$ rpki-client -vvf repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft File: 67D62A55D09A0E54797A7BAD5C400454D5529546.mft (raw, json) Hash identifier: /E9gDvcsrFUyJkwgFuEfj3NiBEq2IZzsgfHxY9psrVE= Subject key identifier: 43:67:49:23:B5:CB:97:07:52:3F:90:18:E0:4E:38:E5:1E:3F:E8:08 Authority key identifier: 67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 Certificate issuer: /CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Certificate serial: 23AF058779EF06C1AC5970A03F24BE4F87D1F7A7 Authority info access: rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft Manifest number: 30 Signing time: Thu 04 Jul 2024 09:16:42 +0000 Manifest this update: Thu 04 Jul 2024 09:11:42 +0000 Manifest next update: Fri 05 Jul 2024 11:35:42 +0000 Files and hashes: 1: 326131343a3763303a333930303a3a2f34302d3430203d3e203630323233.roa (hash: lUXmvFAFSe1uqPva3xHnvuJtb66WhgbRxlbSn4nTkNw=) 2: 67D62A55D09A0E54797A7BAD5C400454D5529546.crl (hash: sJe1Zp/Xx0pvcJdnbsoHU09X9lzqYyY5J0O9uujipTk=) 3: 326131343a3763303a333830303a3a2f34302d3438203d3e20323135353830.roa (hash: OiIXAtns3uXFvVWOl31TEqksY0fuCEYEgxh1kGMMPqM=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.crl rsync://repo.rpki.space/repo/Infiniroute/1/5B8E21C6890BD79AB764D91B60C39C3B7E4985E1.mft rsync://rpki.ripe.net/repository/DEFAULT/W44hxokL15q3ZNkbYMOcO35JheE.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 05 Jul 2024 06:02:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:af:05:87:79:ef:06:c1:ac:59:70:a0:3f:24:be:4f:87:d1:f7:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=67D62A55D09A0E54797A7BAD5C400454D5529546 Validity Not Before: Jul 4 09:11:42 2024 GMT Not After : Jul 5 11:35:42 2024 GMT Subject: CN=43674923B5CB9707523F9018E04E38E51E3FE808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e1:0f:56:f4:ae:29:55:e9:16:b8:f0:c7:76:4f: c7:9a:1e:3b:0c:ab:e8:ad:87:c1:7f:57:8e:18:c1: b2:b1:92:bd:3b:1f:d3:f2:4b:b1:1c:30:c6:fa:a0: fb:03:7b:20:d6:ce:9c:94:4f:dc:5c:9a:98:a8:0b: 83:a3:fd:a6:38:d3:5c:ff:52:56:c5:a2:af:ef:c3: 1f:48:fc:0a:9e:dd:d1:50:f9:7c:f5:44:2a:f2:4c: 72:d5:a3:12:05:fa:4b:b5:cd:4c:20:22:a4:00:89: d5:2e:48:66:52:d1:f1:51:6b:da:ca:37:f7:be:fe: 0e:9b:c6:39:d3:87:e6:93:24:6d:ab:45:a2:6f:76: 58:4e:81:98:c8:95:5e:14:6e:a4:ab:d2:41:a7:f3: 90:db:a7:31:a3:af:f3:89:59:65:e6:91:a2:a2:82: 1d:cb:18:f6:5c:b9:a6:2a:1d:89:ff:a6:60:aa:86: af:08:43:bc:d6:88:d6:c2:95:0d:df:b4:65:bc:84: 0a:50:4b:12:c7:f7:47:7b:66:64:e7:ef:fa:79:e6: d8:43:6b:61:a1:8e:45:b8:94:23:c5:40:96:c3:0c: a0:46:39:8b:8a:0e:24:33:fb:80:5c:d6:22:9a:57: 93:32:87:8d:8a:b2:ac:b8:2c:ee:22:0a:18:aa:e0: 18:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:67:49:23:B5:CB:97:07:52:3F:90:18:E0:4E:38:E5:1E:3F:E8:08 X509v3 Authority Key Identifier: keyid:67:D6:2A:55:D0:9A:0E:54:79:7A:7B:AD:5C:40:04:54:D5:52:95:46 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.crl Authority Information Access: CA Issuers - URI:rsync://repo.rpki.space/repo/Infiniroute/1/67D62A55D09A0E54797A7BAD5C400454D5529546.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/2/67D62A55D09A0E54797A7BAD5C400454D5529546.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 64:08:65:9c:0a:3a:fd:2f:10:48:51:06:7b:b5:df:6b:e7:f7: 27:cb:f2:af:77:64:f1:88:72:99:98:c8:31:9a:68:0c:d5:60: 53:f7:0c:23:35:61:7e:69:1b:98:5a:21:cf:61:0b:1a:0d:df: a9:e9:29:99:7a:f6:0c:5b:34:9a:76:50:78:7d:87:92:7c:ed: 34:85:90:59:98:17:04:2c:3d:8c:1e:e9:e1:b0:59:ca:72:e7: a8:98:78:88:50:b6:9b:a5:90:70:c4:9f:5a:e7:2f:6c:08:85: d2:d9:ef:a9:98:d0:22:6c:98:0c:67:2f:07:c7:83:4c:bd:d5: 31:8d:f9:37:a4:75:96:8a:f3:0b:32:5a:08:fa:d7:0a:2c:c8: 89:28:f1:6d:1c:0b:68:aa:f3:d2:c6:a3:00:2a:01:1c:bb:e0: 0a:90:6b:d2:58:61:2a:f7:f7:fb:a8:d2:4e:e8:c5:5d:28:8f: 24:d2:5a:a7:69:99:7c:ee:02:26:1f:76:f3:39:f4:1a:df:e5: 85:d3:1a:e4:4e:12:ca:50:c7:f5:aa:3f:17:ec:9f:33:34:52: 3e:7f:e2:22:ed:ed:55:53:c7:3b:08:a0:f3:75:89:c4:8a:49: 47:a8:76:5a:d5:ad:4f:16:e3:37:ae:a6:f1:04:2a:86:3b:7b: f7:57:16:25 -----BEGIN CERTIFICATE----- MIIE7DCCA9SgAwIBAgIUI68Fh3nvBsGsWXCgPyS+T4fR96cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjdENjJBNTVEMDlBMEU1NDc5N0E3QkFENUM0MDA0NTRE NTUyOTU0NjAeFw0yNDA3MDQwOTExNDJaFw0yNDA3MDUxMTM1NDJaMDMxMTAvBgNV BAMTKDQzNjc0OTIzQjVDQjk3MDc1MjNGOTAxOEUwNEUzOEU1MUUzRkU4MDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhD1b0rilV6Ra48Md2T8eaHjsM q+ith8F/V44YwbKxkr07H9PyS7EcMMb6oPsDeyDWzpyUT9xcmpioC4Oj/aY401z/ UlbFoq/vwx9I/Aqe3dFQ+Xz1RCryTHLVoxIF+ku1zUwgIqQAidUuSGZS0fFRa9rK N/e+/g6bxjnTh+aTJG2rRaJvdlhOgZjIlV4UbqSr0kGn85DbpzGjr/OJWWXmkaKi gh3LGPZcuaYqHYn/pmCqhq8IQ7zWiNbClQ3ftGW8hApQSxLH90d7ZmTn7/p55thD a2GhjkW4lCPFQJbDDKBGOYuKDiQz+4Bc1iKaV5Myh42Ksqy4LO4iChiq4BiLAgMB AAGjggH2MIIB8jAdBgNVHQ4EFgQUQ2dJI7XLlwdSP5AY4E445R4/6AgwHwYDVR0j BBgwFoAUZ9YqVdCaDlR5enutXEAEVNVSlUYwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMi82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNy bDBzBggrBgEFBQcBAQRnMGUwYwYIKwYBBQUHMAKGV3JzeW5jOi8vcmVwby5ycGtp LnNwYWNlL3JlcG8vSW5maW5pcm91dGUvMS82N0Q2MkE1NUQwOUEwRTU0Nzk3QTdC QUQ1QzQwMDQ1NEQ1NTI5NTQ2LmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUH MAuGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMi82N0Q2 MkE1NUQwOUEwRTU0Nzk3QTdCQUQ1QzQwMDQ1NEQ1NTI5NTQ2Lm1mdDAYBgNVHSAB Af8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYE AgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA ZAhlnAo6/S8QSFEGe7Xfa+f3J8vyr3dk8YhymZjIMZpoDNVgU/cMIzVhfmkbmFoh z2ELGg3fqekpmXr2DFs0mnZQeH2HknztNIWQWZgXBCw9jB7p4bBZynLnqJh4iFC2 m6WQcMSfWucvbAiF0tnvqZjQImyYDGcvB8eDTL3VMY35N6R1lorzCzJaCPrXCizI iSjxbRwLaKrz0sajACoBHLvgCpBr0lhhKvf3+6jSTujFXSiPJNJap2mZfO4CJh92 8zn0Gt/lhdMa5E4SylDH9ao/F+yfMzRSPn/iIu3tVVPHOwig83WJxIpJR6h2WtWt TxbjN66m8QQqhjt791cWJQ== -----END CERTIFICATE-----Generated at Thu Jul 4 10:37:23 2024 by rpki-client on console-fra.rpki-client.org