$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft File: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft (raw, json) Hash identifier: GJZIDUOp9fTuIiDEdWmjecblgumo9hTxrMDejARYw8g= Subject key identifier: 96:C6:34:FC:5E:8B:E2:F7:4F:CB:AB:D4:23:F5:7A:30:6B:76:03:A8 Authority key identifier: 2A:FA:CA:7F:31:6D:BE:0C:FF:39:4F:9D:59:52:E5:29:92:F1:85:F1 Certificate issuer: /CN=2AFACA7F316DBE0CFF394F9D5952E52992F185F1 Certificate serial: 5E342918EE9EB82A7C17B3181167CC5B0DE07653 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft Manifest number: AD Signing time: Sat 22 Jun 2024 00:19:36 +0000 Manifest this update: Sat 22 Jun 2024 00:14:36 +0000 Manifest next update: Sun 23 Jun 2024 00:45:36 +0000 Files and hashes: 1: 2AFACA7F316DBE0CFF394F9D5952E52992F185F1.crl (hash: KqGnBBBlkY1ZdGrsp0tUlsvknscUEcNQam5AHlnYSjU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.crl rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 22 Jun 2024 08:55:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:34:29:18:ee:9e:b8:2a:7c:17:b3:18:11:67:cc:5b:0d:e0:76:53 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2AFACA7F316DBE0CFF394F9D5952E52992F185F1 Validity Not Before: Jun 22 00:14:36 2024 GMT Not After : Jun 23 00:45:36 2024 GMT Subject: CN=96C634FC5E8BE2F74FCBABD423F57A306B7603A8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:58:40:7a:31:c4:68:16:e9:56:61:cc:85:86: 3d:18:bc:43:68:3e:36:c5:6d:cb:d8:93:b9:56:78: 20:c2:da:b7:6e:0c:7b:45:06:54:59:e9:4e:b4:99: 38:78:7f:f6:f0:0e:93:dc:e1:fe:2e:e8:6b:a0:9e: b0:ed:52:6c:24:2f:d2:fd:24:4c:ac:1e:51:b5:b4: 9f:65:0a:22:7a:cc:bd:3f:d1:ff:3c:d2:da:61:ec: 8a:d6:aa:e3:13:4b:cb:7e:83:d5:0a:31:a0:f1:08: e3:02:b6:77:b4:14:47:4a:ec:64:89:fa:01:0b:2c: 97:8b:1b:67:bc:75:8f:7a:74:e2:68:be:6f:c4:8e: 15:34:f7:18:6e:37:93:5a:68:7a:55:29:43:80:5f: d0:b1:d4:7f:b5:0d:f9:17:82:75:08:a0:5b:6a:1a: ff:98:87:a8:d4:0a:c3:7c:c9:3c:b9:27:8f:4b:eb: 7e:95:d1:9c:64:6f:27:f4:f5:52:e8:84:ff:09:7b: b9:c1:83:30:7c:d0:ce:37:87:ce:1f:b0:e9:76:22: e5:c6:29:c8:0f:f4:47:00:45:f2:5d:d5:40:8c:b1: 0b:f8:b3:9b:0b:3f:2b:78:fe:6e:38:dd:8b:04:b4: f7:53:92:28:e2:22:8b:7f:d4:f0:b9:b4:3c:02:ec: 7a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:C6:34:FC:5E:8B:E2:F7:4F:CB:AB:D4:23:F5:7A:30:6B:76:03:A8 X509v3 Authority Key Identifier: keyid:2A:FA:CA:7F:31:6D:BE:0C:FF:39:4F:9D:59:52:E5:29:92:F1:85:F1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ca811f8-d075-4e50-9bbf-7b2d0907168f/3/2AFACA7F316DBE0CFF394F9D5952E52992F185F1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ab:d9:e5:ea:83:d2:71:09:38:f2:ae:1b:ff:60:32:96:ef:a0: be:7e:a2:f3:08:2a:a2:d3:28:2e:7e:93:b2:e4:06:a0:d4:21: 5f:57:d5:57:f7:48:cf:b7:ee:a7:e2:80:ef:56:20:11:29:e1: 97:fd:8d:65:41:9f:e0:dc:d6:a2:fd:50:cf:6d:89:0f:86:de: 7e:f9:a1:df:4e:83:0d:e4:9d:9d:b9:ef:7b:b2:47:fc:b9:53: 6d:2b:78:a7:15:3f:bb:3f:f3:a0:90:ab:f1:e4:6d:fd:03:51: af:f8:c9:93:80:8f:88:53:1e:ab:fd:1b:e2:e5:c2:29:2e:c5: d1:e4:de:25:bc:08:4c:47:29:39:4f:5a:51:bb:34:ac:8e:92: 01:f9:2b:9e:2a:1c:81:1b:32:63:00:83:08:97:0a:d4:3f:3b: ae:b5:76:7e:0c:d3:e2:72:c9:db:de:5f:4f:4d:f4:ba:fc:a0: e8:16:5a:9b:b9:96:29:be:16:53:98:26:59:07:75:f6:00:38: 5d:59:2a:cd:45:16:70:49:97:eb:80:6f:4f:5f:f1:a4:3a:3b: e4:ad:d9:80:dd:12:4d:0e:b6:0e:26:ec:82:16:a1:bf:f6:90: 35:b9:45:8d:2b:7c:e5:d7:17:56:b3:d6:63:b6:6f:25:bd:c5: 94:97:82:b5 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXjQpGO6euCp8F7MYEWfMWw3gdlMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMkFGQUNBN0YzMTZEQkUwQ0ZGMzk0RjlENTk1MkU1Mjk5 MkYxODVGMTAeFw0yNDA2MjIwMDE0MzZaFw0yNDA2MjMwMDQ1MzZaMDMxMTAvBgNV BAMTKDk2QzYzNEZDNUU4QkUyRjc0RkNCQUJENDIzRjU3QTMwNkI3NjAzQTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCxWEB6McRoFulWYcyFhj0YvENo PjbFbcvYk7lWeCDC2rduDHtFBlRZ6U60mTh4f/bwDpPc4f4u6GugnrDtUmwkL9L9 JEysHlG1tJ9lCiJ6zL0/0f880tph7IrWquMTS8t+g9UKMaDxCOMCtne0FEdK7GSJ +gELLJeLG2e8dY96dOJovm/EjhU09xhuN5NaaHpVKUOAX9Cx1H+1DfkXgnUIoFtq Gv+Yh6jUCsN8yTy5J49L636V0Zxkbyf09VLohP8Je7nBgzB80M43h84fsOl2IuXG KcgP9EcARfJd1UCMsQv4s5sLPyt4/m443YsEtPdTkijiIot/1PC5tDwC7HrNAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUlsY0/F6L4vdPy6vUI/V6MGt2A6gwHwYDVR0j BBgwFoAUKvrKfzFtvgz/OU+dWVLlKZLxhfEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNhODExZjgtZDA3NS00ZTUwLTliYmYtN2IyZDA5MDcx NjhmLzMvMkFGQUNBN0YzMTZEQkUwQ0ZGMzk0RjlENTk1MkU1Mjk5MkYxODVGMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8yQUZBQ0E3RjMxNkRCRTBDRkYzOTRGOUQ1 OTUyRTUyOTkyRjE4NUYxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZjYTgxMWY4LWQwNzUtNGU1MC05YmJmLTdiMmQwOTA3MTY4Zi8zLzJBRkFDQTdG MzE2REJFMENGRjM5NEY5RDU5NTJFNTI5OTJGMTg1RjEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCr2eXq g9JxCTjyrhv/YDKW76C+fqLzCCqi0ygufpOy5Aag1CFfV9VX90jPt+6n4oDvViAR KeGX/Y1lQZ/g3Nai/VDPbYkPht5++aHfToMN5J2due97skf8uVNtK3inFT+7P/Og kKvx5G39A1Gv+MmTgI+IUx6r/Rvi5cIpLsXR5N4lvAhMRyk5T1pRuzSsjpIB+Sue KhyBGzJjAIMIlwrUPzuutXZ+DNPicsnb3l9PTfS6/KDoFlqbuZYpvhZTmCZZB3X2 ADhdWSrNRRZwSZfrgG9PX/GkOjvkrdmA3RJNDrYOJuyCFqG/9pA1uUWNK3zl1xdW s9Zjtm8lvcWUl4K1 -----END CERTIFICATE-----Generated at Sat Jun 22 02:35:13 2024 by rpki-client on console-fra.rpki-client.org