$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft File: FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft (raw, json) Hash identifier: eS7/4cWeaoAiseb4oo7uzPKFF37Ij1mz9DQ1u6WXiZ4= Subject key identifier: 74:B3:69:4B:2D:43:B8:97:14:F5:AB:5B:91:1F:9C:1F:A0:0A:36:F0 Authority key identifier: FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B Certificate issuer: /CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Certificate serial: 31293E00A10EDB787AE441C5B773EBBC7542ECF7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft Manifest number: 02FB Signing time: Sun 24 Nov 2024 16:08:19 +0000 Manifest this update: Sun 24 Nov 2024 16:03:19 +0000 Manifest next update: Mon 25 Nov 2024 17:21:19 +0000 Files and hashes: 1: FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl (hash: vnP/6BYOBVW2mbay44GCIGbvc74m0SiLJfBwJtqvaNk=) 2: 326130373a353463313a663030303a3a2f33362d3438203d3e20323038343533.roa (hash: lh1Ohfa3ToxmF5E1m7erqbdCbn0T+JzZxF0dzSFXjBU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 05:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 31:29:3e:00:a1:0e:db:78:7a:e4:41:c5:b7:73:eb:bc:75:42:ec:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA8F32A0B21DD2779315422B5A2184C649E03C0B Validity Not Before: Nov 24 16:03:19 2024 GMT Not After : Nov 25 17:21:19 2024 GMT Subject: CN=74B3694B2D43B89714F5AB5B911F9C1FA00A36F0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:89:7e:b3:f3:5e:ec:d8:86:e4:42:24:cc:65: a0:20:48:8e:e7:d6:3e:0b:89:e8:e1:6d:e0:0a:74: c0:84:f3:70:0b:f5:7f:a6:e3:62:e7:41:f8:ef:43: 76:5b:9f:94:6f:39:d2:ed:f9:2f:3b:b4:20:30:00: dd:6b:11:0d:a8:70:fd:9d:c4:4c:0b:94:0e:e9:c7: bc:10:5c:92:9b:d6:25:cb:af:ae:5f:dc:6e:8e:a1: ea:12:f0:24:a7:75:51:d9:4a:ae:e7:a7:03:d4:ca: e0:4f:92:6c:16:90:e3:a5:68:8f:8f:3a:02:b0:bb: b9:5c:5f:54:92:57:d3:ca:7e:be:e0:5b:34:14:5c: ae:de:4a:20:db:66:ce:8b:a0:cc:e6:59:63:d6:30: cb:b0:49:2f:b9:c9:67:ec:37:f4:38:f6:5c:97:e2: 2a:d9:75:d6:cf:31:b0:7e:7b:7c:b9:e3:67:cd:20: fd:79:c1:56:32:9a:54:eb:69:b2:f9:cc:79:6e:39: 35:12:09:6d:d4:a9:b4:37:e8:17:1c:c1:26:62:87: fb:2c:5c:bd:75:94:22:06:a2:d6:91:31:62:70:10: 69:8e:6e:37:ee:7a:7d:56:1a:ae:f5:f4:a7:2f:ff: bb:ae:89:76:e2:a9:b5:62:f8:c5:3a:fd:df:44:b9: ee:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 74:B3:69:4B:2D:43:B8:97:14:F5:AB:5B:91:1F:9C:1F:A0:0A:36:F0 X509v3 Authority Key Identifier: keyid:FA:8F:32:A0:B2:1D:D2:77:93:15:42:2B:5A:21:84:C6:49:E0:3C:0B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/FA8F32A0B21DD2779315422B5A2184C649E03C0B.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/1/FA8F32A0B21DD2779315422B5A2184C649E03C0B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 03:09:5b:d8:f4:cc:28:7f:37:23:60:d2:8b:df:0f:6d:ba:04: 3c:a7:fc:c9:41:23:2d:e7:20:c6:0a:b6:45:9b:69:14:bf:ae: e3:92:e2:15:e8:e7:f2:2c:d0:64:fc:ec:97:ac:d2:af:d7:76: a8:11:43:d4:bf:5e:1f:2b:e5:cc:99:4f:b2:54:14:e0:8a:35: 09:46:6c:c6:1d:e0:86:91:09:04:6b:5f:c7:04:fc:f7:0b:01: 2f:79:45:17:55:5a:1c:a1:3f:08:8a:21:4d:21:d2:b1:23:97: f9:56:07:1d:32:3f:a8:a8:05:57:d2:d9:3d:e0:9f:da:d9:dc: e6:30:58:61:e0:fd:69:71:50:12:31:68:91:f0:ff:c5:8d:08: bf:64:49:ab:93:76:70:52:b4:68:d0:c1:ce:fa:b8:64:65:cd: 52:88:c1:9a:af:8b:a3:64:c0:b1:a2:0f:62:06:67:1d:f1:93: 4f:ba:09:fc:f3:a5:9b:2a:62:04:15:81:d6:a6:cd:09:0d:fe: 57:ad:b9:50:b6:0c:e8:00:59:71:e2:61:29:76:72:66:60:8b: 0a:0b:58:0a:d6:14:f0:7f:71:46:e3:c0:6c:f7:ea:ad:e1:b8: 69:a3:5e:65:c4:d6:7e:1a:8f:c0:53:d4:26:c2:ce:35:b1:6e: ed:07:55:9f -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUMSk+AKEO23h65EHFt3PrvHVC7PcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0 OUUwM0MwQjAeFw0yNDExMjQxNjAzMTlaFw0yNDExMjUxNzIxMTlaMDMxMTAvBgNV BAMTKDc0QjM2OTRCMkQ0M0I4OTcxNEY1QUI1QjkxMUY5QzFGQTAwQTM2RjAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSiX6z817s2IbkQiTMZaAgSI7n 1j4LiejhbeAKdMCE83AL9X+m42LnQfjvQ3Zbn5RvOdLt+S87tCAwAN1rEQ2ocP2d xEwLlA7px7wQXJKb1iXLr65f3G6OoeoS8CSndVHZSq7npwPUyuBPkmwWkOOlaI+P OgKwu7lcX1SSV9PKfr7gWzQUXK7eSiDbZs6LoMzmWWPWMMuwSS+5yWfsN/Q49lyX 4irZddbPMbB+e3y542fNIP15wVYymlTrabL5zHluOTUSCW3UqbQ36BccwSZih/ss XL11lCIGotaRMWJwEGmObjfuen1WGq719Kcv/7uuiXbiqbVi+MU6/d9Eue5rAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUdLNpSy1DuJcU9atbkR+cH6AKNvAwHwYDVR0j BBgwFoAU+o8yoLId0neTFUIrWiGExkngPAswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzEvRkE4RjMyQTBCMjFERDI3NzkzMTU0MjJCNUEyMTg0QzY0OUUwM0MwQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9GQThGMzJBMEIyMUREMjc3OTMxNTQyMkI1 QTIxODRDNjQ5RTAzQzBCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8xL0ZBOEYzMkEw QjIxREQyNzc5MzE1NDIyQjVBMjE4NEM2NDlFMDNDMEIubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQADCVvY 9MwofzcjYNKL3w9tugQ8p/zJQSMt5yDGCrZFm2kUv67jkuIV6OfyLNBk/OyXrNKv 13aoEUPUv14fK+XMmU+yVBTgijUJRmzGHeCGkQkEa1/HBPz3CwEveUUXVVocoT8I iiFNIdKxI5f5VgcdMj+oqAVX0tk94J/a2dzmMFhh4P1pcVASMWiR8P/FjQi/ZEmr k3ZwUrRo0MHO+rhkZc1SiMGar4ujZMCxog9iBmcd8ZNPugn886WbKmIEFYHWps0J Df5XrblQtgzoAFlx4mEpdnJmYIsKC1gK1hTwf3FG48Bs9+qt4bhpo15lxNZ+Go/A U9Qmws41sW7tB1Wf -----END CERTIFICATE-----Generated at Sun Nov 24 18:39:44 2024 by rpki-client on console-ams.rpki-client.org