$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft File: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft (raw, json) Hash identifier: 8328Hfrqbbkw0pv1AmqbtJu77oQKPREjjrdTy0Afz7s= Subject key identifier: F3:17:38:FF:03:27:9E:19:B4:61:90:D7:72:79:17:70:28:BB:F5:BD Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Certificate serial: 7E11577F28AEBF26A0162D25E63E5BABFBCCE873 Authority info access: rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft Manifest number: 0209 Signing time: Fri 17 May 2024 22:25:13 +0000 Manifest this update: Fri 17 May 2024 22:20:13 +0000 Manifest next update: Sat 18 May 2024 23:09:13 +0000 Files and hashes: 1: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (hash: g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY=) 2: 326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (hash: WhLiHVWIRrDdTM2/q/GOyUAgwW6kR1FOY914Re+OVhA=) 3: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl (hash: +E7J1CJjV/9Nmu76qjJ3HQf6A9sJgN8WNPKAn72hE6o=) 4: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (hash: bVgB6CY0EAnJitkx1Xv6J5wT2KqsqRck5c0cRpR6E6U=) 5: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (hash: yvJARCYuZKCcQdrZehBg3pmqGSxsDFgahe/Ya4VuMCA=) 6: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (hash: pSS9lyg/r63hrLK6N28zfZCmJTpAFyPUHcuhnyC7Nds=) 7: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (hash: xB9YMf9WLWlWJJykuB4jTj50Tz2/aBV24p0/bWTRB1I=) 8: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (hash: 5jqra/OjEkdlCmNdY3X6oPmDKMUiE1/Q7yXAt6z6K6A=) 9: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (hash: Rd+dhCr5rYQwNoo+Nfmrr7x2WYwry9aUIha3WakJOtM=) 10: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (hash: 1rnTFeDfRItQJKSerIoroO/PmIgosaC04bWnM0thBoA=) 11: 326131323a646434373a383630303a3a2f34382d3438203d3e203530353535.roa (hash: bCptdjmvnQpm+VU0b5omGZ2gseXuWLCMxMKaXw2vivs=) 12: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (hash: HoZAYr0ETH2ygTyVLT/TWLTc95YKlgYR4RlonB/RlJc=) 13: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (hash: TVIb8+DyhB/YMbNeWImxDAGqBc36mjWnaSKjIIF5q1w=) 14: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (hash: 8eFv2RBBtby1mcmk3KpRwsZCQZSgRLjiy2M/X1iLuSk=) 15: 326131323a646434373a383630623a3a2f34382d3438203d3e203530353535.roa (hash: P8JskXQq8rhMqJmwd4lSnoyKOklqs5FaDVyanSYeqcg=) 16: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (hash: q33k4Pm8Tc9+J+nVAuAOoyc9sZ/RYxCpNBmpPMyinh4=) 17: 326131323a646434373a383630613a3a2f34382d3438203d3e203530353535.roa (hash: UUvAqv9dTkpD3vnCpeK0nyckqw5fsjh4xIE1BuffKT4=) 18: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (hash: Y30p0MzCB2JiuAvDBKLSZwu+ZD8hbij5EEaa/uw9slo=) 19: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (hash: KdHvWmuZQHcbpceQ+U8MEcEFLjMenHgqGnoMsp2lirk=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.crl rsync://rpki.co/repo/AS945/1/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.mft rsync://dev.tw/rpki/August/5/6604289C7E39E08E1AE1255CEE73C05BFD99F3E6.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 18 May 2024 11:02:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:11:57:7f:28:ae:bf:26:a0:16:2d:25:e6:3e:5b:ab:fb:cc:e8:73 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Validity Not Before: May 17 22:20:13 2024 GMT Not After : May 18 23:09:13 2024 GMT Subject: CN=F31738FF03279E19B46190D77279177028BBF5BD Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:ef:99:bd:15:c9:74:bc:77:81:12:48:9d:df: aa:70:65:dc:ec:92:9f:a1:6e:4b:1d:c6:8f:41:f6: f5:7f:ec:89:8a:25:5f:cc:bb:eb:67:7f:ec:0e:32: 90:2d:68:af:b9:62:9b:3a:fe:ec:ca:c6:ae:ea:32: cc:b2:15:26:cb:ab:35:52:96:3c:58:71:c9:ce:b9: 74:6a:ca:54:f4:f0:be:1a:2f:2c:a7:6f:cf:7a:f7: 6b:cc:69:05:1c:12:33:f6:00:b6:f6:f3:a8:53:33: b1:cf:ab:51:9a:5d:db:4c:b3:5e:a8:20:f3:96:2c: 4c:0b:6a:c4:7b:db:65:96:9d:5f:84:6b:f2:dc:6d: d1:d3:32:74:bd:8c:05:05:90:0d:6e:2b:06:b0:c1: 6f:fe:5a:01:34:1a:fe:ed:a4:6d:d3:11:60:d1:70: 8c:49:5f:1a:5b:f8:c1:a9:eb:49:a9:c4:89:c3:1e: 17:f9:e8:0c:9c:33:3c:f6:f3:2f:df:07:85:07:f7: ac:bc:ec:6f:02:4d:1f:5c:46:a9:58:de:69:7a:2a: 02:63:b6:5e:30:bf:4a:29:6b:bf:b4:e7:ac:ad:0d: 7d:37:45:4e:b3:b6:65:2f:a4:6e:bf:e8:ec:2d:0d: 06:12:5d:3c:9f:a9:c3:25:73:65:55:ed:3c:23:d4: 97:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F3:17:38:FF:03:27:9E:19:B4:61:90:D7:72:79:17:70:28:BB:F5:BD X509v3 Authority Key Identifier: keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki.co/repo/AS945/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0a:07:b3:70:84:2c:68:0f:83:45:e4:f7:6e:2c:35:5e:23:73: 24:e7:ec:c0:7e:56:47:b3:f7:22:f4:7e:a8:51:bc:c1:2c:a7: 3a:74:4c:c8:6b:e6:8a:0e:fe:28:1d:4d:15:bf:6b:ec:8a:77: e2:4a:72:af:c1:39:9d:fb:08:6a:d0:f0:58:ff:64:d4:8c:ea: ac:42:0e:d0:7b:54:95:81:e1:a6:9e:63:6b:2b:65:10:57:52: 35:db:f7:90:8f:8c:29:cb:50:21:ea:4b:00:93:de:a3:1e:15: 6c:b7:c9:22:75:b8:8d:a5:c9:89:e0:c9:d2:86:5f:f3:24:86: 68:21:89:57:4a:2e:83:f9:60:93:84:fe:3d:b1:67:7f:c3:7d: f4:5a:7e:c7:f7:4f:ef:b0:8c:d6:0f:a6:8b:99:b5:41:7e:77: f4:50:31:7a:6f:d7:f9:42:4f:90:08:ae:fd:9b:e4:d7:c1:4d: d3:69:81:c4:74:ad:54:cd:29:b5:30:c0:fc:73:d8:fb:75:24: 39:5e:2d:87:b1:71:0e:7a:87:be:9d:5d:38:30:8d:ce:7c:ff: f3:e1:ed:3e:94:1e:5c:8e:73:d2:e8:c7:08:a8:b3:96:d9:0f: 69:fa:f4:02:fd:b5:37:fa:8e:1e:50:0d:3b:ad:d5:7c:b3:69: 31:e3:cf:72 -----BEGIN CERTIFICATE----- MIIE6jCCA9KgAwIBAgIUfhFXfyiuvyagFi0l5j5bq/vM6HMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD RENDNThBMzAeFw0yNDA1MTcyMjIwMTNaFw0yNDA1MTgyMzA5MTNaMDMxMTAvBgNV BAMTKEYzMTczOEZGMDMyNzlFMTlCNDYxOTBENzcyNzkxNzcwMjhCQkY1QkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCw75m9Fcl0vHeBEkid36pwZdzs kp+hbksdxo9B9vV/7ImKJV/Mu+tnf+wOMpAtaK+5Yps6/uzKxq7qMsyyFSbLqzVS ljxYccnOuXRqylT08L4aLyynb89692vMaQUcEjP2ALb286hTM7HPq1GaXdtMs16o IPOWLEwLasR722WWnV+Ea/LcbdHTMnS9jAUFkA1uKwawwW/+WgE0Gv7tpG3TEWDR cIxJXxpb+MGp60mpxInDHhf56AycMzz28y/fB4UH96y87G8CTR9cRqlY3ml6KgJj tl4wv0opa7+056ytDX03RU6ztmUvpG6/6OwtDQYSXTyfqcMlc2VV7Twj1JdjAgMB AAGjggH0MIIB8DAdBgNVHQ4EFgQU8xc4/wMnnhm0YZDXcnkXcCi79b0wHwYDVR0j BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1 OEEzLmNybDBlBggrBgEFBQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBr aS5jby9yZXBvL0FTOTQ1LzEvMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZD RkFDRENDNThBMy5jZXIwdgYIKwYBBQUHAQsEajBoMGYGCCsGAQUFBzALhlpyc3lu YzovL3JlcG8ua2FnbC5tZS9ycGtpL0tlYXRvbkFHTGFpci1URVNULzEvMDI4NzZD MTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFDRENDNThBMy5tZnQwGAYDVR0gAQH/ BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIA AgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAoH s3CELGgPg0Xk924sNV4jcyTn7MB+Vkez9yL0fqhRvMEspzp0TMhr5ooO/igdTRW/ a+yKd+JKcq/BOZ37CGrQ8Fj/ZNSM6qxCDtB7VJWB4aaeY2srZRBXUjXb95CPjCnL UCHqSwCT3qMeFWy3ySJ1uI2lyYngydKGX/MkhmghiVdKLoP5YJOE/j2xZ3/DffRa fsf3T++wjNYPpouZtUF+d/RQMXpv1/lCT5AIrv2b5NfBTdNpgcR0rVTNKbUwwPxz 2Pt1JDleLYexcQ56h76dXTgwjc58//Ph7T6UHlyOc9Loxwios5bZD2n69AL9tTf6 jh5QDTut1XyzaTHjz3I= -----END CERTIFICATE-----Generated at Fri May 17 22:51:20 2024 by rpki-client on console-ams.rpki-client.org