$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: uQ2VPG97HySHTpKCg8i4sJO9/R22fqzS9w7A/0sDR3E= Subject key identifier: 8C:A8:3D:85:46:87:77:F2:38:55:46:E5:05:21:E2:0E:8C:7D:59:05 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 4736878B9CA6094964B954DB784F426DE2B5C332 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0247 Signing time: Sun 05 May 2024 09:06:42 +0000 Manifest this update: Sun 05 May 2024 09:01:42 +0000 Manifest next update: Mon 06 May 2024 09:51:42 +0000 Files and hashes: 1: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: PegGwAisvX3gWdbPAAYgG4l6LNoFbuBNIzNzUH+jNgg=) 2: 34352e38312e35382e302f32342d3234203d3e20383334.roa (hash: K7sedDkSGi50p+2fI25Z6EIlm/Bk9cLib/bQTOVIz3g=) 3: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 3ZSjlKU0FDu1PfCNIY7S0AH8Mc5qUB/O/qjZ83x1+n4=) 4: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: GfBt0jFLjsZcRKORa2cWJ5BqsMY9epTagoyL7klmj7Y=) 5: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: jmfjuQ2LME9LCcB3Ls3X1wO1whmIw278YIL2FglOELk=) 6: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: /pglx2sU5jtCytGHT0V5IZzX70yBH2Gm59ZtgUW/WO4=) 7: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: Gb2rbwC5SwQE4+PWclkn6jTrRvIwMZDTLmgzvBaHDS0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 06 May 2024 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:36:87:8b:9c:a6:09:49:64:b9:54:db:78:4f:42:6d:e2:b5:c3:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: May 5 09:01:42 2024 GMT Not After : May 6 09:51:42 2024 GMT Subject: CN=8CA83D85468777F2385546E50521E20E8C7D5905 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:be:1b:5a:37:9a:bc:40:79:5d:51:93:c6:ef: 8f:b9:aa:60:35:8d:52:43:ae:98:2c:25:9b:e4:3a: 65:10:0a:05:fe:ea:3a:b2:3a:b0:67:32:b5:7f:5b: 4e:f7:47:d7:99:10:ae:a5:82:39:46:78:51:d4:6d: 80:4d:82:92:2d:6d:71:ba:9d:43:f0:84:4a:3a:91: f9:d5:83:91:3d:22:f4:79:83:6d:c1:08:b1:f0:7b: 17:9e:91:1d:88:20:6a:99:70:87:91:92:8b:f3:05: b1:41:66:f0:57:0f:c1:35:97:6c:96:27:c6:32:f1: 88:5b:6d:22:5d:63:b6:bc:fb:e0:52:c7:22:01:a5: ba:86:c0:67:f2:f9:07:00:83:04:26:8f:aa:a7:86: eb:51:03:c3:e6:5e:a3:36:a5:fe:3f:8f:e3:54:81: 08:74:c8:ef:03:10:b3:0d:0d:5d:60:27:5a:07:7f: b8:7d:cf:a6:f2:2e:f3:96:62:89:ea:72:66:ac:df: 68:35:f1:e8:16:77:c2:d2:f4:18:5a:2d:0b:f7:1e: 88:cc:56:eb:85:2b:88:fd:82:55:58:ef:1a:9b:0c: 5c:c9:b7:a7:9c:3f:d4:7a:8b:55:11:e7:80:82:58: d9:52:13:dc:f0:f4:c1:49:76:da:70:c7:c0:c2:3d: df:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8C:A8:3D:85:46:87:77:F2:38:55:46:E5:05:21:E2:0E:8C:7D:59:05 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 00:3e:d2:9f:6e:4b:dc:4a:f6:5a:2c:f3:a2:80:41:ca:1d:67: a8:c5:12:8f:78:f5:36:23:ec:d0:0f:c1:4a:ea:3c:dd:20:57: 35:59:79:51:8e:50:16:e9:2e:a3:de:8d:e2:e9:79:fa:e4:6d: 7f:5a:5f:60:a9:e2:55:e1:05:bc:b5:70:f9:98:a7:6e:26:22: df:d2:db:b5:bf:7b:d1:1d:65:85:4e:6d:c1:09:93:a7:55:3c: 8e:e4:52:88:45:29:eb:a5:49:ae:1d:42:8d:49:3e:a3:77:62: f5:e2:7e:64:26:e6:83:1e:99:07:4e:33:c1:da:e5:8f:22:b7: 4b:fc:91:9e:cb:be:4f:aa:a8:44:41:fe:1c:34:16:b7:8e:d1: fd:48:3e:54:a3:4e:de:df:a2:80:ce:98:26:0e:5f:17:2f:c0: 03:ff:c4:b3:10:36:d2:58:0f:35:f6:db:2a:c7:11:64:1d:f2: 36:ff:77:df:dd:7c:c5:67:53:9c:04:63:8a:f3:c0:42:5b:9c: 6a:bd:bc:9c:04:90:6a:99:83:eb:2e:97:90:af:e7:d5:dd:e6: 2e:39:51:d9:08:bf:44:05:5e:e3:b6:38:81:8c:6b:41:e3:b0: 19:85:e7:70:1d:57:ac:76:bd:0c:3f:1a:9e:d1:2a:0e:4a:7b: 24:37:60:e9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIURzaHi5ymCUlkuVTbeE9CbeK1wzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNDA1MDUwOTAxNDJaFw0yNDA1MDYwOTUxNDJaMDMxMTAvBgNV BAMTKDhDQTgzRDg1NDY4Nzc3RjIzODU1NDZFNTA1MjFFMjBFOEM3RDU5MDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfvhtaN5q8QHldUZPG74+5qmA1 jVJDrpgsJZvkOmUQCgX+6jqyOrBnMrV/W073R9eZEK6lgjlGeFHUbYBNgpItbXG6 nUPwhEo6kfnVg5E9IvR5g23BCLHwexeekR2IIGqZcIeRkovzBbFBZvBXD8E1l2yW J8Yy8YhbbSJdY7a8++BSxyIBpbqGwGfy+QcAgwQmj6qnhutRA8PmXqM2pf4/j+NU gQh0yO8DELMNDV1gJ1oHf7h9z6byLvOWYonqcmas32g18egWd8LS9BhaLQv3HojM VuuFK4j9glVY7xqbDFzJt6ecP9R6i1UR54CCWNlSE9zw9MFJdtpwx8DCPd85AgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUjKg9hUaHd/I4VUblBSHiDox9WQUwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAD7Sn25L3Er2WizzooBB yh1nqMUSj3j1NiPs0A/BSuo83SBXNVl5UY5QFukuo96N4ul5+uRtf1pfYKniVeEF vLVw+ZinbiYi39Lbtb970R1lhU5twQmTp1U8juRSiEUp66VJrh1CjUk+o3di9eJ+ ZCbmgx6ZB04zwdrljyK3S/yRnsu+T6qoREH+HDQWt47R/Ug+VKNO3t+igM6YJg5f Fy/AA//EsxA20lgPNfbbKscRZB3yNv933918xWdTnARjivPAQlucar28nASQapmD 6y6XkK/n1d3mLjlR2Qi/RAVe47Y4gYxrQeOwGYXncB1XrHa9DD8antEqDkp7JDdg 6Q== -----END CERTIFICATE-----Generated at Sun May 5 11:46:19 2024 by rpki-client on console-fra.rpki-client.org