$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft File: A816FDA8ADEC8085A8A348E698709DE583B219B5.mft (raw, json) Hash identifier: LgB6owuL28fBIhg8GqjoNoFDForjtZwqQWrEULuiR8M= Subject key identifier: 10:7E:02:1B:EA:DD:5B:BB:13:32:80:68:EE:99:D9:06:66:73:1A:CB Authority key identifier: A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 Certificate issuer: /CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Certificate serial: 5177E093D5FE95AF40D4C36AF27143D79FE410D2 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft Manifest number: 0212 Signing time: Thu 21 Nov 2024 17:47:28 +0000 Manifest this update: Thu 21 Nov 2024 17:42:28 +0000 Manifest next update: Fri 22 Nov 2024 21:13:28 +0000 Files and hashes: 1: 326130373a353463373a356630303a3a2f34302d3438203d3e20323135353737.roa (hash: 3a4LH8f5jeXlPdsIkioq1V+hqiK338mibg/VsUQrPuo=) 2: 326130373a353463373a353030303a3a2f33362d3336203d3e20323136343535.roa (hash: fpULdXXomBi49YY6WqsyqWL1nOL+0TN0NiWW3AYGJho=) 3: A816FDA8ADEC8085A8A348E698709DE583B219B5.crl (hash: gglhkoPPlqk9FSw0oJ9d4PNpxzDoGokSPEF9HvLDQbs=) 4: 326130373a353463373a353430303a3a2f33382d3338203d3e20323136343535.roa (hash: WgAgPO7m2PRtW/hhLgCh/LUbstT+o0+84QgZ+UQ8JTY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:77:e0:93:d5:fe:95:af:40:d4:c3:6a:f2:71:43:d7:9f:e4:10:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A816FDA8ADEC8085A8A348E698709DE583B219B5 Validity Not Before: Nov 21 17:42:28 2024 GMT Not After : Nov 22 21:13:28 2024 GMT Subject: CN=107E021BEADD5BBB13328068EE99D90666731ACB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:c1:5d:02:74:04:56:1f:ad:94:eb:e5:75:58: ef:26:4e:4a:d8:19:47:92:bc:9a:d2:0f:36:2f:16: 12:ad:10:fb:c8:23:66:95:60:72:08:64:b1:5d:d7: 7e:58:86:cb:cd:50:e4:65:62:4d:ea:39:70:9b:16: d7:9a:ab:a1:43:04:e2:43:cc:74:b2:90:44:5d:06: dc:ea:aa:82:6b:9b:69:4f:67:7e:aa:b9:fe:f1:02: 97:c1:8f:f2:38:e5:9e:1b:e3:c9:2a:bb:34:3c:84: 01:6a:f5:97:86:92:d9:9a:fb:7e:56:e5:d1:fe:9a: b4:57:0c:01:0a:61:51:62:59:55:32:b9:bb:48:d2: 8a:82:fc:18:fc:99:0b:6f:69:6e:ac:d5:d2:cf:03: 58:ad:30:d4:e8:26:74:a6:ee:3b:2c:c2:1a:0b:bc: 2b:c5:07:32:e6:05:b8:08:88:4b:ef:2a:9b:37:7d: ec:57:40:93:89:5d:18:0d:6a:6d:cf:ab:c2:06:81: 86:d4:84:8d:dc:20:6a:5d:da:67:09:01:e6:b5:a0: 59:9e:d6:90:fd:60:56:3c:fd:1a:d0:a1:a4:e7:6b: 45:ea:7c:cc:65:e0:26:d3:8b:3a:89:0c:4c:f3:e5: 62:71:f8:a4:c9:28:61:62:39:2f:72:b2:4a:94:a8: 2a:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 10:7E:02:1B:EA:DD:5B:BB:13:32:80:68:EE:99:D9:06:66:73:1A:CB X509v3 Authority Key Identifier: keyid:A8:16:FD:A8:AD:EC:80:85:A8:A3:48:E6:98:70:9D:E5:83:B2:19:B5 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/5821c47e-e815-42de-bd6b-19a2e1ae564a/0/A816FDA8ADEC8085A8A348E698709DE583B219B5.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:b4:f2:b7:47:f0:b0:aa:51:07:9c:96:f3:f4:a4:9d:ce:69: f8:8c:fc:07:a0:f6:b5:30:a7:b3:05:0d:6d:0c:74:e2:7a:c9: 2b:e4:3f:a6:e1:1a:84:33:e7:ec:31:19:2b:9d:f2:9f:6e:e9: 5f:72:d7:6a:b4:aa:1c:be:7c:e0:1e:ef:b9:1c:29:d8:d3:e5: be:94:39:25:8f:d6:5e:b5:85:9e:18:39:6d:94:97:fe:46:3e: 5f:84:4f:9f:2c:59:73:35:e8:79:ed:e7:bb:fb:02:d8:75:f4: 1b:0c:e6:dc:47:44:64:c1:ec:5c:89:15:72:8a:39:ef:37:1e: fb:a8:15:c0:1e:88:a6:24:2d:4c:04:6e:b3:0d:6b:30:c0:27: 07:f1:32:12:25:1e:0f:34:b4:8d:6f:f5:fa:3e:94:08:37:11: 7f:88:fd:bf:c4:6e:4a:17:21:df:7b:ed:54:15:77:f0:dc:4d: 9c:ab:a4:32:95:86:73:da:f6:33:b9:f7:f8:f4:aa:8a:d6:48: 55:be:f2:20:66:22:53:5d:36:8a:4a:13:4a:7e:c7:51:05:07: 95:99:58:c9:f6:7f:11:0f:a8:71:32:7e:b5:e9:33:c7:4c:3a: cf:81:23:37:05:3c:a2:27:7c:ab:a9:f1:e8:02:ef:af:04:27: dc:b5:1d:7a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUUXfgk9X+la9A1MNq8nFD15/kENIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4 M0IyMTlCNTAeFw0yNDExMjExNzQyMjhaFw0yNDExMjIyMTEzMjhaMDMxMTAvBgNV BAMTKDEwN0UwMjFCRUFERDVCQkIxMzMyODA2OEVFOTlEOTA2NjY3MzFBQ0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfwV0CdARWH62U6+V1WO8mTkrY GUeSvJrSDzYvFhKtEPvII2aVYHIIZLFd135YhsvNUORlYk3qOXCbFteaq6FDBOJD zHSykERdBtzqqoJrm2lPZ36quf7xApfBj/I45Z4b48kquzQ8hAFq9ZeGktma+35W 5dH+mrRXDAEKYVFiWVUyubtI0oqC/Bj8mQtvaW6s1dLPA1itMNToJnSm7jsswhoL vCvFBzLmBbgIiEvvKps3fexXQJOJXRgNam3Pq8IGgYbUhI3cIGpd2mcJAea1oFme 1pD9YFY8/RrQoaTna0XqfMxl4CbTizqJDEzz5WJx+KTJKGFiOS9yskqUqCqVAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUEH4CG+rdW7sTMoBo7pnZBmZzGsswHwYDVR0j BBgwFoAUqBb9qK3sgIWoo0jmmHCd5YOyGbUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNTgyMWM0N2UtZTgxNS00MmRlLWJkNmItMTlhMmUxYWU1 NjRhLzAvQTgxNkZEQThBREVDODA4NUE4QTM0OEU2OTg3MDlERTU4M0IyMTlCNS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9BODE2RkRBOEFERUM4MDg1QThBMzQ4RTY5 ODcwOURFNTgzQjIxOUI1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzU4MjFjNDdlLWU4MTUtNDJkZS1iZDZiLTE5YTJlMWFlNTY0YS8wL0E4MTZGREE4 QURFQzgwODVBOEEzNDhFNjk4NzA5REU1ODNCMjE5QjUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCGtPK3 R/CwqlEHnJbz9KSdzmn4jPwHoPa1MKezBQ1tDHTieskr5D+m4RqEM+fsMRkrnfKf bulfctdqtKocvnzgHu+5HCnY0+W+lDklj9ZetYWeGDltlJf+Rj5fhE+fLFlzNeh5 7ee7+wLYdfQbDObcR0RkwexciRVyijnvNx77qBXAHoimJC1MBG6zDWswwCcH8TIS JR4PNLSNb/X6PpQINxF/iP2/xG5KFyHfe+1UFXfw3E2cq6QylYZz2vYzuff49KqK 1khVvvIgZiJTXTaKShNKfsdRBQeVmVjJ9n8RD6hxMn616TPHTDrPgSM3BTyiJ3yr qfHoAu+vBCfctR16 -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:19 2024 by rpki-client on console-ams.rpki-client.org