$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft File: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft (raw, json) Hash identifier: 7sTwQ3zsgLdFhMGV13DGzlcjptnvamAel+a3yvvL8AE= Subject key identifier: 0D:70:42:CD:78:F5:0E:AE:BA:DB:23:F4:1A:CF:DE:0F:64:AA:4C:D1 Authority key identifier: 45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA Certificate issuer: /CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Certificate serial: 786D3607F349C6940432C9E7BD01F4B78E067531 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft Manifest number: 0108 Signing time: Fri 17 May 2024 07:20:39 +0000 Manifest this update: Fri 17 May 2024 07:15:39 +0000 Manifest next update: Sat 18 May 2024 09:41:39 +0000 Files and hashes: 1: 3138352e322e3230372e302f32342d3234203d3e203531303539.roa (hash: pW3PjbwuJyzTpYpurPQsfzJlZPcGx8XPQjJFj0683mU=) 2: 3130392e3130372e33322e302f31392d3139203d3e203531303539.roa (hash: 2E4nBS5s2NGTijFuTBl7PtdK4ANb5WSsjCnYlIZeVaM=) 3: 326130323a313334383a3a2f33322d3332203d3e203531303539.roa (hash: m1f4nPrGA7NIFsgD+MozFWSfEE7oftrO8GsKaqSdlt8=) 4: 3138352e322e3230352e302f32342d3234203d3e203531303539.roa (hash: FjYvYO8OhRhy5xMwWCOsQCSTt4t7VD1f49kiToXw4CE=) 5: 3138352e322e3230362e302f32342d3234203d3e203531303539.roa (hash: 9PHwyvRKIN8CC6tqDO30+rEY1zs7yflQXhOG4HrGiyk=) 6: 2A2FB4DB0AA4D006958316872E467B554E0FD0BE.cer (hash: sW19kQcAV5ZAQ3yWp0ElXJvpihn+YZBFEQGmo0pwVQE=) 7: 4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl (hash: wpvkqhfXHVm2F5QBxZ51RYYA7jR4h/qdwraMlqTirCA=) 8: 3138352e322e3230342e302f32342d3234203d3e203531303539.roa (hash: aKmrndl9lTv2GWQd+9qoP8HY5aUcpC8vFQNex5RBfBw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 08:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:6d:36:07:f3:49:c6:94:04:32:c9:e7:bd:01:f4:b7:8e:06:75:31 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4502e63ce01cad239ac397bc2bb5e6c347dceeea Validity Not Before: May 17 07:15:39 2024 GMT Not After : May 18 09:41:39 2024 GMT Subject: CN=0D7042CD78F50EAEBADB23F41ACFDE0F64AA4CD1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:04:55:3a:87:75:45:df:18:fd:e7:67:12:84: 2e:ba:73:d0:8c:17:74:a1:95:b1:4d:f3:29:29:f4: e7:da:17:da:55:47:7f:83:8c:8c:c3:17:17:86:99: dd:4d:c5:77:fb:87:0d:b0:48:fe:a3:b0:7c:c5:73: d8:0c:ba:f1:ed:5a:23:95:29:68:4b:fb:40:fd:b9: cc:a8:aa:7c:a8:d4:32:ae:1a:59:52:e1:12:67:37: 15:30:a2:0f:60:95:32:c3:52:02:c7:28:22:ab:d1: dc:ac:38:b2:b7:ca:c5:73:14:2c:38:87:bf:40:76: 3b:2e:3f:2a:57:62:80:e4:36:67:bb:84:66:61:1a: b6:36:80:bc:8d:b8:b5:42:a4:94:07:06:9f:ce:af: b7:e0:ae:8b:c0:e6:fe:19:66:5c:d8:35:a5:1a:80: 0f:b5:19:fa:3e:10:b8:39:7b:6d:b0:98:1a:b9:e1: 56:9d:15:de:b1:ce:5f:b7:17:2c:13:92:a1:f3:ae: e1:6f:c6:29:69:fe:07:1a:f4:64:07:07:20:a5:e0: 7f:82:86:6d:2a:c1:d7:5a:1f:de:fd:50:92:14:26: 5d:99:2d:1b:ab:20:94:8d:ce:2f:d6:f6:59:10:08: 5b:8d:41:31:f6:d2:e4:9f:73:ef:25:9a:40:ce:10: 17:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0D:70:42:CD:78:F5:0E:AE:BA:DB:23:F4:1A:CF:DE:0F:64:AA:4C:D1 X509v3 Authority Key Identifier: keyid:45:02:E6:3C:E0:1C:AD:23:9A:C3:97:BC:2B:B5:E6:C3:47:DC:EE:EA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RQLmPOAcrSOaw5e8K7Xmw0fc7uo.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/9df33a57-7e4f-4844-84e2-b7153b5511b4/0/4502E63CE01CAD239AC397BC2BB5E6C347DCEEEA.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:e5:43:52:23:23:10:d0:30:69:d8:e2:3c:c1:e5:b7:a8:91: 0e:76:dd:e1:6c:ee:46:da:a0:a7:ec:8c:ea:e0:23:ca:0e:60: c3:2d:f4:ab:4f:e7:62:5d:c3:0d:bc:3b:d0:03:a2:41:db:95: 5c:47:a4:2d:52:ce:ca:c3:51:9f:25:a0:0e:b6:8e:7e:a3:6b: e4:b7:76:b6:e2:43:48:f1:58:2a:2d:3b:d9:15:e4:33:61:31: 97:4d:98:6c:23:a3:2e:0b:09:f8:57:d1:02:d5:f4:74:c4:91: 3b:ce:20:6b:c1:48:b3:67:bc:09:c1:e0:f4:19:16:82:1c:d3: d0:08:8d:7d:64:58:ad:e0:79:24:2f:b0:71:0f:11:d2:83:a7: 7f:c9:30:3d:5a:5a:d9:53:03:51:76:d9:de:b9:8a:ec:c2:07: 71:71:bc:1e:e9:80:09:a8:a0:80:e6:42:42:cf:71:bd:6d:11: de:c9:10:2b:01:3a:1a:4e:be:12:0c:e0:7c:3e:15:04:dd:14: 4c:f1:29:f9:10:40:e3:bd:f4:5b:8b:4d:80:37:ba:93:3e:ee: ad:f5:ee:8f:25:27:b2:96:9d:97:08:24:16:65:38:33:f0:1e: be:ac:a1:24:ef:2b:2d:09:44:57:70:42:53:91:67:c2:e5:2e: c6:0a:a5:cd -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUeG02B/NJxpQEMsnnvQH0t44GdTEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDUwMmU2M2NlMDFjYWQyMzlhYzM5N2JjMmJiNWU2YzM0 N2RjZWVlYTAeFw0yNDA1MTcwNzE1MzlaFw0yNDA1MTgwOTQxMzlaMDMxMTAvBgNV BAMTKDBENzA0MkNENzhGNTBFQUVCQURCMjNGNDFBQ0ZERTBGNjRBQTRDRDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiBFU6h3VF3xj952cShC66c9CM F3ShlbFN8ykp9OfaF9pVR3+DjIzDFxeGmd1NxXf7hw2wSP6jsHzFc9gMuvHtWiOV KWhL+0D9ucyoqnyo1DKuGllS4RJnNxUwog9glTLDUgLHKCKr0dysOLK3ysVzFCw4 h79AdjsuPypXYoDkNme7hGZhGrY2gLyNuLVCpJQHBp/Or7fgrovA5v4ZZlzYNaUa gA+1Gfo+ELg5e22wmBq54VadFd6xzl+3FywTkqHzruFvxilp/gca9GQHByCl4H+C hm0qwddaH979UJIUJl2ZLRurIJSNzi/W9lkQCFuNQTH20uSfc+8lmkDOEBfFAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUDXBCzXj1Dq662yP0Gs/eD2SqTNEwHwYDVR0j BBgwFoAURQLmPOAcrSOaw5e8K7Xmw0fc7uowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOWRmMzNhNTctN2U0Zi00ODQ0LTg0ZTItYjcxNTNiNTUx MWI0LzAvNDUwMkU2M0NFMDFDQUQyMzlBQzM5N0JDMkJCNUU2QzM0N0RDRUVFQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1JRTG1QT0FjclNPYXc1ZThLN1htdzBm Yzd1by5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS85ZGYzM2E1Ny03 ZTRmLTQ4NDQtODRlMi1iNzE1M2I1NTExYjQvMC80NTAyRTYzQ0UwMUNBRDIzOUFD Mzk3QkMyQkI1RTZDMzQ3RENFRUVBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAW+VDUiMjENAwadjiPMHl t6iRDnbd4WzuRtqgp+yM6uAjyg5gwy30q0/nYl3DDbw70AOiQduVXEekLVLOysNR nyWgDraOfqNr5Ld2tuJDSPFYKi072RXkM2Exl02YbCOjLgsJ+FfRAtX0dMSRO84g a8FIs2e8CcHg9BkWghzT0AiNfWRYreB5JC+wcQ8R0oOnf8kwPVpa2VMDUXbZ3rmK 7MIHcXG8HumACaiggOZCQs9xvW0R3skQKwE6Gk6+EgzgfD4VBN0UTPEp+RBA4730 W4tNgDe6kz7urfXujyUnspadlwgkFmU4M/AevqyhJO8rLQlEV3BCU5FnwuUuxgql zQ== -----END CERTIFICATE-----Generated at Fri May 17 10:15:37 2024 by rpki-client on console-ams.rpki-client.org