$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft File: 99D922574ADCFE8B3741930044512F9A57EF91A4.mft (raw, json) Hash identifier: ddJJnFXpgUTMiVFE3SBbme+5HlpGyVT3kqihoZr38PY= Subject key identifier: 5D:47:4D:DB:0A:36:31:94:17:C1:D1:D1:BE:CC:39:92:30:FE:E4:F3 Authority key identifier: 99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 Certificate issuer: /CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Certificate serial: 45374CA106B88739616AF40CF128631269E2C3BC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft Manifest number: DC Signing time: Thu 21 Nov 2024 18:34:38 +0000 Manifest this update: Thu 21 Nov 2024 18:29:38 +0000 Manifest next update: Fri 22 Nov 2024 19:24:38 +0000 Files and hashes: 1: 99D922574ADCFE8B3741930044512F9A57EF91A4.crl (hash: Sn5zo7Bqc3mMvodyyEl2mqGbn7JdV8e4yJGQglcKHNs=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 13:15:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:37:4c:a1:06:b8:87:39:61:6a:f4:0c:f1:28:63:12:69:e2:c3:bc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=99D922574ADCFE8B3741930044512F9A57EF91A4 Validity Not Before: Nov 21 18:29:38 2024 GMT Not After : Nov 22 19:24:38 2024 GMT Subject: CN=5D474DDB0A36319417C1D1D1BECC399230FEE4F3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:90:70:75:d7:f8:f8:0d:24:ed:ec:06:e9:b3: 7d:19:ec:d7:d5:99:68:e4:6f:e5:87:87:4e:a6:24: 30:b5:6c:8f:cf:a2:cd:11:7e:6e:c4:ca:36:0f:9f: e3:bb:18:27:22:63:f1:53:f1:ee:86:cb:c0:5f:5e: 77:98:18:c7:06:28:49:ab:fc:58:3c:8e:c9:84:8a: 43:b9:b6:83:62:fe:85:dd:77:45:19:b6:a8:46:a2: b3:fe:71:24:1c:59:e3:1c:72:b2:d2:88:ac:12:30: 3b:20:d9:58:24:03:1e:6b:cd:b9:e7:29:43:fe:6e: 94:68:98:56:d9:f0:ca:d8:61:c1:33:30:07:be:ad: 6d:42:9b:e2:ed:0c:a6:af:20:a6:27:e8:af:87:36: b9:39:39:14:1f:68:22:75:f3:88:27:7b:3b:fe:c6: 8a:4a:f1:65:b8:f5:0c:e0:d3:f5:45:c8:f3:25:1e: b7:8d:0c:71:86:dc:11:c1:3d:37:9f:84:8c:39:3d: 1b:dc:33:74:2c:8a:cf:cc:af:d9:63:d9:f5:dd:7a: 30:90:1c:96:5b:1a:21:ca:8f:c8:09:3f:bb:62:73: a1:ab:c7:54:5d:e5:14:fe:6e:e0:c3:a9:1a:eb:47: 1e:f5:80:9f:85:b5:95:5f:d3:13:cb:94:67:67:75: bd:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:47:4D:DB:0A:36:31:94:17:C1:D1:D1:BE:CC:39:92:30:FE:E4:F3 X509v3 Authority Key Identifier: keyid:99:D9:22:57:4A:DC:FE:8B:37:41:93:00:44:51:2F:9A:57:EF:91:A4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/99D922574ADCFE8B3741930044512F9A57EF91A4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ff7a989-ecdf-43d6-86e1-f6c3935b9b3d/2/99D922574ADCFE8B3741930044512F9A57EF91A4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:c1:19:71:33:06:15:12:cf:2f:9d:a4:2a:f7:fe:e7:c7:17: 0d:0c:bf:ee:48:bd:49:45:51:85:b1:1c:18:1a:4d:84:77:52: 09:63:22:b0:37:2a:48:01:3b:b0:cf:11:61:d8:9c:56:a9:c5: a5:2c:9e:a1:bd:e4:02:93:bc:6b:c3:f0:76:ff:0c:40:03:93: 3d:27:9b:58:4f:e1:15:d9:50:96:a8:0c:81:b7:ce:d3:7e:85: e4:3b:d5:44:d0:20:d5:af:d0:39:f5:7b:22:4b:10:52:9f:f6: e7:68:ce:59:91:61:05:8b:e1:54:e6:ed:18:91:71:6a:45:e7: 17:24:4e:49:86:63:79:42:0b:33:73:43:b7:0d:f9:28:25:7f: d5:43:75:51:33:e6:54:d4:f1:05:9d:df:59:af:e9:2b:dc:16: 59:03:5c:07:47:38:45:f8:24:3f:18:1d:ed:53:fd:af:b6:06: 35:b1:7e:b3:f4:a6:e9:b9:67:2e:e4:d1:8d:87:4a:81:a1:21: 1a:ba:53:9d:c4:29:c1:fe:57:ff:ca:04:2d:8d:81:02:db:1e: 7a:02:5d:fc:24:bf:b6:f1:e9:9d:3b:1f:5c:3e:4c:0f:dd:62: 86:2b:18:dd:12:bf:68:75:82:59:a5:74:85:13:13:dd:e3:d6: f6:40:2c:d4 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURTdMoQa4hzlhavQM8ShjEmniw7wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1 N0VGOTFBNDAeFw0yNDExMjExODI5MzhaFw0yNDExMjIxOTI0MzhaMDMxMTAvBgNV BAMTKDVENDc0RERCMEEzNjMxOTQxN0MxRDFEMUJFQ0MzOTkyMzBGRUU0RjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRkHB11/j4DSTt7Abps30Z7NfV mWjkb+WHh06mJDC1bI/Pos0Rfm7EyjYPn+O7GCciY/FT8e6Gy8BfXneYGMcGKEmr /Fg8jsmEikO5toNi/oXdd0UZtqhGorP+cSQcWeMccrLSiKwSMDsg2VgkAx5rzbnn KUP+bpRomFbZ8MrYYcEzMAe+rW1Cm+LtDKavIKYn6K+HNrk5ORQfaCJ184gnezv+ xopK8WW49Qzg0/VFyPMlHreNDHGG3BHBPTefhIw5PRvcM3Qsis/Mr9lj2fXdejCQ HJZbGiHKj8gJP7tic6Grx1Rd5RT+buDDqRrrRx71gJ+FtZVf0xPLlGdndb2hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXUdN2wo2MZQXwdHRvsw5kjD+5PMwHwYDVR0j BBgwFoAUmdkiV0rc/os3QZMARFEvmlfvkaQwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNmZmN2E5ODktZWNkZi00M2Q2LTg2ZTEtZjZjMzkzNWI5 YjNkLzIvOTlEOTIyNTc0QURDRkU4QjM3NDE5MzAwNDQ1MTJGOUE1N0VGOTFBNC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC85OUQ5MjI1NzRBRENGRThCMzc0MTkzMDA0 NDUxMkY5QTU3RUY5MUE0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzZmZjdhOTg5LWVjZGYtNDNkNi04NmUxLWY2YzM5MzViOWIzZC8yLzk5RDkyMjU3 NEFEQ0ZFOEIzNzQxOTMwMDQ0NTEyRjlBNTdFRjkxQTQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCmwRlx MwYVEs8vnaQq9/7nxxcNDL/uSL1JRVGFsRwYGk2Ed1IJYyKwNypIATuwzxFh2JxW qcWlLJ6hveQCk7xrw/B2/wxAA5M9J5tYT+EV2VCWqAyBt87TfoXkO9VE0CDVr9A5 9XsiSxBSn/bnaM5ZkWEFi+FU5u0YkXFqRecXJE5JhmN5Qgszc0O3DfkoJX/VQ3VR M+ZU1PEFnd9Zr+kr3BZZA1wHRzhF+CQ/GB3tU/2vtgY1sX6z9KbpuWcu5NGNh0qB oSEaulOdxCnB/lf/ygQtjYEC2x56Al38JL+28emdOx9cPkwP3WKGKxjdEr9odYJZ pXSFExPd49b2QCzU -----END CERTIFICATE-----Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org