$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft File: 27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft (raw, json) Hash identifier: 1Tp8dwHEKPpjPYdMv5IzIN31UrBBC1W4HNvI5GqRXbs= Subject key identifier: 59:71:03:97:47:8C:7C:10:3F:FD:7E:61:E4:7B:22:36:C0:D7:BA:26 Authority key identifier: 27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4 Certificate issuer: /CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4 Certificate serial: 5C1461C9CCA3B665BEB714DCA90C82FC8B60B58B Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft Manifest number: 93 Signing time: Thu 21 Nov 2024 12:05:12 +0000 Manifest this update: Thu 21 Nov 2024 12:00:12 +0000 Manifest next update: Fri 22 Nov 2024 14:01:12 +0000 Files and hashes: 1: 27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl (hash: FU7R5gZzIQPhCgdTu4ZejkD4J/wckPOmrgQaUfbJnGQ=) 2: 326130613a363034343a376530303a3a2f34302d3438203d3e20323134343836.roa (hash: YuOIEPf0TASFCOu7Q8E8vk4AwFujiL332rMHZ16VhZ8=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 22 Nov 2024 04:12:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5c:14:61:c9:cc:a3:b6:65:be:b7:14:dc:a9:0c:82:fc:8b:60:b5:8b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4 Validity Not Before: Nov 21 12:00:12 2024 GMT Not After : Nov 22 14:01:12 2024 GMT Subject: CN=59710397478C7C103FFD7E61E47B2236C0D7BA26 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c3:7e:85:7f:b2:b1:4a:fc:61:a7:c4:2a:4e:1e: bb:8c:b5:dd:6a:b3:d3:66:bb:f7:a1:54:72:57:f3: 54:64:1c:52:37:7c:5f:16:7c:4d:d0:90:1a:d7:b8: 57:31:3b:31:22:5d:8c:11:61:be:72:e2:6f:9b:69: a8:1d:bc:f6:71:27:05:69:b3:91:d8:ac:e4:2a:c4: 8e:fe:d7:54:f2:6a:70:52:24:eb:21:04:a0:24:43: 16:de:17:e7:dc:37:3e:ba:4d:9d:3f:ff:01:5c:b0: 72:d4:08:17:46:65:89:cb:e6:99:df:90:48:9c:b9: 4b:b2:ed:70:46:44:33:88:90:c9:02:c5:1d:9d:d7: 1f:c3:f5:3e:6f:01:6e:a2:07:fe:e3:56:ab:5e:eb: da:29:d4:3e:b8:59:87:2c:c0:60:46:ff:8d:aa:17: 85:43:99:d0:b2:be:1a:aa:4c:f3:3e:a2:8e:c1:38: b1:93:6d:b9:34:52:32:40:d7:c1:b6:35:ee:e7:c0: a1:0d:84:06:51:ff:99:99:df:f3:0c:34:6e:38:ea: df:19:c6:0a:ca:2c:c9:1f:c1:b5:cb:58:23:39:c7: 25:a8:77:f1:33:ce:35:46:ab:8f:09:52:27:56:9c: 67:7d:be:1e:0d:6d:d3:28:ac:d4:55:ec:ef:9a:23: 0b:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 59:71:03:97:47:8C:7C:10:3F:FD:7E:61:E4:7B:22:36:C0:D7:BA:26 X509v3 Authority Key Identifier: keyid:27:E0:DB:0E:84:DF:3D:BA:F7:75:52:43:E1:14:FD:BD:A5:24:FF:D4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fecbc404-ac43-449b-8c7e-8f1e99d9ac49/2/27E0DB0E84DF3DBAF7755243E114FDBDA524FFD4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption b0:37:c7:f0:f8:17:37:4a:30:21:b0:10:f1:02:6e:8e:f5:94: 27:cb:dc:10:e5:a0:24:f8:39:eb:35:7c:57:67:37:dc:f3:ba: 5f:37:03:6b:08:de:53:6e:98:5f:b6:f0:0a:69:14:ed:0c:85: 43:85:a6:3d:db:b9:0b:7c:91:f7:dc:db:cf:38:55:00:cb:04: 51:1a:df:4f:1e:fb:3b:3e:c6:23:4a:c3:bc:bb:5a:22:18:17: a6:30:55:aa:34:b7:25:02:b3:aa:2a:66:8e:56:84:e0:89:18: 13:68:82:cc:b9:02:53:b2:c1:17:5c:1e:e5:74:79:77:42:b1: 02:7d:07:c4:2b:c0:de:cb:ac:90:9c:94:5b:53:a1:1c:0b:bb: 94:02:bf:f8:cf:c8:6c:0b:70:04:d9:17:55:89:65:5b:7f:8c: 8b:3b:ea:c3:18:05:14:d4:50:92:63:fc:3d:df:ff:e6:06:03: aa:e4:10:cf:70:48:75:28:cf:ec:a6:c2:8f:1d:b8:df:39:d9: 4f:fb:52:54:30:b9:50:8e:91:c9:a0:fa:1e:e4:db:f5:66:ad: 5d:b8:28:33:ef:12:14:58:e4:c2:aa:33:e1:dd:66:3f:90:ef: 85:e9:55:b0:89:3e:9a:b3:7e:c9:aa:52:1e:ca:ff:71:06:86: 58:15:d2:01 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUXBRhycyjtmW+txTcqQyC/ItgtYswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjdFMERCMEU4NERGM0RCQUY3NzU1MjQzRTExNEZEQkRB NTI0RkZENDAeFw0yNDExMjExMjAwMTJaFw0yNDExMjIxNDAxMTJaMDMxMTAvBgNV BAMTKDU5NzEwMzk3NDc4QzdDMTAzRkZEN0U2MUU0N0IyMjM2QzBEN0JBMjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDfoV/srFK/GGnxCpOHruMtd1q s9Nmu/ehVHJX81RkHFI3fF8WfE3QkBrXuFcxOzEiXYwRYb5y4m+baagdvPZxJwVp s5HYrOQqxI7+11TyanBSJOshBKAkQxbeF+fcNz66TZ0//wFcsHLUCBdGZYnL5pnf kEicuUuy7XBGRDOIkMkCxR2d1x/D9T5vAW6iB/7jVqte69op1D64WYcswGBG/42q F4VDmdCyvhqqTPM+oo7BOLGTbbk0UjJA18G2Ne7nwKENhAZR/5mZ3/MMNG446t8Z xgrKLMkfwbXLWCM5xyWod/EzzjVGq48JUidWnGd9vh4NbdMorNRV7O+aIwtHAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUWXEDl0eMfBA//X5h5HsiNsDXuiYwHwYDVR0j BBgwFoAUJ+DbDoTfPbr3dVJD4RT9vaUk/9QwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmVjYmM0MDQtYWM0My00NDliLThjN2UtOGYxZTk5ZDlh YzQ5LzIvMjdFMERCMEU4NERGM0RCQUY3NzU1MjQzRTExNEZEQkRBNTI0RkZENC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC8yN0UwREIwRTg0REYzREJBRjc3NTUyNDNF MTE0RkRCREE1MjRGRkQ0LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZlY2JjNDA0LWFjNDMtNDQ5Yi04YzdlLThmMWU5OWQ5YWM0OS8yLzI3RTBEQjBF ODRERjNEQkFGNzc1NTI0M0UxMTRGREJEQTUyNEZGRDQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCwN8fw +Bc3SjAhsBDxAm6O9ZQny9wQ5aAk+DnrNXxXZzfc87pfNwNrCN5TbphftvAKaRTt DIVDhaY927kLfJH33NvPOFUAywRRGt9PHvs7PsYjSsO8u1oiGBemMFWqNLclArOq KmaOVoTgiRgTaILMuQJTssEXXB7ldHl3QrECfQfEK8Dey6yQnJRbU6EcC7uUAr/4 z8hsC3AE2RdViWVbf4yLO+rDGAUU1FCSY/w93//mBgOq5BDPcEh1KM/spsKPHbjf OdlP+1JUMLlQjpHJoPoe5Nv1Zq1duCgz7xIUWOTCqjPh3WY/kO+F6VWwiT6as37J qlIeyv9xBoZYFdIB -----END CERTIFICATE-----Generated at Thu Nov 21 13:55:51 2024 by rpki-client on console-fra.rpki-client.org