$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft File: 2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft (raw, json) Hash identifier: XttGiR13Il96zU20GxpljDCl1Odbes30WJZpbHZxOw4= Subject key identifier: BB:1D:56:98:40:C8:28:D5:34:B0:67:E7:8C:15:1A:67:0A:AD:5B:4D Authority key identifier: 26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1 Certificate issuer: /CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1 Certificate serial: 644EE4E765124E264830A7220D21FC91568648F9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft Manifest number: C8 Signing time: Sat 22 Jun 2024 23:05:11 +0000 Manifest this update: Sat 22 Jun 2024 23:00:11 +0000 Manifest next update: Mon 24 Jun 2024 00:19:11 +0000 Files and hashes: 1: 326130353a646663313a393162393a3a2f34382d3438203d3e20323030333531.roa (hash: VoK6feHyCU3M2A1mz3iJ0QcUxOIK7johhUH8t71lJxM=) 2: 326130353a646663313a393162393a3a2f34382d3438203d3e203534313438.roa (hash: 7wp0Ew4mNmmbkRjESOEZT2oGkWblndAOOk+JoYL9ivo=) 3: 2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl (hash: WF4wxjTr4jecu0Dty4pYsnADqzRL0K1GzmJOHvHN6uw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/F737D81BFBEFFDEEC9EC32B7B864112DE05E7B76.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 23 Jun 2024 10:59:13 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 64:4e:e4:e7:65:12:4e:26:48:30:a7:22:0d:21:fc:91:56:86:48:f9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2699D31EA71B96E1A99C35B1F5626ACC517EE2E1 Validity Not Before: Jun 22 23:00:11 2024 GMT Not After : Jun 24 00:19:11 2024 GMT Subject: CN=BB1D569840C828D534B067E78C151A670AAD5B4D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:02:0d:25:fa:ad:3f:42:bb:5b:f1:e0:e3:23: 04:e1:12:e2:c6:8f:0d:6d:37:a4:59:cf:cb:3e:11: 3b:c1:5e:41:9d:3c:c1:77:08:c0:c7:9d:ba:9c:1c: 33:f5:a2:d4:38:0a:b2:01:c3:89:fb:d3:36:65:36: 5c:5b:61:4b:44:89:e4:71:7b:d7:6c:3c:25:1d:16: 97:8b:b4:7c:7e:13:c0:78:8a:49:e9:6d:a0:12:96: dc:44:0b:ce:92:64:1b:ea:76:96:27:14:42:a8:e8: 6e:ac:4a:cd:7d:98:e0:d1:4b:c4:4c:08:07:ae:49: d5:62:db:c7:67:28:6a:6e:9a:48:71:68:51:b6:c2: 2d:d7:5a:53:7c:c4:ea:26:e5:56:bc:1d:c8:13:a3: 21:0a:b3:14:4e:d5:f4:09:c8:4d:28:38:83:c1:43: f0:73:c7:f0:af:85:5e:c9:11:cf:aa:35:6b:c3:0a: 6a:2c:8d:f6:1e:2b:c7:ef:2c:a4:1a:c7:0d:eb:16: e6:0f:8f:ec:3b:d2:e4:7d:86:ed:1f:78:86:6b:43: ce:4b:67:82:32:dc:7f:dd:35:4a:15:83:57:51:2e: d8:da:55:db:b3:18:c6:7d:2a:4a:83:7b:94:62:69: 47:a3:cc:dc:84:e7:bc:9d:f5:27:0b:d0:ae:7d:95: 10:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BB:1D:56:98:40:C8:28:D5:34:B0:67:E7:8C:15:1A:67:0A:AD:5B:4D X509v3 Authority Key Identifier: keyid:26:99:D3:1E:A7:1B:96:E1:A9:9C:35:B1:F5:62:6A:CC:51:7E:E2:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/1/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/982f85bc-3d69-48a2-b9c3-7ef0a839ce19/2/2699D31EA71B96E1A99C35B1F5626ACC517EE2E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7b:40:ef:1f:f0:45:09:46:98:b1:35:48:9f:81:97:ca:11:8f: 4b:15:9c:ed:0d:a8:23:3c:19:17:d9:45:44:73:e6:2c:99:75: 63:d9:a7:eb:86:0d:65:46:9f:43:5a:71:37:f1:92:db:4b:32: 80:75:82:c2:6e:02:32:23:03:e3:f2:7a:15:e5:bb:75:34:41: c5:17:f1:5d:80:2c:8b:a7:4a:48:8a:fd:70:3e:07:08:6b:f6: 34:03:74:85:4e:ff:74:6a:f9:62:44:d7:5a:16:9d:68:21:b7: 13:ac:c6:54:1a:2e:fc:54:03:b6:74:8c:3a:fc:13:ec:83:aa: 60:15:8a:0c:85:ec:54:db:f3:22:dc:09:0a:d9:1e:f3:65:fb: 88:1c:ba:63:b8:12:81:62:48:dd:df:15:5f:72:dc:12:1d:33: 92:e5:21:ab:ff:eb:57:8f:c0:2d:d2:9f:c8:a0:d4:cd:27:46: 84:2e:65:bd:7f:b0:0a:9a:07:85:26:94:de:3a:c4:0b:8c:a8: ff:9e:eb:4a:ed:03:04:1c:de:b6:be:e7:0f:99:fc:bb:8d:b7: 98:97:bb:79:45:1e:10:be:e2:6c:c7:79:da:85:52:6f:b8:d0: 0c:34:cc:d4:bf:86:8c:61:2a:89:c5:76:79:a5:31:32:62:a4: a0:b9:83:0d -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUZE7k52USTiZIMKciDSH8kVaGSPkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjY5OUQzMUVBNzFCOTZFMUE5OUMzNUIxRjU2MjZBQ0M1 MTdFRTJFMTAeFw0yNDA2MjIyMzAwMTFaFw0yNDA2MjQwMDE5MTFaMDMxMTAvBgNV BAMTKEJCMUQ1Njk4NDBDODI4RDUzNEIwNjdFNzhDMTUxQTY3MEFBRDVCNEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC9Ag0l+q0/Qrtb8eDjIwThEuLG jw1tN6RZz8s+ETvBXkGdPMF3CMDHnbqcHDP1otQ4CrIBw4n70zZlNlxbYUtEieRx e9dsPCUdFpeLtHx+E8B4iknpbaASltxEC86SZBvqdpYnFEKo6G6sSs19mODRS8RM CAeuSdVi28dnKGpumkhxaFG2wi3XWlN8xOom5Va8HcgToyEKsxRO1fQJyE0oOIPB Q/Bzx/CvhV7JEc+qNWvDCmosjfYeK8fvLKQaxw3rFuYPj+w70uR9hu0feIZrQ85L Z4Iy3H/dNUoVg1dRLtjaVduzGMZ9KkqDe5RiaUejzNyE57yd9ScL0K59lRCXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUux1WmEDIKNU0sGfnjBUaZwqtW00wHwYDVR0j BBgwFoAUJpnTHqcbluGpnDWx9WJqzFF+4uEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOTgyZjg1YmMtM2Q2OS00OGEyLWI5YzMtN2VmMGE4Mzlj ZTE5LzIvMjY5OUQzMUVBNzFCOTZFMUE5OUMzNUIxRjU2MjZBQ0M1MTdFRTJFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMS8yNjk5RDMxRUE3MUI5NkUxQTk5QzM1QjFG NTYyNkFDQzUxN0VFMkUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 Lzk4MmY4NWJjLTNkNjktNDhhMi1iOWMzLTdlZjBhODM5Y2UxOS8yLzI2OTlEMzFF QTcxQjk2RTFBOTlDMzVCMUY1NjI2QUNDNTE3RUUyRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB7QO8f 8EUJRpixNUifgZfKEY9LFZztDagjPBkX2UVEc+YsmXVj2afrhg1lRp9DWnE38ZLb SzKAdYLCbgIyIwPj8noV5bt1NEHFF/FdgCyLp0pIiv1wPgcIa/Y0A3SFTv90avli RNdaFp1oIbcTrMZUGi78VAO2dIw6/BPsg6pgFYoMhexU2/Mi3AkK2R7zZfuIHLpj uBKBYkjd3xVfctwSHTOS5SGr/+tXj8At0p/IoNTNJ0aELmW9f7AKmgeFJpTeOsQL jKj/nutK7QMEHN62vucPmfy7jbeYl7t5RR4QvuJsx3nahVJvuNAMNMzUv4aMYSqJ xXZ5pTEyYqSguYMN -----END CERTIFICATE-----Generated at Sun Jun 23 00:05:42 2024 by rpki-client on console-ams.rpki-client.org