$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft File: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft (raw, json) Hash identifier: ztZzx5iEYkgcLdG+A510PA4s4Txitvy/uHxcHcf/0eQ= Subject key identifier: B5:7A:8C:D0:E1:0E:80:F0:9D:95:A0:C7:F3:55:3B:03:8E:8C:A6:D5 Authority key identifier: 5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC Certificate issuer: /CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Certificate serial: 3A34C136D378C5E9A5D816DE980C7BECC5858B1D Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft Manifest number: 95 Signing time: Mon 25 Nov 2024 13:12:04 +0000 Manifest this update: Mon 25 Nov 2024 13:07:04 +0000 Manifest next update: Tue 26 Nov 2024 17:08:04 +0000 Files and hashes: 1: 5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl (hash: S9v9RIEk6AWbh8hlQ0meAipbsjuvLvaYAX06LfQxL+4=) 2: 326131333a393634343a333030303a3a2f34302d3438203d3e20323131343331.roa (hash: qeaOlY52oQQWD5XZjaWGRHEbjpv+jkgNagBU1ZEkBfY=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.crl rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/F1D0572FE72991BD32854BAC716676EBDAD22ACE.mft rsync://rpki.ripe.net/repository/DEFAULT/8dBXL-cpkb0yhUuscWZ269rSKs4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 14:24:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3a:34:c1:36:d3:78:c5:e9:a5:d8:16:de:98:0c:7b:ec:c5:85:8b:1d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC Validity Not Before: Nov 25 13:07:04 2024 GMT Not After : Nov 26 17:08:04 2024 GMT Subject: CN=B57A8CD0E10E80F09D95A0C7F3553B038E8CA6D5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:d9:65:5e:ab:8c:43:26:1b:f4:fb:fb:4b:cf: 20:c8:05:b1:9b:97:4e:72:29:12:bd:0a:70:3f:b7: 32:8f:14:a8:08:94:65:30:2d:72:12:0b:66:5e:7d: 0b:53:08:23:82:5e:74:3b:d6:8b:e2:3c:8d:fb:b7: 02:ce:dd:66:65:32:d8:4a:b4:77:6f:ea:e3:ef:32: a2:b6:bc:8f:a0:8a:99:29:f5:21:e0:d3:db:7e:da: 23:6c:31:12:d4:1f:4a:05:59:0e:41:a6:11:a6:99: dc:89:b3:e0:47:c3:47:bc:7b:40:11:7c:f2:5b:15: 02:d3:85:3f:fa:ad:b3:03:91:d8:e1:89:89:ef:34: 6c:d3:a5:b1:7f:da:10:af:9b:c4:e9:03:4e:5b:9c: 23:6b:5f:54:01:32:84:db:7c:e0:70:fd:a1:56:b5: 9e:f4:c8:7f:aa:d6:6c:d2:73:78:b6:8e:fa:72:d8: 04:cf:3c:5b:9a:60:13:93:98:c4:0f:ec:f4:e1:ab: da:f8:af:56:14:24:0f:6f:7a:e1:44:e4:3f:7c:27: fa:a0:70:fe:12:c0:c6:9c:2d:0d:7d:1e:c7:b1:42: ad:4c:2b:f2:49:91:11:ab:ba:d0:81:b2:90:85:2e: 66:77:5d:8f:37:1a:7a:3e:04:92:68:29:4d:7c:69: b8:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:7A:8C:D0:E1:0E:80:F0:9D:95:A0:C7:F3:55:3B:03:8E:8C:A6:D5 X509v3 Authority Key Identifier: keyid:5E:B2:E5:DA:D0:C6:99:6D:0A:80:A7:B9:0F:3A:2A:A6:0F:B1:A7:AC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/e30de84b-400a-4fd1-ab8a-e7616e245b49/0/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c99265ef-22a9-4100-a23d-51a9d9feeb7d/4/5EB2E5DAD0C6996D0A80A7B90F3A2AA60FB1A7AC.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 02:48:47:96:ec:25:39:b3:4f:30:a4:b1:6c:e6:ab:38:69:6c: 4f:81:08:30:be:4f:22:0d:5a:e5:0a:4e:bd:d7:36:e4:97:ca: 9b:50:f8:88:56:87:c0:53:38:96:c1:35:b9:8c:6f:fe:68:1d: 9a:ca:86:7b:a5:68:21:4f:b0:61:4b:d5:1e:b6:56:c0:df:d4: e3:9a:86:4d:f5:e0:30:ee:4b:62:fd:10:18:91:c5:8e:1f:9b: 74:7e:fa:13:9a:77:b9:78:67:40:d3:61:a2:57:f7:3d:03:c2: 1b:a7:8d:5f:f7:1c:a3:26:45:fd:ab:1e:b3:57:85:06:62:7a: a3:bb:40:78:de:46:1f:21:0f:32:8b:c1:47:cc:73:fa:63:26: 4b:e2:6d:53:46:0e:31:da:e6:64:28:f0:69:84:ac:25:4c:74: ed:c3:42:35:c6:2b:ea:db:3d:46:93:e8:c1:18:4b:eb:5e:19: 1d:57:20:19:8a:6b:4f:64:f5:c3:0c:d7:1a:c6:05:d1:95:11: 6f:4d:76:7b:58:86:96:1e:8b:a1:31:b7:95:62:f8:48:d6:7c: 2f:4b:3f:56:8f:5f:d0:22:aa:fc:96:c9:74:33:5d:ba:98:6e: a7:a5:59:13:59:7e:51:b5:2c:4c:ba:3f:2c:c6:23:02:aa:b9: 6e:69:4d:a2 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUOjTBNtN4xeml2BbemAx77MWFix0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYw RkIxQTdBQzAeFw0yNDExMjUxMzA3MDRaFw0yNDExMjYxNzA4MDRaMDMxMTAvBgNV BAMTKEI1N0E4Q0QwRTEwRTgwRjA5RDk1QTBDN0YzNTUzQjAzOEU4Q0E2RDUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS2WVeq4xDJhv0+/tLzyDIBbGb l05yKRK9CnA/tzKPFKgIlGUwLXISC2ZefQtTCCOCXnQ71oviPI37twLO3WZlMthK tHdv6uPvMqK2vI+gipkp9SHg09t+2iNsMRLUH0oFWQ5BphGmmdyJs+BHw0e8e0AR fPJbFQLThT/6rbMDkdjhiYnvNGzTpbF/2hCvm8TpA05bnCNrX1QBMoTbfOBw/aFW tZ70yH+q1mzSc3i2jvpy2ATPPFuaYBOTmMQP7PThq9r4r1YUJA9veuFE5D98J/qg cP4SwMacLQ19HsexQq1MK/JJkRGrutCBspCFLmZ3XY83Gno+BJJoKU18abjtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtXqM0OEOgPCdlaDH81U7A46MptUwHwYDVR0j BBgwFoAUXrLl2tDGmW0KgKe5Dzoqpg+xp6wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzk5MjY1ZWYtMjJhOS00MTAwLWEyM2QtNTFhOWQ5ZmVl YjdkLzQvNUVCMkU1REFEMEM2OTk2RDBBODBBN0I5MEYzQTJBQTYwRkIxQTdBQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9lMzBkZTg0Yi00MDBhLTRm ZDEtYWI4YS1lNzYxNmUyNDViNDkvMC81RUIyRTVEQUQwQzY5OTZEMEE4MEE3Qjkw RjNBMkFBNjBGQjFBN0FDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2M5OTI2NWVmLTIyYTktNDEwMC1hMjNkLTUxYTlkOWZlZWI3ZC80LzVFQjJFNURB RDBDNjk5NkQwQTgwQTdCOTBGM0EyQUE2MEZCMUE3QUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQACSEeW 7CU5s08wpLFs5qs4aWxPgQgwvk8iDVrlCk691zbkl8qbUPiIVofAUziWwTW5jG/+ aB2ayoZ7pWghT7BhS9UetlbA39TjmoZN9eAw7kti/RAYkcWOH5t0fvoTmne5eGdA 02GiV/c9A8Ibp41f9xyjJkX9qx6zV4UGYnqju0B43kYfIQ8yi8FHzHP6YyZL4m1T Rg4x2uZkKPBphKwlTHTtw0I1xivq2z1Gk+jBGEvrXhkdVyAZimtPZPXDDNcaxgXR lRFvTXZ7WIaWHouhMbeVYvhI1nwvSz9Wj1/QIqr8lsl0M126mG6npVkTWX5RtSxM uj8sxiMCqrluaU2i -----END CERTIFICATE-----Generated at Mon Nov 25 16:44:09 2024 by rpki-client on console-fra.rpki-client.org