$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft File: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft (raw, json) Hash identifier: 7e40ETbE7DqG1V3PrdlmRcXdM8LIWTjixBBPwDfaFhM= Subject key identifier: D1:63:A1:29:FE:28:E2:9D:08:F0:35:E5:5D:06:B7:94:5D:97:DF:04 Authority key identifier: 0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 Certificate issuer: /CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Certificate serial: 2B88AA8895EB6BF2824EA09CBE5CC47953111A3D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft Manifest number: 02BB Signing time: Sun 24 Nov 2024 10:08:34 +0000 Manifest this update: Sun 24 Nov 2024 10:03:34 +0000 Manifest next update: Mon 25 Nov 2024 12:07:34 +0000 Files and hashes: 1: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl (hash: n5xNH+q12k1jOZvZblV+fUI3SoAQqu8Q11w2YoLhJTA=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 24 Nov 2024 22:46:55 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:88:aa:88:95:eb:6b:f2:82:4e:a0:9c:be:5c:c4:79:53:11:1a:3d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=0E4EBC431E3513FC3F641DB880E2B2FE1D040A30 Validity Not Before: Nov 24 10:03:34 2024 GMT Not After : Nov 25 12:07:34 2024 GMT Subject: CN=D163A129FE28E29D08F035E55D06B7945D97DF04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:3f:0c:5c:d0:d6:96:f9:4e:3a:2b:0d:cc:21: 3c:e5:47:f8:73:1e:83:df:7e:ac:8c:67:91:a0:53: e3:0d:40:1b:dc:50:f5:33:4c:f2:71:4d:cb:2d:38: 08:1f:c7:b6:ab:8c:e3:23:c9:60:4c:f8:2a:35:d1: 75:fe:84:75:ae:eb:72:2e:9d:19:26:af:df:10:b2: 44:27:9f:f7:f2:8f:69:3d:3f:78:28:ff:41:87:73: 23:67:fa:f6:59:aa:ea:71:eb:79:ca:20:d7:fc:28: fe:eb:ab:59:d7:15:b1:ad:e9:02:33:4e:3c:10:ff: 2e:a9:49:c5:86:85:b8:cd:6a:8e:35:db:88:ca:ef: 9f:34:ac:90:3a:94:f4:8a:4b:ab:17:33:dd:55:36: 70:12:f2:d6:95:99:d1:a2:bb:a4:d8:fe:4f:9d:73: 21:51:a0:a7:e1:e8:14:2b:ce:2e:b4:d9:e4:1f:1d: ec:cd:ea:2a:47:f2:9f:cf:3f:c2:f8:26:f9:cd:86: 92:6e:65:b8:d2:49:56:b5:98:69:3b:24:62:4c:b8: 11:d2:95:e4:75:b0:f9:54:05:4a:90:ea:7e:00:7d: a3:f4:eb:cf:0d:d1:f9:2f:c9:5d:b2:16:71:2f:d5: 72:c9:db:d7:32:0b:71:29:80:3c:a9:5c:4a:ad:21: 9b:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D1:63:A1:29:FE:28:E2:9D:08:F0:35:E5:5D:06:B7:94:5D:97:DF:04 X509v3 Authority Key Identifier: keyid:0E:4E:BC:43:1E:35:13:FC:3F:64:1D:B8:80:E2:B2:FE:1D:04:0A:30 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/1/0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 05:49:07:b8:be:67:49:bf:ed:a8:bb:f1:4e:fc:bc:0b:ca:14: 76:1a:b9:75:08:0c:c6:e0:9c:53:63:f3:c0:bd:13:41:36:e9: a2:23:0a:86:80:94:5c:49:7c:e3:d7:69:b4:77:4b:f6:38:75: e0:f7:c3:3d:bd:50:87:df:46:8d:a0:57:08:33:25:5a:a2:eb: 12:37:9a:72:77:f5:50:12:6b:c3:f0:2e:7a:c8:2a:9d:45:55: 18:10:54:c0:26:45:fd:21:9c:93:64:1f:8e:0c:2b:24:99:ce: 00:6f:73:0c:32:57:50:21:06:dd:ed:b8:60:96:47:b4:b9:6f: f1:bd:d8:f5:c2:46:ee:d8:c7:3a:fc:b0:9e:73:dc:de:e0:28: 9d:e2:a3:11:bf:4e:50:18:b4:f8:dd:59:3e:6c:f5:e2:68:be: 66:3d:cf:b7:ba:d5:f6:a6:a4:4d:6d:12:7a:ba:cc:11:05:a7: a7:fc:b3:33:c9:f5:d3:46:91:f1:86:f6:b9:06:3e:3f:08:30: 5c:e5:d4:d0:c1:c0:24:ce:10:d7:2d:55:aa:89:23:cd:12:93: 42:93:12:0e:43:b3:42:4c:d0:ce:28:c6:c0:d1:30:99:ed:41: fc:77:4e:8c:dd:5d:f9:79:41:56:00:3f:f2:0e:d7:6e:c5:66: e5:44:40:16 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUK4iqiJXra/KCTqCcvlzEeVMRGj0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUx RDA0MEEzMDAeFw0yNDExMjQxMDAzMzRaFw0yNDExMjUxMjA3MzRaMDMxMTAvBgNV BAMTKEQxNjNBMTI5RkUyOEUyOUQwOEYwMzVFNTVEMDZCNzk0NUQ5N0RGMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPPwxc0NaW+U46Kw3MITzlR/hz HoPffqyMZ5GgU+MNQBvcUPUzTPJxTcstOAgfx7arjOMjyWBM+Co10XX+hHWu63Iu nRkmr98QskQnn/fyj2k9P3go/0GHcyNn+vZZqupx63nKINf8KP7rq1nXFbGt6QIz TjwQ/y6pScWGhbjNao4124jK7580rJA6lPSKS6sXM91VNnAS8taVmdGiu6TY/k+d cyFRoKfh6BQrzi602eQfHezN6ipH8p/PP8L4JvnNhpJuZbjSSVa1mGk7JGJMuBHS leR1sPlUBUqQ6n4AfaP0688N0fkvyV2yFnEv1XLJ29cyC3EpgDypXEqtIZvJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU0WOhKf4o4p0I8DXlXQa3lF2X3wQwHwYDVR0j BBgwFoAUDk68Qx41E/w/ZB24gOKy/h0ECjAwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvODExMTViYzYtMTBmNi00YWYzLWJhMDktOGI2ODdhNTZm YmY1LzEvMEU0RUJDNDMxRTM1MTNGQzNGNjQxREI4ODBFMkIyRkUxRDA0MEEzMC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00YjFhLTQ2 ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC8wRTRFQkM0MzFFMzUxM0ZDM0Y2NDFEQjg4 MEUyQjJGRTFEMDQwQTMwLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzgxMTE1YmM2LTEwZjYtNGFmMy1iYTA5LThiNjg3YTU2ZmJmNS8xLzBFNEVCQzQz MUUzNTEzRkMzRjY0MURCODgwRTJCMkZFMUQwNDBBMzAubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAFSQe4 vmdJv+2ou/FO/LwLyhR2Grl1CAzG4JxTY/PAvRNBNumiIwqGgJRcSXzj12m0d0v2 OHXg98M9vVCH30aNoFcIMyVaousSN5pyd/VQEmvD8C56yCqdRVUYEFTAJkX9IZyT ZB+ODCskmc4Ab3MMMldQIQbd7bhglke0uW/xvdj1wkbu2Mc6/LCec9ze4Cid4qMR v05QGLT43Vk+bPXiaL5mPc+3utX2pqRNbRJ6uswRBaen/LMzyfXTRpHxhva5Bj4/ CDBc5dTQwcAkzhDXLVWqiSPNEpNCkxIOQ7NCTNDOKMbA0TCZ7UH8d06M3V35eUFW AD/yDtduxWblREAW -----END CERTIFICATE-----Generated at Sun Nov 24 12:05:38 2024 by rpki-client on console-fra.rpki-client.org