$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft File: 5ECB4CADBBADD500F49CA697D566A2761E017608.mft (raw, json) Hash identifier: LJ+EzeaYXP2aOg87se0+CBtowlq30nriz6fj4O926WA= Subject key identifier: 36:0F:DD:4D:60:FC:51:85:CB:95:A6:22:47:D2:15:0B:A0:51:9C:45 Authority key identifier: 5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 Certificate issuer: /CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Certificate serial: 77BA5E15D09E4626F08499A5833FE4ED5F508758 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft Manifest number: 11 Signing time: Fri 22 Nov 2024 03:28:40 +0000 Manifest this update: Fri 22 Nov 2024 03:23:40 +0000 Manifest next update: Sat 23 Nov 2024 03:33:40 +0000 Files and hashes: 1: 3231332e3235342e3137302e302f32342d3234203d3e20323134393431.roa (hash: DDeP4uYwqP8b0ON0e+nML7HE4UFDik7BChJ/x0EHl9Q=) 2: 38302e37352e3232312e302f32342d3234203d3e203438393235.roa (hash: 0b6sszxsKulqMcqV3D3Yqcg5IxC3pSU5gc82mTsDYlA=) 3: 5ECB4CADBBADD500F49CA697D566A2761E017608.crl (hash: pbkdd1D/uaC8tE8asBSXltaAbrAMVd+or+hXBal+QnQ=) 4: 3231332e3235342e3137302e302f32342d3234203d3e203438363738.roa (hash: aWzsWkNz9PJPPmM8i0/IefYTbT3Y07R53lZGD0EHqrg=) 5: 3137302e36322e3139302e302f32342d3234203d3e20323135323837.roa (hash: OVhjuno5vKwBJe9vNELyjG0i4vKTAonnjc57lC48la8=) 6: 3134312e3139332e3232382e302f32342d3234203d3e203136323736.roa (hash: XoKxKCs3BEOFLSHgiCLlVnkwtYmTvJ1wBNBKD4ag8KE=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:ba:5e:15:d0:9e:46:26:f0:84:99:a5:83:3f:e4:ed:5f:50:87:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5ecb4cadbbadd500f49ca697d566a2761e017608 Validity Not Before: Nov 22 03:23:40 2024 GMT Not After : Nov 23 03:33:40 2024 GMT Subject: CN=360FDD4D60FC5185CB95A62247D2150BA0519C45 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:97:e7:6b:1b:4a:b5:63:37:fd:2f:28:97:04:25: ab:54:0e:f3:5f:ac:ab:28:20:88:b0:cc:19:fb:84: e7:05:ce:c5:61:0b:8e:dd:19:74:48:23:ea:06:e9: d0:1c:a5:4b:53:07:35:e6:ae:f8:8b:9d:13:1a:d9: b8:68:8d:58:44:4a:aa:44:0d:38:5f:1e:0f:b0:ed: 14:af:92:20:f2:c4:12:35:fb:97:af:6f:08:b0:88: 57:d8:c2:ac:fc:58:17:d9:89:dc:63:b4:c5:30:cb: 33:4e:5d:65:9b:78:36:6f:97:26:49:3f:d8:f7:39: f4:ec:f8:f8:9c:f0:b9:7b:f2:67:b6:c4:51:ac:27: 43:a4:27:2c:50:9a:28:9b:8d:75:f8:02:34:bc:50: 9f:f7:9c:d3:a0:ce:99:f4:f5:6d:1f:4f:1c:8e:c0: 10:e9:2f:a7:74:b5:6e:d9:18:17:96:01:bb:e3:ad: a4:3e:d0:8b:cd:7a:6b:00:54:73:75:6c:7f:14:ff: 8a:83:48:a9:83:7c:39:6c:29:5e:71:8f:e5:84:89: d2:75:74:93:89:76:2d:97:4b:8f:52:c3:a8:f3:ee: 8e:57:7e:b3:7d:f2:f1:9f:74:9a:cf:2a:43:83:2b: 17:cc:c3:0e:59:9f:5e:19:30:8f:87:f8:d8:a2:f6: 25:89 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:0F:DD:4D:60:FC:51:85:CB:95:A6:22:47:D2:15:0B:A0:51:9C:45 X509v3 Authority Key Identifier: keyid:5E:CB:4C:AD:BB:AD:D5:00:F4:9C:A6:97:D5:66:A2:76:1E:01:76:08 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XstMrbut1QD0nKaX1Waidh4Bdgg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/ac0e13d8-bfe0-4235-afb4-d53edfbacdd2/0/5ECB4CADBBADD500F49CA697D566A2761E017608.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:bd:c8:1d:c5:52:8a:ec:db:1e:5d:b7:e5:5a:c9:18:1f:6a: 2e:65:38:5b:6a:d6:82:73:44:23:bb:8a:9d:4a:50:f7:6d:cd: f9:05:26:23:00:e1:14:19:66:38:87:fb:19:62:ff:1a:5c:d8: 1b:53:1c:7b:a3:e8:c2:73:29:5e:43:51:6b:13:c3:a8:6b:a2: d1:ac:3b:5e:a8:18:58:8e:c7:49:b2:6d:db:84:40:f8:50:6e: da:44:fe:80:e8:e4:43:d4:95:5e:58:4a:c2:06:77:2b:27:71: 13:4f:21:6f:bb:17:d8:4f:8e:69:5f:55:41:c3:5c:eb:63:39: ee:cc:e8:eb:17:8e:31:06:dc:b4:1a:40:1c:6f:f8:67:b2:14: 8e:71:ec:7b:a7:a2:f7:ce:94:65:ba:ae:b1:a1:54:a5:09:0d: 3e:aa:db:05:77:a8:3e:33:54:7c:40:c1:e2:d6:ad:18:4d:0a: fc:69:65:7d:51:9d:c9:65:dc:db:6c:c4:f3:fa:51:a3:4d:c0: 8f:bd:5a:bf:64:dc:63:93:bd:8a:38:d4:59:fb:49:3a:82:c9: 98:96:c4:c8:8a:b2:ce:4c:59:89:a7:0d:fe:2d:53:10:9d:c6: 63:60:68:24:bc:1e:27:c8:91:25:20:af:c5:26:d0:73:7d:16: cc:2a:9d:50 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUd7peFdCeRibwhJmlgz/k7V9Qh1gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWVjYjRjYWRiYmFkZDUwMGY0OWNhNjk3ZDU2NmEyNzYx ZTAxNzYwODAeFw0yNDExMjIwMzIzNDBaFw0yNDExMjMwMzMzNDBaMDMxMTAvBgNV BAMTKDM2MEZERDRENjBGQzUxODVDQjk1QTYyMjQ3RDIxNTBCQTA1MTlDNDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCX52sbSrVjN/0vKJcEJatUDvNf rKsoIIiwzBn7hOcFzsVhC47dGXRII+oG6dAcpUtTBzXmrviLnRMa2bhojVhESqpE DThfHg+w7RSvkiDyxBI1+5evbwiwiFfYwqz8WBfZidxjtMUwyzNOXWWbeDZvlyZJ P9j3OfTs+Pic8Ll78me2xFGsJ0OkJyxQmiibjXX4AjS8UJ/3nNOgzpn09W0fTxyO wBDpL6d0tW7ZGBeWAbvjraQ+0IvNemsAVHN1bH8U/4qDSKmDfDlsKV5xj+WEidJ1 dJOJdi2XS49Sw6jz7o5XfrN98vGfdJrPKkODKxfMww5Zn14ZMI+H+Nii9iWJAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUNg/dTWD8UYXLlaYiR9IVC6BRnEUwHwYDVR0j BBgwFoAUXstMrbut1QD0nKaX1Waidh4BdggwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYWMwZTEzZDgtYmZlMC00MjM1LWFmYjQtZDUzZWRmYmFj ZGQyLzAvNUVDQjRDQURCQkFERDUwMEY0OUNBNjk3RDU2NkEyNzYxRTAxNzYwOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hzdE1yYnV0MVFEMG5LYVgxV2FpZGg0 QmRnZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYzBlMTNkOC1i ZmUwLTQyMzUtYWZiNC1kNTNlZGZiYWNkZDIvMC81RUNCNENBREJCQURENTAwRjQ5 Q0E2OTdENTY2QTI3NjFFMDE3NjA4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZr3IHcVSiuzbHl235VrJ GB9qLmU4W2rWgnNEI7uKnUpQ923N+QUmIwDhFBlmOIf7GWL/GlzYG1Mce6PownMp XkNRaxPDqGui0aw7XqgYWI7HSbJt24RA+FBu2kT+gOjkQ9SVXlhKwgZ3KydxE08h b7sX2E+OaV9VQcNc62M57szo6xeOMQbctBpAHG/4Z7IUjnHse6ei986UZbqusaFU pQkNPqrbBXeoPjNUfEDB4tatGE0K/GllfVGdyWXc22zE8/pRo03Aj71av2TcY5O9 ijjUWftJOoLJmJbEyIqyzkxZiacN/i1TEJ3GY2BoJLweJ8iRJSCvxSbQc30WzCqd UA== -----END CERTIFICATE-----Generated at Fri Nov 22 05:53:32 2024 by rpki-client on console-fra.rpki-client.org