$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft File: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft (raw, json) Hash identifier: ZGEET1OqRAOefhr0aQihT7MjnneXQITr9g2ViiXdtgQ= Subject key identifier: 99:2A:A5:6E:E0:82:F3:DF:6B:99:ED:71:C7:E2:F2:12:3A:3F:95:96 Authority key identifier: 0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 Certificate issuer: /CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Certificate serial: 54A0CF8D4B1710751E55CBF2275573916BA02B41 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft Manifest number: 91 Signing time: Thu 21 Nov 2024 07:43:26 +0000 Manifest this update: Thu 21 Nov 2024 07:38:26 +0000 Manifest next update: Fri 22 Nov 2024 09:39:26 +0000 Files and hashes: 1: 326131343a373538313a6430303a3a2f34302d3438203d3e20323136343532.roa (hash: GOSro5bSH04/LhFcp3jWcxc9uL2by5TiBmqbWGnAjdA=) 2: 0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl (hash: cvW6KQVOEev9p0ud6KWXUxDq2L3DHoL4RsHq2Q6anFo=) 3: 326131343a373538313a6430303a3a2f34342d3438203d3e203331383938.roa (hash: WAEDCXUcEyZrm+AiMC7S/4c05J5m88q64rRSqxpIjho=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 17:56:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:a0:cf:8d:4b:17:10:75:1e:55:cb:f2:27:55:73:91:6b:a0:2b:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45 Validity Not Before: Nov 21 07:38:26 2024 GMT Not After : Nov 22 09:39:26 2024 GMT Subject: CN=992AA56EE082F3DF6B99ED71C7E2F2123A3F9596 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e4:b9:a1:50:2c:0a:37:e9:98:35:05:4a:69:49: 1d:8c:48:1c:74:c2:e1:03:f4:ec:5e:eb:d3:8c:ad: a7:c2:72:48:a4:27:da:09:31:b3:1a:50:7e:f3:87: 49:9f:97:3e:ca:e8:f8:8c:68:00:3c:e3:68:82:1c: 91:7b:49:5e:c3:a6:c1:c0:ca:45:ed:3b:07:2d:59: 7b:cd:55:da:82:2d:74:0a:1c:d0:1a:47:af:07:be: a7:71:8d:be:62:b5:12:64:bc:01:b0:98:cb:ed:95: 3c:b8:a6:2a:b4:57:ac:b6:e9:67:5c:6c:14:18:51: 97:27:ad:63:b9:38:93:9b:08:8a:0b:e9:17:52:b7: e0:e6:b2:47:50:b5:3b:a6:16:dd:f6:92:1d:c8:82: 93:4a:af:cc:13:7c:69:b1:d1:44:83:7e:ab:ec:75: 61:04:d9:83:ba:6d:1d:46:14:25:ee:f1:d0:15:2b: 0c:b2:ba:79:fc:19:9a:2a:b5:de:0a:74:7c:1c:36: 63:fe:91:f2:f6:1d:87:8f:e2:03:07:8e:c7:51:2e: 3c:0b:06:a9:6a:4a:32:44:a8:b0:cc:b9:4b:fa:33: 21:56:39:79:7a:fd:32:21:33:3d:c9:f9:08:23:91: e2:95:2b:be:58:94:14:cc:8d:2e:97:9f:34:05:63: 9c:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 99:2A:A5:6E:E0:82:F3:DF:6B:99:ED:71:C7:E2:F2:12:3A:3F:95:96 X509v3 Authority Key Identifier: keyid:0A:8B:61:A8:44:D6:C2:C7:AF:38:ED:CB:D1:65:D0:EF:FB:82:3E:45 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/72c405f1-c32d-47ce-8943-0752ed13d8ef/1/0A8B61A844D6C2C7AF38EDCBD165D0EFFB823E45.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:be:b8:1b:56:da:50:ac:01:97:e5:d5:91:fc:d8:41:cf:3b: 13:af:e2:52:12:13:27:0f:3d:9f:26:19:28:17:b4:a2:8a:0b: c4:db:90:bb:31:d7:c2:36:ed:23:17:3c:b8:3c:15:7c:e7:af: e8:c2:46:47:0a:c6:21:12:2a:98:21:51:82:64:86:90:df:ae: df:0e:5d:36:3f:de:fd:88:64:69:a3:75:42:62:10:10:7e:58: 0a:5d:b9:a5:d1:2e:f2:52:2f:b5:69:13:97:68:fb:37:69:ee: 46:65:ce:51:f1:be:f3:44:15:d1:c3:a1:53:72:30:b0:5c:3f: fc:7c:7f:2d:bc:d5:82:25:cd:27:6a:d1:0b:37:28:62:24:92: a7:f5:9c:2c:7a:d5:cb:fc:68:a6:24:ea:4b:22:55:12:71:43: 43:2c:dc:7e:da:ab:eb:5b:57:a1:a3:38:dd:09:5f:62:05:3e: 99:7e:36:1e:46:4d:ce:8e:f4:06:78:ba:a8:4f:35:31:6c:a2: 05:92:de:37:3e:98:87:28:dc:31:fa:70:e9:13:a4:7d:05:26: c5:86:9a:54:d1:4d:0b:67:1b:16:57:2b:4a:03:90:f0:b5:5a: 92:fc:93:90:bc:0d:60:09:95:32:aa:b9:4e:2a:28:44:90:b2: 60:3e:30:c7 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUVKDPjUsXEHUeVcvyJ1VzkWugK0EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZG QjgyM0U0NTAeFw0yNDExMjEwNzM4MjZaFw0yNDExMjIwOTM5MjZaMDMxMTAvBgNV BAMTKDk5MkFBNTZFRTA4MkYzREY2Qjk5RUQ3MUM3RTJGMjEyM0EzRjk1OTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkuaFQLAo36Zg1BUppSR2MSBx0 wuED9Oxe69OMrafCckikJ9oJMbMaUH7zh0mflz7K6PiMaAA842iCHJF7SV7DpsHA ykXtOwctWXvNVdqCLXQKHNAaR68Hvqdxjb5itRJkvAGwmMvtlTy4piq0V6y26Wdc bBQYUZcnrWO5OJObCIoL6RdSt+DmskdQtTumFt32kh3IgpNKr8wTfGmx0USDfqvs dWEE2YO6bR1GFCXu8dAVKwyyunn8GZoqtd4KdHwcNmP+kfL2HYeP4gMHjsdRLjwL BqlqSjJEqLDMuUv6MyFWOXl6/TIhMz3J+QgjkeKVK75YlBTMjS6XnzQFY5yRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmSqlbuCC899rme1xx+LyEjo/lZYwHwYDVR0j BBgwFoAUCothqETWwsevOO3L0WXQ7/uCPkUwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzJjNDA1ZjEtYzMyZC00N2NlLTg5NDMtMDc1MmVkMTNk OGVmLzEvMEE4QjYxQTg0NEQ2QzJDN0FGMzhFRENCRDE2NUQwRUZGQjgyM0U0NS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC8wQThCNjFBODQ0RDZDMkM3QUYzOEVEQ0JE MTY1RDBFRkZCODIzRTQ1LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzcyYzQwNWYxLWMzMmQtNDdjZS04OTQzLTA3NTJlZDEzZDhlZi8xLzBBOEI2MUE4 NDRENkMyQzdBRjM4RURDQkQxNjVEMEVGRkI4MjNFNDUubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBevrgb VtpQrAGX5dWR/NhBzzsTr+JSEhMnDz2fJhkoF7SiigvE25C7MdfCNu0jFzy4PBV8 56/owkZHCsYhEiqYIVGCZIaQ367fDl02P979iGRpo3VCYhAQflgKXbml0S7yUi+1 aROXaPs3ae5GZc5R8b7zRBXRw6FTcjCwXD/8fH8tvNWCJc0natELNyhiJJKn9Zws etXL/GimJOpLIlUScUNDLNx+2qvrW1ehozjdCV9iBT6ZfjYeRk3OjvQGeLqoTzUx bKIFkt43PpiHKNwx+nDpE6R9BSbFhppU0U0LZxsWVytKA5DwtVqS/JOQvA1gCZUy qrlOKihEkLJgPjDH -----END CERTIFICATE-----Generated at Thu Nov 21 09:46:55 2024 by rpki-client on console-ams.rpki-client.org