$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft File: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft (raw, json) Hash identifier: +6kQwzC0c6NBqE6G8PcG7h+1hovowu+7/bBrt5oyInE= Subject key identifier: 2E:94:9B:43:24:72:6D:3F:99:A2:28:5C:3F:B5:29:5F:0F:18:79:5F Authority key identifier: C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 Certificate issuer: /CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3 Certificate serial: 48031CFCBD466F8601E26A2935549FA8D98C1BBD Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft Manifest number: 020F Signing time: Thu 21 Nov 2024 04:12:19 +0000 Manifest this update: Thu 21 Nov 2024 04:07:19 +0000 Manifest next update: Fri 22 Nov 2024 07:59:19 +0000 Files and hashes: 1: 326130373a353463373a343130303a3a2f34322d3432203d3e20323136303839.roa (hash: TznseHfiDZ1jpmhMm2lzqcGBWQrzFxaalzxO12gQ4iQ=) 2: C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl (hash: 1IKEaluwGtWi7293e2ceb+HsxYpvHFVp9stBUGy6pYM=) 3: 326130373a353463373a343034303a3a2f34322d3432203d3e20323136303839.roa (hash: qPVhlGUPjHIOWP/5yRh1nX5yknvRUgXVZrwqIGwcG6o=) 4: 326130373a353463373a343030303a3a2f34322d3432203d3e20323136303839.roa (hash: dr3ji63XD+oWk6cRBemGYJyGc/2BAsrYFzshGDdgAQk=) 5: 326130373a353463373a343038303a3a2f34322d3432203d3e20323136303839.roa (hash: PSK/VnPkC0Wx84ZfxyLpC5q9DAlNnqbxnoS1F86zKXo=) 6: 326130373a353463373a343063303a3a2f34322d3432203d3e20323136303839.roa (hash: IEkqCo1PYtZIgJs8hjaJOZoqli4MCs+0wVtFiuHrMRQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 21 Nov 2024 17:55:40 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:03:1c:fc:bd:46:6f:86:01:e2:6a:29:35:54:9f:a8:d9:8c:1b:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3 Validity Not Before: Nov 21 04:07:19 2024 GMT Not After : Nov 22 07:59:19 2024 GMT Subject: CN=2E949B4324726D3F99A2285C3FB5295F0F18795F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:3e:22:b0:6f:4b:32:a3:9a:b5:85:e8:4d:14: 0b:9c:4f:83:a3:0c:22:ac:7f:b9:d7:5d:f1:1d:7d: 74:2d:80:b6:7e:31:08:4a:26:d8:f3:22:28:ec:33: 2d:ff:b0:20:8f:5a:7f:f5:a8:0f:65:af:fa:be:be: b0:11:0f:4e:b8:d9:2c:1a:99:8b:54:e8:e1:2a:f0: de:e5:93:03:ff:10:79:8e:c1:26:62:3d:24:b8:1a: 03:6e:71:e6:08:e5:e8:2d:5b:86:b2:99:62:6a:3c: 5f:11:5c:b2:a4:57:0b:cc:8f:1b:7f:2e:65:ac:29: ea:c6:d8:0b:b2:f2:63:4b:54:22:b1:78:02:12:b1: 5c:4d:bc:1a:78:af:e8:a5:95:04:15:c9:cf:47:75: 90:8a:b7:a2:18:53:ac:ec:19:8a:75:55:e2:3b:dc: 3d:79:11:8a:5b:16:91:b9:92:a7:b5:92:48:22:a0: 05:e4:b2:16:7a:e7:88:96:05:2b:b4:a1:89:3b:e5: 2b:5c:d2:91:38:c1:e8:fb:f8:b4:91:f6:a4:47:b7: d2:f3:90:c6:b2:90:98:ac:bd:2a:0a:46:71:23:e4: 21:45:0a:2a:c6:42:0b:9a:65:4f:70:a7:74:f7:d2: 7c:99:f0:61:8c:92:ed:bd:3e:6b:8c:1c:cd:c3:a7: 9c:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:94:9B:43:24:72:6D:3F:99:A2:28:5C:3F:B5:29:5F:0F:18:79:5F X509v3 Authority Key Identifier: keyid:C3:08:5C:3C:31:F2:D4:5E:DE:2A:7F:FB:B1:96:5B:BF:15:4E:69:B3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bcbbf0bf-a2e0-42a4-8293-711496eb66d2/1/C3085C3C31F2D45EDE2A7FFBB1965BBF154E69B3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:3f:52:ec:84:97:60:3c:9a:1b:a3:28:51:03:da:d6:ea:89: 44:5e:40:1c:88:a3:ef:c3:c9:e5:e3:38:6e:2d:c3:9a:d2:02: a6:dd:91:59:6c:29:90:72:7b:86:c3:ea:44:8e:e7:28:66:31: d1:00:31:3f:64:80:23:3e:92:fc:4e:2b:dc:e1:1c:2d:f6:53: 52:f6:6d:f0:67:33:b1:af:36:e4:8c:3f:fd:ee:cd:fc:90:84: 40:bd:76:b1:56:7b:44:d7:e1:e0:18:c0:ba:10:6d:66:a5:30: f3:13:61:8f:75:50:dd:6f:70:f4:69:73:bb:b8:6c:de:b2:68: f6:af:a7:61:95:cb:b2:e8:91:10:9d:b6:5e:dd:1c:4b:88:9a: 67:df:6c:97:0b:68:df:02:d9:c7:7a:89:7b:47:8b:2c:9c:84: 00:65:45:c6:f0:93:94:ca:2b:e8:37:24:80:87:1d:f2:f4:5e: 32:cc:21:1b:00:02:4d:18:c5:0d:6e:7e:0e:d1:a2:77:c4:93: 42:82:d3:f9:b3:47:50:a3:65:2e:4c:85:74:96:3b:1f:29:54: 4f:85:93:f9:25:39:5f:f9:f6:cc:37:3a:50:35:ee:21:6b:92: 48:b3:10:8d:17:ef:a0:d9:df:1a:5b:4d:17:38:9a:23:a0:6b: 2f:6f:f1:b1 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUSAMc/L1Gb4YB4mopNVSfqNmMG70wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQzMwODVDM0MzMUYyRDQ1RURFMkE3RkZCQjE5NjVCQkYx NTRFNjlCMzAeFw0yNDExMjEwNDA3MTlaFw0yNDExMjIwNzU5MTlaMDMxMTAvBgNV BAMTKDJFOTQ5QjQzMjQ3MjZEM0Y5OUEyMjg1QzNGQjUyOTVGMEYxODc5NUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCePiKwb0syo5q1hehNFAucT4Oj DCKsf7nXXfEdfXQtgLZ+MQhKJtjzIijsMy3/sCCPWn/1qA9lr/q+vrARD0642Swa mYtU6OEq8N7lkwP/EHmOwSZiPSS4GgNuceYI5egtW4aymWJqPF8RXLKkVwvMjxt/ LmWsKerG2Auy8mNLVCKxeAISsVxNvBp4r+illQQVyc9HdZCKt6IYU6zsGYp1VeI7 3D15EYpbFpG5kqe1kkgioAXkshZ654iWBSu0oYk75Stc0pE4wej7+LSR9qRHt9Lz kMaykJisvSoKRnEj5CFFCirGQguaZU9wp3T30nyZ8GGMku29PmuMHM3Dp5ybAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQULpSbQyRybT+ZoihcP7UpXw8YeV8wHwYDVR0j BBgwFoAUwwhcPDHy1F7eKn/7sZZbvxVOabMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmNiYmYwYmYtYTJlMC00MmE0LTgyOTMtNzExNDk2ZWI2 NmQyLzEvQzMwODVDM0MzMUYyRDQ1RURFMkE3RkZCQjE5NjVCQkYxNTRFNjlCMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC9DMzA4NUMzQzMxRjJENDVFREUyQTdGRkJC MTk2NUJCRjE1NEU2OUIzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2JjYmJmMGJmLWEyZTAtNDJhNC04MjkzLTcxMTQ5NmViNjZkMi8xL0MzMDg1QzND MzFGMkQ0NUVERTJBN0ZGQkIxOTY1QkJGMTU0RTY5QjMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBtP1Ls hJdgPJoboyhRA9rW6olEXkAciKPvw8nl4zhuLcOa0gKm3ZFZbCmQcnuGw+pEjuco ZjHRADE/ZIAjPpL8Tivc4Rwt9lNS9m3wZzOxrzbkjD/97s38kIRAvXaxVntE1+Hg GMC6EG1mpTDzE2GPdVDdb3D0aXO7uGzesmj2r6dhlcuy6JEQnbZe3RxLiJpn32yX C2jfAtnHeol7R4ssnIQAZUXG8JOUyivoNySAhx3y9F4yzCEbAAJNGMUNbn4O0aJ3 xJNCgtP5s0dQo2UuTIV0ljsfKVRPhZP5JTlf+fbMNzpQNe4ha5JIsxCNF++g2d8a W00XOJojoGsvb/Gx -----END CERTIFICATE-----Generated at Thu Nov 21 06:13:28 2024 by rpki-client on console-ams.rpki-client.org