$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft File: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft (raw, json) Hash identifier: NBmJq2uZ4t3VBq5VfRxNNa3wxKxy9qvresKgyP1TEE4= Subject key identifier: 8A:CC:AD:02:D9:12:27:75:F8:B1:FB:01:16:69:50:87:44:9A:42:E2 Authority key identifier: 64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE Certificate issuer: /CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Certificate serial: 45E27127FB0AA878FAA1E432374F14BF8D1F1B14 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft Manifest number: 012D Signing time: Tue 22 Oct 2024 16:38:32 +0000 Manifest this update: Tue 22 Oct 2024 16:33:32 +0000 Manifest next update: Wed 23 Oct 2024 17:26:32 +0000 Files and hashes: 1: 34352e3135302e372e302f32342d3234203d3e203430363736.roa (hash: 7wQrqMox9QAmR2vQp8q5VdavN4YrXCFJ3Bes/IozaAU=) 2: 34352e3135302e342e302f32342d3234203d3e203634323637.roa (hash: D7cvbD20JIpIRwQApWZ79drOOImfd7dF4GpGHyxVaLw=) 3: 64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl (hash: Yj+fSQjmr8Rl2/0oLluazVoJQVK9EE2HSLIbszsi2cs=) 4: 34352e3135302e352e302f32342d3234203d3e20323039383534.roa (hash: Q0MksaznWSNZegMdCUOG/gHJD1ijN/io2ffJkKquBlg=) 5: 34352e3135302e362e302f32342d3234203d3e203538303631.roa (hash: ZujLRBhcAaylT2jct3Y544NAE6KlaySAKXKPTdekmfU=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 23 Oct 2024 13:44:24 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:e2:71:27:fb:0a:a8:78:fa:a1:e4:32:37:4f:14:bf:8d:1f:1b:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=64af15419bd5fe6c8f97e224a86a4917a2e6fefe Validity Not Before: Oct 22 16:33:32 2024 GMT Not After : Oct 23 17:26:32 2024 GMT Subject: CN=8ACCAD02D9122775F8B1FB0116695087449A42E2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:50:4f:31:60:36:64:19:73:7c:80:42:1a:16: d9:02:41:7f:11:74:a1:de:6a:94:1f:41:bb:ad:01: 4b:dc:54:80:3f:c5:ac:6e:b5:82:51:c4:2d:b7:0c: f6:42:f8:c7:d2:35:94:2b:64:a7:53:9f:83:52:eb: f3:63:d4:84:8b:e6:5c:13:66:9e:a7:6d:83:f5:95: 8c:64:df:2f:26:9f:fa:2d:5d:2e:45:c0:0f:a5:bc: bc:77:23:a3:8e:53:5f:52:f8:50:ca:5a:8d:33:09: 12:1d:59:bc:1e:b0:92:0e:22:ee:cb:37:e2:45:c7: 34:5b:74:b4:33:e2:e6:55:ae:73:41:f7:1b:8e:3f: 99:e0:cf:8e:f7:a6:78:a2:1c:54:de:87:d8:52:d2: 4c:47:d5:54:1e:e5:96:77:28:12:1a:46:ea:9a:37: 8f:bc:85:e5:de:3d:5e:92:01:47:fb:fb:65:67:3b: 44:43:4e:28:e0:07:4b:eb:da:01:ae:3e:60:64:6a: d4:fb:36:32:92:4d:be:b2:94:d8:75:7c:94:36:8a: 37:27:a1:10:ae:66:8a:1c:e9:50:7e:3d:5d:cd:fa: 66:d4:bf:97:b2:a0:cf:76:cc:26:d4:48:e7:36:e7: 9c:f8:a8:c7:42:35:36:6a:4f:bb:8c:59:be:5d:a4: a8:59 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8A:CC:AD:02:D9:12:27:75:F8:B1:FB:01:16:69:50:87:44:9A:42:E2 X509v3 Authority Key Identifier: keyid:64:AF:15:41:9B:D5:FE:6C:8F:97:E2:24:A8:6A:49:17:A2:E6:FE:FE X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZK8VQZvV_myPl-IkqGpJF6Lm_v4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fc9aa95f-7b38-426a-9966-5441939fe031/0/64AF15419BD5FE6C8F97E224A86A4917A2E6FEFE.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:a1:4e:59:f8:20:a7:a7:a1:9c:50:8e:6f:00:6c:1d:f4:e3: bb:28:4d:13:29:5e:99:d7:06:16:b9:aa:e5:50:e6:50:53:3b: f4:cc:51:e0:45:ed:9a:9e:a2:aa:d3:2c:a2:7c:ca:d5:e7:04: 1f:d1:04:89:38:33:85:22:a8:4f:15:7f:c6:58:7e:6e:b6:29: 96:81:02:50:f9:b5:7e:4d:cb:68:3d:1d:01:46:46:1c:e1:31: 21:c5:6e:b3:19:5b:f8:95:1c:53:0a:20:a8:f9:2d:06:79:0d: 49:8e:df:62:7e:01:45:a3:30:0c:2d:0a:9d:1e:05:3c:9b:82: 93:27:ff:64:37:db:e6:88:59:f5:bb:40:cf:6f:41:48:f8:f6: 74:54:7d:f5:ea:5b:c8:b8:9d:9e:aa:34:61:43:4c:8c:3b:5d: 19:ff:f2:e7:ff:6a:c3:46:bd:58:1a:ac:e8:1b:3c:d4:05:94: 23:f6:44:34:2d:6c:2f:82:27:d8:0d:e3:3f:e5:b6:3b:27:bd: c2:94:01:16:4b:55:d9:c8:96:50:58:73:8e:d2:d3:8d:56:bb: b0:0b:0e:2f:ec:32:bd:c6:71:81:02:c2:eb:bd:dd:50:04:a6: f5:fc:08:83:87:81:54:72:7c:0b:23:03:3e:43:06:64:cb:49: f6:cf:c3:d9 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUReJxJ/sKqHj6oeQyN08Uv40fGxQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjRhZjE1NDE5YmQ1ZmU2YzhmOTdlMjI0YTg2YTQ5MTdh MmU2ZmVmZTAeFw0yNDEwMjIxNjMzMzJaFw0yNDEwMjMxNzI2MzJaMDMxMTAvBgNV BAMTKDhBQ0NBRDAyRDkxMjI3NzVGOEIxRkIwMTE2Njk1MDg3NDQ5QTQyRTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrUE8xYDZkGXN8gEIaFtkCQX8R dKHeapQfQbutAUvcVIA/xaxutYJRxC23DPZC+MfSNZQrZKdTn4NS6/Nj1ISL5lwT Zp6nbYP1lYxk3y8mn/otXS5FwA+lvLx3I6OOU19S+FDKWo0zCRIdWbwesJIOIu7L N+JFxzRbdLQz4uZVrnNB9xuOP5ngz473pniiHFTeh9hS0kxH1VQe5ZZ3KBIaRuqa N4+8heXePV6SAUf7+2VnO0RDTijgB0vr2gGuPmBkatT7NjKSTb6ylNh1fJQ2ijcn oRCuZooc6VB+PV3N+mbUv5eyoM92zCbUSOc255z4qMdCNTZqT7uMWb5dpKhZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUisytAtkSJ3X4sfsBFmlQh0SaQuIwHwYDVR0j BBgwFoAUZK8VQZvV/myPl+IkqGpJF6Lm/v4wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmM5YWE5NWYtN2IzOC00MjZhLTk5NjYtNTQ0MTkzOWZl MDMxLzAvNjRBRjE1NDE5QkQ1RkU2QzhGOTdFMjI0QTg2QTQ5MTdBMkU2RkVGRS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1pLOFZRWnZWX215UGwtSWtxR3BKRjZM bV92NC5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9mYzlhYTk1Zi03 YjM4LTQyNmEtOTk2Ni01NDQxOTM5ZmUwMzEvMC82NEFGMTU0MTlCRDVGRTZDOEY5 N0UyMjRBODZBNDkxN0EyRTZGRUZFLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAG6FOWfggp6ehnFCObwBs HfTjuyhNEylemdcGFrmq5VDmUFM79MxR4EXtmp6iqtMsonzK1ecEH9EEiTgzhSKo TxV/xlh+brYploECUPm1fk3LaD0dAUZGHOExIcVusxlb+JUcUwogqPktBnkNSY7f Yn4BRaMwDC0KnR4FPJuCkyf/ZDfb5ohZ9btAz29BSPj2dFR99epbyLidnqo0YUNM jDtdGf/y5/9qw0a9WBqs6Bs81AWUI/ZENC1sL4In2A3jP+W2Oye9wpQBFktV2ciW UFhzjtLTjVa7sAsOL+wyvcZxgQLC673dUASm9fwIg4eBVHJ8CyMDPkMGZMtJ9s/D 2Q== -----END CERTIFICATE-----Generated at Tue Oct 22 17:28:51 2024 by rpki-client on console-fra.rpki-client.org