$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft File: F163E1EE74384430F7A75E7448A376D89DBBE730.mft (raw, json) Hash identifier: X8dssCESppH3JZ94N+vAaCbGzVFWLROadk60rZVwfTE= Subject key identifier: 45:A8:20:FA:E2:BD:73:75:6F:A7:D2:3D:FA:AB:82:F8:70:CA:0B:6D Authority key identifier: F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 Certificate issuer: /CN=F163E1EE74384430F7A75E7448A376D89DBBE730 Certificate serial: 65EBDFCA4D55E7A2B508AE005EE74D14F0B7C161 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft Manifest number: 58 Signing time: Thu 21 Nov 2024 11:45:23 +0000 Manifest this update: Thu 21 Nov 2024 11:40:23 +0000 Manifest next update: Fri 22 Nov 2024 15:19:23 +0000 Files and hashes: 1: 326130613a363034343a616337303a3a2f34342d3434203d3e20323134373537.roa (hash: c4pcfZMLTl4R4EnjcfGUgS5ogirjfvs/y9Dcs7QHo8E=) 2: 326130393a353463363a643030303a3a2f33362d3336203d3e20323134373537.roa (hash: eTpxi4h7rVQD9UjYSq64NlM2hMV5MKioIPMyRsUsYAg=) 3: F163E1EE74384430F7A75E7448A376D89DBBE730.crl (hash: ytrz7n7Cv4OvciO3SARXUVDnrIhfpkRtphBA/kc+9TQ=) 4: 326130393a353463363a646561643a3a2f34382d3438203d3e20323134373537.roa (hash: yLoPNgxXsGZOGeGwXoeF29sQWCPopI46FmunhhorBcg=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:eb:df:ca:4d:55:e7:a2:b5:08:ae:00:5e:e7:4d:14:f0:b7:c1:61 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F163E1EE74384430F7A75E7448A376D89DBBE730 Validity Not Before: Nov 21 11:40:23 2024 GMT Not After : Nov 22 15:19:23 2024 GMT Subject: CN=45A820FAE2BD73756FA7D23DFAAB82F870CA0B6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:1c:76:f1:18:5b:6a:03:a3:e5:b9:2b:a1:01: ae:f2:71:14:db:ef:5b:11:97:26:83:30:7c:8c:70: 3a:36:2d:fc:dd:6b:71:28:dc:4a:75:b3:e1:1c:03: 99:a8:c2:1f:ed:98:e6:a7:b9:19:06:2c:c7:fa:b5: 35:23:c2:de:bf:9c:27:2f:11:b6:98:e5:d2:d8:dc: 25:e1:24:48:4e:41:07:ec:45:dc:6a:1c:d1:3c:6a: 48:05:c6:df:9a:eb:b0:8d:34:e5:c9:e1:c8:13:22: ba:23:36:e7:4b:bd:56:d8:6d:9d:db:1b:c1:21:a1: 19:0d:b1:8c:ee:69:85:77:46:34:71:ac:27:f0:e1: 1a:b8:e7:d5:45:d8:cc:b6:69:d9:f6:19:d6:2c:0c: 80:78:a2:c1:62:da:df:b5:3d:00:43:93:63:a1:02: ff:1f:8f:78:da:ed:a4:de:40:bc:be:6b:1f:57:dc: 10:5a:47:2c:68:f2:d4:26:52:e2:ce:70:cb:c4:73: 51:3f:e2:36:44:75:fa:aa:59:6e:da:9b:eb:20:b9: c1:b7:78:94:88:19:71:57:6b:6a:2b:da:d0:95:27: 5b:7e:29:db:1b:c1:d2:97:2b:09:c5:d9:32:25:30: 31:57:c4:08:10:c1:f6:c0:2f:78:f8:ae:3f:f2:9a: 70:c3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 45:A8:20:FA:E2:BD:73:75:6F:A7:D2:3D:FA:AB:82:F8:70:CA:0B:6D X509v3 Authority Key Identifier: keyid:F1:63:E1:EE:74:38:44:30:F7:A7:5E:74:48:A3:76:D8:9D:BB:E7:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/F163E1EE74384430F7A75E7448A376D89DBBE730.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/1/F163E1EE74384430F7A75E7448A376D89DBBE730.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:83:94:5b:5a:3c:8e:85:36:af:99:98:60:9b:fa:5b:67:e0: 8c:31:af:d7:40:da:c4:45:9a:65:8d:d2:bd:e9:63:e1:95:2b: c9:af:1c:33:ee:11:92:bd:fd:10:65:84:b0:f8:90:3e:fe:88: 7e:26:37:b5:d8:b1:e7:f4:b8:cc:8b:98:43:e3:60:cf:9b:6e: 41:af:8f:79:ee:98:77:61:3e:5a:a9:b4:2e:de:bf:de:74:c3: f7:ae:a8:11:e9:0c:7e:09:cd:32:fa:bd:38:b9:82:64:ad:ab: c8:d6:3d:a2:14:fc:95:98:c5:c0:e6:52:6b:fc:2a:c8:2c:69: 8e:4e:62:34:a2:38:fb:e6:5a:d4:e0:52:f1:98:75:47:f8:69: ff:73:f7:db:25:bd:7a:1e:9e:6b:0a:1c:6b:51:39:3e:76:b3: 4e:b8:a3:94:f2:d6:f8:7f:4f:e7:9d:ca:ca:ae:0c:cb:9b:10: 13:72:60:cf:85:63:21:f2:f4:f6:24:44:72:bf:59:9f:f9:2a: 00:43:d0:6d:21:d0:cb:ab:a2:1a:43:9b:06:a7:15:67:e6:f4: ac:c8:6d:2f:6d:9d:7d:d9:db:33:e0:f1:3c:b5:f6:67:72:b6: 47:62:e4:91:06:b5:52:6e:cc:98:a6:81:fe:fa:12:ba:21:74: 3e:b5:1b:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZevfyk1V56K1CK4AXudNFPC3wWEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5 REJCRTczMDAeFw0yNDExMjExMTQwMjNaFw0yNDExMjIxNTE5MjNaMDMxMTAvBgNV BAMTKDQ1QTgyMEZBRTJCRDczNzU2RkE3RDIzREZBQUI4MkY4NzBDQTBCNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSHHbxGFtqA6PluSuhAa7ycRTb 71sRlyaDMHyMcDo2Lfzda3Eo3Ep1s+EcA5mowh/tmOanuRkGLMf6tTUjwt6/nCcv EbaY5dLY3CXhJEhOQQfsRdxqHNE8akgFxt+a67CNNOXJ4cgTIrojNudLvVbYbZ3b G8EhoRkNsYzuaYV3RjRxrCfw4Rq459VF2My2adn2GdYsDIB4osFi2t+1PQBDk2Oh Av8fj3ja7aTeQLy+ax9X3BBaRyxo8tQmUuLOcMvEc1E/4jZEdfqqWW7am+sgucG3 eJSIGXFXa2or2tCVJ1t+KdsbwdKXKwnF2TIlMDFXxAgQwfbAL3j4rj/ymnDDAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQURagg+uK9c3Vvp9I9+quC+HDKC20wHwYDVR0j BBgwFoAU8WPh7nQ4RDD3p150SKN22J275zAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj ZjE0LzEvRjE2M0UxRUU3NDM4NDQzMEY3QTc1RTc0NDhBMzc2RDg5REJCRTczMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC9GMTYzRTFFRTc0Mzg0NDMwRjdBNzVFNzQ0 OEEzNzZEODlEQkJFNzMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZiZTQzZDllLWU0NDAtNDdhZS1hN2JjLTE5Yjc5OTNjY2YxNC8xL0YxNjNFMUVF NzQzODQ0MzBGN0E3NUU3NDQ4QTM3NkQ4OURCQkU3MzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHg5Rb WjyOhTavmZhgm/pbZ+CMMa/XQNrERZpljdK96WPhlSvJrxwz7hGSvf0QZYSw+JA+ /oh+Jje12LHn9LjMi5hD42DPm25Br4957ph3YT5aqbQu3r/edMP3rqgR6Qx+Cc0y +r04uYJkravI1j2iFPyVmMXA5lJr/CrILGmOTmI0ojj75lrU4FLxmHVH+Gn/c/fb Jb16Hp5rChxrUTk+drNOuKOU8tb4f0/nncrKrgzLmxATcmDPhWMh8vT2JERyv1mf +SoAQ9BtIdDLq6IaQ5sGpxVn5vSsyG0vbZ192dsz4PE8tfZncrZHYuSRBrVSbsyY poH++hK6IXQ+tRua -----END CERTIFICATE-----Generated at Thu Nov 21 14:22:19 2024 by rpki-client on console-ams.rpki-client.org