$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft File: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft (raw, json) Hash identifier: djESY8Mh8vsZ8zaaifiqNNjiLLHsG5QVkhYRAyhwXuM= Subject key identifier: 70:D4:01:C4:99:39:14:D3:F0:67:F7:0E:0A:68:EF:BA:F0:B8:33:7D Authority key identifier: 49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A Certificate issuer: /CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Certificate serial: 44FAD29F15426CC6401DADFB78F4428906081337 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft Manifest number: 5D Signing time: Thu 21 Nov 2024 18:18:54 +0000 Manifest this update: Thu 21 Nov 2024 18:13:54 +0000 Manifest next update: Fri 22 Nov 2024 21:13:54 +0000 Files and hashes: 1: 326130613a363034343a633131303a3a2f34342d3434203d3e20323135323431.roa (hash: lVtF5NwM/y4VEdugMwdt8tI1sYxZq/0nAd61eRBWSSE=) 2: 491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl (hash: TBUaD8pcUxvCmw4dP7l7bAs1IFd0ESFrp3WpIOl5z/g=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 44:fa:d2:9f:15:42:6c:c6:40:1d:ad:fb:78:f4:42:89:06:08:13:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=491E7C1B3D725A4C67A798CEC21F6A699D82853A Validity Not Before: Nov 21 18:13:54 2024 GMT Not After : Nov 22 21:13:54 2024 GMT Subject: CN=70D401C4993914D3F067F70E0A68EFBAF0B8337D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:a4:b7:9d:be:a5:b3:38:6c:05:c7:1d:34:66: aa:e2:7a:7a:67:68:0d:b3:c8:ce:1f:7e:47:75:2d: 55:c0:f4:e3:02:18:63:c2:d5:c9:10:70:07:e4:24: 0d:a7:c3:1b:24:40:fb:be:0d:dc:4a:1d:7c:0c:07: 99:60:a2:53:b0:70:72:63:dc:e4:e2:9c:a2:31:b5: 22:2c:6e:7b:d2:a6:59:eb:71:2b:5a:1e:fa:f6:e8: ec:48:da:3f:a1:0a:de:d9:bb:cf:20:24:e8:f0:9b: a6:64:34:0d:3c:3a:a9:64:87:9a:a5:ec:b2:b9:23: 92:71:fc:00:40:ca:6e:65:59:8f:c4:0c:4a:3f:43: c0:8a:e9:67:e1:41:54:03:e6:a5:b5:e1:57:eb:a8: a3:9a:bc:78:90:3a:7e:37:d1:d2:61:bc:6e:9c:68: 27:4c:e5:b4:e9:ba:7e:89:dd:d1:d6:21:17:40:07: 8f:78:a4:3a:ff:45:df:dd:54:98:58:0f:3c:d6:ce: 90:56:b7:57:54:a9:7e:a8:3d:d6:5d:a5:53:be:7d: f8:fb:2d:e3:15:8c:0a:a1:2d:76:9e:dc:76:73:28: 8e:b1:20:62:d9:9b:6a:a3:35:81:72:d3:0c:4d:17: ac:88:66:e8:a0:0a:a8:50:ba:bc:a5:f3:1c:41:47: 7b:01 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:D4:01:C4:99:39:14:D3:F0:67:F7:0E:0A:68:EF:BA:F0:B8:33:7D X509v3 Authority Key Identifier: keyid:49:1E:7C:1B:3D:72:5A:4C:67:A7:98:CE:C2:1F:6A:69:9D:82:85:3A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/491E7C1B3D725A4C67A798CEC21F6A699D82853A.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/74c1572c-e97c-4100-aeff-1373f4e9433a/1/491E7C1B3D725A4C67A798CEC21F6A699D82853A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption d7:4a:42:f9:6a:a5:8a:09:8c:76:8d:3c:f2:fc:2c:59:70:98: 1c:4f:0b:50:79:45:6d:21:cd:80:b3:36:0b:4e:4c:4f:44:dc: 3b:6e:6b:05:3d:ac:5a:96:f8:9a:04:de:b4:24:2d:37:98:4d: f4:1a:e7:55:fd:15:ce:2a:fa:89:f4:e4:38:fe:95:78:a0:3b: 30:04:06:4e:d5:94:1d:7c:97:ec:97:a1:09:05:f5:0a:de:0b: 0e:49:7b:21:17:f4:ad:21:1f:46:9f:9f:90:7a:b5:0f:bc:c0: 30:02:72:5f:e0:e2:ea:05:c9:14:32:73:60:d8:0d:b4:74:8b: e1:3a:1a:39:9b:50:03:01:68:a7:48:63:7f:86:1a:bd:4a:ab: c1:83:60:15:c1:7c:8e:e4:6c:e4:ff:37:b0:30:06:c6:6b:ae: 59:a6:32:52:f6:50:ba:33:26:41:1c:83:c4:00:45:5c:16:c1: b2:89:eb:f0:05:70:6c:8a:a0:b8:d1:e0:51:5c:c2:e6:a6:e1: de:84:54:2c:18:a4:55:40:37:ca:c9:27:00:db:c7:95:4e:17: 51:86:0c:92:df:43:7b:98:f6:cd:7a:b3:16:7e:84:e7:b8:44: 2f:72:93:b6:51:3b:cc:21:08:7b:bc:c7:45:2d:14:e8:fe:c3: 63:e7:8f:31 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURPrSnxVCbMZAHa37ePRCiQYIEzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5 RDgyODUzQTAeFw0yNDExMjExODEzNTRaFw0yNDExMjIyMTEzNTRaMDMxMTAvBgNV BAMTKDcwRDQwMUM0OTkzOTE0RDNGMDY3RjcwRTBBNjhFRkJBRjBCODMzN0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8pLedvqWzOGwFxx00Zqrienpn aA2zyM4ffkd1LVXA9OMCGGPC1ckQcAfkJA2nwxskQPu+DdxKHXwMB5lgolOwcHJj 3OTinKIxtSIsbnvSplnrcStaHvr26OxI2j+hCt7Zu88gJOjwm6ZkNA08Oqlkh5ql 7LK5I5Jx/ABAym5lWY/EDEo/Q8CK6WfhQVQD5qW14VfrqKOavHiQOn430dJhvG6c aCdM5bTpun6J3dHWIRdAB494pDr/Rd/dVJhYDzzWzpBWt1dUqX6oPdZdpVO+ffj7 LeMVjAqhLXae3HZzKI6xIGLZm2qjNYFy0wxNF6yIZuigCqhQuryl8xxBR3sBAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUcNQBxJk5FNPwZ/cOCmjvuvC4M30wHwYDVR0j BBgwFoAUSR58Gz1yWkxnp5jOwh9qaZ2ChTowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNzRjMTU3MmMtZTk3Yy00MTAwLWFlZmYtMTM3M2Y0ZTk0 MzNhLzEvNDkxRTdDMUIzRDcyNUE0QzY3QTc5OENFQzIxRjZBNjk5RDgyODUzQS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC80OTFFN0MxQjNENzI1QTRDNjdBNzk4Q0VD MjFGNkE2OTlEODI4NTNBLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzc0YzE1NzJjLWU5N2MtNDEwMC1hZWZmLTEzNzNmNGU5NDMzYS8xLzQ5MUU3QzFC M0Q3MjVBNEM2N0E3OThDRUMyMUY2QTY5OUQ4Mjg1M0EubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDXSkL5 aqWKCYx2jTzy/CxZcJgcTwtQeUVtIc2AszYLTkxPRNw7bmsFPaxalviaBN60JC03 mE30GudV/RXOKvqJ9OQ4/pV4oDswBAZO1ZQdfJfsl6EJBfUK3gsOSXshF/StIR9G n5+QerUPvMAwAnJf4OLqBckUMnNg2A20dIvhOho5m1ADAWinSGN/hhq9SqvBg2AV wXyO5Gzk/zewMAbGa65ZpjJS9lC6MyZBHIPEAEVcFsGyievwBXBsiqC40eBRXMLm puHehFQsGKRVQDfKyScA28eVThdRhgyS30N7mPbNerMWfoTnuEQvcpO2UTvMIQh7 vMdFLRTo/sNj548x -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org