$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft File: 32F267CC5A6C13207B7228C9D0A849752F5036FF.mft (raw, json) Hash identifier: ZwCo3CtaZkFo5EUQPPN6C8ccPdlBdc2CvHDteoYpt9M= Subject key identifier: 43:9B:D9:D7:A8:A2:C1:07:17:B1:B9:8C:B4:F0:19:4F:CC:F9:7E:82 Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF Certificate issuer: /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF Certificate serial: 063AA22E2478C1E34F743AC09CB05DB5EF39E00A Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft Manifest number: 9D Signing time: Mon 16 Sep 2024 14:42:17 +0000 Manifest this update: Mon 16 Sep 2024 14:37:17 +0000 Manifest next update: Tue 17 Sep 2024 14:48:17 +0000 Files and hashes: 1: 32F267CC5A6C13207B7228C9D0A849752F5036FF.crl (hash: YfZHWpgOIujNojf3qcVPflj41/+MAKcY0vNey97rqvQ=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 17 Sep 2024 08:57:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 06:3a:a2:2e:24:78:c1:e3:4f:74:3a:c0:9c:b0:5d:b5:ef:39:e0:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF Validity Not Before: Sep 16 14:37:17 2024 GMT Not After : Sep 17 14:48:17 2024 GMT Subject: CN=439BD9D7A8A2C10717B1B98CB4F0194FCCF97E82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:d1:7e:8a:31:46:f8:68:1f:80:79:31:5f:e7: e3:94:eb:76:88:eb:d5:f2:0b:9c:42:46:3d:a4:14: e7:f5:94:66:8b:d9:52:ba:ef:2a:ef:e8:dc:33:f6: 43:98:c4:ab:47:55:7f:5c:97:b4:ee:35:f2:3b:c4: 32:8c:cd:19:d5:3d:44:72:36:29:e0:ba:77:8c:54: 02:ba:88:61:8b:a1:fd:cd:5a:91:cc:20:46:54:f1: 15:f0:6d:4f:7b:23:c3:63:9d:eb:3a:e6:d5:03:61: 12:5d:e7:8f:5f:97:9f:53:f1:a1:33:c1:8a:49:f3: 8c:c7:b3:13:62:65:e3:5f:07:e9:6b:43:70:f7:b1: de:0e:e5:dd:0b:ef:ce:71:46:65:dc:59:2a:1d:7a: fb:6d:98:d7:18:47:33:69:25:4f:75:8f:4e:bb:05: 6e:07:60:40:f9:c5:c6:41:96:b0:b1:ec:c1:c0:91: 12:24:a7:da:70:f0:66:1c:bf:40:05:d0:fe:74:c6: 9c:8c:7b:7e:cf:e3:a5:dd:86:36:75:5f:a6:ef:73: 63:a9:be:37:3c:53:ca:b4:1e:14:33:90:0d:38:51: dd:18:ea:1c:99:1b:59:10:bb:d9:0d:e5:64:91:1f: 35:9b:ee:14:e5:8d:f4:b7:ba:90:49:80:8a:5a:3f: 5c:0f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:9B:D9:D7:A8:A2:C1:07:17:B1:B9:8C:B4:F0:19:4F:CC:F9:7E:82 X509v3 Authority Key Identifier: keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:67:24:f9:78:33:7b:f3:ad:7c:f5:dc:52:7d:c1:74:cd:b3: 39:34:91:88:b6:5f:9a:19:0b:25:c2:dd:3c:18:be:d4:70:8e: fa:59:ec:7f:10:81:bd:f9:a9:d8:e3:3f:9e:3d:ee:2d:fc:17: e8:57:2b:71:3d:78:17:f4:c0:bf:89:94:ff:8a:a9:59:52:4a: b7:6a:5d:46:37:79:74:65:2f:7b:83:9a:03:c4:57:ea:e6:7a: 88:27:e7:1a:f9:5a:aa:fb:ea:51:47:bd:19:ea:58:53:a5:a5: 0f:60:97:60:e2:bf:d4:65:79:c7:70:45:ed:c1:12:ce:2c:05: 02:6a:79:f6:2c:6c:73:dd:7b:9b:40:a1:bf:d6:82:06:dd:c6: 4b:c3:41:2e:93:52:e1:35:bc:53:12:4b:39:16:96:15:11:03: 2a:84:fb:21:3b:69:38:21:48:bb:1c:e0:93:a5:3d:10:af:f1: 64:18:4a:6c:dc:51:2f:c7:86:93:d3:dd:ec:1c:34:fa:a6:5d: c2:4e:14:8b:46:a7:84:43:a7:2b:e8:29:c4:92:62:b1:ac:43: 60:5a:66:e8:63:0e:80:1d:fb:c6:f0:92:0a:7b:18:a1:0b:d8: fe:39:33:f0:09:92:57:38:96:67:40:a0:50:4a:67:75:bd:31: b1:0e:18:ff -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUBjqiLiR4weNPdDrAnLBdte854AowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUy RjUwMzZGRjAeFw0yNDA5MTYxNDM3MTdaFw0yNDA5MTcxNDQ4MTdaMDMxMTAvBgNV BAMTKDQzOUJEOUQ3QThBMkMxMDcxN0IxQjk4Q0I0RjAxOTRGQ0NGOTdFODIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD0X6KMUb4aB+AeTFf5+OU63aI 69XyC5xCRj2kFOf1lGaL2VK67yrv6Nwz9kOYxKtHVX9cl7TuNfI7xDKMzRnVPURy NinguneMVAK6iGGLof3NWpHMIEZU8RXwbU97I8Njnes65tUDYRJd549fl59T8aEz wYpJ84zHsxNiZeNfB+lrQ3D3sd4O5d0L785xRmXcWSodevttmNcYRzNpJU91j067 BW4HYED5xcZBlrCx7MHAkRIkp9pw8GYcv0AF0P50xpyMe37P46XdhjZ1X6bvc2Op vjc8U8q0HhQzkA04Ud0Y6hyZG1kQu9kN5WSRHzWb7hTljfS3upBJgIpaP1wPAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUQ5vZ16iiwQcXsbmMtPAZT8z5foIwHwYDVR0j BBgwFoAUMvJnzFpsEyB7cijJ0KhJdS9QNv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBmNWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRlOWM5 NDIxLzUvMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUyRjUwMzZGRi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUyRjUw MzZGRi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGY1YWNhOS1k YzI4LTQ1OTItOTcxMi00MDg0ZGU5Yzk0MjEvNS8zMkYyNjdDQzVBNkMxMzIwN0I3 MjI4QzlEMEE4NDk3NTJGNTAzNkZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg2ck+Xgze/OtfPXcUn3B dM2zOTSRiLZfmhkLJcLdPBi+1HCO+lnsfxCBvfmp2OM/nj3uLfwX6FcrcT14F/TA v4mU/4qpWVJKt2pdRjd5dGUve4OaA8RX6uZ6iCfnGvlaqvvqUUe9GepYU6WlD2CX YOK/1GV5x3BF7cESziwFAmp59ixsc917m0Chv9aCBt3GS8NBLpNS4TW8UxJLORaW FREDKoT7ITtpOCFIuxzgk6U9EK/xZBhKbNxRL8eGk9Pd7Bw0+qZdwk4Ui0anhEOn K+gpxJJisaxDYFpm6GMOgB37xvCSCnsYoQvY/jkz8AmSVziWZ0CgUEpndb0xsQ4Y /w== -----END CERTIFICATE-----Generated at Mon Sep 16 18:40:46 2024 by rpki-client on console-ams.rpki-client.org