$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft File: 32F267CC5A6C13207B7228C9D0A849752F5036FF.mft (raw, json) Hash identifier: cgKzV+bou9RdPWdoeTWecPeSKpOSYHKk0VG3kv6Am00= Subject key identifier: 36:BC:0A:8E:53:6A:FA:88:49:48:AF:B1:B9:52:3F:CD:0F:30:28:30 Authority key identifier: 32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF Certificate issuer: /CN=32F267CC5A6C13207B7228C9D0A849752F5036FF Certificate serial: 3EF7791AC004B4434A9A2580C57A9AA0C7854C9E Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft Manifest number: FE Signing time: Mon 25 Nov 2024 09:43:12 +0000 Manifest this update: Mon 25 Nov 2024 09:38:12 +0000 Manifest next update: Tue 26 Nov 2024 13:17:12 +0000 Files and hashes: 1: 32F267CC5A6C13207B7228C9D0A849752F5036FF.crl (hash: j4uafuyhxym9AvIXWlAF5XQMqsccfoY9vNeruBsE7FU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 26 Nov 2024 03:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3e:f7:79:1a:c0:04:b4:43:4a:9a:25:80:c5:7a:9a:a0:c7:85:4c:9e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=32F267CC5A6C13207B7228C9D0A849752F5036FF Validity Not Before: Nov 25 09:38:12 2024 GMT Not After : Nov 26 13:17:12 2024 GMT Subject: CN=36BC0A8E536AFA884948AFB1B9523FCD0F302830 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:e9:28:df:00:2f:1b:51:fb:58:0d:51:47:e2: 8f:e5:36:3c:ef:de:43:c7:42:c0:49:26:2d:16:36: d1:0e:0a:ae:16:31:e8:e6:89:4a:3b:cf:43:8d:7c: 14:2a:a6:f3:cb:e0:e3:a3:88:7c:85:c3:bf:aa:cc: a3:55:8e:16:3e:48:e8:53:e4:d6:27:e2:3f:06:99: cd:42:13:5b:47:e3:34:9d:a1:5b:a1:c7:34:1c:ad: 8b:bc:40:66:2a:c5:f6:57:0f:1e:41:a8:b6:55:5f: 46:8d:1c:31:94:98:3f:18:2a:21:f8:de:d1:10:3f: ab:fd:22:22:5c:fc:d4:72:6b:d6:0d:80:07:74:20: 75:f1:c5:1d:8b:ad:3e:b6:a3:11:0c:5b:49:a9:b5: 3b:77:69:4f:aa:bd:1a:ff:1c:b3:10:55:70:80:c1: ab:65:6e:70:df:c3:d2:31:78:24:57:c4:d3:1c:9c: 9d:f8:c9:03:94:50:32:9e:2d:66:6c:11:e4:39:03: 06:8c:9e:99:5e:11:f4:5a:eb:c4:83:e8:1a:b1:03: b4:ee:df:73:03:f6:2c:65:ff:9a:20:72:56:95:24: c3:11:0c:2d:09:ec:ac:04:e5:35:6e:6d:83:30:32: 4f:e1:f4:a5:6f:e3:2b:e9:02:e4:1e:1d:7f:ae:e6: 3e:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 36:BC:0A:8E:53:6A:FA:88:49:48:AF:B1:B9:52:3F:CD:0F:30:28:30 X509v3 Authority Key Identifier: keyid:32:F2:67:CC:5A:6C:13:20:7B:72:28:C9:D0:A8:49:75:2F:50:36:FF X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/32F267CC5A6C13207B7228C9D0A849752F5036FF.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/f0f5aca9-dc28-4592-9712-4084de9c9421/5/32F267CC5A6C13207B7228C9D0A849752F5036FF.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 49:dc:9b:42:ac:52:7a:7f:fe:a7:05:a3:1d:96:cd:29:e2:3c: eb:83:1f:7f:3f:20:48:7e:44:3f:74:bb:01:b5:c9:9b:17:29: 97:7f:15:4d:61:97:0e:76:4d:f0:2c:a7:55:7e:97:9a:3b:91: 76:10:9f:4a:29:20:cb:5c:da:42:48:1b:ef:af:62:d8:e6:27: 32:cd:b1:08:90:a2:86:b5:24:3c:58:4e:44:3b:04:72:97:e4: 13:ec:ed:2e:a7:f0:9f:88:d2:b4:98:7d:f4:67:5d:dc:55:b6: e7:99:70:fd:8d:87:c8:92:f1:fb:64:09:42:50:b2:54:98:bd: 3b:ed:f6:4a:fa:6a:02:13:20:05:36:93:c2:16:ca:3e:79:02: d5:42:64:18:cc:54:70:28:ee:0a:07:78:a9:c3:52:23:fa:66: 9e:7b:e5:f8:34:2c:94:d5:7d:d7:16:32:73:84:d5:0b:5a:ff: 47:10:6e:6c:80:f8:54:d7:35:fc:bc:fd:75:61:7d:cf:38:ce: bd:35:39:1f:df:2d:9e:1e:6e:e3:38:83:c9:d7:25:4c:a6:6a: 61:17:53:7a:1e:32:90:df:b2:71:b7:09:29:a8:00:28:f6:ed: ec:24:34:3c:07:dd:90:83:d4:54:62:9b:51:f1:ec:6b:b4:06: 9a:4b:fc:b9 -----BEGIN CERTIFICATE----- MIIFbTCCBFWgAwIBAgIUPvd5GsAEtENKmiWAxXqaoMeFTJ4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUy RjUwMzZGRjAeFw0yNDExMjUwOTM4MTJaFw0yNDExMjYxMzE3MTJaMDMxMTAvBgNV BAMTKDM2QkMwQThFNTM2QUZBODg0OTQ4QUZCMUI5NTIzRkNEMEYzMDI4MzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDv6SjfAC8bUftYDVFH4o/lNjzv 3kPHQsBJJi0WNtEOCq4WMejmiUo7z0ONfBQqpvPL4OOjiHyFw7+qzKNVjhY+SOhT 5NYn4j8Gmc1CE1tH4zSdoVuhxzQcrYu8QGYqxfZXDx5BqLZVX0aNHDGUmD8YKiH4 3tEQP6v9IiJc/NRya9YNgAd0IHXxxR2LrT62oxEMW0mptTt3aU+qvRr/HLMQVXCA watlbnDfw9IxeCRXxNMcnJ34yQOUUDKeLWZsEeQ5AwaMnpleEfRa68SD6BqxA7Tu 33MD9ixl/5ogclaVJMMRDC0J7KwE5TVubYMwMk/h9KVv4yvpAuQeHX+u5j5zAgMB AAGjggJ3MIICczAdBgNVHQ4EFgQUNrwKjlNq+ohJSK+xuVI/zQ8wKDAwHwYDVR0j BBgwFoAUMvJnzFpsEyB7cijJ0KhJdS9QNv8wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZjBmNWFjYTktZGMyOC00NTkyLTk3MTItNDA4NGRlOWM5 NDIxLzUvMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUyRjUwMzZGRi5j cmwwgZMGCCsGAQUFBwEBBIGGMIGDMIGABggrBgEFBQcwAoZ0cnN5bmM6Ly9ycGtp LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODUwZDA2M2UwMTg1NzU1 YzkxYmUzZjlkLzIvMzJGMjY3Q0M1QTZDMTMyMDdCNzIyOEM5RDBBODQ5NzUyRjUw MzZGRi5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mMGY1YWNhOS1k YzI4LTQ1OTItOTcxMi00MDg0ZGU5Yzk0MjEvNS8zMkYyNjdDQzVBNkMxMzIwN0I3 MjI4QzlEMEE4NDk3NTJGNTAzNkZGLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASdybQqxSen/+pwWjHZbN KeI864Mffz8gSH5EP3S7AbXJmxcpl38VTWGXDnZN8CynVX6XmjuRdhCfSikgy1za Qkgb769i2OYnMs2xCJCihrUkPFhORDsEcpfkE+ztLqfwn4jStJh99Gdd3FW255lw /Y2HyJLx+2QJQlCyVJi9O+32SvpqAhMgBTaTwhbKPnkC1UJkGMxUcCjuCgd4qcNS I/pmnnvl+DQslNV91xYyc4TVC1r/RxBubID4VNc1/Lz9dWF9zzjOvTU5H98tnh5u 4ziDydclTKZqYRdTeh4ykN+ycbcJKagAKPbt7CQ0PAfdkIPUVGKbUfHsa7QGmkv8 uQ== -----END CERTIFICATE-----Generated at Mon Nov 25 12:00:56 2024 by rpki-client on console-ams.rpki-client.org