$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft File: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft (raw, json) Hash identifier: obDCVImnnrBC+5aiiRT6Obxo0lFmCUqpyO1Ge3xdNLk= Subject key identifier: 22:6D:AE:58:D2:C8:C2:25:22:DC:67:85:3B:68:6C:D8:1E:7C:D9:6E Authority key identifier: 8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C Certificate issuer: /CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Certificate serial: 687D7FA77A07C83529696C7391338D3F2B62E640 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft Manifest number: 8E Signing time: Thu 21 Nov 2024 20:07:36 +0000 Manifest this update: Thu 21 Nov 2024 20:02:36 +0000 Manifest next update: Fri 22 Nov 2024 22:44:36 +0000 Files and hashes: 1: 326131333a393634343a343030303a3a2f34302d3430203d3e20323034323931.roa (hash: tezZfjQIJSEoaPdienMyz3PTigWBtWV225R5RVQQguw=) 2: 8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl (hash: La7ulPrqj2CFBF6FZRPWvwyIVLKVjnrRy20JY8kQWyw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:7d:7f:a7:7a:07:c8:35:29:69:6c:73:91:33:8d:3f:2b:62:e6:40 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C Validity Not Before: Nov 21 20:02:36 2024 GMT Not After : Nov 22 22:44:36 2024 GMT Subject: CN=226DAE58D2C8C22522DC67853B686CD81E7CD96E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:c7:72:e2:da:3f:c6:e1:e6:b4:2c:83:da:a5: 39:48:3b:2e:ec:a5:8f:ee:58:29:34:9c:ac:81:ae: 06:7e:6b:2c:2d:ac:1b:37:8c:76:16:f6:16:86:1c: 4d:1e:eb:cb:7d:f9:46:54:81:5e:d6:35:cc:3b:2a: 42:cb:82:d1:1b:75:9f:e4:63:ff:5b:df:be:bb:5c: 57:72:f4:3c:9e:54:5e:6c:ea:b1:73:a8:90:a5:4d: cd:3c:5e:83:64:4e:95:a6:57:ea:6d:27:7c:3e:97: 22:69:d7:57:d7:d8:1e:e9:d4:48:7d:ed:cc:94:31: 9b:ef:d2:2f:3f:47:a3:01:1b:fa:0e:d6:9a:17:64: 4d:6b:f4:f4:9e:2c:1b:1a:5b:11:5b:16:1f:f6:6c: 8c:29:85:51:fe:14:a7:bc:9e:9d:e0:03:a1:d2:f1: f3:ee:c7:bc:76:86:91:07:5b:96:33:c9:c7:33:18: 9f:3a:c2:cc:4d:c3:c8:92:ab:cf:87:72:9a:ad:1e: 73:98:49:91:cd:8b:ee:15:54:ab:a0:8f:8e:9f:fa: e1:77:36:c0:51:49:2f:fd:98:7b:f9:dc:8c:9c:72: 42:9f:cc:54:65:09:57:35:5f:80:a4:53:de:95:ef: 22:c6:77:db:57:66:af:9c:82:22:dd:c1:53:3f:ac: 71:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 22:6D:AE:58:D2:C8:C2:25:22:DC:67:85:3B:68:6C:D8:1E:7C:D9:6E X509v3 Authority Key Identifier: keyid:8B:AD:30:7C:D4:DF:11:01:4E:40:ED:DF:FF:D6:0F:9A:09:E6:E9:5C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/65eae745-8ac9-4e71-bc94-fcb261703f96/1/8BAD307CD4DF11014E40EDDFFFD60F9A09E6E95C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ca:14:49:d2:e9:16:9a:3c:1b:9f:ef:4e:5b:ad:07:f1:06:a9: af:5e:e4:18:33:c0:be:e0:ea:c5:ed:fa:1c:70:55:65:a3:fe: cb:ac:0b:6a:f8:73:10:67:2d:1c:56:75:03:e1:45:0f:62:09: 19:1f:0c:f4:e7:14:ef:63:84:0c:30:f2:b8:ae:5a:2c:f5:69: 97:9c:0c:e6:06:29:4c:f5:76:7e:51:75:6f:78:8f:66:5e:4f: b6:9f:cc:06:51:5c:b9:2f:01:48:24:44:79:8d:20:29:1d:19: 52:61:3c:c9:5d:ab:02:33:6f:1d:5a:ed:83:5a:c4:c2:e7:d7: 45:42:cf:f6:8b:f4:33:3f:26:a7:f1:0f:a8:3b:53:6a:3b:38: a4:cc:ec:b7:28:35:5b:45:1f:f1:53:ec:4e:ad:60:98:c5:94: d6:ca:6d:98:1a:78:95:78:8d:95:52:6a:4d:60:59:23:aa:9a: 54:99:f2:5c:d5:23:96:42:e4:7c:d7:44:c7:17:c6:a1:00:a5: 0c:29:a1:37:3b:26:28:00:73:87:32:a6:bf:86:7f:49:69:17: 16:99:e5:9a:7f:51:6b:82:84:38:e7:51:cd:50:21:84:84:3d: 05:53:80:1f:5d:d5:a2:d8:71:95:51:4d:1a:68:c1:57:3b:0c: ee:9f:83:87 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUaH1/p3oHyDUpaWxzkTONPyti5kAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEw OUU2RTk1QzAeFw0yNDExMjEyMDAyMzZaFw0yNDExMjIyMjQ0MzZaMDMxMTAvBgNV BAMTKDIyNkRBRTU4RDJDOEMyMjUyMkRDNjc4NTNCNjg2Q0Q4MUU3Q0Q5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtx3Li2j/G4ea0LIPapTlIOy7s pY/uWCk0nKyBrgZ+aywtrBs3jHYW9haGHE0e68t9+UZUgV7WNcw7KkLLgtEbdZ/k Y/9b3767XFdy9DyeVF5s6rFzqJClTc08XoNkTpWmV+ptJ3w+lyJp11fX2B7p1Eh9 7cyUMZvv0i8/R6MBG/oO1poXZE1r9PSeLBsaWxFbFh/2bIwphVH+FKe8np3gA6HS 8fPux7x2hpEHW5YzycczGJ86wsxNw8iSq8+HcpqtHnOYSZHNi+4VVKugj46f+uF3 NsBRSS/9mHv53IycckKfzFRlCVc1X4CkU96V7yLGd9tXZq+cgiLdwVM/rHGnAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUIm2uWNLIwiUi3GeFO2hs2B582W4wHwYDVR0j BBgwFoAUi60wfNTfEQFOQO3f/9YPmgnm6VwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNjVlYWU3NDUtOGFjOS00ZTcxLWJjOTQtZmNiMjYxNzAz Zjk2LzEvOEJBRDMwN0NENERGMTEwMTRFNDBFRERGRkZENjBGOUEwOUU2RTk1Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC84QkFEMzA3Q0Q0REYxMTAxNEU0MEVEREZG RkQ2MEY5QTA5RTZFOTVDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzY1ZWFlNzQ1LThhYzktNGU3MS1iYzk0LWZjYjI2MTcwM2Y5Ni8xLzhCQUQzMDdD RDRERjExMDE0RTQwRURERkZGRDYwRjlBMDlFNkU5NUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDKFEnS 6RaaPBuf705brQfxBqmvXuQYM8C+4OrF7foccFVlo/7LrAtq+HMQZy0cVnUD4UUP YgkZHwz05xTvY4QMMPK4rlos9WmXnAzmBilM9XZ+UXVveI9mXk+2n8wGUVy5LwFI JER5jSApHRlSYTzJXasCM28dWu2DWsTC59dFQs/2i/QzPyan8Q+oO1NqOzikzOy3 KDVbRR/xU+xOrWCYxZTWym2YGniVeI2VUmpNYFkjqppUmfJc1SOWQuR810THF8ah AKUMKaE3OyYoAHOHMqa/hn9JaRcWmeWaf1FrgoQ451HNUCGEhD0FU4AfXdWi2HGV UU0aaMFXOwzun4OH -----END CERTIFICATE-----Generated at Thu Nov 21 21:14:51 2024 by rpki-client on console-fra.rpki-client.org