$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft File: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft (raw, json) Hash identifier: dtMhHu+d6u6vmPLWPnAETtJRGsi7pVfGHnQV6iV8rNU= Subject key identifier: 5F:13:CB:E2:97:36:CE:02:46:71:7A:C0:EB:77:B3:3E:B2:3B:C0:53 Authority key identifier: 98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB Certificate issuer: /CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB Certificate serial: 2AB5E8021A298B2605BC470C07A1A2CD0659042A Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft Manifest number: DE Signing time: Sat 28 Sep 2024 13:11:08 +0000 Manifest this update: Sat 28 Sep 2024 13:06:08 +0000 Manifest next update: Sun 29 Sep 2024 15:15:08 +0000 Files and hashes: 1: 98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl (hash: oozVoLVo0of6rODdrej6lvOQHvdXMc7tmcHJBHanq7Q=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 29 Sep 2024 06:21:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2a:b5:e8:02:1a:29:8b:26:05:bc:47:0c:07:a1:a2:cd:06:59:04:2a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB Validity Not Before: Sep 28 13:06:08 2024 GMT Not After : Sep 29 15:15:08 2024 GMT Subject: CN=5F13CBE29736CE0246717AC0EB77B33EB23BC053 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:72:d0:d3:5f:a9:be:00:77:e8:4b:0e:4f:64: 4e:2c:18:2a:5c:f0:c1:5f:21:eb:31:34:70:73:88: c2:74:2d:a3:d4:d8:5c:29:87:5d:62:d3:37:4f:23: f6:b4:26:c3:f4:0b:f7:3b:85:6b:5d:24:f4:9b:fc: c8:5b:9a:c0:6c:90:25:74:62:44:9d:4b:6a:26:4a: f9:59:75:a8:35:6a:31:c7:79:49:ce:40:1d:21:bb: 8c:69:a6:1d:a2:0e:8a:79:48:b8:b0:fa:1e:f1:4a: ab:6f:07:7a:3c:13:4e:ad:29:c1:6d:30:95:07:cf: 94:f4:e2:8a:36:b3:81:fe:ac:1f:35:13:8b:0f:8a: aa:60:82:11:88:79:41:ce:98:48:96:c8:22:89:0f: c5:1b:68:d3:fd:dd:ae:a4:12:de:3f:b6:ac:30:d7: 71:36:de:d1:95:34:f8:13:dc:e4:d7:ab:5e:52:7f: 3c:07:e5:ef:10:f9:8e:c8:c6:35:96:9c:31:52:48: 81:f0:26:d3:3e:ac:97:c2:7e:d3:51:23:c6:85:b4: 42:66:d3:8f:69:1c:d2:31:4d:bb:6b:5b:2d:ad:d9: 29:c6:24:c9:80:3b:51:30:b9:6a:e6:2a:79:e7:97: ff:07:63:67:fe:d9:46:0e:f0:69:8c:07:cb:cf:16: e6:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5F:13:CB:E2:97:36:CE:02:46:71:7A:C0:EB:77:B3:3E:B2:3B:C0:53 X509v3 Authority Key Identifier: keyid:98:AF:B7:4D:27:42:CE:8D:BE:4E:FE:AA:0E:96:BC:FE:52:A9:09:CB X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/de7d55f7-ee60-4005-bad7-b42818cf50e8/7/98AFB74D2742CE8DBE4EFEAA0E96BCFE52A909CB.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 07:8f:1b:a8:3c:d8:c7:94:88:80:8a:4b:a0:b9:cd:c5:61:93: 3c:1d:6c:a6:ae:54:b1:1f:13:77:f7:89:85:f3:d3:87:61:ef: 0f:0f:a6:1e:8b:1b:b4:12:7b:9d:58:87:87:e0:1c:6b:92:81: c4:a6:f9:35:86:cc:dd:fb:f5:c4:0d:40:c6:5c:f6:9c:b1:a1: ee:e9:11:28:81:8a:f8:17:74:6c:06:2f:17:ff:40:92:d5:99: 58:ca:b7:f0:85:c3:8e:6a:65:0e:64:cf:98:86:35:3b:5a:d4: d7:a7:48:40:e0:4c:9d:a8:ae:ee:ec:e7:0e:4a:6d:54:49:71: 87:62:bb:81:26:4b:a1:96:ed:aa:50:82:89:a2:48:03:b4:f0: 2d:6e:15:25:b6:aa:eb:14:15:a0:0d:e8:3e:c1:41:d0:e4:97: f7:b5:0d:53:bb:d9:7d:e8:51:18:d3:79:37:49:59:d1:fa:03: 72:1b:e1:ec:22:90:06:a1:bf:c5:47:6c:12:5d:63:3f:41:90: f6:10:49:d9:20:59:d6:76:83:b1:ad:30:89:df:54:c5:8e:4d: 0f:81:fa:8b:9d:60:f8:33:94:4e:ba:5c:b3:f1:f3:b2:07:9f: e4:51:71:02:eb:79:4a:70:71:28:d7:52:cc:8c:df:ce:38:ff: 77:c5:74:84 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUKrXoAhopiyYFvEcMB6GizQZZBCowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThBRkI3NEQyNzQyQ0U4REJFNEVGRUFBMEU5NkJDRkU1 MkE5MDlDQjAeFw0yNDA5MjgxMzA2MDhaFw0yNDA5MjkxNTE1MDhaMDMxMTAvBgNV BAMTKDVGMTNDQkUyOTczNkNFMDI0NjcxN0FDMEVCNzdCMzNFQjIzQkMwNTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlctDTX6m+AHfoSw5PZE4sGCpc 8MFfIesxNHBziMJ0LaPU2Fwph11i0zdPI/a0JsP0C/c7hWtdJPSb/MhbmsBskCV0 YkSdS2omSvlZdag1ajHHeUnOQB0hu4xpph2iDop5SLiw+h7xSqtvB3o8E06tKcFt MJUHz5T04oo2s4H+rB81E4sPiqpgghGIeUHOmEiWyCKJD8UbaNP93a6kEt4/tqww 13E23tGVNPgT3OTXq15SfzwH5e8Q+Y7IxjWWnDFSSIHwJtM+rJfCftNRI8aFtEJm 049pHNIxTbtrWy2t2SnGJMmAO1EwuWrmKnnnl/8HY2f+2UYO8GmMB8vPFuYFAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUXxPL4pc2zgJGcXrA63ezPrI7wFMwHwYDVR0j BBgwFoAUmK+3TSdCzo2+Tv6qDpa8/lKpCcswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGU3ZDU1ZjctZWU2MC00MDA1LWJhZDctYjQyODE4Y2Y1 MGU4LzcvOThBRkI3NEQyNzQyQ0U4REJFNEVGRUFBMEU5NkJDRkU1MkE5MDlDQi5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC85OEFGQjc0RDI3NDJDRThEQkU0RUZFQUEw RTk2QkNGRTUyQTkwOUNCLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2RlN2Q1NWY3LWVlNjAtNDAwNS1iYWQ3LWI0MjgxOGNmNTBlOC83Lzk4QUZCNzRE Mjc0MkNFOERCRTRFRkVBQTBFOTZCQ0ZFNTJBOTA5Q0IubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAHjxuo PNjHlIiAikuguc3FYZM8HWymrlSxHxN394mF89OHYe8PD6Yeixu0EnudWIeH4Bxr koHEpvk1hszd+/XEDUDGXPacsaHu6REogYr4F3RsBi8X/0CS1ZlYyrfwhcOOamUO ZM+YhjU7WtTXp0hA4EydqK7u7OcOSm1USXGHYruBJkuhlu2qUIKJokgDtPAtbhUl tqrrFBWgDeg+wUHQ5Jf3tQ1Tu9l96FEY03k3SVnR+gNyG+HsIpAGob/FR2wSXWM/ QZD2EEnZIFnWdoOxrTCJ31TFjk0PgfqLnWD4M5ROulyz8fOyB5/kUXEC63lKcHEo 11LMjN/OOP93xXSE -----END CERTIFICATE-----Generated at Sat Sep 28 14:44:01 2024 by rpki-client on console-ams.rpki-client.org