$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft File: 9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft (raw, json) Hash identifier: qd/PYUOWxcmwnpYs1LpWjE+K/vcHzmj+EltMr8DomYA= Subject key identifier: 07:1E:71:F0:67:A8:A8:F8:B4:7F:5B:DB:CA:72:C0:53:E0:99:C5:06 Authority key identifier: 97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53 Certificate issuer: /CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53 Certificate serial: 21941947A397CBE3D87C3397AC000BD09AA3689C Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft Manifest number: 56 Signing time: Fri 22 Nov 2024 01:15:23 +0000 Manifest this update: Fri 22 Nov 2024 01:10:23 +0000 Manifest next update: Sat 23 Nov 2024 05:03:23 +0000 Files and hashes: 1: 326130623a346530373a313730303a3a2f34302d3430203d3e203336383332.roa (hash: 8XXc/vUFLjWy/LRrqI4T91nQccSVuO66DoHLWKAgddY=) 2: 9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl (hash: TRT8XTfp6FnfXSyZNNcOubZWOXkjPw44AO2OAYAMShw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 21:94:19:47:a3:97:cb:e3:d8:7c:33:97:ac:00:0b:d0:9a:a3:68:9c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9734125D9DE143331CAA39CA06CB928F0A7B5E53 Validity Not Before: Nov 22 01:10:23 2024 GMT Not After : Nov 23 05:03:23 2024 GMT Subject: CN=071E71F067A8A8F8B47F5BDBCA72C053E099C506 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:a6:5b:34:98:cf:43:c3:d0:08:a8:1e:cd:8c: 43:11:43:8f:43:0c:cf:c2:12:18:0a:c3:c6:e7:ac: 73:a6:ce:ea:ac:48:2d:a9:56:7d:ed:d5:5e:d2:12: 20:e4:dd:35:c5:1e:68:fc:d4:90:67:8f:c8:32:ad: 10:58:44:fe:8f:8d:67:82:d4:d8:14:e3:64:77:32: f0:38:25:a8:d4:f5:dd:f8:d5:1a:da:a7:26:a2:2f: f2:dd:a9:b1:2e:80:12:cd:d4:a2:6d:1e:7d:b3:a0: 1d:e3:93:8f:df:7c:18:a8:70:6d:1f:e6:9b:c7:4c: 20:9c:80:59:f6:cc:f1:03:e8:2e:d7:a6:e8:d3:41: ad:42:23:38:af:1e:87:06:e7:bd:cb:dd:96:07:7f: ee:f3:78:4e:e8:eb:9d:a1:5b:60:83:df:a7:5c:39: 61:57:87:f9:0f:bb:53:03:26:c1:2f:5a:28:5c:af: 2b:0a:92:09:72:6e:52:12:28:81:6e:b4:ac:56:5b: 06:47:74:be:12:d2:2f:3f:64:1f:58:f3:21:e8:b3: 3c:b8:c6:7a:f7:b8:e3:e4:b5:11:6a:d9:ae:76:2f: 0e:42:62:f6:e0:8c:a8:3c:9b:3c:6d:39:8a:0c:09: ec:fa:09:c3:f4:51:70:5c:31:e2:cf:31:16:9a:6a: ec:69 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 07:1E:71:F0:67:A8:A8:F8:B4:7F:5B:DB:CA:72:C0:53:E0:99:C5:06 X509v3 Authority Key Identifier: keyid:97:34:12:5D:9D:E1:43:33:1C:AA:39:CA:06:CB:92:8F:0A:7B:5E:53 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/9734125D9DE143331CAA39CA06CB928F0A7B5E53.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6be43d9e-e440-47ae-a7bc-19b7993ccf14/3/9734125D9DE143331CAA39CA06CB928F0A7B5E53.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:be:50:ba:ef:3d:cb:5f:41:cd:b9:8e:47:64:96:65:aa:ff: ce:16:10:ed:ab:76:5c:cf:ce:05:ae:49:5c:45:b7:16:ee:18: 28:7e:6a:83:ed:01:5a:11:89:86:ec:fe:51:8a:a2:dc:6f:ae: ee:91:28:7e:30:e3:e2:f2:c6:79:88:ea:42:27:66:b9:e5:bf: cc:56:f3:18:fc:0b:8c:f0:c2:33:f6:2e:b8:2b:d0:d0:33:33: c1:2d:ad:6d:63:57:79:6a:d2:d8:20:90:b1:99:4e:85:22:17: 28:04:df:a6:13:cf:f0:b6:13:34:8b:86:6e:3e:ff:0c:05:55: b6:21:eb:29:b4:eb:d7:ba:11:67:21:16:77:6e:2f:25:31:3b: 92:73:42:ac:21:86:78:09:fe:c0:63:c0:7c:72:c6:19:ef:5d: 79:27:f0:16:c6:90:f0:61:75:dc:41:a0:aa:76:b8:eb:5d:0e: 11:8c:c5:31:28:e5:6e:fb:9f:cf:b1:1f:9e:96:95:f7:48:eb: 21:d0:6f:c7:16:93:0c:63:9d:74:b1:03:40:06:0b:69:aa:74: f3:29:6f:3a:ff:98:bc:62:d2:db:8a:2b:25:36:3d:ad:dc:c9: b0:c3:07:0d:e9:f8:13:02:6d:fe:a6:da:4c:34:f8:92:44:6d: 10:e6:93:9b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUIZQZR6OXy+PYfDOXrAAL0JqjaJwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTczNDEyNUQ5REUxNDMzMzFDQUEzOUNBMDZDQjkyOEYw QTdCNUU1MzAeFw0yNDExMjIwMTEwMjNaFw0yNDExMjMwNTAzMjNaMDMxMTAvBgNV BAMTKDA3MUU3MUYwNjdBOEE4RjhCNDdGNUJEQkNBNzJDMDUzRTA5OUM1MDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWpls0mM9Dw9AIqB7NjEMRQ49D DM/CEhgKw8bnrHOmzuqsSC2pVn3t1V7SEiDk3TXFHmj81JBnj8gyrRBYRP6PjWeC 1NgU42R3MvA4JajU9d341RrapyaiL/LdqbEugBLN1KJtHn2zoB3jk4/ffBiocG0f 5pvHTCCcgFn2zPED6C7XpujTQa1CIzivHocG573L3ZYHf+7zeE7o652hW2CD36dc OWFXh/kPu1MDJsEvWihcrysKkglyblISKIFutKxWWwZHdL4S0i8/ZB9Y8yHoszy4 xnr3uOPktRFq2a52Lw5CYvbgjKg8mzxtOYoMCez6CcP0UXBcMeLPMRaaauxpAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUBx5x8GeoqPi0f1vbynLAU+CZxQYwHwYDVR0j BBgwFoAUlzQSXZ3hQzMcqjnKBsuSjwp7XlMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmJlNDNkOWUtZTQ0MC00N2FlLWE3YmMtMTliNzk5M2Nj ZjE0LzMvOTczNDEyNUQ5REUxNDMzMzFDQUEzOUNBMDZDQjkyOEYwQTdCNUU1My5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi85NzM0MTI1RDlERTE0MzMzMUNBQTM5Q0Ew NkNCOTI4RjBBN0I1RTUzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZiZTQzZDllLWU0NDAtNDdhZS1hN2JjLTE5Yjc5OTNjY2YxNC8zLzk3MzQxMjVE OURFMTQzMzMxQ0FBMzlDQTA2Q0I5MjhGMEE3QjVFNTMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBkvlC6 7z3LX0HNuY5HZJZlqv/OFhDtq3Zcz84FrklcRbcW7hgofmqD7QFaEYmG7P5RiqLc b67ukSh+MOPi8sZ5iOpCJ2a55b/MVvMY/AuM8MIz9i64K9DQMzPBLa1tY1d5atLY IJCxmU6FIhcoBN+mE8/wthM0i4ZuPv8MBVW2IesptOvXuhFnIRZ3bi8lMTuSc0Ks IYZ4Cf7AY8B8csYZ7115J/AWxpDwYXXcQaCqdrjrXQ4RjMUxKOVu+5/PsR+elpX3 SOsh0G/HFpMMY510sQNABgtpqnTzKW86/5i8YtLbiislNj2t3MmwwwcN6fgTAm3+ ptpMNPiSRG0Q5pOb -----END CERTIFICATE-----Generated at Fri Nov 22 02:44:50 2024 by rpki-client on console-fra.rpki-client.org