFICATE-----Generated at Mon Nov 25 04:59:45 2024 by rpki-client on console-fra.rpki-client.org