$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft File: CC2B47BFD397E66019550C83BF1B56353173A0CB.mft (raw, json) Hash identifier: 05DFZjzmwdUZ7bAtkCNtur7rvn2dNbGTyY+xXf/2NM0= Subject key identifier: ED:7A:A1:BF:8B:7E:38:C0:1D:1C:75:74:52:7C:4C:C7:00:C3:26:D3 Authority key identifier: CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB Certificate issuer: /CN=CC2B47BFD397E66019550C83BF1B56353173A0CB Certificate serial: 4778060AB1E0216FD45250C0D71AD757BB00CC8B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft Manifest number: 91 Signing time: Mon 18 Nov 2024 09:28:50 +0000 Manifest this update: Mon 18 Nov 2024 09:23:50 +0000 Manifest next update: Tue 19 Nov 2024 12:56:50 +0000 Files and hashes: 1: 326130663a383563313a3333313a3a2f34382d3438203d3e20323135383835.roa (hash: PERd4VmCi6mzxYUGdk3Lcmsp5CKw9IJNVRR0bLNOLMg=) 2: CC2B47BFD397E66019550C83BF1B56353173A0CB.crl (hash: 3DlkW7qqTFONBksb0adzbFVXaj65s6RyfRy5+czADa0=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.crl rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.crl rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/C4CE7D8902405BA4598F84B6A41C27D722834B1C.mft rsync://rpki.ripe.net/repository/DEFAULT/xM59iQJAW6RZj4S2pBwn1yKDSxw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 19 Nov 2024 08:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:78:06:0a:b1:e0:21:6f:d4:52:50:c0:d7:1a:d7:57:bb:00:cc:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=CC2B47BFD397E66019550C83BF1B56353173A0CB Validity Not Before: Nov 18 09:23:50 2024 GMT Not After : Nov 19 12:56:50 2024 GMT Subject: CN=ED7AA1BF8B7E38C01D1C7574527C4CC700C326D3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:da:ac:ef:aa:e2:3b:cf:f5:7a:b8:6f:91:82: 02:06:fe:8e:21:af:06:d3:1b:0b:d2:63:41:12:0c: e6:1e:f0:45:79:05:1d:3c:9b:1c:1a:c1:bf:73:d0: 6f:63:30:36:95:50:fe:f9:f6:b8:c7:52:f8:76:82: 74:f8:8c:b2:4a:8f:b8:d0:b9:63:d4:fe:68:31:7d: a3:8d:d7:04:cb:ca:8b:73:1c:a9:3b:18:7f:16:9e: 7b:c4:08:c5:35:ba:c1:52:de:67:28:91:a6:c9:18: dc:ea:e0:a4:77:44:11:3e:c9:62:75:4f:4e:11:13: 66:41:0b:f3:67:25:4b:1d:38:34:72:08:db:6a:5d: 47:a8:03:be:47:ee:9a:4c:de:9b:af:c1:0c:12:94: bf:23:f9:f4:10:9c:44:fe:21:e8:0b:47:e7:8d:79: 6b:59:da:5b:a2:1e:64:5b:49:6c:50:f5:0a:af:a3: 92:3e:8f:04:31:f2:f6:96:7a:fe:70:65:24:e8:3c: e4:ba:34:0e:ad:69:a4:ba:91:3d:47:5a:a9:5b:2f: 5a:e6:2e:1b:30:af:2d:bd:13:73:5c:f7:36:a3:01: 4d:f8:bb:7a:03:48:16:b2:76:c0:90:81:69:27:b7: c2:00:ae:a7:27:12:d0:5d:7c:8b:41:6f:5b:7a:82: 2b:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: ED:7A:A1:BF:8B:7E:38:C0:1D:1C:75:74:52:7C:4C:C7:00:C3:26:D3 X509v3 Authority Key Identifier: keyid:CC:2B:47:BF:D3:97:E6:60:19:55:0C:83:BF:1B:56:35:31:73:A0:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/CC2B47BFD397E66019550C83BF1B56353173A0CB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d3cc54ec-b5e4-4034-9a1e-67acd205bbb3/8/CC2B47BFD397E66019550C83BF1B56353173A0CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:4b:38:ff:e4:56:0e:1b:3d:48:15:cd:63:f4:85:38:c2:d5: 95:9d:0b:0f:7a:92:c0:49:1b:31:07:0d:37:33:4e:a4:68:a2: 62:de:5a:5f:1e:d3:9f:59:74:0b:92:06:e0:78:c0:79:39:f0: 53:9c:a2:83:4e:2c:2d:35:6e:f3:c9:5f:b6:28:c7:1e:fe:97: 40:eb:2b:b6:ca:49:e3:0b:7b:e9:cc:f9:aa:f9:b9:7f:b9:56: 1e:94:df:d2:46:72:b0:87:f4:3a:3c:bc:00:ed:b6:e9:ab:4f: 2b:08:1d:7a:2f:df:74:c8:0b:b9:56:4e:9d:1e:0e:0f:f5:9f: 17:85:cc:bf:9a:ef:99:3a:53:00:96:ac:e3:e7:f4:99:0a:48: d1:8b:87:d6:44:16:33:10:7f:cf:5c:16:fa:5f:47:fc:e1:a4: 78:3d:bf:fa:03:bf:3d:0f:8e:db:2f:85:7b:e6:e0:06:66:9b: d4:dc:3a:5e:32:8f:4e:e8:cf:4d:fa:45:51:b6:fa:78:49:fe: 77:4a:7b:82:a3:3d:6f:9d:75:62:ad:fb:af:47:83:26:e8:f5: fb:72:d7:fa:6b:0a:3c:aa:ee:db:7f:ed:1e:05:22:da:4e:7a: 6e:bd:56:e5:db:66:e0:0e:ca:9f:cd:4d:35:4a:f7:6f:57:ce: fd:c1:4e:d3 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUR3gGCrHgIW/UUlDA1xrXV7sAzIswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQ0MyQjQ3QkZEMzk3RTY2MDE5NTUwQzgzQkYxQjU2MzUz MTczQTBDQjAeFw0yNDExMTgwOTIzNTBaFw0yNDExMTkxMjU2NTBaMDMxMTAvBgNV BAMTKEVEN0FBMUJGOEI3RTM4QzAxRDFDNzU3NDUyN0M0Q0M3MDBDMzI2RDMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCk2qzvquI7z/V6uG+RggIG/o4h rwbTGwvSY0ESDOYe8EV5BR08mxwawb9z0G9jMDaVUP759rjHUvh2gnT4jLJKj7jQ uWPU/mgxfaON1wTLyotzHKk7GH8WnnvECMU1usFS3mcokabJGNzq4KR3RBE+yWJ1 T04RE2ZBC/NnJUsdODRyCNtqXUeoA75H7ppM3puvwQwSlL8j+fQQnET+IegLR+eN eWtZ2luiHmRbSWxQ9Qqvo5I+jwQx8vaWev5wZSToPOS6NA6taaS6kT1HWqlbL1rm Lhswry29E3Nc9zajAU34u3oDSBaydsCQgWknt8IArqcnEtBdfItBb1t6gisXAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQU7Xqhv4t+OMAdHHV0UnxMxwDDJtMwHwYDVR0j BBgwFoAUzCtHv9OX5mAZVQyDvxtWNTFzoMswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDNjYzU0ZWMtYjVlNC00MDM0LTlhMWUtNjdhY2QyMDVi YmIzLzgvQ0MyQjQ3QkZEMzk3RTY2MDE5NTUwQzgzQkYxQjU2MzUzMTczQTBDQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC9DQzJCNDdCRkQzOTdFNjYwMTk1NTBDODNC RjFCNTYzNTMxNzNBMENCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QzY2M1NGVjLWI1ZTQtNDAzNC05YTFlLTY3YWNkMjA1YmJiMy84L0NDMkI0N0JG RDM5N0U2NjAxOTU1MEM4M0JGMUI1NjM1MzE3M0EwQ0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzSzj/ 5FYOGz1IFc1j9IU4wtWVnQsPepLASRsxBw03M06kaKJi3lpfHtOfWXQLkgbgeMB5 OfBTnKKDTiwtNW7zyV+2KMce/pdA6yu2yknjC3vpzPmq+bl/uVYelN/SRnKwh/Q6 PLwA7bbpq08rCB16L990yAu5Vk6dHg4P9Z8Xhcy/mu+ZOlMAlqzj5/SZCkjRi4fW RBYzEH/PXBb6X0f84aR4Pb/6A789D47bL4V75uAGZpvU3DpeMo9O6M9N+kVRtvp4 Sf53SnuCoz1vnXVirfuvR4Mm6PX7ctf6awo8qu7bf+0eBSLaTnpuvVbl22bgDsqf zU01SvdvV879wU7T -----END CERTIFICATE-----Generated at Mon Nov 18 12:15:53 2024 by rpki-client on console-fra.rpki-client.org