$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft File: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft (raw, json) Hash identifier: xvF+y/kY74VnQA9yldwJ9cvzYYIQSXfwVvSvGhxQVNg= Subject key identifier: 7A:AD:38:A6:94:E7:F1:BC:EC:9B:F0:6A:FB:EC:41:DD:78:79:E4:A7 Authority key identifier: 40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 Certificate issuer: /CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Certificate serial: 39EA5C8BB411024BD7C28FFE4396E4A7CEED8CA1 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft Manifest number: 04 Signing time: Fri 22 Nov 2024 07:03:44 +0000 Manifest this update: Fri 22 Nov 2024 06:58:44 +0000 Manifest next update: Sat 23 Nov 2024 07:31:44 +0000 Files and hashes: 1: 4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl (hash: +GonofAO4Yhf4oCSMT7Fu9W5PcUJoR68blM3v3lXGQw=) 2: 326131343a373538313a396632303a3a2f34342d3434203d3e20323135323838.roa (hash: liZtkDCXL4DmjNQ78r1O/4djDEbWR26m7nKfEkWRmh4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.crl rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/A83D48652F3B2DF74F6BF9BAA8A9C174CCFD3772.mft rsync://rpki.ripe.net/repository/DEFAULT/qD1IZS87LfdPa_m6qKnBdMz9N3I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 23:17:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:ea:5c:8b:b4:11:02:4b:d7:c2:8f:fe:43:96:e4:a7:ce:ed:8c:a1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6 Validity Not Before: Nov 22 06:58:44 2024 GMT Not After : Nov 23 07:31:44 2024 GMT Subject: CN=7AAD38A694E7F1BCEC9BF06AFBEC41DD7879E4A7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:9d:9e:2a:f9:ba:51:c5:43:75:d8:c8:d2:7d: 72:3b:aa:9b:cf:81:08:ce:4d:a8:eb:eb:6c:8a:e2: 27:6e:c9:9f:b5:f3:8d:de:50:0b:27:7e:36:54:d0: 88:55:d9:f9:95:9a:cd:69:02:7d:83:a0:83:7c:67: 92:13:0d:c3:89:be:81:4c:7f:c0:84:ca:30:da:30: 25:69:54:27:c5:c4:ff:d1:f3:13:96:bd:18:de:07: be:c3:73:c4:46:3f:41:91:bd:2c:48:43:cd:f0:23: 48:db:f5:3a:f4:3a:62:14:8a:5a:d3:cb:e3:bc:45: 14:c5:3d:4d:1c:fc:a7:fb:c3:58:b3:8d:92:b4:a4: f1:97:e3:ac:0a:ed:0c:3f:8d:2a:2b:17:9f:b3:dd: 8c:b4:15:aa:d8:7b:a8:08:22:19:8a:ed:2c:13:62: f8:8a:23:67:b3:24:67:90:0b:05:e1:be:6d:6e:c1: 0a:6c:39:ec:b1:39:5c:69:d1:24:a1:f0:b8:a2:57: 07:df:5f:17:8e:bc:d0:8a:c3:6a:7b:67:c0:9b:0e: c8:34:70:cd:12:b2:1a:05:00:69:c1:66:c0:13:2e: 1d:7d:36:4b:c4:89:33:4e:70:a8:b8:7e:cd:8e:55: ba:31:67:c7:63:2f:4a:a4:0d:c4:c7:3c:b1:7a:70: ba:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7A:AD:38:A6:94:E7:F1:BC:EC:9B:F0:6A:FB:EC:41:DD:78:79:E4:A7 X509v3 Authority Key Identifier: keyid:40:50:A1:7B:AE:1C:5F:37:63:D4:5A:38:DC:FE:AC:E0:FE:22:2B:D6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c86b65b1-45e9-4fb2-adc5-87ba711e21b7/1/4050A17BAE1C5F3763D45A38DCFEACE0FE222BD6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 3b:55:07:50:6e:69:7e:41:4d:f0:80:49:27:26:a6:32:38:c0: ac:a2:ee:0a:62:90:a6:50:76:8a:63:31:c0:ae:47:04:d1:24: 53:95:b9:c8:dd:1b:be:5a:c1:33:69:a2:16:e7:53:c5:63:7a: 05:a3:32:ef:50:8f:4b:5f:07:ae:1b:07:aa:f7:02:39:2d:c4: 37:d7:cf:bb:1b:a1:d9:03:4d:ee:46:80:b3:55:54:48:9c:b4: 92:59:35:51:50:2d:67:81:c2:45:f3:c4:09:0a:39:42:6f:fc: 21:a3:82:dc:d3:e2:6c:a7:c8:22:c3:75:28:8b:32:db:d9:50: 72:83:09:99:38:b5:46:8c:6d:90:36:34:1e:35:26:83:9d:32: 3d:bd:7a:7b:dd:5d:b3:c7:38:59:02:e6:e2:d8:06:16:59:ec: 0a:a0:80:f9:0a:94:93:33:86:f4:35:7d:26:8b:c9:7f:52:d8: aa:ee:32:9e:34:e0:8d:4e:4a:12:b5:58:6d:f2:38:79:6f:2a: a7:4a:b6:16:ae:ca:f4:e9:44:e6:fb:dd:12:8e:57:27:3b:bb: d6:cc:46:60:eb:10:84:5b:22:12:92:0f:5b:3c:5d:82:38:6b: 95:95:81:e0:b2:99:6a:eb:17:42:80:8f:4d:77:54:43:95:73: 8e:14:e6:78 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOepci7QRAkvXwo/+Q5bkp87tjKEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBG RTIyMkJENjAeFw0yNDExMjIwNjU4NDRaFw0yNDExMjMwNzMxNDRaMDMxMTAvBgNV BAMTKDdBQUQzOEE2OTRFN0YxQkNFQzlCRjA2QUZCRUM0MURENzg3OUU0QTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCynZ4q+bpRxUN12MjSfXI7qpvP gQjOTajr62yK4iduyZ+1843eUAsnfjZU0IhV2fmVms1pAn2DoIN8Z5ITDcOJvoFM f8CEyjDaMCVpVCfFxP/R8xOWvRjeB77Dc8RGP0GRvSxIQ83wI0jb9Tr0OmIUilrT y+O8RRTFPU0c/Kf7w1izjZK0pPGX46wK7Qw/jSorF5+z3Yy0FarYe6gIIhmK7SwT YviKI2ezJGeQCwXhvm1uwQpsOeyxOVxp0SSh8LiiVwffXxeOvNCKw2p7Z8CbDsg0 cM0SshoFAGnBZsATLh19NkvEiTNOcKi4fs2OVboxZ8djL0qkDcTHPLF6cLphAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUeq04ppTn8bzsm/Bq++xB3Xh55KcwHwYDVR0j BBgwFoAUQFChe64cXzdj1Fo43P6s4P4iK9YwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzg2YjY1YjEtNDVlOS00ZmIyLWFkYzUtODdiYTcxMWUy MWI3LzEvNDA1MEExN0JBRTFDNUYzNzYzRDQ1QTM4RENGRUFDRTBGRTIyMkJENi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC80MDUwQTE3QkFFMUM1RjM3NjNENDVBMzhE Q0ZFQUNFMEZFMjIyQkQ2LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M4NmI2NWIxLTQ1ZTktNGZiMi1hZGM1LTg3YmE3MTFlMjFiNy8xLzQwNTBBMTdC QUUxQzVGMzc2M0Q0NUEzOERDRkVBQ0UwRkUyMjJCRDYubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA7VQdQ bml+QU3wgEknJqYyOMCsou4KYpCmUHaKYzHArkcE0SRTlbnI3Ru+WsEzaaIW51PF Y3oFozLvUI9LXweuGweq9wI5LcQ318+7G6HZA03uRoCzVVRInLSSWTVRUC1ngcJF 88QJCjlCb/who4Lc0+Jsp8giw3UoizLb2VBygwmZOLVGjG2QNjQeNSaDnTI9vXp7 3V2zxzhZAubi2AYWWewKoID5CpSTM4b0NX0mi8l/Utiq7jKeNOCNTkoStVht8jh5 byqnSrYWrsr06UTm+90SjlcnO7vWzEZg6xCEWyISkg9bPF2COGuVlYHgsplq6xdC gI9Nd1RDlXOOFOZ4 -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:20 2024 by rpki-client on console-ams.rpki-client.org