$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: fjdz9huMofTaBlHUkrxgDa8M//x8BsBW17OwNWDdibE= Subject key identifier: 24:54:37:15:D5:47:F0:34:12:3C:1B:9F:9C:B7:F0:18:99:AF:F1:1E Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 650F91D5E9A78B8DB3F6FB0B02983F3556A5DD93 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 0158 Signing time: Fri 22 Nov 2024 00:38:40 +0000 Manifest this update: Fri 22 Nov 2024 00:33:40 +0000 Manifest next update: Sat 23 Nov 2024 00:42:40 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=) 2: 34352e3135302e342e302f32342d3234203d3e203136323736.roa (hash: 9mHnd00uunafGA8q/TVJFJFPW9fb4JWq02s0Qp84WEA=) 3: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Q0MksaznWSNZegMdCUOG/gHJD1ijN/io2ffJkKquBlg=) 4: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: hG+LgFwo9r8u5JgvbHkkJrdH9hDmhDHFRp1l5G5+0D4=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: ZujLRBhcAaylT2jct3Y544NAE6KlaySAKXKPTdekmfU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 18:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 65:0f:91:d5:e9:a7:8b:8d:b3:f6:fb:0b:02:98:3f:35:56:a5:dd:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Nov 22 00:33:40 2024 GMT Not After : Nov 23 00:42:40 2024 GMT Subject: CN=24543715D547F034123C1B9F9CB7F01899AFF11E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:04:a3:6d:99:5b:f7:32:05:7c:99:66:af:73: 76:4f:53:b8:08:42:a0:cd:a2:90:d6:de:2f:70:04: 8e:ae:a5:60:09:ff:e4:f2:7b:7e:fb:c5:4a:af:57: 77:91:e0:ba:e7:a5:9d:62:96:ff:30:a4:e5:74:eb: 2f:dc:8a:4e:e0:91:d0:7e:09:ca:0c:2d:08:21:fc: 0e:d1:53:ba:5e:73:b8:a3:e4:68:ae:92:dc:f3:ab: 48:39:00:5d:ce:d9:70:c2:d6:50:46:4e:3f:ab:c8: 60:03:bc:2d:c3:be:1b:d0:0e:cc:15:74:2e:f9:39: 33:d7:22:98:4a:49:b6:c5:f3:06:f1:6d:49:26:03: 6d:94:d9:1c:1b:92:e1:6b:1b:b8:de:41:8c:92:67: e9:0f:10:1c:8e:a7:43:62:a2:f6:0b:9f:e7:72:d5: 01:6b:a5:d8:df:95:c9:09:dc:b4:cc:bd:40:d3:18: ed:eb:c5:3e:b4:4b:db:0a:ed:77:c7:81:92:89:07: 52:4f:03:23:7e:fc:9d:e5:33:c6:ba:51:72:a0:38: db:8b:63:1c:cc:1e:70:96:52:47:d2:18:df:b9:51: 39:1b:0c:30:a0:27:6c:8a:b5:52:8e:13:19:dc:c6: ee:6d:96:17:6c:56:21:b0:d9:52:23:b2:f9:e2:cd: f4:23 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 24:54:37:15:D5:47:F0:34:12:3C:1B:9F:9C:B7:F0:18:99:AF:F1:1E X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4e:7f:59:b7:0c:1a:7b:c1:b2:f3:4a:d0:23:9a:63:05:2e:e5: 36:84:5e:52:5e:93:ce:d3:79:72:a7:a1:b0:37:7c:1a:2b:9a: c7:f3:7c:47:89:c6:c7:28:4d:e8:cb:2c:9d:72:4e:05:a2:40: e1:07:e4:e4:d9:9c:0b:0a:63:f8:69:e3:81:19:85:d6:bb:05: cb:11:39:3f:92:81:73:c1:27:0b:75:ba:19:18:c9:bd:2d:6e: b1:28:1b:e6:ed:05:1a:4f:16:0f:a6:ab:61:08:da:e1:a5:29: e8:35:7b:9e:da:57:03:be:da:50:a2:ee:86:f8:cd:ed:e1:bf: 36:cc:e6:fb:e9:a0:12:db:73:f3:3c:3c:dc:8d:48:33:3a:4f: 9e:41:8e:2d:5d:6b:65:9b:e9:41:fe:02:1d:4e:0e:ef:89:da: 45:fa:78:1b:cb:e6:06:6a:1f:68:70:18:b7:1a:fa:bf:6f:6c: 7e:7d:49:6a:d3:74:53:04:69:9f:cf:42:f3:af:40:19:da:1a: f0:44:35:0b:5f:8e:ef:0e:7f:4b:6a:58:ec:3f:83:6d:ab:26: 5b:e7:44:a4:60:fe:a9:19:5a:a9:7e:9a:e8:44:98:8f:bb:07: 19:f2:3b:12:bd:b9:77:8a:4f:8b:39:2b:ca:ed:3a:7d:80:02: 08:bf:86:e5 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUZQ+R1emni42z9vsLApg/NVal3ZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNDExMjIwMDMzNDBaFw0yNDExMjMwMDQyNDBaMDMxMTAvBgNV BAMTKDI0NTQzNzE1RDU0N0YwMzQxMjNDMUI5RjlDQjdGMDE4OTlBRkYxMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCbBKNtmVv3MgV8mWavc3ZPU7gI QqDNopDW3i9wBI6upWAJ/+Tye377xUqvV3eR4LrnpZ1ilv8wpOV06y/cik7gkdB+ CcoMLQgh/A7RU7pec7ij5Giuktzzq0g5AF3O2XDC1lBGTj+ryGADvC3DvhvQDswV dC75OTPXIphKSbbF8wbxbUkmA22U2RwbkuFrG7jeQYySZ+kPEByOp0NiovYLn+dy 1QFrpdjflckJ3LTMvUDTGO3rxT60S9sK7XfHgZKJB1JPAyN+/J3lM8a6UXKgONuL YxzMHnCWUkfSGN+5UTkbDDCgJ2yKtVKOExncxu5tlhdsViGw2VIjsvnizfQjAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUJFQ3FdVH8DQSPBufnLfwGJmv8R4wHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATn9Ztwwae8Gy80rQI5pj BS7lNoReUl6TztN5cqehsDd8Giuax/N8R4nGxyhN6MssnXJOBaJA4Qfk5NmcCwpj +GnjgRmF1rsFyxE5P5KBc8EnC3W6GRjJvS1usSgb5u0FGk8WD6arYQja4aUp6DV7 ntpXA77aUKLuhvjN7eG/Nszm++mgEttz8zw83I1IMzpPnkGOLV1rZZvpQf4CHU4O 74naRfp4G8vmBmofaHAYtxr6v29sfn1JatN0UwRpn89C869AGdoa8EQ1C1+O7w5/ S2pY7D+DbasmW+dEpGD+qRlaqX6a6ESYj7sHGfI7Er25d4pPizkryu06fYACCL+G 5Q==Generated at Fri Nov 22 02:40:01 2024 by rpki-client on console-ams.rpki-client.org