$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft File: 47E9555355C6B007AACD5D45BF41E3383E991641.mft (raw, json) Hash identifier: I7aCWvJTBMPUwE7uuEvcYIuv+e4mH2NSpDvZrttMmuo= Subject key identifier: 11:F2:FC:44:23:9D:5E:55:69:72:9D:F8:1A:17:95:E0:D2:34:79:1F Authority key identifier: 47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 Certificate issuer: /CN=47E9555355C6B007AACD5D45BF41E3383E991641 Certificate serial: 1BC6F72CF694C37B1429BDA1785480A44A4A6CAF Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft Manifest number: 02C1 Signing time: Thu 21 Nov 2024 23:49:51 +0000 Manifest this update: Thu 21 Nov 2024 23:44:51 +0000 Manifest next update: Sat 23 Nov 2024 01:36:51 +0000 Files and hashes: 1: 47E9555355C6B007AACD5D45BF41E3383E991641.crl (hash: 4jhninkwmwtbk1b4h9CS6NGc/pSbWiDUJpMuRRBWaQE=) 2: 3139382e3138302e3135312e302f32342d3234203d3e20313939353138.roa (hash: 1+lMdnjYdbL4iWHh6STKSM8k3Z78ot5HK73iYhaXx98=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 06:51:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:c6:f7:2c:f6:94:c3:7b:14:29:bd:a1:78:54:80:a4:4a:4a:6c:af Signature Algorithm: sha256WithRSAEncryption Issuer: CN=47E9555355C6B007AACD5D45BF41E3383E991641 Validity Not Before: Nov 21 23:44:51 2024 GMT Not After : Nov 23 01:36:51 2024 GMT Subject: CN=11F2FC44239D5E5569729DF81A1795E0D234791F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:32:6c:26:d6:56:67:10:18:54:1a:fc:e2:d6: e3:e8:76:06:49:c0:a7:71:96:99:7b:32:71:42:45: 71:32:3e:86:f2:12:d5:e3:f5:45:4f:0f:5a:3a:c6: 8d:d9:14:eb:ed:39:4a:bc:1b:c6:bb:42:f6:ab:bd: 0d:3f:30:33:8a:67:ba:b3:48:b1:b3:2e:8f:1e:51: fa:c0:73:e3:de:df:a5:71:bc:66:13:1d:55:d9:e0: cf:77:58:62:e0:13:ba:df:1d:69:3c:5d:59:06:1b: eb:dd:ca:69:35:eb:73:e6:e5:dc:81:f0:d5:ff:5e: 6d:7e:7d:21:92:de:10:fa:d3:bb:ec:74:be:b9:d9: 2c:d3:9b:af:14:e0:cd:ae:53:21:55:4e:a1:b4:16: 86:24:34:87:33:8b:67:be:97:32:59:58:23:0b:f8: 3a:63:84:a1:94:9a:a2:8e:6d:50:33:34:24:41:a6: 35:92:7c:76:41:1f:09:66:6c:f9:b5:5f:0f:1b:99: 18:72:22:48:86:5e:c6:b6:80:5e:15:19:7e:89:59: 98:7d:7a:f2:e8:20:21:71:9f:a2:da:54:51:35:68: 5b:7a:bf:f7:a9:47:45:32:07:8d:76:91:89:43:db: f9:3f:9f:1f:58:95:0e:63:01:c8:a5:6c:61:ab:8b: 34:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 11:F2:FC:44:23:9D:5E:55:69:72:9D:F8:1A:17:95:E0:D2:34:79:1F X509v3 Authority Key Identifier: keyid:47:E9:55:53:55:C6:B0:07:AA:CD:5D:45:BF:41:E3:38:3E:99:16:41 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/R-lVU1XGsAeqzV1Fv0HjOD6ZFkE.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/4/47E9555355C6B007AACD5D45BF41E3383E991641.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:ef:ad:c1:fd:b7:4a:41:c2:c4:4c:c2:68:95:c2:a3:b5:73: d3:64:48:66:c6:2b:58:4f:80:b9:b5:b5:d7:08:36:6c:e6:b6: e8:4a:03:52:fd:46:d6:70:ba:09:0e:a7:f0:7c:2a:3d:2e:82: 1f:c9:e8:1f:6e:79:b5:82:72:4d:a4:f6:61:7d:1c:41:cc:c3: 94:81:22:bc:39:8c:53:40:16:6f:2b:89:4b:12:e5:b3:79:63: fe:25:67:5c:5c:48:a0:aa:8a:11:89:f4:cc:6b:8d:c0:ed:cc: a5:2b:85:28:ea:43:cc:2c:5d:83:8d:48:48:23:17:a0:83:28: 39:34:4d:a5:df:ed:38:c5:11:06:bb:47:05:30:cb:68:f1:c8: 7d:bc:0f:1f:75:0d:5f:9a:f8:d6:46:e6:a0:dc:72:96:27:9c: 9f:09:c4:26:eb:02:17:59:23:01:3a:5d:41:31:1e:1b:95:b7: fe:23:42:32:fa:1e:70:87:70:c3:dd:84:69:e7:33:3f:67:5c: 32:85:28:9c:67:50:47:94:f6:1a:e9:fd:04:81:88:4b:5e:b7: 13:c7:0b:6d:67:9f:3e:08:e3:cb:10:9c:76:d6:ad:2a:86:b3: 0d:3f:63:4c:c3:57:a6:50:d8:eb:9f:b8:07:32:85:57:b8:95: a2:24:d2:f2 -----BEGIN CERTIFICATE----- MIIFNDCCBBygAwIBAgIUG8b3LPaUw3sUKb2heFSApEpKbK8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgz RTk5MTY0MTAeFw0yNDExMjEyMzQ0NTFaFw0yNDExMjMwMTM2NTFaMDMxMTAvBgNV BAMTKDExRjJGQzQ0MjM5RDVFNTU2OTcyOURGODFBMTc5NUUwRDIzNDc5MUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2Mmwm1lZnEBhUGvzi1uPodgZJ wKdxlpl7MnFCRXEyPobyEtXj9UVPD1o6xo3ZFOvtOUq8G8a7QvarvQ0/MDOKZ7qz SLGzLo8eUfrAc+Pe36VxvGYTHVXZ4M93WGLgE7rfHWk8XVkGG+vdymk163Pm5dyB 8NX/Xm1+fSGS3hD607vsdL652SzTm68U4M2uUyFVTqG0FoYkNIczi2e+lzJZWCML +DpjhKGUmqKObVAzNCRBpjWSfHZBHwlmbPm1Xw8bmRhyIkiGXsa2gF4VGX6JWZh9 evLoICFxn6LaVFE1aFt6v/epR0UyB412kYlD2/k/nx9YlQ5jAcilbGGrizR/AgMB AAGjggI+MIICOjAdBgNVHQ4EFgQUEfL8RCOdXlVpcp34GheV4NI0eR8wHwYDVR0j BBgwFoAUR+lVU1XGsAeqzV1Fv0HjOD6ZFkEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzQvNDdFOTU1NTM1NUM2QjAwN0FBQ0Q1RDQ1QkY0MUUzMzgzRTk5MTY0MS5j cmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJnLm5l dC9ycGtpL1JHbmV0LU9VL1ItbFZVMVhHc0FlcXpWMUZ2MEhqT0Q2WkZrRS5jZXIw gZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6Ly9yc3luYy5w YWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZTdkNTVmNy1lZTYwLTQwMDUt YmFkNy1iNDI4MThjZjUwZTgvNC80N0U5NTU1MzU1QzZCMDA3QUFDRDVENDVCRjQx RTMzODNFOTkxNjQxLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsG AQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAE oAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOe+twf23SkHCxEzCaJXCo7Vz02RIZsYr WE+AubW11wg2bOa26EoDUv1G1nC6CQ6n8HwqPS6CH8noH255tYJyTaT2YX0cQczD lIEivDmMU0AWbyuJSxLls3lj/iVnXFxIoKqKEYn0zGuNwO3MpSuFKOpDzCxdg41I SCMXoIMoOTRNpd/tOMURBrtHBTDLaPHIfbwPH3UNX5r41kbmoNxyliecnwnEJusC F1kjATpdQTEeG5W3/iNCMvoecIdww92EaeczP2dcMoUonGdQR5T2Gun9BIGIS163 E8cLbWefPgjjyxCcdtatKoazDT9jTMNXplDY65+4BzKFV7iVoiTS8g== -----END CERTIFICATE-----Generated at Fri Nov 22 02:40:01 2024 by rpki-client on console-ams.rpki-client.org