$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft File: 849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft (raw, json) Hash identifier: dE5Hmsn4qyrj7xXMrd/ERYLMe5OoKI13pAkPZxCdDtI= Subject key identifier: 6B:5D:8F:B8:6B:E1:F8:BE:1D:0C:8B:7E:A5:BB:26:38:79:ED:35:FB Authority key identifier: 84:9A:6D:8B:FA:C2:BC:81:C0:BB:3A:DB:0F:1B:FC:68:BB:BE:06:3F Certificate issuer: /CN=849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F Certificate serial: 6754DB7F97E2F7FFA4CBA5F1CDDD9243D8666730 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft Manifest number: 56 Signing time: Thu 21 Nov 2024 08:40:23 +0000 Manifest this update: Thu 21 Nov 2024 08:35:23 +0000 Manifest next update: Fri 22 Nov 2024 10:32:23 +0000 Files and hashes: 1: 326131343a366634353a623030623a3a2f34382d3438203d3e20323134373537.roa (hash: t1cRwTYq7eUC/NgS3JVL6aQkzgWYOlFVUcR/T01og2A=) 2: 849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.crl (hash: 9ISPOhAF6gb+K1X3Aub4whudgGwF06iWX4EqV/uCJak=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.crl rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/3EEEBB946A8D21D4083C93DC09CEE557BB2AC32E.mft rsync://rpki.ripe.net/repository/DEFAULT/Pu67lGqNIdQIPJPcCc7lV7sqwy4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 03:02:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 67:54:db:7f:97:e2:f7:ff:a4:cb:a5:f1:cd:dd:92:43:d8:66:67:30 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F Validity Not Before: Nov 21 08:35:23 2024 GMT Not After : Nov 22 10:32:23 2024 GMT Subject: CN=6B5D8FB86BE1F8BE1D0C8B7EA5BB263879ED35FB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:cb:5f:ef:e1:90:48:37:76:70:93:13:f5:be: 24:38:ab:e3:c1:ac:e0:68:09:f2:2a:d8:06:ca:c7: 41:7f:d9:c6:5f:cb:a2:c3:50:2d:93:08:e0:9b:a7: f2:0d:ee:72:ad:92:1a:68:9e:c4:cc:6b:e9:6a:32: 8f:4b:d4:44:22:c9:9f:42:10:42:d4:df:96:0c:c5: f6:93:c0:b0:8c:46:4b:75:aa:cb:70:05:ce:fa:c1: 30:6d:97:2c:c6:73:b8:32:25:08:dc:00:07:f8:4e: 08:fd:ce:ba:f3:86:16:09:d5:06:9b:07:b4:7d:13: de:ca:37:d3:a8:78:42:bb:8d:42:1b:e8:5e:a1:29: e5:91:fb:91:3e:c9:94:75:9e:b6:08:59:2e:42:e8: 31:24:a3:d8:dd:10:e3:05:11:ed:c5:f6:89:e3:54: e4:51:8f:9a:9f:bc:28:6f:74:e4:9e:7b:47:3a:e8: 3a:56:ea:67:71:1a:09:7b:5f:e2:51:06:bf:ce:f9: 04:d3:3a:f6:c9:ed:78:05:80:72:37:c0:29:c0:d0: 8e:72:73:17:92:f7:3b:86:02:49:90:b0:64:f8:a4: fc:3b:4e:3a:e7:42:52:a3:71:02:ef:02:22:bc:2a: f8:39:d2:ec:ed:7b:07:7b:8b:ee:d1:bd:f9:24:4a: 28:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6B:5D:8F:B8:6B:E1:F8:BE:1D:0C:8B:7E:A5:BB:26:38:79:ED:35:FB X509v3 Authority Key Identifier: keyid:84:9A:6D:8B:FA:C2:BC:81:C0:BB:3A:DB:0F:1B:FC:68:BB:BE:06:3F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/4/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/2/849A6D8BFAC2BC81C0BB3ADB0F1BFC68BBBE063F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:f9:1f:7f:cc:e6:69:50:44:d2:c7:fd:a0:e4:06:99:91:81: c9:74:1d:5b:35:fd:60:53:ca:c5:bf:83:34:21:a3:bd:c5:42: 78:25:d7:e4:23:7c:5b:69:e9:4b:d7:04:36:a6:ee:da:d3:44: f1:2c:cc:06:45:a5:4c:54:89:43:5a:d1:c8:42:70:37:54:5c: 17:88:65:bd:66:76:29:32:7d:e7:f4:97:0d:36:83:06:90:77: 30:62:90:85:d9:84:89:db:22:33:a0:f4:07:98:75:bb:73:ac: 59:8e:c3:96:47:12:e3:0c:4d:95:25:fe:7c:b8:c0:67:f6:0c: ac:e4:6a:76:6b:2b:a3:14:a3:a9:7d:55:30:1d:90:c1:d6:19: c9:2f:e1:37:cb:67:33:55:80:73:0c:53:5c:50:af:57:18:ce: fe:b4:79:f2:dc:cb:68:88:7d:26:d3:2a:32:cd:34:e7:1e:14: 6c:77:0f:08:dd:89:7a:3c:02:1a:2f:45:35:d3:00:c0:36:79: c9:6e:4f:d1:da:25:f9:ec:64:6b:54:bf:b9:7c:f7:60:d8:c4: d0:5f:a1:71:4d:31:18:3a:0f:58:0c:60:73:17:e1:7e:92:e3: d0:89:a7:b3:de:27:36:c2:dc:4c:03:61:2e:60:b2:55:1b:50: 6a:4e:82:59 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZ1Tbf5fi9/+ky6Xxzd2SQ9hmZzAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODQ5QTZEOEJGQUMyQkM4MUMwQkIzQURCMEYxQkZDNjhC QkJFMDYzRjAeFw0yNDExMjEwODM1MjNaFw0yNDExMjIxMDMyMjNaMDMxMTAvBgNV BAMTKDZCNUQ4RkI4NkJFMUY4QkUxRDBDOEI3RUE1QkIyNjM4NzlFRDM1RkIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQy1/v4ZBIN3ZwkxP1viQ4q+PB rOBoCfIq2AbKx0F/2cZfy6LDUC2TCOCbp/IN7nKtkhponsTMa+lqMo9L1EQiyZ9C EELU35YMxfaTwLCMRkt1qstwBc76wTBtlyzGc7gyJQjcAAf4Tgj9zrrzhhYJ1Qab B7R9E97KN9OoeEK7jUIb6F6hKeWR+5E+yZR1nrYIWS5C6DEko9jdEOMFEe3F9onj VORRj5qfvChvdOSee0c66DpW6mdxGgl7X+JRBr/O+QTTOvbJ7XgFgHI3wCnA0I5y cxeS9zuGAkmQsGT4pPw7TjrnQlKjcQLvAiK8Kvg50uztewd7i+7RvfkkSihHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUa12PuGvh+L4dDIt+pbsmOHntNfswHwYDVR0j BBgwFoAUhJpti/rCvIHAuzrbDxv8aLu+Bj8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj ZjE0LzIvODQ5QTZEOEJGQUMyQkM4MUMwQkIzQURCMEYxQkZDNjhCQkJFMDYzRi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82ZmY3YTk4OS1lY2RmLTQz ZDYtODZlMS1mNmMzOTM1YjliM2QvNC84NDlBNkQ4QkZBQzJCQzgxQzBCQjNBREIw RjFCRkM2OEJCQkUwNjNGLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZiZTQzZDllLWU0NDAtNDdhZS1hN2JjLTE5Yjc5OTNjY2YxNC8yLzg0OUE2RDhC RkFDMkJDODFDMEJCM0FEQjBGMUJGQzY4QkJCRTA2M0YubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy+R9/ zOZpUETSx/2g5AaZkYHJdB1bNf1gU8rFv4M0IaO9xUJ4JdfkI3xbaelL1wQ2pu7a 00TxLMwGRaVMVIlDWtHIQnA3VFwXiGW9ZnYpMn3n9JcNNoMGkHcwYpCF2YSJ2yIz oPQHmHW7c6xZjsOWRxLjDE2VJf58uMBn9gys5Gp2ayujFKOpfVUwHZDB1hnJL+E3 y2czVYBzDFNcUK9XGM7+tHny3MtoiH0m0yoyzTTnHhRsdw8I3Yl6PAIaL0U10wDA NnnJbk/R2iX57GRrVL+5fPdg2MTQX6FxTTEYOg9YDGBzF+F+kuPQiaez3ic2wtxM A2EuYLJVG1BqToJZ -----END CERTIFICATE-----Generated at Thu Nov 21 12:18:35 2024 by rpki-client on console-ams.rpki-client.org