$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: 7zoWv9CQ7p+YcGb7sXi2Ll9sgayHoLGio7VWZFXrbnI= Subject key identifier: 41:FB:B3:D0:47:F4:94:85:D2:E7:8B:19:0F:89:A9:E9:8E:5A:30:92 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 1762B8FB5251BA1BDBC1B80D6E993C1B1AA069C6 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 02AF Signing time: Sun 03 Nov 2024 22:33:33 +0000 Manifest this update: Sun 03 Nov 2024 22:28:33 +0000 Manifest next update: Tue 05 Nov 2024 02:24:33 +0000 Files and hashes: 1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: Jy1b+gt92RN+/ooPe4fGSUiuh5FGbMZK9CxKzh5Ox8I=) 2: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: IM5Z+3fAo5KzSmnHXnRG0gywh4kZWUVOyZxqg+Nj6/Q=) 3: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: aSnHcNtVwzQzcWn5p0KM1my79E8t48awA6CXq7tsPUQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Nov 2024 09:09:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 17:62:b8:fb:52:51:ba:1b:db:c1:b8:0d:6e:99:3c:1b:1a:a0:69:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Nov 3 22:28:33 2024 GMT Not After : Nov 5 02:24:33 2024 GMT Subject: CN=41FBB3D047F49485D2E78B190F89A9E98E5A3092 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:3f:93:2e:51:4d:df:df:5a:e1:15:80:d0:68: fb:47:ca:0e:be:b9:3f:12:64:ee:d3:b3:ad:35:28: 69:f4:73:a9:93:41:81:5a:8e:1d:e1:bc:74:2e:10: 01:67:55:9f:68:b4:29:31:e0:23:40:1d:5e:e7:1d: a2:a7:fa:1f:f3:04:3a:3d:fc:82:26:ac:a4:bb:1a: 66:3f:02:54:d2:4d:f6:c2:52:67:b8:50:0d:56:47: 00:61:df:fc:99:8a:7b:49:ff:96:4c:9a:42:db:92: a0:43:cf:17:f9:56:a4:4f:84:4c:d1:48:00:53:65: 60:2a:f1:c4:2a:d0:fe:8f:44:f8:fe:9e:ba:d3:1b: 39:2d:30:8f:76:8b:06:fa:87:66:d3:18:89:3f:95: 1e:2e:4d:f3:51:81:fb:fb:33:a1:89:8d:a4:5c:62: 24:33:98:68:d5:57:17:c6:91:43:e7:9c:43:a9:f0: a8:82:ad:eb:7c:5e:cb:a4:27:59:15:64:bd:aa:97: 8d:da:71:9e:2d:65:aa:a5:01:50:98:a8:88:de:c1: 9d:ab:73:86:96:93:63:4c:a8:a5:48:ef:6a:c5:68: 57:85:14:bc:2c:99:4d:4e:d7:db:9c:88:36:aa:c8: 24:59:cf:2c:cf:8b:1c:c9:56:2e:9b:5a:5c:94:47: 86:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 41:FB:B3:D0:47:F4:94:85:D2:E7:8B:19:0F:89:A9:E9:8E:5A:30:92 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:87:9f:f1:41:1c:3c:ce:59:02:ff:e1:41:7d:79:11:eb:64: 63:6f:0c:72:05:8a:98:37:bf:76:7a:3f:ac:69:5d:1e:5a:92: 97:9a:5f:29:8e:06:6a:2a:5a:01:53:c0:66:d7:18:c5:2a:d0: 17:c3:84:a0:fc:56:ff:af:1e:d8:3f:bc:f0:1d:75:10:a7:7f: 07:11:1b:8d:29:8b:31:73:c4:1a:90:b7:c0:4c:a5:a9:fe:41: 72:d2:d0:08:43:9c:b7:e9:8d:c5:fd:17:93:7b:03:61:ad:c2: 72:55:d5:e6:c2:39:2c:fe:76:d0:93:76:5e:a8:39:e7:cd:ce: 55:a6:4f:7b:38:e8:8d:5e:10:22:71:b8:18:51:83:ce:08:13: 87:5d:e9:cb:4b:21:57:68:20:50:67:cb:dd:e1:63:b5:19:07: 26:74:d8:df:0e:4f:cf:4c:f9:76:cf:78:78:37:74:1f:1e:b5: d0:63:e1:72:39:b4:b0:a4:ed:bc:ac:55:8d:31:b7:5b:ae:f7: 87:fa:64:e6:05:7f:a9:b8:3d:f9:85:98:6c:12:e8:ec:06:21: 1c:05:c6:ec:9c:e4:8d:4e:27:2e:84:db:a2:2f:de:45:f8:6c: 13:4b:9a:6e:d1:2a:71:ea:85:ac:4e:ee:a9:ec:e1:83:f5:91: f9:b8:3d:36 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUF2K4+1JRuhvbwbgNbpk8GxqgacYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNDExMDMyMjI4MzNaFw0yNDExMDUwMjI0MzNaMDMxMTAvBgNV BAMTKDQxRkJCM0QwNDdGNDk0ODVEMkU3OEIxOTBGODlBOUU5OEU1QTMwOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4P5MuUU3f31rhFYDQaPtHyg6+ uT8SZO7Ts601KGn0c6mTQYFajh3hvHQuEAFnVZ9otCkx4CNAHV7nHaKn+h/zBDo9 /IImrKS7GmY/AlTSTfbCUme4UA1WRwBh3/yZintJ/5ZMmkLbkqBDzxf5VqRPhEzR SABTZWAq8cQq0P6PRPj+nrrTGzktMI92iwb6h2bTGIk/lR4uTfNRgfv7M6GJjaRc YiQzmGjVVxfGkUPnnEOp8KiCret8XsukJ1kVZL2ql43acZ4tZaqlAVCYqIjewZ2r c4aWk2NMqKVI72rFaFeFFLwsmU1O19uciDaqyCRZzyzPixzJVi6bWlyUR4YNAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUQfuz0Ef0lIXS54sZD4mp6Y5aMJIwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABmHn/FBHDzOWQL/4UF9eRHrZGNvDHIFipg3v3Z6P6xpXR5akpeaXymO BmoqWgFTwGbXGMUq0BfDhKD8Vv+vHtg/vPAddRCnfwcRG40pizFzxBqQt8BMpan+ QXLS0AhDnLfpjcX9F5N7A2GtwnJV1ebCOSz+dtCTdl6oOefNzlWmT3s46I1eECJx uBhRg84IE4dd6ctLIVdoIFBny93hY7UZByZ02N8OT89M+XbPeHg3dB8etdBj4XI5 tLCk7bysVY0xt1uu94f6ZOYFf6m4PfmFmGwS6OwGIRwFxuyc5I1OJy6E26Iv3kX4 bBNLmm7RKnHqhaxO7qns4YP1kfm4PTY= -----END CERTIFICATE-----Generated at Sun Nov 3 23:28:59 2024 by rpki-client on console-ams.rpki-client.org