$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft File: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft (raw, json) Hash identifier: RQEHa3fmTXabpTEn5Tq9fchgKsF3senAFGNHiNFr124= Subject key identifier: A0:8F:45:6B:11:76:D0:24:50:5E:ED:45:CA:4C:3C:4D:C7:59:77:42 Authority key identifier: B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 Certificate issuer: /CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Certificate serial: 1BAA616988F1617B575C32224B8FFF5EFB9D7B3A Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft Manifest number: 01DA Signing time: Sun 30 Jun 2024 17:25:43 +0000 Manifest this update: Sun 30 Jun 2024 17:20:43 +0000 Manifest next update: Mon 01 Jul 2024 17:38:43 +0000 Files and hashes: 1: 326130613a363034303a396630303a3a2f34302d3438203d3e203531303139.roa (hash: +3/nqm5hYJOFxiazg3PseqWLiWGImC56Cbz6/SSgHZQ=) 2: 326130613a363034303a313330303a3a2f34302d3438203d3e203531303139.roa (hash: wYXp+G0b+Wf8YUC1Ek8YmurJmwHTGoUGeGwnsv5xPhk=) 3: B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl (hash: 6mo+SPdYpVlcxDvEFJnyYxGeUP9zA74dmZ7sfvkJmRU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.crl rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/0E357DDA04B8107626124F52CFC2439B76D85AF9.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/0E357DDA04B8107626124F52CFC2439B76D85AF9.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 01 Jul 2024 11:07:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:aa:61:69:88:f1:61:7b:57:5c:32:22:4b:8f:ff:5e:fb:9d:7b:3a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576 Validity Not Before: Jun 30 17:20:43 2024 GMT Not After : Jul 1 17:38:43 2024 GMT Subject: CN=A08F456B1176D024505EED45CA4C3C4DC7597742 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:51:b6:ca:04:fa:64:1b:2e:1d:25:67:49:cb: 1b:c4:63:0d:ef:70:9b:c2:2a:32:75:87:8e:c6:63: a4:56:9f:5c:55:72:8e:a9:4f:72:91:2a:67:7a:3d: b6:77:6d:59:8a:ca:e1:49:67:db:1a:f8:4a:f2:76: 4c:e5:07:b6:83:99:dc:ac:a6:72:ad:ef:60:fb:ce: e4:82:a8:6c:86:81:b7:37:57:f3:1c:b7:e2:ec:3b: 34:ee:f6:06:70:18:21:75:ff:da:b1:f6:db:03:a7: 39:d0:72:0f:93:d1:e4:d2:82:53:1b:ec:4b:ed:3c: 55:29:3a:95:98:cd:ab:d2:27:b8:14:22:65:e7:f1: a7:00:e5:12:a3:32:79:c6:dc:96:84:17:c7:7b:db: 16:b3:90:24:6c:fd:de:7b:3c:ab:88:fd:78:7e:0c: a4:60:38:fa:18:2a:b0:57:49:a0:ac:3c:09:03:d2: d3:a7:0b:86:0d:97:d1:79:e7:02:67:c2:5a:6a:8c: 91:4a:33:20:72:75:b1:62:c7:68:08:ce:82:01:45: 2f:1c:dd:2c:27:9e:b6:f9:cb:b4:3d:b7:94:fc:f1: 32:4a:87:56:0d:76:bb:54:ad:b1:0d:b2:ea:ef:2d: 16:15:75:82:c2:93:8d:96:27:b2:63:01:9a:f3:46: c2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:8F:45:6B:11:76:D0:24:50:5E:ED:45:CA:4C:3C:4D:C7:59:77:42 X509v3 Authority Key Identifier: keyid:B3:D1:0E:E6:F3:7C:24:3D:0D:0C:08:F7:AA:02:BA:3C:D2:55:95:76 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/1/B3D10EE6F37C243D0D0C08F7AA02BA3CD2559576.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:31:8e:ae:6e:96:3d:1b:c2:f4:84:de:c6:98:1b:be:75:91: 4e:a6:3d:9c:87:f7:f0:61:94:04:34:0e:59:5b:1c:24:5b:ba: b6:c8:71:d5:ee:a8:fd:c7:b6:0c:13:88:3d:bd:80:b9:a8:05: 89:61:4a:43:15:bf:e4:ac:d1:02:4e:ef:e1:6f:23:97:4f:2f: 21:fe:98:c0:92:a0:d4:0e:4a:17:3a:29:a1:eb:92:a8:6e:ee: 3f:d7:79:7f:be:95:58:ed:85:77:02:f5:bb:6d:b8:76:de:05: ce:a4:33:b6:50:fa:6f:64:ed:f4:f5:a3:c9:18:d2:ab:7f:40: df:37:74:7f:de:18:c5:3b:6b:66:c0:6b:83:17:a8:f4:08:85: fa:8e:05:80:f8:9b:f9:1e:e2:d2:56:4c:42:10:c3:01:cb:e0: ad:60:d1:60:a2:16:b7:fb:ac:fe:bc:cc:0e:a1:ef:12:dd:f9: c8:c1:c5:a0:d5:ca:f9:3e:11:90:d6:e6:30:23:f3:e0:f3:36: f7:18:ec:97:d4:8f:e0:4f:42:29:e5:c8:f0:ed:4c:87:28:66: fd:f4:96:3b:7a:a3:fd:f0:6e:cc:99:f6:7b:17:11:8d:4f:08: 04:e9:6e:26:a8:44:cb:e6:ad:fe:d8:28:37:69:b7:1a:02:a8: d1:82:a2:27 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUG6phaYjxYXtXXDIiS4//XvudezowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NE MjU1OTU3NjAeFw0yNDA2MzAxNzIwNDNaFw0yNDA3MDExNzM4NDNaMDMxMTAvBgNV BAMTKEEwOEY0NTZCMTE3NkQwMjQ1MDVFRUQ0NUNBNEMzQzREQzc1OTc3NDIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVUbbKBPpkGy4dJWdJyxvEYw3v cJvCKjJ1h47GY6RWn1xVco6pT3KRKmd6PbZ3bVmKyuFJZ9sa+ErydkzlB7aDmdys pnKt72D7zuSCqGyGgbc3V/Mct+LsOzTu9gZwGCF1/9qx9tsDpznQcg+T0eTSglMb 7EvtPFUpOpWYzavSJ7gUImXn8acA5RKjMnnG3JaEF8d72xazkCRs/d57PKuI/Xh+ DKRgOPoYKrBXSaCsPAkD0tOnC4YNl9F55wJnwlpqjJFKMyBydbFix2gIzoIBRS8c 3Swnnrb5y7Q9t5T88TJKh1YNdrtUrbENsurvLRYVdYLCk42WJ7JjAZrzRsLJAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUoI9FaxF20CRQXu1Fykw8TcdZd0IwHwYDVR0j BBgwFoAUs9EO5vN8JD0NDAj3qgK6PNJVlXYwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2Nh ZTNmLzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wL0IzRDEwRUU2RjM3QzI0 M0QwRDBDMDhGN0FBMDJCQTNDRDI1NTk1NzYuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvYWEwMDRiYTEtNDE5Yi00ZGI1LWJiZDMtNWNjYTYzM2NhZTNm LzEvQjNEMTBFRTZGMzdDMjQzRDBEMEMwOEY3QUEwMkJBM0NEMjU1OTU3Ni5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBABoxjq5ulj0bwvSE3saYG751kU6mPZyH9/BhlAQ0DllbHCRburbIcdXu qP3HtgwTiD29gLmoBYlhSkMVv+Ss0QJO7+FvI5dPLyH+mMCSoNQOShc6KaHrkqhu 7j/XeX++lVjthXcC9bttuHbeBc6kM7ZQ+m9k7fT1o8kY0qt/QN83dH/eGMU7a2bA a4MXqPQIhfqOBYD4m/ke4tJWTEIQwwHL4K1g0WCiFrf7rP68zA6h7xLd+cjBxaDV yvk+EZDW5jAj8+DzNvcY7JfUj+BPQinlyPDtTIcoZv30ljt6o/3wbsyZ9nsXEY1P CATpbiaoRMvmrf7YKDdptxoCqNGCoic= -----END CERTIFICATE-----Generated at Sun Jun 30 21:59:52 2024 by rpki-client on console-ams.rpki-client.org