$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft File: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft (raw, json) Hash identifier: OZW9USa88najpJYm93IuUNLi3zZ8RAWBxQsORxIIpdQ= Subject key identifier: EE:71:DE:FD:57:22:48:5F:21:F1:6F:2B:E3:46:65:AB:64:F2:6F:BE Authority key identifier: 1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 Certificate issuer: /CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Certificate serial: 6A5A2D346FB0480296FC17AC2D06358F357A4EC8 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft Manifest number: 0142 Signing time: Fri 22 Nov 2024 09:53:19 +0000 Manifest this update: Fri 22 Nov 2024 09:48:19 +0000 Manifest next update: Sat 23 Nov 2024 12:34:19 +0000 Files and hashes: 1: 1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl (hash: ODCLWk3891qbGsftXfKeGZsAPTjDKgwcS1z4qZKl24s=) 2: 326131343a316563373a663030663a3a2f34382d3438203d3e20323038343533.roa (hash: dUzgpny38MghrKpugSdB9dzvd5zDywxo+PBsCyfJHn4=) 3: 326131343a316563373a663030643a3a2f34382d3438203d3e20323136313133.roa (hash: rbrpPmQJM8CtEojDNFo6qYDdS2iBWGJ3bQvdSC2Gswo=) 4: 326131343a316563373a663030303a3a2f34302d3430203d3e20323038343533.roa (hash: o481HVHzZc05mfQ6iJem09ar5RkDkMsrC5fq7xCYxfc=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.crl rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/3134EE987E08D8B5583FEEF621A03150C4F35434.mft rsync://rpki.ripe.net/repository/DEFAULT/MTTumH4I2LVYP-72IaAxUMTzVDQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 01:01:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6a:5a:2d:34:6f:b0:48:02:96:fc:17:ac:2d:06:35:8f:35:7a:4e:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71 Validity Not Before: Nov 22 09:48:19 2024 GMT Not After : Nov 23 12:34:19 2024 GMT Subject: CN=EE71DEFD5722485F21F16F2BE34665AB64F26FBE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:d5:d6:3b:d4:3d:86:0c:02:34:1b:ae:76:a1: 2f:3c:9e:b6:ab:a9:1c:f0:f4:20:3b:9e:12:18:78: fe:ff:24:bb:9f:b3:b8:5b:bc:87:8b:6c:a4:85:80: 76:fb:18:32:c8:c4:f7:e8:85:d3:5d:c7:14:50:44: 5c:fb:25:90:5d:00:09:10:fe:68:2f:4b:e5:96:fd: 63:b1:8d:2c:51:38:31:74:f0:92:af:a5:8d:4c:e2: 2f:1a:62:28:60:bc:f3:0a:cf:f6:c7:47:1e:40:c2: 0a:a7:eb:4b:29:70:11:25:da:97:16:7f:66:ac:e5: 4a:24:14:ed:ec:78:c7:e5:60:7a:82:3e:86:bf:04: c6:4d:cd:26:2d:01:dd:23:1a:1e:ef:12:15:3e:75: 32:26:09:0f:b2:3c:8d:19:d8:20:62:52:05:be:a9: 93:40:74:49:e8:a9:f4:24:10:98:ee:3e:9b:61:dc: 88:84:76:77:db:4c:c0:70:c3:52:8e:d5:f3:1f:b6: ae:2d:bd:7d:f2:a8:27:b6:60:10:b8:9b:97:8a:37: 8f:b8:95:5c:f0:3c:45:26:46:e7:fb:e3:ec:25:c0: d8:5e:7c:21:c1:58:bd:c1:71:fc:b4:45:2b:cf:07: fe:b4:be:69:04:00:90:94:dc:fb:84:11:be:ee:6b: 06:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:71:DE:FD:57:22:48:5F:21:F1:6F:2B:E3:46:65:AB:64:F2:6F:BE X509v3 Authority Key Identifier: keyid:1D:BD:1D:47:FD:8E:45:74:C8:42:17:43:C9:CC:5F:0E:F8:3E:0E:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/1a3bb93f-98a4-4c7e-a0e1-8057a4f086c9/0/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/71476d62-9cfa-4871-a2d9-fadf5781c11b/2/1DBD1D47FD8E4574C8421743C9CC5F0EF83E0E71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:9b:b8:8e:45:cf:c9:f6:69:b2:8b:ca:68:ab:4b:e3:22:db: 18:93:68:e8:50:6e:52:e5:66:80:f4:f8:12:02:1f:b6:64:a9: a9:e6:25:8c:84:14:93:d0:39:7a:36:bd:1a:cb:bb:dd:43:b5: cf:3f:ae:89:25:66:e5:49:eb:83:d3:76:73:e4:c1:0f:f0:57: 76:57:96:12:c5:4a:83:da:13:4a:e5:2e:9d:a6:ee:31:05:0f: 11:1e:3c:78:2c:c7:f6:15:6a:f5:06:67:a6:1e:9c:f2:dc:14: b9:8f:d4:6f:b0:0e:6d:dd:09:f7:76:61:8b:7a:6a:e0:7a:b1: 80:28:11:ce:e4:fd:4e:16:1b:69:0e:db:da:77:f9:42:dc:80: 7e:91:72:f2:97:ce:ca:4b:75:a8:1e:c1:62:4c:3f:9e:cb:e5: 00:71:38:0c:f6:84:7f:5e:f7:ac:6c:24:a2:08:14:5b:17:68: 88:e8:73:42:dc:21:78:d6:d5:8d:3f:94:6c:c1:35:78:a6:0b: a4:31:a5:76:6d:66:08:62:1b:93:ff:68:c6:09:0f:ec:0d:5a: 2e:f6:b7:ed:64:4d:41:21:b2:68:fe:b7:12:ca:88:1d:4d:16: 6a:83:ad:35:11:56:54:7a:bd:1d:20:8e:03:5b:cb:8b:0d:99: 46:6b:80:68 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUalotNG+wSAKW/BesLQY1jzV6TsgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVG ODNFMEU3MTAeFw0yNDExMjIwOTQ4MTlaFw0yNDExMjMxMjM0MTlaMDMxMTAvBgNV BAMTKEVFNzFERUZENTcyMjQ4NUYyMUYxNkYyQkUzNDY2NUFCNjRGMjZGQkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC+1dY71D2GDAI0G652oS88nrar qRzw9CA7nhIYeP7/JLufs7hbvIeLbKSFgHb7GDLIxPfohdNdxxRQRFz7JZBdAAkQ /mgvS+WW/WOxjSxRODF08JKvpY1M4i8aYihgvPMKz/bHRx5Awgqn60spcBEl2pcW f2as5UokFO3seMflYHqCPoa/BMZNzSYtAd0jGh7vEhU+dTImCQ+yPI0Z2CBiUgW+ qZNAdEnoqfQkEJjuPpth3IiEdnfbTMBww1KO1fMftq4tvX3yqCe2YBC4m5eKN4+4 lVzwPEUmRuf74+wlwNhefCHBWL3Bcfy0RSvPB/60vmkEAJCU3PuEEb7uawYlAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7nHe/VciSF8h8W8r40Zlq2Tyb74wHwYDVR0j BBgwFoAUHb0dR/2ORXTIQhdDycxfDvg+DnEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzE0NzZkNjItOWNmYS00ODcxLWEyZDktZmFkZjU3ODFj MTFiLzIvMURCRDFENDdGRDhFNDU3NEM4NDIxNzQzQzlDQzVGMEVGODNFMEU3MS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8xYTNiYjkzZi05OGE0LTRj N2UtYTBlMS04MDU3YTRmMDg2YzkvMC8xREJEMUQ0N0ZEOEU0NTc0Qzg0MjE3NDND OUNDNUYwRUY4M0UwRTcxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcxNDc2ZDYyLTljZmEtNDg3MS1hMmQ5LWZhZGY1NzgxYzExYi8yLzFEQkQxRDQ3 RkQ4RTQ1NzRDODQyMTc0M0M5Q0M1RjBFRjgzRTBFNzEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHm7iO Rc/J9mmyi8poq0vjItsYk2joUG5S5WaA9PgSAh+2ZKmp5iWMhBST0Dl6Nr0ay7vd Q7XPP66JJWblSeuD03Zz5MEP8Fd2V5YSxUqD2hNK5S6dpu4xBQ8RHjx4LMf2FWr1 BmemHpzy3BS5j9RvsA5t3Qn3dmGLemrgerGAKBHO5P1OFhtpDtvad/lC3IB+kXLy l87KS3WoHsFiTD+ey+UAcTgM9oR/XvesbCSiCBRbF2iI6HNC3CF41tWNP5RswTV4 pgukMaV2bWYIYhuT/2jGCQ/sDVou9rftZE1BIbJo/rcSyogdTRZqg601EVZUer0d II4DW8uLDZlGa4Bo -----END CERTIFICATE-----Generated at Fri Nov 22 12:19:04 2024 by rpki-client on console-fra.rpki-client.org