$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft File: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft (raw, json) Hash identifier: Bztclr5DlzxoL9+4LsLXoL0LyoBxS7NnnC8GY1a57n8= Subject key identifier: 3B:B8:98:BE:57:DC:61:53:A8:C1:37:9F:76:9D:F1:E3:A4:B4:ED:1D Authority key identifier: 9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C Certificate issuer: /CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C Certificate serial: 7EF14EC94DA36239C07A3A9821EE388963905043 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft Manifest number: B7 Signing time: Mon 04 Nov 2024 08:58:18 +0000 Manifest this update: Mon 04 Nov 2024 08:53:18 +0000 Manifest next update: Tue 05 Nov 2024 12:41:18 +0000 Files and hashes: 1: 9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl (hash: Vq1Jp/Zd+ukBo0E8yGp2/IRmWviyzSHPYoN+TU5grJM=) 2: 326130613a363034343a626130323a3a2f34372d3438203d3e20323134373233.roa (hash: TlfUIckGRAagg669M3xYDX52RxzXWa4zmUTL/zfVSIE=) 3: 326130613a363034343a626130303a3a2f34302d3430203d3e20323134373233.roa (hash: ISxPaIAr0w+jmJbBaEWXIEHSE+CHx0GTfYgpjz88GTc=) 4: 326130613a363034343a626130303a3a2f34382d3438203d3e20323134373233.roa (hash: sgJS+9fXpP0N1ynvWikQwztRvYYPuX1aHauJ8WKg3M4=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 04 Nov 2024 23:22:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:f1:4e:c9:4d:a3:62:39:c0:7a:3a:98:21:ee:38:89:63:90:50:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9D23854B1F61BA33A429367BF0A898D4E4A9A24C Validity Not Before: Nov 4 08:53:18 2024 GMT Not After : Nov 5 12:41:18 2024 GMT Subject: CN=3BB898BE57DC6153A8C1379F769DF1E3A4B4ED1D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:4f:a1:9b:46:57:f0:c3:b9:66:ed:19:2e:73: 1c:53:0b:f5:74:4b:44:f5:e1:3c:63:3a:53:a2:0c: 19:7f:6c:13:d0:bd:cc:79:d4:6e:29:21:23:e3:d6: 5f:c5:63:29:66:5c:91:8c:a0:eb:eb:14:f6:31:b8: de:81:40:47:20:68:4f:15:24:78:e9:9b:fb:6c:0a: 26:f0:12:06:3e:00:62:03:e2:37:62:9d:76:f5:88: 17:c2:41:cd:06:ed:10:24:26:03:9d:df:ca:3c:19: 93:1a:5e:25:0a:7d:95:59:64:39:6b:bc:e0:82:df: ea:61:55:c9:ab:dd:89:80:7d:85:9b:ce:fb:d5:cb: f4:e6:57:9f:7f:0d:bc:e7:3e:84:2e:48:7a:65:a4: 22:8a:18:35:7b:8f:23:21:5f:45:dd:ab:52:5f:65: 4a:2c:fb:fb:ea:a0:43:98:f5:18:25:55:9f:35:81: 20:41:97:f1:94:b2:74:46:e7:bb:f7:58:19:17:c9: 59:37:03:61:3e:48:20:be:02:45:e0:86:8a:99:9a: 38:77:90:a8:24:a0:69:26:38:49:b7:0a:61:4a:ef: 75:6e:80:ab:61:b8:83:dd:4e:19:02:c8:02:2e:f9: 1c:9e:6e:06:2c:1b:96:9b:9d:f9:0f:4e:17:78:19: 4f:a1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3B:B8:98:BE:57:DC:61:53:A8:C1:37:9F:76:9D:F1:E3:A4:B4:ED:1D X509v3 Authority Key Identifier: keyid:9D:23:85:4B:1F:61:BA:33:A4:29:36:7B:F0:A8:98:D4:E4:A9:A2:4C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d7e4592e-23c0-4ccc-94da-6c95807f83e7/1/9D23854B1F61BA33A429367BF0A898D4E4A9A24C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 72:ea:22:e3:69:a9:52:d8:c1:b7:84:13:3d:73:8f:f8:5e:50: a3:80:e3:2c:2c:d7:51:94:22:c0:02:b6:92:c9:8b:2b:c3:c1: b4:5e:0d:63:ce:72:ed:7a:ec:66:5d:1c:7d:20:7c:c8:33:a1: 57:ad:d6:be:00:1a:41:b2:15:5d:4a:51:76:90:fb:88:83:7c: 0e:c5:74:74:7e:4c:54:55:ce:6e:f5:47:45:ec:fc:a1:a7:41: 26:12:35:a5:a3:33:c7:cc:e7:99:24:2c:03:cf:24:a6:c0:50: 4b:cd:5d:86:97:5e:0b:49:7f:41:8f:49:04:f6:ff:9f:e4:a2: a5:c7:c5:17:5a:4b:71:c5:8c:e7:1f:f3:c6:46:89:8b:c9:8f: 2a:d3:a5:b9:50:27:57:4e:aa:33:62:a6:bc:3f:e0:de:2b:ca: a2:6f:81:32:e8:e8:66:99:79:03:86:ae:09:3c:66:65:eb:cd: db:70:ea:97:22:63:67:99:02:ae:29:71:86:26:ae:2c:57:dc: 3d:61:9a:63:e3:78:09:d4:0c:f5:6b:75:b5:31:bd:92:c3:7e: dd:2a:f2:1f:8c:9f:fd:0a:56:4e:80:93:5a:f9:d6:eb:b8:12: 50:79:3d:0a:66:36:5e:4d:17:51:6c:fb:ef:a4:1a:87:76:ac: 13:77:d8:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUfvFOyU2jYjnAejqYIe44iWOQUEMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOUQyMzg1NEIxRjYxQkEzM0E0MjkzNjdCRjBBODk4RDRF NEE5QTI0QzAeFw0yNDExMDQwODUzMThaFw0yNDExMDUxMjQxMThaMDMxMTAvBgNV BAMTKDNCQjg5OEJFNTdEQzYxNTNBOEMxMzc5Rjc2OURGMUUzQTRCNEVEMUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcT6GbRlfww7lm7RkucxxTC/V0 S0T14TxjOlOiDBl/bBPQvcx51G4pISPj1l/FYylmXJGMoOvrFPYxuN6BQEcgaE8V JHjpm/tsCibwEgY+AGID4jdinXb1iBfCQc0G7RAkJgOd38o8GZMaXiUKfZVZZDlr vOCC3+phVcmr3YmAfYWbzvvVy/TmV59/DbznPoQuSHplpCKKGDV7jyMhX0Xdq1Jf ZUos+/vqoEOY9RglVZ81gSBBl/GUsnRG57v3WBkXyVk3A2E+SCC+AkXghoqZmjh3 kKgkoGkmOEm3CmFK73VugKthuIPdThkCyAIu+RyebgYsG5abnfkPThd4GU+hAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUO7iYvlfcYVOowTefdp3x46S07R0wHwYDVR0j BBgwFoAUnSOFSx9hujOkKTZ78KiY1OSpokwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDdlNDU5MmUtMjNjMC00Y2NjLTk0ZGEtNmM5NTgwN2Y4 M2U3LzEvOUQyMzg1NEIxRjYxQkEzM0E0MjkzNjdCRjBBODk4RDRFNEE5QTI0Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC85RDIzODU0QjFGNjFCQTMzQTQyOTM2N0JG MEE4OThENEU0QTlBMjRDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q3ZTQ1OTJlLTIzYzAtNGNjYy05NGRhLTZjOTU4MDdmODNlNy8xLzlEMjM4NTRC MUY2MUJBMzNBNDI5MzY3QkYwQTg5OEQ0RTRBOUEyNEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBy6iLj aalS2MG3hBM9c4/4XlCjgOMsLNdRlCLAAraSyYsrw8G0Xg1jznLteuxmXRx9IHzI M6FXrda+ABpBshVdSlF2kPuIg3wOxXR0fkxUVc5u9UdF7Pyhp0EmEjWlozPHzOeZ JCwDzySmwFBLzV2Gl14LSX9Bj0kE9v+f5KKlx8UXWktxxYznH/PGRomLyY8q06W5 UCdXTqozYqa8P+DeK8qib4Ey6OhmmXkDhq4JPGZl683bcOqXImNnmQKuKXGGJq4s V9w9YZpj43gJ1Az1a3W1Mb2Sw37dKvIfjJ/9ClZOgJNa+dbruBJQeT0KZjZeTRdR bPvvpBqHdqwTd9jO -----END CERTIFICATE-----Generated at Mon Nov 4 11:00:23 2024 by rpki-client on console-ams.rpki-client.org