$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft File: DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft (raw, json) Hash identifier: VqEhP9EcA4Tr31SOZLZJ3vttEf1+LorKmyrwU6/emXo= Subject key identifier: AE:A3:3B:10:1B:18:56:06:93:07:B0:CB:20:45:CE:0B:79:08:7D:CF Authority key identifier: DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03 Certificate issuer: /CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403 Certificate serial: 7FCAED90569A42021D4C725FA194EC5984FF1468 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft Manifest number: 20 Signing time: Thu 19 Sep 2024 12:03:00 +0000 Manifest this update: Thu 19 Sep 2024 11:58:00 +0000 Manifest next update: Fri 20 Sep 2024 14:09:00 +0000 Files and hashes: 1: DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl (hash: nZFdo6bJxAT02Wj4DiMsdvMKT30hSD5AGVhJst+dyks=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.crl rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.mft rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/D18207466AB0A7D7D1EF3C7CD02E80BED58340BC.cer rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.crl rsync://rsync.paas.rpki.ripe.net/repository/73b8ec01-8ba5-479f-a229-0ab70e4815bb/0/42E508FBA8960F48071B119ACCBF57BDBF3A8057.mft rsync://rpki.ripe.net/repository/DEFAULT/QuUI-6iWD0gHGxGazL9Xvb86gFc.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 20 Sep 2024 01:28:33 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7f:ca:ed:90:56:9a:42:02:1d:4c:72:5f:a1:94:ec:59:84:ff:14:68 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DD52D18E6EE12FA0659CA4CA9501A176AF074403 Validity Not Before: Sep 19 11:58:00 2024 GMT Not After : Sep 20 14:09:00 2024 GMT Subject: CN=AEA33B101B1856069307B0CB2045CE0B79087DCF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:d3:ae:16:04:3f:a1:0c:a1:fc:21:22:3e:28: ef:03:d9:c0:dd:d2:7e:86:c3:3f:1a:56:02:61:50: 0b:c9:aa:2f:a6:56:6c:06:04:b7:c5:ed:61:61:0d: cd:e4:42:47:bd:a3:64:d8:fd:0a:9c:d1:93:d8:d7: 7a:51:a8:b5:2b:a9:04:c9:44:5f:7f:88:16:9c:2b: 80:df:a8:e5:3d:08:25:d7:4d:96:66:c2:25:51:cd: 33:57:bc:c3:d6:fd:3d:d1:ba:6e:4d:d2:e5:ec:7c: 23:06:dd:52:f8:23:fb:8a:2d:d2:7a:ad:02:d3:8d: d2:bf:d6:67:e8:58:4f:02:55:ee:a3:04:e8:17:6b: 10:e7:7e:91:b2:5b:c6:09:29:1d:ca:34:0b:ea:c9: e1:99:1f:d4:3f:50:c6:c5:97:85:ee:c3:08:8c:fc: 9a:05:3c:42:f6:4d:4f:77:94:ec:b0:2f:46:99:9e: 13:63:21:ef:6d:79:76:54:35:72:1e:8d:07:ce:0e: cd:58:f3:cd:ec:aa:ec:2f:5e:d4:7d:ed:0c:5f:79: 19:79:7c:24:20:c0:4c:8f:e2:ee:e8:13:26:44:7a: 2b:9e:94:4b:e3:8e:a7:09:3d:38:14:67:12:3e:1d: 15:60:a8:7f:28:88:75:d0:a1:5c:15:56:97:28:fe: eb:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: AE:A3:3B:10:1B:18:56:06:93:07:B0:CB:20:45:CE:0B:79:08:7D:CF X509v3 Authority Key Identifier: keyid:DD:52:D1:8E:6E:E1:2F:A0:65:9C:A4:CA:95:01:A1:76:AF:07:44:03 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/0c70401c-7f41-4a6b-9434-cc80dca093e6/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d869b33b-5122-4ab8-bb59-98022d6391a0/2/DD52D18E6EE12FA0659CA4CA9501A176AF074403.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:17:28:8f:77:2e:6a:2b:aa:ac:bf:b4:fd:83:fe:c7:49:48: 33:42:19:51:df:60:8b:8a:61:45:12:d7:73:88:44:06:2f:8a: 0a:6f:a0:7d:a6:70:1e:e5:41:a6:54:39:18:75:5f:2a:15:a9: 97:2a:36:59:9c:83:07:d7:78:12:f5:03:40:dd:7f:72:46:3d: 88:d5:55:13:b6:9a:a6:8b:80:73:19:2d:55:d5:51:32:83:6a: 3c:a0:72:ad:46:08:ea:20:cc:2e:3a:91:8e:1a:ea:cd:e9:e1: 0e:06:69:bf:5a:75:c3:34:7d:8c:29:cb:9b:ba:53:dc:85:4e: fc:f8:4f:35:ab:55:37:e7:a6:8c:80:57:33:59:cb:8e:b0:57: 13:34:82:83:20:a4:8b:bc:2e:0a:a2:ae:1f:ee:a1:95:fd:d2: 72:ce:9a:b5:b3:27:47:56:56:38:af:15:bd:c6:6f:a1:d3:03: f8:69:4f:62:1a:7b:47:2e:42:32:7b:ba:91:c8:e5:cf:2b:71: 9b:e0:02:af:b9:ab:54:31:96:7a:6e:79:7a:c7:d1:f9:f0:ee: 25:4f:cf:2d:2b:18:dd:b8:cf:22:86:6f:a4:54:29:5e:24:7c: a0:e2:7d:25:1b:19:2e:3b:e5:9f:20:2e:51:75:b9:57:90:e5: b8:27:ed:9a -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUf8rtkFaaQgIdTHJfoZTsWYT/FGgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREQ1MkQxOEU2RUUxMkZBMDY1OUNBNENBOTUwMUExNzZB RjA3NDQwMzAeFw0yNDA5MTkxMTU4MDBaFw0yNDA5MjAxNDA5MDBaMDMxMTAvBgNV BAMTKEFFQTMzQjEwMUIxODU2MDY5MzA3QjBDQjIwNDVDRTBCNzkwODdEQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQ064WBD+hDKH8ISI+KO8D2cDd 0n6Gwz8aVgJhUAvJqi+mVmwGBLfF7WFhDc3kQke9o2TY/Qqc0ZPY13pRqLUrqQTJ RF9/iBacK4DfqOU9CCXXTZZmwiVRzTNXvMPW/T3Rum5N0uXsfCMG3VL4I/uKLdJ6 rQLTjdK/1mfoWE8CVe6jBOgXaxDnfpGyW8YJKR3KNAvqyeGZH9Q/UMbFl4XuwwiM /JoFPEL2TU93lOywL0aZnhNjIe9teXZUNXIejQfODs1Y883squwvXtR97QxfeRl5 fCQgwEyP4u7oEyZEeiuelEvjjqcJPTgUZxI+HRVgqH8oiHXQoVwVVpco/utJAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUrqM7EBsYVgaTB7DLIEXOC3kIfc8wHwYDVR0j BBgwFoAU3VLRjm7hL6BlnKTKlQGhdq8HRAMwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDg2OWIzM2ItNTEyMi00YWI4LWJiNTktOTgwMjJkNjM5 MWEwLzIvREQ1MkQxOEU2RUUxMkZBMDY1OUNBNENBOTUwMUExNzZBRjA3NDQwMy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8wYzcwNDAxYy03ZjQxLTRh NmItOTQzNC1jYzgwZGNhMDkzZTYvMi9ERDUyRDE4RTZFRTEyRkEwNjU5Q0E0Q0E5 NTAxQTE3NkFGMDc0NDAzLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2Q4NjliMzNiLTUxMjItNGFiOC1iYjU5LTk4MDIyZDYzOTFhMC8yL0RENTJEMThF NkVFMTJGQTA2NTlDQTRDQTk1MDFBMTc2QUYwNzQ0MDMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4FyiP dy5qK6qsv7T9g/7HSUgzQhlR32CLimFFEtdziEQGL4oKb6B9pnAe5UGmVDkYdV8q FamXKjZZnIMH13gS9QNA3X9yRj2I1VUTtpqmi4BzGS1V1VEyg2o8oHKtRgjqIMwu OpGOGurN6eEOBmm/WnXDNH2MKcubulPchU78+E81q1U356aMgFczWcuOsFcTNIKD IKSLvC4Koq4f7qGV/dJyzpq1sydHVlY4rxW9xm+h0wP4aU9iGntHLkIye7qRyOXP K3Gb4AKvuatUMZZ6bnl6x9H58O4lT88tKxjduM8ihm+kVCleJHyg4n0lGxkuO+Wf IC5RdblXkOW4J+2a -----END CERTIFICATE-----Generated at Thu Sep 19 17:01:37 2024 by rpki-client on console-ams.rpki-client.org