$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft File: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft (raw, json) Hash identifier: HYopUru5FOiMlPoxW7GLnvTFyOg8CqgI4Ipq+LhOEDg= Subject key identifier: F4:C0:DF:2F:DD:45:34:05:97:C7:C0:B4:DA:E5:BA:58:82:A0:58:6E Authority key identifier: ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A Certificate issuer: /CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Certificate serial: 4EE9D9F5F3CA6FE7C6149F573D0B19499943CE43 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft Manifest number: 0246 Signing time: Thu 21 Nov 2024 17:53:40 +0000 Manifest this update: Thu 21 Nov 2024 17:48:40 +0000 Manifest next update: Fri 22 Nov 2024 21:26:40 +0000 Files and hashes: 1: 3138352e33372e3231382e302f32332d3234203d3e20323132323338.roa (hash: huwsUB31uBfbleT8W3liIVEEjjwoWiPQyT4oqqDXvCQ=) 2: 3138352e33372e3231362e302f32332d3234203d3e20323132323338.roa (hash: JrvLFX+5o0GBehhUiUJJUuZWmKqwIyrrY1oYHebpeaY=) 3: EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl (hash: T2povYlIVZL2KdZRAdYuzMBsSfXNnqlSJsLwoeVdyPw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e9:d9:f5:f3:ca:6f:e7:c6:14:9f:57:3d:0b:19:49:99:43:ce:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=edb9f3e6d8e4b57c49301aa621ef1f90389e057a Validity Not Before: Nov 21 17:48:40 2024 GMT Not After : Nov 22 21:26:40 2024 GMT Subject: CN=F4C0DF2FDD45340597C7C0B4DAE5BA5882A0586E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:a5:3e:b7:b3:c6:cc:bc:bd:f6:ae:8b:cb:30: 46:e0:da:83:5f:d4:51:71:b6:19:15:98:bc:ee:f3: 5c:ad:6a:3e:7d:cb:0a:d1:91:3a:d1:41:1c:d3:ca: e4:d2:45:8b:d9:1a:a5:83:86:88:98:c3:06:91:9b: 1d:2a:7f:fe:0c:96:c7:1c:ae:c8:a4:da:00:fa:85: 6f:f3:15:16:1b:1b:72:69:3a:e1:5f:6b:d7:34:61: 76:f8:21:fa:2d:f6:fd:39:29:ca:a9:db:35:8a:46: a5:ec:dc:7e:5a:fe:f5:05:aa:29:85:ac:d5:a8:19: 9f:d0:de:dc:a9:ac:4e:ab:cc:3e:c2:c2:49:0c:61: a7:78:9f:89:3c:1b:ea:2d:29:14:4a:69:25:4b:af: 20:68:32:33:c8:f1:13:5f:15:2c:62:83:d5:02:74: 75:6d:28:82:83:5a:f3:8c:d8:32:1e:ce:4f:ce:7e: 04:86:cd:c4:92:12:bb:b4:f2:d5:5a:6f:ef:f8:c7: fb:35:cb:de:eb:89:aa:9e:4f:fe:f7:45:1f:c9:f7: 21:e8:06:61:16:1e:63:06:d3:a7:4e:c3:88:2f:bd: f8:22:2e:05:01:fe:06:67:6f:61:2b:cd:0d:28:48: 1f:65:0b:38:c6:2a:08:88:02:f1:70:74:6f:50:9a: d6:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:C0:DF:2F:DD:45:34:05:97:C7:C0:B4:DA:E5:BA:58:82:A0:58:6E X509v3 Authority Key Identifier: keyid:ED:B9:F3:E6:D8:E4:B5:7C:49:30:1A:A6:21:EF:1F:90:38:9E:05:7A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7bnz5tjktXxJMBqmIe8fkDieBXo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6cfa4a2c-e145-414d-a62f-09a3f9b575fd/0/EDB9F3E6D8E4B57C49301AA621EF1F90389E057A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption ac:b7:c4:9e:08:db:7e:80:7c:03:96:37:c5:4a:a6:a2:40:dd: ff:66:08:ce:ab:d0:83:39:3c:a7:9c:e1:90:91:f8:61:c4:d3: 50:09:73:d5:b7:a1:98:92:09:3d:40:6a:f2:ef:2b:f8:59:88: 07:1b:ab:51:cb:fe:34:12:3b:02:76:ef:7a:4d:60:2c:5d:d4: 01:9a:c0:34:84:d7:71:47:9c:4d:f4:d4:6b:ae:3f:7d:85:82: 90:9e:2e:18:68:ab:2a:fe:ac:35:f8:d1:ef:7d:b0:c2:ec:66: dd:36:77:0e:67:5c:0c:bf:6d:0a:ca:bb:11:d8:ae:24:25:71: eb:11:1d:3b:e5:2b:e3:b3:f3:a0:06:8f:71:b8:00:39:e0:32: f2:73:07:44:46:82:ec:6b:3a:03:6d:bc:3f:24:a2:d4:bd:47: 08:0e:af:70:57:e3:93:ec:4d:b2:8e:38:75:c3:7b:7a:e9:5c: bf:6b:5b:74:d8:c8:fb:ff:69:2f:39:c4:e4:34:d5:c3:47:a4: e4:01:33:cb:b8:6b:c0:82:f8:64:1e:ec:b5:f2:91:98:0d:52: 42:4b:a6:0b:81:fa:d9:94:67:33:56:8f:a9:43:45:66:d4:c9: ad:dc:9b:5d:4d:81:8d:9a:fe:63:bf:2f:77:32:94:b5:1b:8e: 60:13:cd:59 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUTunZ9fPKb+fGFJ9XPQsZSZlDzkMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZWRiOWYzZTZkOGU0YjU3YzQ5MzAxYWE2MjFlZjFmOTAz ODllMDU3YTAeFw0yNDExMjExNzQ4NDBaFw0yNDExMjIyMTI2NDBaMDMxMTAvBgNV BAMTKEY0QzBERjJGREQ0NTM0MDU5N0M3QzBCNERBRTVCQTU4ODJBMDU4NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPpT63s8bMvL32rovLMEbg2oNf 1FFxthkVmLzu81ytaj59ywrRkTrRQRzTyuTSRYvZGqWDhoiYwwaRmx0qf/4Mlscc rsik2gD6hW/zFRYbG3JpOuFfa9c0YXb4Ifot9v05Kcqp2zWKRqXs3H5a/vUFqimF rNWoGZ/Q3typrE6rzD7CwkkMYad4n4k8G+otKRRKaSVLryBoMjPI8RNfFSxig9UC dHVtKIKDWvOM2DIezk/OfgSGzcSSEru08tVab+/4x/s1y97riaqeT/73RR/J9yHo BmEWHmMG06dOw4gvvfgiLgUB/gZnb2ErzQ0oSB9lCzjGKgiIAvFwdG9QmtYpAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU9MDfL91FNAWXx8C02uW6WIKgWG4wHwYDVR0j BBgwFoAU7bnz5tjktXxJMBqmIe8fkDieBXowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmNmYTRhMmMtZTE0NS00MTRkLWE2MmYtMDlhM2Y5YjU3 NWZkLzAvRURCOUYzRTZEOEU0QjU3QzQ5MzAxQUE2MjFFRjFGOTAzODlFMDU3QS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzdibno1dGprdFh4Sk1CcW1JZThma0Rp ZUJYby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS82Y2ZhNGEyYy1l MTQ1LTQxNGQtYTYyZi0wOWEzZjliNTc1ZmQvMC9FREI5RjNFNkQ4RTRCNTdDNDkz MDFBQTYyMUVGMUY5MDM4OUUwNTdBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArLfEngjbfoB8A5Y3xUqm okDd/2YIzqvQgzk8p5zhkJH4YcTTUAlz1behmJIJPUBq8u8r+FmIBxurUcv+NBI7 Anbvek1gLF3UAZrANITXcUecTfTUa64/fYWCkJ4uGGirKv6sNfjR732wwuxm3TZ3 DmdcDL9tCsq7EdiuJCVx6xEdO+Ur47PzoAaPcbgAOeAy8nMHREaC7Gs6A228PySi 1L1HCA6vcFfjk+xNso44dcN7eulcv2tbdNjI+/9pLznE5DTVw0ek5AEzy7hrwIL4 ZB7stfKRmA1SQkumC4H62ZRnM1aPqUNFZtTJrdybXU2BjZr+Y78vdzKUtRuOYBPN WQ== -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org