$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft File: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft (raw, json) Hash identifier: ZiQceJm3HTj6tF1ZaTMFvklUIZXWc5PcY52OBWmxAyM= Subject key identifier: 2A:20:AE:10:40:42:35:01:C4:C5:71:E7:CC:B2:C7:1D:1B:E9:2E:04 Authority key identifier: 09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 Certificate issuer: /CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Certificate serial: 0CC00602916BBDB4D6F5F5B30D2324423A2D9C39 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft Manifest number: 0203 Signing time: Sun 24 Nov 2024 20:05:13 +0000 Manifest this update: Sun 24 Nov 2024 20:00:13 +0000 Manifest next update: Mon 25 Nov 2024 21:59:13 +0000 Files and hashes: 1: 326130373a353463313a343234323a3a2f34382d3438203d3e20313939353138.roa (hash: QnZhS/jyMu2GcYAJct7dnCIK9fFoWaGlnE/9lHFVCZk=) 2: 326130373a353463313a343230303a3a2f34302d3430203d3e20313939353138.roa (hash: q03Pj7BB4FvQqVgWTNPLCqf6FWIvUGBqto+KCXVBKFQ=) 3: 090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl (hash: OImb8CneF0geY0Y2hl+VbwTb3M+WZ+0i5c/Q5b+kXPw=) 4: 326130373a353463313a343236313a3a2f34382d3438203d3e203436373636.roa (hash: JTZ2kGdERi3x7YRf0uNux1d/BSMy9hym6sHhRS3lDNw=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.crl rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/41F657CF3564F233B977F40ACA5E4BD10E1E2F8E.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 25 Nov 2024 05:02:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:c0:06:02:91:6b:bd:b4:d6:f5:f5:b3:0d:23:24:42:3a:2d:9c:39 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1 Validity Not Before: Nov 24 20:00:13 2024 GMT Not After : Nov 25 21:59:13 2024 GMT Subject: CN=2A20AE1040423501C4C571E7CCB2C71D1BE92E04 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:f7:77:9c:31:b2:ff:ed:9c:f2:dc:bc:c7:09: 3b:b4:35:0d:fd:bc:01:94:a9:ef:47:92:9b:00:f1: 0f:18:14:ce:81:0c:d6:c5:34:9c:6a:f4:81:ea:d0: f5:38:39:1c:c9:bf:19:59:eb:d3:4e:e9:54:b2:24: 1e:4f:d7:a7:a3:08:70:93:43:54:a5:9c:e1:9a:65: 11:a6:69:00:43:67:be:87:70:67:c0:cb:70:24:c3: 3c:5f:65:2b:57:33:40:11:f1:f4:8d:91:50:06:32: dc:55:36:c2:ed:a2:81:94:8d:84:ee:a8:60:4a:bf: 12:37:69:1e:87:b3:39:6c:9d:b9:1d:1b:b4:2e:e7: bd:51:f9:d6:00:21:43:bc:50:c6:ab:8b:66:7d:af: 76:c5:8d:9e:0c:d7:f9:72:88:f9:ab:fd:8a:95:25: 57:84:47:e1:8e:c3:30:34:a6:ca:b4:89:a0:90:aa: be:e0:d6:fa:54:42:19:ff:49:4f:55:d5:48:4a:95: 6d:e6:88:7e:6c:9b:56:ee:40:b0:65:a3:35:f1:22: cc:45:af:df:21:7d:3a:0d:fc:98:dc:ff:a7:b6:53: d5:12:a1:a5:27:bb:37:2a:cb:4e:65:fb:33:a7:2b: ad:9a:ce:77:4b:75:51:17:6a:62:fe:57:1d:89:31: d5:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2A:20:AE:10:40:42:35:01:C4:C5:71:E7:CC:B2:C7:1D:1B:E9:2E:04 X509v3 Authority Key Identifier: keyid:09:0F:FD:E4:0B:60:29:CD:7F:E3:1A:6E:DB:46:7E:1A:53:84:B1:E1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/aa004ba1-419b-4db5-bbd3-5cca633cae3f/0/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/5/090FFDE40B6029CD7FE31A6EDB467E1A5384B1E1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 17:d4:6f:98:b7:fd:d1:24:80:fc:1b:87:51:30:e8:b5:87:60: 2b:98:4b:3e:87:3d:ee:a8:b0:67:51:54:ec:e8:35:08:7e:1e: 1a:36:a6:08:dd:af:83:3a:bf:c5:00:60:06:54:7d:ed:4e:22: dd:b4:91:68:06:82:8d:8a:68:a2:d9:bb:64:f1:d6:89:92:c8: 4a:72:7d:d3:6a:18:33:0c:39:6c:70:4c:ea:be:56:39:f0:bc: 56:a5:e0:38:be:ff:d4:01:95:cd:f3:1d:33:03:e5:6c:a0:7d: e2:48:49:6a:35:36:e7:a5:cd:77:40:02:72:1e:27:b5:14:e0: 6a:41:b1:39:0f:ab:5d:aa:af:67:d9:ac:37:4f:fb:7e:fc:c7: 31:44:06:f4:51:57:86:33:a5:bc:e9:99:57:94:5c:fe:95:be: 0c:42:c9:65:33:89:f8:84:3a:20:b4:43:48:6b:bb:52:d8:3e: a6:57:f2:e2:c7:1d:bf:d7:f5:bb:1d:59:c9:0b:03:2a:8c:b9: 5d:3e:11:14:ab:05:60:2c:ed:9b:25:84:12:01:7f:9d:10:26: 1e:48:b9:71:dc:46:aa:bd:45:9b:fe:f8:cb:4e:b5:9a:27:f2: e7:f3:dd:f3:d9:43:cd:b0:0c:8c:e1:cd:4f:ea:ca:88:fb:6d: d3:86:81:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUDMAGApFrvbTW9fWzDSMkQjotnDkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1 Mzg0QjFFMTAeFw0yNDExMjQyMDAwMTNaFw0yNDExMjUyMTU5MTNaMDMxMTAvBgNV BAMTKDJBMjBBRTEwNDA0MjM1MDFDNEM1NzFFN0NDQjJDNzFEMUJFOTJFMDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC693ecMbL/7Zzy3LzHCTu0NQ39 vAGUqe9HkpsA8Q8YFM6BDNbFNJxq9IHq0PU4ORzJvxlZ69NO6VSyJB5P16ejCHCT Q1SlnOGaZRGmaQBDZ76HcGfAy3AkwzxfZStXM0AR8fSNkVAGMtxVNsLtooGUjYTu qGBKvxI3aR6HszlsnbkdG7Qu571R+dYAIUO8UMari2Z9r3bFjZ4M1/lyiPmr/YqV JVeER+GOwzA0psq0iaCQqr7g1vpUQhn/SU9V1UhKlW3miH5sm1buQLBlozXxIsxF r98hfToN/Jjc/6e2U9USoaUnuzcqy05l+zOnK62azndLdVEXamL+Vx2JMdUtAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUKiCuEEBCNQHExXHnzLLHHRvpLgQwHwYDVR0j BBgwFoAUCQ/95AtgKc1/4xpu20Z+GlOEseEwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzUvMDkwRkZERTQwQjYwMjlDRDdGRTMxQTZFREI0NjdFMUE1Mzg0QjFFMS5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9hYTAwNGJhMS00MTliLTRk YjUtYmJkMy01Y2NhNjMzY2FlM2YvMC8wOTBGRkRFNDBCNjAyOUNEN0ZFMzFBNkVE QjQ2N0UxQTUzODRCMUUxLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC81LzA5MEZGREU0 MEI2MDI5Q0Q3RkUzMUE2RURCNDY3RTFBNTM4NEIxRTEubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAX1G+Y t/3RJID8G4dRMOi1h2ArmEs+hz3uqLBnUVTs6DUIfh4aNqYI3a+DOr/FAGAGVH3t TiLdtJFoBoKNimii2btk8daJkshKcn3TahgzDDlscEzqvlY58LxWpeA4vv/UAZXN 8x0zA+VsoH3iSElqNTbnpc13QAJyHie1FOBqQbE5D6tdqq9n2aw3T/t+/McxRAb0 UVeGM6W86ZlXlFz+lb4MQsllM4n4hDogtENIa7tS2D6mV/Lixx2/1/W7HVnJCwMq jLldPhEUqwVgLO2bJYQSAX+dECYeSLlx3EaqvUWb/vjLTrWaJ/Ln893z2UPNsAyM 4c1P6sqI+23ThoGE -----END CERTIFICATE-----Generated at Sun Nov 24 21:02:15 2024 by rpki-client on console-fra.rpki-client.org