$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft File: 52285B8754F215EBEAB614DEB86E66DA3B37320C.mft (raw, json) Hash identifier: PG5wmjaT1CS+hzdFXHKN7+1QLaju9J3PSM4lN/ByYBg= Subject key identifier: 23:F9:FC:B0:9C:6A:30:7A:71:F0:87:61:E6:1D:C4:3E:B5:F8:09:46 Authority key identifier: 52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C Certificate issuer: /CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Certificate serial: 7600E67FC657DAC09082727F0A31D1D3D15E8B49 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft Manifest number: DA Signing time: Thu 21 Nov 2024 18:02:36 +0000 Manifest this update: Thu 21 Nov 2024 17:57:36 +0000 Manifest next update: Fri 22 Nov 2024 19:30:36 +0000 Files and hashes: 1: 52285B8754F215EBEAB614DEB86E66DA3B37320C.crl (hash: UKhFDzQRa0qVh6+2hfcrElAGuLybJIMCIHMnQExRSNc=) 2: 326131343a373538313a6632303a3a2f34382d3438203d3e20313533313736.roa (hash: HVQR2cbKt8VVrQisjkBAhrhp4KsXJej/OLSmUeqTsY0=) 3: 326131343a373538313a6632303a3a2f34342d3434203d3e20323135303834.roa (hash: 5jLn1tYtti5DJK9TqNkdMibH5mGLzDQe1BN0OVxqnag=) 4: 326131343a373538313a623030303a3a2f33362d3336203d3e20323135303834.roa (hash: Bu8eu+s1xKEjCs05/XkV2x0FQLM16iFsGrYGYNvS9M8=) 5: 326131343a373538313a6130303a3a2f34302d3430203d3e20323135303834.roa (hash: pcBpSLX6wjD10TMOktRdBOucXd2A5gfG7C3Lecbh8gI=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:00:e6:7f:c6:57:da:c0:90:82:72:7f:0a:31:d1:d3:d1:5e:8b:49 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52285B8754F215EBEAB614DEB86E66DA3B37320C Validity Not Before: Nov 21 17:57:36 2024 GMT Not After : Nov 22 19:30:36 2024 GMT Subject: CN=23F9FCB09C6A307A71F08761E61DC43EB5F80946 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:01:48:14:d6:c5:70:ab:a9:28:0c:11:03:81: e1:75:c2:90:b9:04:e5:a1:76:b1:97:85:6a:99:80: 43:1e:f8:c2:b7:40:fd:86:7a:06:58:d3:7d:fc:c6: 2c:21:e9:54:4f:c0:75:b3:ae:1d:ed:7a:07:72:14: 1e:d8:17:9d:38:4b:8f:66:69:aa:d3:db:b1:9f:47: 1c:a0:68:5b:9e:80:1b:52:0e:13:70:ff:a5:62:30: 1d:a1:1d:9a:17:d4:2c:97:2d:5a:9e:eb:e4:95:0e: 13:81:8e:cd:81:72:9d:21:a7:3b:f1:db:af:7d:9b: eb:9d:4e:e1:2d:bb:6e:c6:e2:b9:c6:03:fd:37:74: 41:5d:cb:37:9b:29:9f:af:2a:b8:c1:1d:19:d8:39: 16:d8:d6:0b:b0:e6:2d:a8:8b:75:5e:c9:78:7f:a7: 4d:c4:92:6e:81:bd:7a:df:2f:f7:d9:37:49:31:2e: 1a:f8:2f:ef:0c:95:ed:75:f7:39:58:99:4c:5b:34: 7f:60:7a:b0:2a:b0:94:3d:77:7c:1a:f3:18:1a:ac: cc:46:db:99:3d:e9:27:b7:d9:88:7e:8d:9b:09:d2: 7c:6f:e2:18:02:87:35:72:0e:e9:51:b8:e4:b4:1f: c4:c6:8f:6b:74:af:61:17:b3:c7:8a:db:23:5a:12: d7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:F9:FC:B0:9C:6A:30:7A:71:F0:87:61:E6:1D:C4:3E:B5:F8:09:46 X509v3 Authority Key Identifier: keyid:52:28:5B:87:54:F2:15:EB:EA:B6:14:DE:B8:6E:66:DA:3B:37:32:0C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/52285B8754F215EBEAB614DEB86E66DA3B37320C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8d5cd14e-5f63-4f1c-94e3-27050c266480/1/52285B8754F215EBEAB614DEB86E66DA3B37320C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:01:0f:e5:7b:bf:4f:de:d2:35:91:08:a3:28:16:a0:7e:3b: ca:9d:a8:c7:a3:72:27:c5:9c:f0:d0:77:87:03:9e:e1:ee:2c: eb:ee:6a:00:c6:19:b4:7d:d4:ab:22:0a:ee:67:22:f3:13:16: a8:51:8a:44:c2:0c:fc:52:84:17:c2:71:d1:a4:b7:5b:35:03: 14:d3:b0:dc:d7:9e:da:a2:3b:d5:4c:9d:28:d5:4e:fb:60:7e: 8c:45:39:cb:aa:0e:25:a0:61:c2:6b:e1:ab:80:82:8a:6f:03: 9e:4b:ff:34:e8:1f:07:a9:2a:95:ae:da:15:23:7c:31:da:a0: bc:1b:f2:0b:47:61:ea:6d:9c:07:d6:c5:51:82:f6:22:6d:c9: 30:5b:fa:ad:e6:a2:da:e5:c4:ab:94:24:59:c9:3c:be:4c:2c: c1:1a:24:35:73:cd:a4:59:2d:d2:9c:47:c0:92:a2:c5:43:01: 4d:5f:e1:91:bc:ae:18:be:1d:14:5c:ff:bb:bd:bf:30:17:29: 3e:6c:fb:5f:91:a8:5a:9a:28:21:35:16:98:1e:0c:06:07:d4: ac:5e:d2:30:b7:8c:dc:5a:c2:46:79:30:7a:50:1b:59:9e:95: 87:10:e9:a7:b4:4a:dd:f9:95:13:69:b4:41:c7:65:ce:76:83: 7b:b9:4a:c9 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUdgDmf8ZX2sCQgnJ/CjHR09Fei0kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEz QjM3MzIwQzAeFw0yNDExMjExNzU3MzZaFw0yNDExMjIxOTMwMzZaMDMxMTAvBgNV BAMTKDIzRjlGQ0IwOUM2QTMwN0E3MUYwODc2MUU2MURDNDNFQjVGODA5NDYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDBAUgU1sVwq6koDBEDgeF1wpC5 BOWhdrGXhWqZgEMe+MK3QP2GegZY0338xiwh6VRPwHWzrh3tegdyFB7YF504S49m aarT27GfRxygaFuegBtSDhNw/6ViMB2hHZoX1CyXLVqe6+SVDhOBjs2Bcp0hpzvx 2699m+udTuEtu27G4rnGA/03dEFdyzebKZ+vKrjBHRnYORbY1guw5i2oi3VeyXh/ p03Ekm6BvXrfL/fZN0kxLhr4L+8Mle119zlYmUxbNH9gerAqsJQ9d3wa8xgarMxG 25k96Se32Yh+jZsJ0nxv4hgChzVyDulRuOS0H8TGj2t0r2EXs8eK2yNaEtffAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUI/n8sJxqMHpx8Idh5h3EPrX4CUYwHwYDVR0j BBgwFoAUUihbh1TyFevqthTeuG5m2js3MgwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGQ1Y2QxNGUtNWY2My00ZjFjLTk0ZTMtMjcwNTBjMjY2 NDgwLzEvNTIyODVCODc1NEYyMTVFQkVBQjYxNERFQjg2RTY2REEzQjM3MzIwQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC81MjI4NUI4NzU0RjIxNUVCRUFCNjE0REVC ODZFNjZEQTNCMzczMjBDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzhkNWNkMTRlLTVmNjMtNGYxYy05NGUzLTI3MDUwYzI2NjQ4MC8xLzUyMjg1Qjg3 NTRGMjE1RUJFQUI2MTRERUI4NkU2NkRBM0IzNzMyMEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCRAQ/l e79P3tI1kQijKBagfjvKnajHo3InxZzw0HeHA57h7izr7moAxhm0fdSrIgruZyLz ExaoUYpEwgz8UoQXwnHRpLdbNQMU07Dc157aojvVTJ0o1U77YH6MRTnLqg4loGHC a+GrgIKKbwOeS/806B8HqSqVrtoVI3wx2qC8G/ILR2HqbZwH1sVRgvYibckwW/qt 5qLa5cSrlCRZyTy+TCzBGiQ1c82kWS3SnEfAkqLFQwFNX+GRvK4Yvh0UXP+7vb8w Fyk+bPtfkahamighNRaYHgwGB9SsXtIwt4zcWsJGeTB6UBtZnpWHEOmntErd+ZUT abRBx2XOdoN7uUrJ -----END CERTIFICATE-----Generated at Thu Nov 21 19:50:40 2024 by rpki-client on console-fra.rpki-client.org