$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft File: A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft (raw, json) Hash identifier: ObrIDBin5JXHzd1QT8vdamJq2EQhQLuTLW/yRubckAo= Subject key identifier: 78:1F:9E:DD:DA:B2:81:57:C9:29:10:4F:36:C4:FC:6C:EE:2C:3D:16 Authority key identifier: A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4 Certificate issuer: /CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4 Certificate serial: 1FE57D9D9CE98D767E7CB382E57E292B5E6320E7 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer Subject info access: rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft Manifest number: 038A Signing time: Wed 22 May 2024 01:00:57 +0000 Manifest this update: Wed 22 May 2024 00:55:57 +0000 Manifest next update: Thu 23 May 2024 02:12:57 +0000 Files and hashes: 1: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: SMSZB8wpVtSRYl1+06KZK/0op6J/ghngBhBk+x0FC1U=) 2: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: 80ZUUnVLacxMd5C8rL2zeQpWYPULkPBlGGWxaUPjhF4=) 3: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: A+dtJHk9x6wVW6MqVzvQjBJjP5URhPa7hwbl1on+wTQ=) 4: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: pjOVigVrZmwtH9ozJGSqaEAEoLWZgAZAg9DnN+uwLn8=) 5: A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl (hash: jrNTjQXyKa2O+cpPqyzo7kYCAILQHbR1Mg9Z60790+0=) 6: 5665DC4D31D2D8688792970C92271376F081D514.cer (hash: pMlpIqcyLswpJhvXr/AH7c8MKlSxPR/yHgW3u2Px+ww=) 7: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: PQqUgTvM7ETeWVignn6eJgWllMredVRO5ZH2rhFjrpk=) 8: 326130343a623930353a3a2f34382d3438203d3e203134363138.roa (hash: 6p4aFGl0dNowe4dDEzVpdf9C/WfLOZ1eqTuby7Oka6w=) 9: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: SWUG37car5l0A/TpLhoLLdjzhGw06y1FDsQ3WqIFwrg=) 10: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: gYJkyFEkIktyZ+ka0t8u++fV/z0PpJWYOpv24NWJTdo=) 11: 326130343a623930323a3a2f33322d3332203d3e203134363138.roa (hash: AUY26owpcyXy/fUm8K+N7VW1WAEzZ6zExFbyoLcHsl4=) 12: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: ivgkesCiMtIOryuo40vk9UC66yTXU489Jmz03jm+zKE=) 13: 326130343a623930323a3a2f33322d3332203d3e203136353039.roa (hash: 17p8tCrH2OQv6xPOIrX/oE0xrvRLHpB045zI9Rxvdjc=) 14: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 7ElQasPNwa4SPlS9mxZKUgHISHUBRxtLfLADoy9of5M=) 15: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: y+knOuhafLtEBuxaPCS6EE6OUDRji6/1V8kQ78sToLg=) 16: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: g/P6/bjazXTPQ2zZ4hjx2lH8j7sT8qYq3wC8kE0iLvc=) Validation: OK Signature path: rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 22 May 2024 23:00:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1f:e5:7d:9d:9c:e9:8d:76:7e:7c:b3:82:e5:7e:29:2b:5e:63:20:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4 Validity Not Before: May 22 00:55:57 2024 GMT Not After : May 23 02:12:57 2024 GMT Subject: CN=781F9EDDDAB28157C929104F36C4FC6CEE2C3D16 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:99:f7:92:3b:26:4d:60:9f:8e:85:c5:1e:12: 14:52:b0:5b:db:d3:7a:45:aa:e1:90:0b:7b:8d:5f: e9:98:b3:6d:29:5b:69:a9:b9:f7:5f:92:61:a7:bf: 24:6b:5c:af:53:9e:7c:3d:1e:7b:97:ec:c1:f4:77: 32:39:72:cf:cc:4e:0f:0b:f4:c7:69:33:46:89:c6: da:33:95:02:7f:b4:ec:fd:62:ba:ca:54:22:a1:da: 66:3f:d3:3d:24:fc:cd:a6:0b:1b:50:da:96:28:bf: 16:7a:2c:8d:a1:5d:9c:9b:b6:80:c3:6e:84:e9:9e: 8d:7c:e7:df:4e:90:75:73:db:b9:5e:c8:7b:70:20: ad:1e:cd:56:91:83:27:96:5d:d3:b8:29:0b:c6:da: bf:f9:be:01:f3:5b:55:55:cf:3d:a4:f7:d6:c1:66: cf:57:10:b2:2f:65:f5:bd:49:e4:da:ff:dd:23:23: f4:81:30:3c:f0:34:e9:1d:ed:7e:8c:23:b6:10:99: d6:d0:ac:c8:8b:e9:ab:63:a4:bf:93:7e:dd:74:8b: eb:e0:e5:f8:7c:32:9b:57:9c:cb:67:c8:2b:47:14: 35:73:49:a4:8f:2c:1c:ea:e2:25:61:ef:9e:8d:02: 29:38:e3:a5:85:c3:07:b1:d1:14:f6:66:94:74:1c: de:b9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 78:1F:9E:DD:DA:B2:81:57:C9:29:10:4F:36:C4:FC:6C:EE:2C:3D:16 X509v3 Authority Key Identifier: keyid:A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 9e:8c:c3:9b:e5:c3:b6:aa:4b:3c:c4:7f:c5:0d:1a:88:03:9b: 07:e7:1d:cb:77:2b:df:fc:f4:64:d2:93:f9:64:b1:64:a6:09: 91:43:df:a0:3e:69:2b:5b:3d:d4:5b:ca:84:69:a7:ae:6d:09: 3c:f5:0f:3a:00:46:91:c5:5c:88:f4:f5:02:e7:53:2e:14:99: 98:df:70:b6:c2:a0:c9:ec:dd:cf:51:02:cb:79:86:ad:6f:c7: b5:78:31:7e:b4:a8:c9:df:d6:b5:19:fc:45:83:17:09:3a:45: d3:c1:b5:eb:f9:48:3e:65:16:36:b7:bc:a1:99:9c:a3:4d:08: b7:08:db:fd:21:56:b4:a5:df:14:b8:35:ee:2d:0d:c2:0d:1e: 6c:63:ff:09:05:ad:44:68:cc:1a:bf:14:bf:a8:d6:26:2a:5e: 89:c9:12:be:cb:91:c2:bc:a9:02:3e:52:b1:99:b0:bb:81:0c: 59:02:4a:3d:04:95:2f:a3:c9:de:f1:fd:e0:47:f9:44:7d:e4: aa:76:26:5d:f7:60:fb:c6:b1:89:6d:79:b1:96:2f:2e:cf:fb: 61:88:55:31:c1:0a:ac:d5:b5:fc:15:f4:c4:59:90:0c:9e:c1: e7:02:b3:d0:a5:3e:f4:d0:19:55:5a:86:62:e4:b5:c6:dd:1b: c2:99:d4:cd -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUH+V9nZzpjXZ+fLOC5X4pK15jIOcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgxZWIzYTVlYjNkZjYzNDU1MWE5MDcyMmJjNjNhZDdl MDIyY2FjNDAeFw0yNDA1MjIwMDU1NTdaFw0yNDA1MjMwMjEyNTdaMDMxMTAvBgNV BAMTKDc4MUY5RUREREFCMjgxNTdDOTI5MTA0RjM2QzRGQzZDRUUyQzNEMTYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDomfeSOyZNYJ+OhcUeEhRSsFvb 03pFquGQC3uNX+mYs20pW2mpufdfkmGnvyRrXK9Tnnw9HnuX7MH0dzI5cs/MTg8L 9MdpM0aJxtozlQJ/tOz9YrrKVCKh2mY/0z0k/M2mCxtQ2pYovxZ6LI2hXZybtoDD boTpno18599OkHVz27leyHtwIK0ezVaRgyeWXdO4KQvG2r/5vgHzW1VVzz2k99bB Zs9XELIvZfW9SeTa/90jI/SBMDzwNOkd7X6MI7YQmdbQrMiL6atjpL+Tft10i+vg 5fh8MptXnMtnyCtHFDVzSaSPLBzq4iVh756NAik446WFwwex0RT2ZpR0HN65AgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUeB+e3dqygVfJKRBPNsT8bO4sPRYwHwYDVR0j BBgwFoAUqB6zpes99jRVGpByK8Y61+AiysQwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud HwRhMF8wXaBboFmGV3JzeW5jOi8vcnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5l dGxhYnMvMS9BODFFQjNBNUVCM0RGNjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0 LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUI2enBlczk5alJWR3BCeUs4WTYx LUFpeXNRLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8v cnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5ldGxhYnMvMS9BODFFQjNBNUVCM0RG NjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnozDm+XDtqpL PMR/xQ0aiAObB+cdy3cr3/z0ZNKT+WSxZKYJkUPfoD5pK1s91FvKhGmnrm0JPPUP OgBGkcVciPT1AudTLhSZmN9wtsKgyezdz1ECy3mGrW/HtXgxfrSoyd/WtRn8RYMX CTpF08G16/lIPmUWNre8oZmco00Itwjb/SFWtKXfFLg17i0Nwg0ebGP/CQWtRGjM Gr8Uv6jWJipeickSvsuRwrypAj5SsZmwu4EMWQJKPQSVL6PJ3vH94Ef5RH3kqnYm Xfdg+8axiW15sZYvLs/7YYhVMcEKrNW1/BX0xFmQDJ7B5wKz0KU+9NAZVVqGYuS1 xt0bwpnUzQ== -----END CERTIFICATE-----Generated at Wed May 22 05:02:40 2024 by rpki-client on console-ams.rpki-client.org