$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft File: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft (raw, json) Hash identifier: GVhlV33yjNF+GNML9uN9KaRfhibaOHdopqdGNeCS06w= Subject key identifier: 90:93:CA:48:5D:BB:D3:C5:7E:D9:33:51:B2:7F:CF:84:69:30:60:58 Authority key identifier: 5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE Certificate issuer: /CN=5da3215abfa4621d57709f838a92801f2e90ddfe Certificate serial: 72B89A14F3DF257D2EC4F6140CA60615C92CE719 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft Manifest number: 0352 Signing time: Thu 21 Nov 2024 15:28:40 +0000 Manifest this update: Thu 21 Nov 2024 15:23:40 +0000 Manifest next update: Fri 22 Nov 2024 16:37:40 +0000 Files and hashes: 1: 34352e38312e35382e302f32342d3234203d3e20323039323432.roa (hash: PgFKkZH0aQaFuwRYs1mJhheMQU+0AR2Y9C0+BkBTwpo=) 2: 34352e38312e35392e302f32342d3234203d3e20323132333834.roa (hash: /pglx2sU5jtCytGHT0V5IZzX70yBH2Gm59ZtgUW/WO4=) 3: 34352e38312e35392e302f32342d3234203d3e20323131343339.roa (hash: jmfjuQ2LME9LCcB3Ls3X1wO1whmIw278YIL2FglOELk=) 4: 326130393a643634303a3a2f32392d3239203d3e20313938333435.roa (hash: 3ZSjlKU0FDu1PfCNIY7S0AH8Mc5qUB/O/qjZ83x1+n4=) 5: 34352e38312e35362e302f32342d3234203d3e203634323637.roa (hash: Gb2rbwC5SwQE4+PWclkn6jTrRvIwMZDTLmgzvBaHDS0=) 6: 34352e38312e35372e302f32342d3234203d3e203631333137.roa (hash: PegGwAisvX3gWdbPAAYgG4l6LNoFbuBNIzNzUH+jNgg=) 7: 5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl (hash: +0vlx5tSw8y9bYY68hK5xFZOkYMNARV209R/r6GOZv8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 09:57:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 72:b8:9a:14:f3:df:25:7d:2e:c4:f6:14:0c:a6:06:15:c9:2c:e7:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5da3215abfa4621d57709f838a92801f2e90ddfe Validity Not Before: Nov 21 15:23:40 2024 GMT Not After : Nov 22 16:37:40 2024 GMT Subject: CN=9093CA485DBBD3C57ED93351B27FCF8469306058 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:30:93:86:99:12:ea:4f:7d:10:2d:40:01:7a: 4e:62:ab:66:00:05:a1:20:0a:cc:f7:9d:35:da:02: 49:2c:7c:0e:61:83:19:a1:b6:39:c5:41:33:a2:ac: 5e:3c:e2:4a:70:f7:f6:6e:2f:18:fc:ad:d5:b2:47: 53:27:ac:e1:db:ac:fe:d2:f3:89:f6:cf:9c:c5:4e: 06:05:8f:3a:1d:31:bd:35:42:ac:73:bb:6c:6e:37: 44:e4:92:ee:d3:a1:5c:94:05:f9:c7:aa:79:9c:4f: b7:ea:d1:fb:98:25:eb:4b:ab:b8:e0:70:42:fe:4e: 8d:e3:8d:0f:46:84:88:4b:c3:c9:80:ad:9e:cb:5c: 76:43:11:30:db:bd:80:50:1c:1a:ec:87:ec:57:fa: 8c:21:1d:00:43:8e:97:6b:6e:38:03:07:54:60:76: e1:c2:34:9a:f7:88:15:96:3a:20:77:9a:91:fd:fe: 0f:24:2e:c5:d9:0e:04:e4:3d:98:6f:79:69:8e:e7: d9:0f:2e:12:59:ea:42:80:b7:19:85:85:5a:d1:38: 0a:42:33:87:d4:fd:64:bb:36:6a:4e:87:e3:54:0a: b8:00:e2:41:60:d3:d9:f2:2a:bf:3e:39:67:ec:2b: 9b:c7:17:af:cc:2a:38:99:21:66:2e:b5:35:a1:b9: aa:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 90:93:CA:48:5D:BB:D3:C5:7E:D9:33:51:B2:7F:CF:84:69:30:60:58 X509v3 Authority Key Identifier: keyid:5D:A3:21:5A:BF:A4:62:1D:57:70:9F:83:8A:92:80:1F:2E:90:DD:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XaMhWr-kYh1XcJ-DipKAHy6Q3f4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/bf24567b-7a74-4c1f-aa85-dd24af73ccbb/0/5DA3215ABFA4621D57709F838A92801F2E90DDFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 09:30:0e:78:1c:e2:e5:f4:7b:05:4c:c5:a7:70:dc:92:b2:c1: f3:a0:ae:38:21:6a:90:5c:db:c1:c3:15:97:51:9d:56:b0:09: 23:4e:c0:fc:9f:7c:d4:45:af:3e:a9:a3:d2:a8:b6:c8:84:c5: d6:82:52:4d:a1:94:21:de:72:68:c3:fc:a7:4a:12:91:f2:f8: d4:bb:72:bf:7a:48:d6:ee:f8:95:ed:be:f2:37:d2:7b:40:a1: ba:bf:0e:6d:4a:8f:95:1b:9e:aa:1b:27:e1:8b:f4:fc:eb:22: e2:9e:b1:ec:5c:81:b9:d0:f3:b5:44:c9:a9:8a:e2:d1:8a:d5: 4c:2c:3c:89:ec:05:78:00:ee:33:c3:25:b9:f6:ff:63:37:06: 1f:11:70:5d:4a:6e:e0:27:0b:b1:72:b5:9a:a5:90:75:40:9c: 9f:d3:d5:c9:ec:96:77:d2:04:4e:7a:b7:e0:b7:4d:f1:d0:7f: 54:65:33:f3:61:43:58:3a:b9:1d:77:d3:87:1d:64:37:66:71: e1:22:22:0b:5f:8b:f4:10:25:47:fb:29:b9:5d:7c:b3:fa:21: db:de:56:a3:64:70:c4:89:94:42:4c:8e:e0:76:90:1d:09:ed: 17:c9:88:20:50:b3:6b:6c:54:57:04:66:36:00:71:6f:81:57: 44:40:4d:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUcriaFPPfJX0uxPYUDKYGFcks5xkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNWRhMzIxNWFiZmE0NjIxZDU3NzA5ZjgzOGE5MjgwMWYy ZTkwZGRmZTAeFw0yNDExMjExNTIzNDBaFw0yNDExMjIxNjM3NDBaMDMxMTAvBgNV BAMTKDkwOTNDQTQ4NURCQkQzQzU3RUQ5MzM1MUIyN0ZDRjg0NjkzMDYwNTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAMJOGmRLqT30QLUABek5iq2YA BaEgCsz3nTXaAkksfA5hgxmhtjnFQTOirF484kpw9/ZuLxj8rdWyR1MnrOHbrP7S 84n2z5zFTgYFjzodMb01Qqxzu2xuN0Tkku7ToVyUBfnHqnmcT7fq0fuYJetLq7jg cEL+To3jjQ9GhIhLw8mArZ7LXHZDETDbvYBQHBrsh+xX+owhHQBDjpdrbjgDB1Rg duHCNJr3iBWWOiB3mpH9/g8kLsXZDgTkPZhveWmO59kPLhJZ6kKAtxmFhVrROApC M4fU/WS7NmpOh+NUCrgA4kFg09nyKr8+OWfsK5vHF6/MKjiZIWYutTWhuarvAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUkJPKSF2708V+2TNRsn/PhGkwYFgwHwYDVR0j BBgwFoAUXaMhWr+kYh1XcJ+DipKAHy6Q3f4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYmYyNDU2N2ItN2E3NC00YzFmLWFhODUtZGQyNGFmNzNj Y2JiLzAvNURBMzIxNUFCRkE0NjIxRDU3NzA5RjgzOEE5MjgwMUYyRTkwRERGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1hhTWhXci1rWWgxWGNKLURpcEtBSHk2 UTNmNC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9iZjI0NTY3Yi03 YTc0LTRjMWYtYWE4NS1kZDI0YWY3M2NjYmIvMC81REEzMjE1QUJGQTQ2MjFENTc3 MDlGODM4QTkyODAxRjJFOTBEREZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACTAOeBzi5fR7BUzFp3Dc krLB86CuOCFqkFzbwcMVl1GdVrAJI07A/J981EWvPqmj0qi2yITF1oJSTaGUId5y aMP8p0oSkfL41Ltyv3pI1u74le2+8jfSe0Chur8ObUqPlRueqhsn4Yv0/Osi4p6x 7FyBudDztUTJqYri0YrVTCw8iewFeADuM8Mlufb/YzcGHxFwXUpu4CcLsXK1mqWQ dUCcn9PVyeyWd9IETnq34LdN8dB/VGUz82FDWDq5HXfThx1kN2Zx4SIiC1+L9BAl R/spuV18s/oh295Wo2RwxImUQkyO4HaQHQntF8mIIFCza2xUVwRmNgBxb4FXREBN xw== -----END CERTIFICATE-----Generated at Thu Nov 21 19:35:20 2024 by rpki-client on console-ams.rpki-client.org