$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: qs6JRDrsxUFL7kjVZXF25JyN11E4g73JhsTk3Ya9R2U= Subject key identifier: 6A:9D:F7:40:FA:DE:79:2E:C2:57:C6:1C:4E:70:34:BE:01:62:96:CF Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 584D8AB020B15A7C268EABC8C8991774CF4FB6AC Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0203 Signing time: Thu 21 Nov 2024 17:59:17 +0000 Manifest this update: Thu 21 Nov 2024 17:54:17 +0000 Manifest next update: Fri 22 Nov 2024 19:11:17 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: BTfImX353JFUgcIZ2jDRlZdLmp+KqSbtrCi6ArFxd6k=) 2: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: xrYxMPWlm0NFN/UuQmB97S5T+AeBbukKizXkLUfGrf8=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: OgJ5IHBdzo8hNNE/hueSPIOCulRspm4s5gp10NbE/v8=) 4: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: Dcvv1Ul0JGTxvGw2Ps2/e001gxa3ZWx5ttvSXeBWQh0=) 5: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: cXyjztJ7Tl2PZO8yB9U+ENtvlT8n68PB2V8zKDMHS6w=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: ytuECs7j4zGJqJdJa4rGkrEPCrlfuZ9RaEY2T4xYUeA=) 7: 3130392e3130372e33322e302f31392d3139203d3e203531303539.roa (hash: X2z2XPrgUr9xIts6n1d1e4f9jy7uzF9LQOiTf+AM3H0=) 8: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: tM6AOBSdq8t/+b2jwQliXrToX+/NgR89RNEhgmdHZII=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 17:16:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:4d:8a:b0:20:b1:5a:7c:26:8e:ab:c8:c8:99:17:74:cf:4f:b6:ac Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: Nov 21 17:54:17 2024 GMT Not After : Nov 22 19:11:17 2024 GMT Subject: CN=6A9DF740FADE792EC257C61C4E7034BE016296CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:19:5a:da:90:63:a1:4b:2e:ee:7e:70:01:82: 95:ee:14:61:ec:66:5a:76:9d:e9:ef:93:f2:09:e1: cb:ac:b4:f4:22:1c:8a:73:fa:1e:09:06:87:49:fc: 13:93:68:28:03:6d:5d:d3:c6:94:12:76:65:26:fc: 80:bc:a1:3b:ac:a2:d5:59:e0:e4:66:ed:c5:cd:29: c8:ef:dc:77:4e:23:0c:38:86:e0:8e:0a:24:5f:f2: 76:03:8b:64:81:be:81:f3:f1:f8:8d:27:04:d6:09: 71:c5:d2:89:e0:7e:9d:17:ae:43:dc:04:9c:73:1b: dc:a9:2f:c4:b3:ef:95:f1:b7:ac:14:fd:48:00:09: bd:2f:b9:6a:23:13:a4:d9:a1:7b:35:94:19:69:a1: d1:84:c6:20:aa:87:46:a6:6d:e5:ce:1f:d4:d6:97: 98:0e:22:c5:12:37:62:1f:92:4c:84:03:1d:78:b2: b4:6b:9b:b6:9e:b5:1d:28:ab:7d:8d:82:20:76:ec: 12:44:0e:2d:25:bb:61:98:de:d0:cf:3f:4f:2e:f4: f1:61:34:f1:8d:a6:ed:b5:49:2b:a6:4f:cd:cb:24: 0d:b5:13:2a:9b:1e:f1:db:7d:3f:42:f7:36:a1:d3: 52:1a:82:1a:b8:11:ed:98:5f:0c:1a:63:73:43:6a: f2:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:9D:F7:40:FA:DE:79:2E:C2:57:C6:1C:4E:70:34:BE:01:62:96:CF X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8e:a3:30:c0:94:e0:a4:d7:7a:02:46:47:c0:74:50:f7:1c:bd: a7:be:49:b8:62:71:9c:99:45:ad:35:31:8f:d0:fc:34:34:6d: 33:ce:44:61:41:7f:95:6d:8b:2c:b5:3a:20:f0:ae:87:63:15: ea:65:f6:36:b3:3d:0f:2f:30:1f:a6:1e:74:53:9e:8f:da:17: bf:dd:7e:6e:5d:fe:dc:ec:98:89:4d:56:a4:3b:2d:85:6a:7e: 35:0f:a7:0f:06:7b:9e:eb:68:43:e0:2e:2f:57:fd:6c:42:d1: 0d:ca:f7:42:33:5f:04:0c:01:45:c3:72:86:46:96:ae:c9:80: 9b:24:d9:0d:d3:97:74:87:d3:f0:62:ab:eb:ad:a6:a7:ed:2a: 58:2f:93:96:5b:11:05:8b:bc:81:fc:d9:0c:fd:a7:1f:7a:af: 39:55:a2:28:8a:58:cd:56:72:93:50:93:85:3c:e9:1a:60:03: 7c:b4:71:51:f4:e7:79:76:7c:10:3c:2f:96:bb:a4:76:ef:a8: e5:9b:80:ee:33:22:2f:8f:b6:82:dc:24:12:d7:38:3d:cd:7a: 7b:f4:c6:d6:d9:5b:3d:b8:fe:4b:18:5a:0b:5e:3d:79:c5:75: 1b:b9:5a:7c:89:fc:57:6f:bd:1c:c9:74:79:35:55:6d:a5:3e: db:f1:e3:c4 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUWE2KsCCxWnwmjqvIyJkXdM9PtqwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNDExMjExNzU0MTdaFw0yNDExMjIxOTExMTdaMDMxMTAvBgNV BAMTKDZBOURGNzQwRkFERTc5MkVDMjU3QzYxQzRFNzAzNEJFMDE2Mjk2Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPGVrakGOhSy7ufnABgpXuFGHs Zlp2nenvk/IJ4custPQiHIpz+h4JBodJ/BOTaCgDbV3TxpQSdmUm/IC8oTusotVZ 4ORm7cXNKcjv3HdOIww4huCOCiRf8nYDi2SBvoHz8fiNJwTWCXHF0ongfp0XrkPc BJxzG9ypL8Sz75Xxt6wU/UgACb0vuWojE6TZoXs1lBlpodGExiCqh0ambeXOH9TW l5gOIsUSN2IfkkyEAx14srRrm7aetR0oq32NgiB27BJEDi0lu2GY3tDPP08u9PFh NPGNpu21SSumT83LJA21EyqbHvHbfT9C9zah01Iaghq4Ee2YXwwaY3NDavKJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUap33QPreeS7CV8YcTnA0vgFils8wHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjqMwwJTgpNd6AkZHwHRQ 9xy9p75JuGJxnJlFrTUxj9D8NDRtM85EYUF/lW2LLLU6IPCuh2MV6mX2NrM9Dy8w H6YedFOej9oXv91+bl3+3OyYiU1WpDsthWp+NQ+nDwZ7nutoQ+AuL1f9bELRDcr3 QjNfBAwBRcNyhkaWrsmAmyTZDdOXdIfT8GKr662mp+0qWC+TllsRBYu8gfzZDP2n H3qvOVWiKIpYzVZyk1CThTzpGmADfLRxUfTneXZ8EDwvlrukdu+o5ZuA7jMiL4+2 gtwkEtc4Pc16e/TG1tlbPbj+SxhaC149ecV1G7lafIn8V2+9HMl0eTVVbaU+2/Hj xA== -----END CERTIFICATE-----Generated at Thu Nov 21 21:58:16 2024 by rpki-client on console-ams.rpki-client.org