$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft File: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft (raw, json) Hash identifier: JLIrA57zEaS3pKIFYIulti0wb4MJSI1vzVck/763LWo= Subject key identifier: BC:10:AC:C5:84:FD:14:D5:0F:12:1E:77:34:5B:70:E3:32:1A:CA:F8 Authority key identifier: D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 Certificate issuer: /CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Certificate serial: 7671E36DFDF373D5FAF546FA52A203D670BD92F6 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft Manifest number: 0228 Signing time: Sat 23 Nov 2024 01:51:27 +0000 Manifest this update: Sat 23 Nov 2024 01:46:27 +0000 Manifest next update: Sun 24 Nov 2024 04:24:27 +0000 Files and hashes: 1: 323030313a3637633a326265383a3a2f34382d3438203d3e20323032383831.roa (hash: tHiNPLeborN3MzxDKSTEAgj3ZJMcJjV9OqmGVy4ABhE=) 2: D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl (hash: +Nhinu042BoMvRViDBLdWHx7xNaBHB7zdZBJO0yD0go=) 3: AS202881.asa (hash: oQL7k/O4keLkskFx9oFZXaV8E19OLeEv+fnnXbBp7F4=) 4: 323030313a3637633a326265383a3a2f34382d3438203d3e20323035333239.roa (hash: 3wDhadYEfX0Hhy3fPxID0nH+bbX55tStnGOk9S2bMKU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 21:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 76:71:e3:6d:fd:f3:73:d5:fa:f5:46:fa:52:a2:03:d6:70:bd:92:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d642975f535f45fd9f6d8fea626bc6d24bc9d8d8 Validity Not Before: Nov 23 01:46:27 2024 GMT Not After : Nov 24 04:24:27 2024 GMT Subject: CN=BC10ACC584FD14D50F121E77345B70E3321ACAF8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:54:66:7c:d3:0b:95:d5:da:d4:65:fe:15:ea: bc:f9:58:14:fc:db:c4:10:61:f7:80:66:d8:9f:ac: 3e:f7:77:e2:03:1e:67:05:0d:97:42:6b:7a:ad:71: 8c:dc:3a:fc:6a:06:20:ff:af:66:59:b4:d7:a7:a9: bc:f8:5e:9b:65:80:ec:32:9e:b3:6d:2f:81:ff:2d: 54:59:1d:94:0f:d4:69:0c:22:8f:ae:9a:dd:4b:0f: cd:25:df:7c:40:99:0f:7b:3a:c6:6d:3d:15:59:3f: d1:5f:d3:b6:28:ba:29:bd:2a:67:7e:8c:4f:cb:9c: d9:b0:3b:fb:80:2e:e5:af:66:d3:18:0e:12:de:ee: 30:72:4a:db:88:5e:2a:9b:12:63:e3:bd:a6:0b:f4: 16:50:af:a2:02:35:6b:95:de:8d:8e:bc:59:71:b4: 5c:51:bf:20:c5:3a:38:e8:ed:20:8a:c6:a0:e0:83: cc:fb:fb:c0:a2:14:a4:20:bc:ac:f7:6c:0a:72:eb: 81:3f:dd:d9:86:8a:a0:95:5e:3b:d9:5a:68:40:35: c6:cf:17:a9:bb:54:e3:c9:c0:7d:48:a1:df:95:e3: 3d:0e:90:e3:fe:eb:96:36:d8:33:8b:dd:50:cc:d4: c1:80:0c:07:e3:4c:54:ef:93:71:0c:db:2c:a5:5a: 52:eb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:10:AC:C5:84:FD:14:D5:0F:12:1E:77:34:5B:70:E3:32:1A:CA:F8 X509v3 Authority Key Identifier: keyid:D6:42:97:5F:53:5F:45:FD:9F:6D:8F:EA:62:6B:C6:D2:4B:C9:D8:D8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1kKXX1NfRf2fbY_qYmvG0kvJ2Ng.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d697160c-acc5-4b51-bf55-10c7a6e66980/3/D642975F535F45FD9F6D8FEA626BC6D24BC9D8D8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bd:ff:63:9a:01:b4:40:54:b8:26:38:1a:cf:13:ba:67:23:50: 2f:f8:97:fb:9c:64:7d:00:b0:c1:b8:05:99:8b:d2:68:f7:4e: 5e:eb:44:7d:77:6d:b2:25:e1:81:b5:85:f6:fe:0f:8f:8b:11: 6c:94:26:ae:6e:8a:82:8b:b6:57:e1:d2:1a:e6:95:65:70:66: 49:f2:8f:85:62:63:a6:c1:03:a8:b6:f1:e6:80:27:7d:dd:5a: 9b:6f:9e:78:f6:90:a9:57:dd:35:1a:14:0d:06:47:be:7e:c3: b5:6e:66:fe:f2:f8:d6:d4:a8:4c:2c:c9:79:2d:4d:5c:6b:51: d2:6c:ac:1f:19:86:7b:be:ac:27:ac:40:84:b5:c5:74:1c:e0: 3a:dd:ed:d3:27:f5:b4:ed:d7:f2:75:62:22:41:12:76:ed:e9: f8:b3:b1:62:b0:2e:49:a2:f9:c9:91:95:b9:b2:9f:a9:87:7d: 2a:62:3d:90:f3:04:e2:f9:4e:e7:1e:a7:8a:6d:6e:11:96:2b: 11:c5:e4:18:ca:6c:d8:d9:bd:ec:b4:e7:79:99:6d:e7:e0:df: 21:24:83:fe:e1:9b:20:8d:46:68:2c:95:aa:2e:bd:d8:40:52: 36:6b:cb:38:c2:20:3d:48:e0:9c:ef:6f:4d:f7:69:92:c7:a6: a5:61:a5:79 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUdnHjbf3zc9X69Ub6UqID1nC9kvYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoZDY0Mjk3NWY1MzVmNDVmZDlmNmQ4ZmVhNjI2YmM2ZDI0 YmM5ZDhkODAeFw0yNDExMjMwMTQ2MjdaFw0yNDExMjQwNDI0MjdaMDMxMTAvBgNV BAMTKEJDMTBBQ0M1ODRGRDE0RDUwRjEyMUU3NzM0NUI3MEUzMzIxQUNBRjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDEVGZ80wuV1drUZf4V6rz5WBT8 28QQYfeAZtifrD73d+IDHmcFDZdCa3qtcYzcOvxqBiD/r2ZZtNenqbz4XptlgOwy nrNtL4H/LVRZHZQP1GkMIo+umt1LD80l33xAmQ97OsZtPRVZP9Ff07Youim9Kmd+ jE/LnNmwO/uALuWvZtMYDhLe7jByStuIXiqbEmPjvaYL9BZQr6ICNWuV3o2OvFlx tFxRvyDFOjjo7SCKxqDgg8z7+8CiFKQgvKz3bApy64E/3dmGiqCVXjvZWmhANcbP F6m7VOPJwH1Iod+V4z0OkOP+65Y22DOL3VDM1MGADAfjTFTvk3EM2yylWlLrAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUvBCsxYT9FNUPEh53NFtw4zIayvgwHwYDVR0j BBgwFoAU1kKXX1NfRf2fbY/qYmvG0kvJ2NgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDY5NzE2MGMtYWNjNS00YjUxLWJmNTUtMTBjN2E2ZTY2 OTgwLzMvRDY0Mjk3NUY1MzVGNDVGRDlGNkQ4RkVBNjI2QkM2RDI0QkM5RDhEOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzFrS1hYMU5mUmYyZmJZX3FZbXZHMGt2 SjJOZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kNjk3MTYwYy1h Y2M1LTRiNTEtYmY1NS0xMGM3YTZlNjY5ODAvMy9ENjQyOTc1RjUzNUY0NUZEOUY2 RDhGRUE2MjZCQzZEMjRCQzlEOEQ4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvf9jmgG0QFS4JjgazxO6 ZyNQL/iX+5xkfQCwwbgFmYvSaPdOXutEfXdtsiXhgbWF9v4Pj4sRbJQmrm6Kgou2 V+HSGuaVZXBmSfKPhWJjpsEDqLbx5oAnfd1am2+eePaQqVfdNRoUDQZHvn7DtW5m /vL41tSoTCzJeS1NXGtR0mysHxmGe76sJ6xAhLXFdBzgOt3t0yf1tO3X8nViIkES du3p+LOxYrAuSaL5yZGVubKfqYd9KmI9kPME4vlO5x6nim1uEZYrEcXkGMps2Nm9 7LTneZlt5+DfISSD/uGbII1GaCyVqi692EBSNmvLOMIgPUjgnO9vTfdpksempWGl eQ== -----END CERTIFICATE-----Generated at Sat Nov 23 04:49:09 2024 by rpki-client on console-ams.rpki-client.org