$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: KqztqhftleFoYJChgJjF5VzMTksi2xoHWmc7KKBO6Rc= Subject key identifier: 91:2E:3A:A4:4D:53:DA:36:49:78:5A:30:F2:78:54:92:A9:10:F1:C1 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 6C324B5B4AA553ACAADB40FDF522646E9DB5C7E0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: 9B Signing time: Sun 20 Apr 2025 10:02:18 +0000 Manifest this update: Sun 20 Apr 2025 09:57:18 +0000 Manifest next update: Mon 21 Apr 2025 13:12:18 +0000 Files and hashes: 1: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 2: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: dmzQcDJ/UzLSLps2J/koTB1INLUVhrg4UTmNbAniqeI=) 3: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) 4: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 5: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 6: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 21 Apr 2025 13:12:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:32:4b:5b:4a:a5:53:ac:aa:db:40:fd:f5:22:64:6e:9d:b5:c7:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: Apr 20 09:57:18 2025 GMT Not After : Apr 21 13:12:18 2025 GMT Subject: CN=912E3AA44D53DA3649785A30F2785492A910F1C1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:96:3f:0e:0a:30:a6:13:33:f6:c0:07:a7:3b:a0: 6a:58:e2:cd:bc:06:9e:cc:bd:7d:8c:73:49:61:e9: 67:f7:e3:d9:3e:43:7d:db:32:45:fd:f2:b6:20:76: 82:fc:fc:75:f7:e1:7b:6c:9d:71:1d:d5:a9:6f:b8: 61:c5:da:23:53:ba:e6:23:1a:43:48:ce:7a:01:e8: af:bf:e3:0c:a7:ff:dc:88:4c:cc:12:3a:cd:6d:67: d3:a6:be:4c:8f:17:f3:ed:56:0b:34:21:8c:fb:b2: 85:3d:22:b2:ef:01:bc:c9:30:de:53:41:2e:58:3c: 00:95:ca:dc:d0:b5:dd:30:2e:ea:09:df:b1:e1:9e: 3c:f4:51:5e:6f:0a:60:04:70:62:10:89:22:1a:5e: b0:3d:57:f9:b1:07:45:4d:91:4f:32:6d:c0:fa:4d: fc:77:df:a7:c5:f7:86:77:64:12:b5:14:32:85:62: b3:07:12:39:05:d6:c9:8c:42:5d:10:41:f8:10:4a: 36:c7:44:ca:1b:54:c0:30:75:c2:7a:17:07:9f:67: c6:aa:4e:af:df:64:47:d0:cd:b6:33:c4:58:cd:b6: 13:58:ce:14:c3:67:5c:06:bb:32:7c:b3:ea:a9:33: c7:f5:9d:db:e5:e9:d1:fb:f4:80:9f:6c:70:6f:03: 4e:07 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2E:3A:A4:4D:53:DA:36:49:78:5A:30:F2:78:54:92:A9:10:F1:C1 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:a1:9a:6b:6c:31:b3:2f:e5:94:80:e7:48:37:ca:76:eb:6b: f5:e5:9e:46:18:f2:e3:f7:a6:54:68:f0:f4:81:c6:f8:66:9a: 06:9d:64:31:13:15:a0:a7:ae:ca:78:87:aa:3d:84:4c:d6:10: 3f:3a:05:6b:d9:8d:e0:3e:82:e2:dd:98:91:05:b7:17:8c:7d: 37:56:db:82:7d:10:f8:54:84:10:e8:b4:ce:12:98:77:94:7d: ef:9a:87:77:1f:7d:fa:1b:d7:9a:b4:ea:af:50:ed:da:de:12: 9d:75:8b:6c:5f:95:d1:45:08:66:9e:01:b3:65:36:07:6e:62: 3b:cb:85:0a:d2:54:b9:57:5f:1c:bd:51:22:80:70:b4:df:83: 9e:9e:1f:8f:c2:78:5b:2b:61:30:af:72:61:2f:52:de:a7:dd: 2f:35:0c:5c:7a:91:e5:fe:e6:9e:75:0d:b5:ca:4a:ea:09:1a: 3d:41:d1:fe:b0:39:05:b4:9f:a0:4b:3d:f6:90:9d:d3:df:72: f4:b1:73:17:c5:9f:ce:6a:a2:9c:5f:fc:25:ef:ab:f2:f3:b8: aa:98:7d:e7:9a:52:37:eb:76:60:94:0f:87:85:58:ce:5b:62: 35:83:ab:49:f5:d6:54:36:19:a9:40:d8:be:c4:d1:93:42:a7: 89:81:53:dc -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUbDJLW0qlU6yq20D99SJkbp21x+AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA0MjAwOTU3MThaFw0yNTA0MjExMzEyMThaMDMxMTAvBgNV BAMTKDkxMkUzQUE0NEQ1M0RBMzY0OTc4NUEzMEYyNzg1NDkyQTkxMEYxQzEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCWPw4KMKYTM/bAB6c7oGpY4s28 Bp7MvX2Mc0lh6Wf349k+Q33bMkX98rYgdoL8/HX34XtsnXEd1alvuGHF2iNTuuYj GkNIznoB6K+/4wyn/9yITMwSOs1tZ9OmvkyPF/PtVgs0IYz7soU9IrLvAbzJMN5T QS5YPACVytzQtd0wLuoJ37Hhnjz0UV5vCmAEcGIQiSIaXrA9V/mxB0VNkU8ybcD6 Tfx336fF94Z3ZBK1FDKFYrMHEjkF1smMQl0QQfgQSjbHRMobVMAwdcJ6FwefZ8aq Tq/fZEfQzbYzxFjNthNYzhTDZ1wGuzJ8s+qpM8f1ndvl6dH79ICfbHBvA04HAgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUkS46pE1T2jZJeFow8nhUkqkQ8cEwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACahmmtsMbMv5ZSA 50g3ynbra/XlnkYY8uP3plRo8PSBxvhmmgadZDETFaCnrsp4h6o9hEzWED86BWvZ jeA+guLdmJEFtxeMfTdW24J9EPhUhBDotM4SmHeUfe+ah3cfffob15q06q9Q7dre Ep11i2xfldFFCGaeAbNlNgduYjvLhQrSVLlXXxy9USKAcLTfg56eH4/CeFsrYTCv cmEvUt6n3S81DFx6keX+5p51DbXKSuoJGj1B0f6wOQW0n6BLPfaQndPfcvSxcxfF n85qopxf/CXvq/LzuKqYfeeaUjfrdmCUD4eFWM5bYjWDq0n11lQ2GalA2L7E0ZNC p4mBU9w= -----END CERTIFICATE-----Generated at Sun Apr 20 20:24:11 2025 by rpki-client