$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft File: 5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft (raw, json) Hash identifier: gnsAST3gI8jPOTFlGCEovxMnk7kNE6Gj6j4YgD8k5Y0= Subject key identifier: 34:1B:83:33:EB:66:FC:50:07:C0:3E:72:A7:04:45:B4:92:8F:03:1F Authority key identifier: 5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C Certificate issuer: /CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C Certificate serial: 18D47FDDD5363B55B600929E3ACC2CEB494DA264 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft Manifest number: 67 Signing time: Wed 19 Jun 2024 19:49:56 +0000 Manifest this update: Wed 19 Jun 2024 19:44:56 +0000 Manifest next update: Thu 20 Jun 2024 21:19:56 +0000 Files and hashes: 1: 326130613a363034343a616337303a3a2f34362d3436203d3e20323134373537.roa (hash: DJP+JPvNZ9UDylBvEY/TziV8W4znUro8rrMhA1ktrQo=) 2: 326130613a363034343a616337343a3a2f34362d3436203d3e20323134373537.roa (hash: dbU/M//TkrdiiqBckkwX8QxCeG3ilfli5WCXm6Iyjq0=) 3: 5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl (hash: trWGKHQXTt7VMw9sE0Qe2DAfwIkd9BxvSjlBqDle554=) 4: 326130613a363034343a616337383a3a2f34372d3437203d3e20323134373537.roa (hash: o5k+/Rq1PQ+JN3Whpv7NeH55fT4DaEcVicN1G+tZ9FM=) Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.crl rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/57A9746FE543EB3EA0D449534244C93FC88F8503.mft rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/57A9746FE543EB3EA0D449534244C93FC88F8503.cer rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.crl rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/2/799438F1B1762AEEF8A35CF4E6CBAE97699BD020.mft rsync://rpki.ripe.net/repository/DEFAULT/eZQ48bF2Ku74o1z05suul2mb0CA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 20 Jun 2024 00:00:34 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d4:7f:dd:d5:36:3b:55:b6:00:92:9e:3a:cc:2c:eb:49:4d:a2:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5DB0E362AFBC9002B2D552102DA11DA7A3436C1C Validity Not Before: Jun 19 19:44:56 2024 GMT Not After : Jun 20 21:19:56 2024 GMT Subject: CN=341B8333EB66FC5007C03E72A70445B4928F031F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:5f:6e:bb:15:c9:90:c3:59:e3:c3:a6:0d:40: 56:5b:50:f4:cf:09:3d:43:4f:7d:28:36:9d:e9:79: 7e:e0:22:8a:ac:00:61:c5:17:d5:b1:e2:86:df:fa: d7:de:ac:2a:8b:00:49:1b:1d:99:48:1f:b4:a4:e9: 8b:d9:9d:16:27:b1:82:10:73:23:1a:4c:96:9d:0b: 68:ee:4f:23:dd:d1:44:a8:bb:e4:62:64:2b:7c:37: 5f:a4:01:d8:7d:e5:fc:67:56:c1:e8:b7:a3:4f:58: 66:34:67:86:db:10:1e:23:cd:7d:fa:21:20:8d:c2: a8:eb:6b:c0:eb:ae:f1:9a:d8:9b:f9:b4:76:4f:8e: fd:b7:b0:c9:fb:3d:3a:6c:28:f7:cf:d5:23:e6:89: 9a:03:58:e0:14:5b:13:78:4d:0e:a1:1b:e9:40:9b: 14:bf:52:87:ae:68:94:59:48:11:1e:89:0a:3f:02: c2:9d:e3:6a:18:d8:4f:10:c7:dc:af:cd:f7:a8:a1: a6:3c:e3:2f:4f:4c:e2:08:48:cc:be:75:e9:9b:01: 46:d0:16:4b:ca:16:b5:b5:b3:72:b4:f9:31:24:b0: 05:3e:f4:49:9a:5c:fa:af:28:8b:ac:60:45:2f:35: 9a:35:40:4c:3c:60:11:73:74:75:2d:cf:08:f4:14: 3a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 34:1B:83:33:EB:66:FC:50:07:C0:3E:72:A7:04:45:B4:92:8F:03:1F X509v3 Authority Key Identifier: keyid:5D:B0:E3:62:AF:BC:90:02:B2:D5:52:10:2D:A1:1D:A7:A3:43:6C:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/0/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fd14eed6-48bf-4167-81bb-f675d6f19a3a/1/5DB0E362AFBC9002B2D552102DA11DA7A3436C1C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6b:1a:ea:58:7c:c6:23:93:dc:2b:da:76:01:b4:61:0e:7a:50: bf:4e:ca:35:05:4b:29:f5:22:99:06:41:62:c9:41:18:1c:30: f4:3e:56:ae:18:8a:80:c3:cd:cf:2f:c5:dd:c2:67:21:07:89: 08:9b:44:31:eb:60:36:0b:3e:71:39:4a:d2:29:05:de:cd:7d: 43:91:c4:7d:d8:1c:00:64:1d:88:d1:48:1d:93:de:e8:1d:c8: 95:54:14:6f:cb:d2:30:97:41:fb:4d:f8:eb:7c:82:42:38:76: de:ef:7f:e2:a4:3d:04:b5:d5:40:16:b7:68:82:02:c3:13:f1: e2:6c:9e:2b:14:10:af:35:e6:3e:fd:56:99:e7:75:fa:a2:57: 83:2d:74:de:55:1e:03:44:bf:0e:a1:f6:db:c2:30:7a:21:b3: d2:14:2c:77:0c:a8:13:1a:e2:1c:8a:70:0b:79:67:d2:bc:6f: 6c:22:d2:d9:e9:66:7d:7e:0d:e0:79:54:1d:50:e6:75:03:b9: 5e:2b:65:34:80:e8:8c:55:6d:72:cb:38:5c:42:e5:00:6c:73: fc:75:0d:cb:8d:e4:ac:55:0e:7f:c1:8e:e2:03:df:c1:d9:20: 99:63:1a:fe:69:75:77:87:d2:90:2a:dc:bd:aa:63:06:79:db: 58:80:97:1b -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUGNR/3dU2O1W2AJKeOsws60lNomQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdB MzQzNkMxQzAeFw0yNDA2MTkxOTQ0NTZaFw0yNDA2MjAyMTE5NTZaMDMxMTAvBgNV BAMTKDM0MUI4MzMzRUI2NkZDNTAwN0MwM0U3MkE3MDQ0NUI0OTI4RjAzMUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTX267FcmQw1njw6YNQFZbUPTP CT1DT30oNp3peX7gIoqsAGHFF9Wx4obf+tferCqLAEkbHZlIH7Sk6YvZnRYnsYIQ cyMaTJadC2juTyPd0USou+RiZCt8N1+kAdh95fxnVsHot6NPWGY0Z4bbEB4jzX36 ISCNwqjra8DrrvGa2Jv5tHZPjv23sMn7PTpsKPfP1SPmiZoDWOAUWxN4TQ6hG+lA mxS/UoeuaJRZSBEeiQo/AsKd42oY2E8Qx9yvzfeooaY84y9PTOIISMy+dembAUbQ FkvKFrW1s3K0+TEksAU+9EmaXPqvKIusYEUvNZo1QEw8YBFzdHUtzwj0FDofAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUNBuDM+tm/FAHwD5ypwRFtJKPAx8wHwYDVR0j BBgwFoAUXbDjYq+8kAKy1VIQLaEdp6NDbBwwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZmQxNGVlZDYtNDhiZi00MTY3LTgxYmItZjY3NWQ2ZjE5 YTNhLzEvNURCMEUzNjJBRkJDOTAwMkIyRDU1MjEwMkRBMTFEQTdBMzQzNkMxQy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS8zMjUzZDk3My1kNWJmLTQ1 NDEtYmNjMS0yNzY1NDNhMjVjN2QvMC81REIwRTM2MkFGQkM5MDAyQjJENTUyMTAy REExMURBN0EzNDM2QzFDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2ZkMTRlZWQ2LTQ4YmYtNDE2Ny04MWJiLWY2NzVkNmYxOWEzYS8xLzVEQjBFMzYy QUZCQzkwMDJCMkQ1NTIxMDJEQTExREE3QTM0MzZDMUMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBrGupY fMYjk9wr2nYBtGEOelC/Tso1BUsp9SKZBkFiyUEYHDD0PlauGIqAw83PL8Xdwmch B4kIm0Qx62A2Cz5xOUrSKQXezX1DkcR92BwAZB2I0Ugdk97oHciVVBRvy9Iwl0H7 TfjrfIJCOHbe73/ipD0EtdVAFrdoggLDE/HibJ4rFBCvNeY+/VaZ53X6oleDLXTe VR4DRL8OofbbwjB6IbPSFCx3DKgTGuIcinALeWfSvG9sItLZ6WZ9fg3geVQdUOZ1 A7leK2U0gOiMVW1yyzhcQuUAbHP8dQ3LjeSsVQ5/wY7iA9/B2SCZYxr+aXV3h9KQ Kty9qmMGedtYgJcb -----END CERTIFICATE-----Generated at Wed Jun 19 21:35:15 2024 by rpki-client on console.sobornost.net