$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: sCoOfU3aasptlrAsoRVRlMVqwMonWBoTIYaB/T1JOfQ= Subject key identifier: 18:3C:2A:6D:5A:2A:AB:7B:73:11:26:5E:80:0B:73:23:B4:AB:DF:E6 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 578864450761CD41D576FA132A5FADF07EF77402 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 02C7 Signing time: Thu 21 Nov 2024 10:50:34 +0000 Manifest this update: Thu 21 Nov 2024 10:45:34 +0000 Manifest next update: Fri 22 Nov 2024 14:11:34 +0000 Files and hashes: 1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) 2: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) 3: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: GDILPkFD7UpSRNO9zSNV/3SbsTkY0aY30g1TWG4OGu4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 00:29:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 57:88:64:45:07:61:cd:41:d5:76:fa:13:2a:5f:ad:f0:7e:f7:74:02 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Nov 21 10:45:34 2024 GMT Not After : Nov 22 14:11:34 2024 GMT Subject: CN=183C2A6D5A2AAB7B7311265E800B7323B4ABDFE6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:15:02:94:0f:e3:4b:2f:1b:d2:0a:d6:cd:a1: 15:d2:83:02:27:7f:5b:ae:eb:bb:8f:fc:71:d9:cf: 3d:3c:4a:87:cb:d2:d5:f4:ae:59:3a:07:5d:c3:94: ee:9a:5a:f3:21:5d:f1:53:79:03:a0:b5:33:9d:dc: 90:c3:fe:05:b7:11:a6:5c:3a:db:8c:17:5d:5c:2c: bd:3a:43:5c:0c:fc:30:0b:89:2e:33:53:fa:c5:a3: d3:ee:38:cd:66:cf:57:6c:aa:dd:c6:2e:14:61:66: 32:19:aa:80:51:f1:e7:70:ab:57:9b:04:df:6f:6a: fe:ae:d1:be:0a:5f:be:11:9e:9e:a0:49:db:4f:79: e5:3b:a4:12:2f:98:3f:c5:06:fe:98:4e:74:50:8c: 0b:45:16:4a:4d:64:d1:98:32:02:43:0e:e3:48:37: f6:dd:d6:ce:81:19:42:3e:c5:2d:67:30:fa:0f:0e: b8:2b:63:e4:79:de:8c:82:a5:b3:45:19:ae:a7:3a: 10:9b:17:3d:93:c4:a4:a5:54:e7:85:58:32:32:10: fe:db:3d:92:a8:89:fa:07:d8:08:21:91:e6:09:bf: e0:8b:cd:80:9b:d7:45:75:4d:23:66:d2:e8:de:5e: 8a:99:5e:4f:ab:b6:54:f5:09:51:91:c9:d9:5d:c9: 0b:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 18:3C:2A:6D:5A:2A:AB:7B:73:11:26:5E:80:0B:73:23:B4:AB:DF:E6 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a0:25:4f:0c:07:f4:87:52:ad:68:db:72:c9:78:b6:f5:c4:57: 33:ef:a6:11:66:ad:53:d2:40:c0:7f:f7:bf:8b:be:36:21:cb: 9e:1d:ce:80:21:00:55:73:18:df:ca:79:d5:42:51:ac:e9:3a: b2:dd:c0:55:81:8e:23:83:a4:07:44:5c:fd:f0:08:70:4d:9f: 29:0e:db:f8:00:12:ac:ef:3a:95:63:0f:d1:6f:de:41:71:bf: 9c:7b:ed:35:8c:ac:2f:44:c5:c0:19:c0:f8:f8:c8:22:7f:20: d1:63:37:b2:62:e4:8d:1f:da:62:73:a1:04:1c:f7:46:45:20: ac:94:c9:7c:67:09:66:21:b1:ae:18:d6:cf:49:ce:9d:73:4c: b4:a6:c4:e8:e7:56:7c:a5:64:a4:ea:d0:d1:4e:19:8e:a5:d0: dd:49:6e:22:96:c0:82:99:fe:e4:c8:d6:00:2d:e7:d2:93:99: d4:f2:32:85:16:4c:cc:cf:93:be:8c:e0:c8:1c:73:49:b2:1d: 6f:83:a6:f6:46:27:ec:9c:7f:a3:d1:c2:dd:4b:56:83:3a:76: 52:29:99:ed:12:f2:41:12:43:cf:bb:04:78:bd:25:2f:1e:23: 5e:6f:c2:80:61:fb:00:89:62:23:71:67:f3:7b:48:5b:7b:19: df:1e:2f:a8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUV4hkRQdhzUHVdvoTKl+t8H73dAIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNDExMjExMDQ1MzRaFw0yNDExMjIxNDExMzRaMDMxMTAvBgNV BAMTKDE4M0MyQTZENUEyQUFCN0I3MzExMjY1RTgwMEI3MzIzQjRBQkRGRTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPFQKUD+NLLxvSCtbNoRXSgwIn f1uu67uP/HHZzz08SofL0tX0rlk6B13DlO6aWvMhXfFTeQOgtTOd3JDD/gW3EaZc OtuMF11cLL06Q1wM/DALiS4zU/rFo9PuOM1mz1dsqt3GLhRhZjIZqoBR8edwq1eb BN9vav6u0b4KX74Rnp6gSdtPeeU7pBIvmD/FBv6YTnRQjAtFFkpNZNGYMgJDDuNI N/bd1s6BGUI+xS1nMPoPDrgrY+R53oyCpbNFGa6nOhCbFz2TxKSlVOeFWDIyEP7b PZKoifoH2AghkeYJv+CLzYCb10V1TSNm0ujeXoqZXk+rtlT1CVGRydldyQtZAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUGDwqbVoqq3tzESZegAtzI7Sr3+YwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAKAlTwwH9IdSrWjbcsl4tvXEVzPvphFmrVPSQMB/97+LvjYhy54dzoAh AFVzGN/KedVCUazpOrLdwFWBjiODpAdEXP3wCHBNnykO2/gAEqzvOpVjD9Fv3kFx v5x77TWMrC9ExcAZwPj4yCJ/INFjN7Ji5I0f2mJzoQQc90ZFIKyUyXxnCWYhsa4Y 1s9Jzp1zTLSmxOjnVnylZKTq0NFOGY6l0N1JbiKWwIKZ/uTI1gAt59KTmdTyMoUW TMzPk76M4Mgcc0myHW+DpvZGJ+ycf6PRwt1LVoM6dlIpme0S8kESQ8+7BHi9JS8e I15vwoBh+wCJYiNxZ/N7SFt7Gd8eL6g= -----END CERTIFICATE-----Generated at Thu Nov 21 14:22:20 2024 by rpki-client on console-ams.rpki-client.org