$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: AiNk+xlpGlzR56vl9pntWXZ+vFxz1uY5ngUAtcD46to= Subject key identifier: 1F:99:A5:57:24:B4:26:C5:06:AC:83:70:FB:66:5E:51:53:B8:E5:D9 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 63E01CC162A4F2FE787F407C80FE6468039BB732 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 86 Signing time: Tue 25 Jun 2024 02:09:07 +0000 Manifest this update: Tue 25 Jun 2024 02:04:07 +0000 Manifest next update: Wed 26 Jun 2024 05:35:07 +0000 Files and hashes: 1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: yxDufa7hHth2DKGsvZK3TikcYFC+ZunKsw/INGTsmeQ=) 2: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: Ev3rOkqZsW7zdikCCUw3UiV18aO5+Lr8u68oqxdnuog=) 3: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: CFN97R35TUA0q9T8HLJHqRflaLyXUQ+FQ2g6IwbOaNQ=) 4: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: kyhJCUB0IZ58PgjtuOoqKcwGy0FM5AeasKvHtiY4Nqs=) 5: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: 8VIJvS4DRohWd1Y0K8fQgnGOXF/vTHOcI7Xson0U+54=) 6: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: qH56+JuOcxy6imv53qXK3cs4RJCz3TF1ltwJcKjbU38=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.crl rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/5AE4437029659539F54F900B35E43BE06A94B37B.mft rsync://rpki.ripe.net/repository/DEFAULT/WuRDcClllTn1T5ALNeQ74GqUs3s.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 25 Jun 2024 23:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 63:e0:1c:c1:62:a4:f2:fe:78:7f:40:7c:80:fe:64:68:03:9b:b7:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Jun 25 02:04:07 2024 GMT Not After : Jun 26 05:35:07 2024 GMT Subject: CN=1F99A55724B426C506AC8370FB665E5153B8E5D9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:44:e8:82:ab:f0:cc:17:7b:62:33:87:f8:52: 3d:ba:3b:88:8f:81:07:23:5b:24:7d:d1:99:3f:a0: d9:96:a4:c3:11:72:d0:a2:aa:f5:fd:93:a2:95:38: 24:02:9e:7f:14:25:99:f0:4b:98:8f:66:e0:ff:da: 35:02:bd:56:1e:95:15:25:49:bd:48:4a:ef:3d:56: 6d:d0:02:8a:7b:eb:d3:9a:1e:e2:a3:22:82:f6:a8: 21:ba:e2:ee:fb:73:49:4a:af:85:e6:a7:bc:b8:d6: ac:0e:18:e3:2b:1f:ae:00:3b:11:e0:d0:d0:c6:3b: 60:c7:ac:c9:d1:c4:3a:af:d3:68:19:05:3e:12:42: bd:d2:77:b1:97:88:e6:27:6e:11:dd:c6:0b:ed:fa: 4e:f4:a3:99:9d:f5:58:79:a7:19:06:d2:b9:dd:fb: c5:49:04:2f:50:62:6c:5d:05:2c:b8:f7:9f:0d:ec: f3:f6:07:ba:da:c8:3c:9f:cf:24:b2:92:92:5d:63: 17:ee:80:b4:39:be:42:d0:af:e9:ba:82:6d:ee:28: 22:a0:20:4e:a5:4d:08:25:88:11:d4:c1:ee:4b:be: 9e:ec:63:75:61:f3:8f:ca:79:4a:10:f9:14:14:ba: 06:c4:f3:ff:d0:12:d8:53:f9:22:8f:bc:10:dd:2f: 35:91 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1F:99:A5:57:24:B4:26:C5:06:AC:83:70:FB:66:5E:51:53:B8:E5:D9 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc20add3-a88e-4bb2-a84d-55da2128f196/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:11:c7:30:45:ff:60:9c:23:13:bf:5f:4e:5e:1e:6b:66:9a: 1a:6f:42:66:0a:9f:26:83:55:8c:d0:eb:78:ac:82:03:27:8d: 36:19:9e:37:41:40:ad:3e:9d:52:a5:22:5e:97:f0:0d:c4:d3: 63:b0:2f:28:6d:67:2f:73:69:9c:7c:ba:de:ed:78:67:0f:6a: 56:c8:0c:2d:e9:7c:83:3d:3a:d4:26:ee:4e:31:fa:96:7c:ae: 20:a5:3e:71:38:2f:fa:8a:26:e3:4e:5a:da:17:92:aa:12:60: e2:70:d8:51:c0:8b:00:f4:67:1f:23:38:e9:00:ab:98:96:b6: e8:ee:6a:0c:02:c1:60:b7:40:31:40:88:16:94:3b:6a:78:b8: bb:4e:fc:d4:67:a9:96:2c:05:83:66:65:aa:6f:79:de:1a:33: b8:d5:59:96:6d:d6:bb:99:86:f1:a6:bd:1a:e1:a8:3a:d6:fb: cb:01:53:b2:e4:10:ce:d8:d4:35:77:43:70:81:8b:f4:c0:7c: f2:27:c6:a7:4a:08:62:3f:ee:b6:4a:94:19:c9:64:85:39:e6: d4:98:e2:a8:ea:42:a6:fc:3f:e6:d6:69:51:2b:5d:32:2f:aa: 75:f2:d6:ef:18:1e:45:af:a3:2c:bc:bd:1e:d1:af:d0:e7:6f: 1c:89:57:91 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY+AcwWKk8v54f0B8gP5kaAObtzIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNDA2MjUwMjA0MDdaFw0yNDA2MjYwNTM1MDdaMDMxMTAvBgNV BAMTKDFGOTlBNTU3MjRCNDI2QzUwNkFDODM3MEZCNjY1RTUxNTNCOEU1RDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuROiCq/DMF3tiM4f4Uj26O4iP gQcjWyR90Zk/oNmWpMMRctCiqvX9k6KVOCQCnn8UJZnwS5iPZuD/2jUCvVYelRUl Sb1ISu89Vm3QAop769OaHuKjIoL2qCG64u77c0lKr4Xmp7y41qwOGOMrH64AOxHg 0NDGO2DHrMnRxDqv02gZBT4SQr3Sd7GXiOYnbhHdxgvt+k70o5md9Vh5pxkG0rnd +8VJBC9QYmxdBSy4958N7PP2B7rayDyfzySykpJdYxfugLQ5vkLQr+m6gm3uKCKg IE6lTQgliBHUwe5Lvp7sY3Vh84/KeUoQ+RQUugbE8//QEthT+SKPvBDdLzWRAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUH5mlVyS0JsUGrINw+2ZeUVO45dkwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzIwYWRkMy1hODhlLTRi YjItYTg0ZC01NWRhMjEyOGYxOTYvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrEccw Rf9gnCMTv19OXh5rZpoab0JmCp8mg1WM0Ot4rIIDJ402GZ43QUCtPp1SpSJel/AN xNNjsC8obWcvc2mcfLre7XhnD2pWyAwt6XyDPTrUJu5OMfqWfK4gpT5xOC/6iibj TlraF5KqEmDicNhRwIsA9GcfIzjpAKuYlrbo7moMAsFgt0AxQIgWlDtqeLi7TvzU Z6mWLAWDZmWqb3neGjO41VmWbda7mYbxpr0a4ag61vvLAVOy5BDO2NQ1d0NwgYv0 wHzyJ8anSghiP+62SpQZyWSFOebUmOKo6kKm/D/m1mlRK10yL6p18tbvGB5Fr6Ms vL0e0a/Q528ciVeR -----END CERTIFICATE-----Generated at Tue Jun 25 06:40:39 2024 by rpki-client on console-ams.rpki-client.org