$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft File: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft (raw, json) Hash identifier: zrepSQD2Mqxz4cLNPq0mmdD1buiS5ZE+Y+OOLv4ZP7Y= Subject key identifier: DE:99:12:65:8C:7B:BD:B0:8E:7F:56:D9:D4:26:60:45:A0:96:6D:FC Authority key identifier: 02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 Certificate issuer: /CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Certificate serial: 1E60C60525C885AC5CEA0B143F3415BE232AD6EE Authority info access: rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft Manifest number: 0266 Signing time: Fri 26 Jul 2024 12:43:48 +0000 Manifest this update: Fri 26 Jul 2024 12:38:48 +0000 Manifest next update: Sat 27 Jul 2024 14:13:48 +0000 Files and hashes: 1: 326131323a646434373a383630663a3a2f34382d3438203d3e203530353535.roa (hash: KdHvWmuZQHcbpceQ+U8MEcEFLjMenHgqGnoMsp2lirk=) 2: 326131323a646434373a383630623a3a2f34382d3438203d3e203530353535.roa (hash: P8JskXQq8rhMqJmwd4lSnoyKOklqs5FaDVyanSYeqcg=) 3: 326131323a646434373a383630633a3a2f34382d3438203d3e203530353535.roa (hash: 5jqra/OjEkdlCmNdY3X6oPmDKMUiE1/Q7yXAt6z6K6A=) 4: 326131323a646434373a383630313a3a2f34382d3438203d3e203530353535.roa (hash: xB9YMf9WLWlWJJykuB4jTj50Tz2/aBV24p0/bWTRB1I=) 5: 326131323a646434373a383630323a3a2f34382d3438203d3e203530353535.roa (hash: HoZAYr0ETH2ygTyVLT/TWLTc95YKlgYR4RlonB/RlJc=) 6: 326131323a646434373a383630333a3a2f34382d3438203d3e203530353535.roa (hash: TVIb8+DyhB/YMbNeWImxDAGqBc36mjWnaSKjIIF5q1w=) 7: 326131323a646434373a383630303a3a2f34382d3438203d3e203530353535.roa (hash: bCptdjmvnQpm+VU0b5omGZ2gseXuWLCMxMKaXw2vivs=) 8: 326131323a646434373a383630363a3a2f34382d3438203d3e203530353535.roa (hash: WhLiHVWIRrDdTM2/q/GOyUAgwW6kR1FOY914Re+OVhA=) 9: 326131323a646434373a383630353a3a2f34382d3438203d3e203530353535.roa (hash: 8eFv2RBBtby1mcmk3KpRwsZCQZSgRLjiy2M/X1iLuSk=) 10: 02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl (hash: 19VITQBw9dX1p436F/9PAtTyNmFsng3FEB0i1tcnL50=) 11: 326131323a646434373a383630343a3a2f34382d3438203d3e203530353535.roa (hash: q33k4Pm8Tc9+J+nVAuAOoyc9sZ/RYxCpNBmpPMyinh4=) 12: 326131323a646434373a383630653a3a2f34382d3438203d3e203530353535.roa (hash: g1At5H1WGB9pJd143T4S3ULq7iOWiXWKs6MoqCgmWaY=) 13: 326131323a646434373a383630393a3a2f34382d3438203d3e203530353535.roa (hash: 1rnTFeDfRItQJKSerIoroO/PmIgosaC04bWnM0thBoA=) 14: 326131323a646434373a383630373a3a2f34382d3438203d3e203530353535.roa (hash: Rd+dhCr5rYQwNoo+Nfmrr7x2WYwry9aUIha3WakJOtM=) 15: 326131323a646434373a383630383a3a2f34382d3438203d3e203530353535.roa (hash: yvJARCYuZKCcQdrZehBg3pmqGSxsDFgahe/Ya4VuMCA=) 16: 326131323a646434373a383630613a3a2f34382d3438203d3e203530353535.roa (hash: UUvAqv9dTkpD3vnCpeK0nyckqw5fsjh4xIE1BuffKT4=) 17: 326131323a646434373a383630643a3a2f34382d3438203d3e203530353535.roa (hash: pSS9lyg/r63hrLK6N28zfZCmJTpAFyPUHcuhnyC7Nds=) 18: 326131323a646434373a383630303a3a2f34302d3430203d3e2030.roa (hash: bVgB6CY0EAnJitkx1Xv6J5wT2KqsqRck5c0cRpR6E6U=) 19: 326131323a646434373a383630303a3a2f34342d3434203d3e203530353535.roa (hash: Y30p0MzCB2JiuAvDBKLSZwu+ZD8hbij5EEaa/uw9slo=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.crl rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.mft rsync://dev.tw/rpki/August/5/765B8B37E5536BE49A0BF3D60EF667B6F4C850C1.cer rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.crl rsync://dev.tw/rpki/August/5/9D620B45C9098506AC4BF1184BEE6CDBE9D71C4C.mft rsync://rpki.ripe.net/repository/DEFAULT/nWILRckJhQasS_EYS-5s2-nXHEw.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 27 Jul 2024 01:14:18 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1e:60:c6:05:25:c8:85:ac:5c:ea:0b:14:3f:34:15:be:23:2a:d6:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02876C11924CBDA01BE1AD39A3206CFACDCC58A3 Validity Not Before: Jul 26 12:38:48 2024 GMT Not After : Jul 27 14:13:48 2024 GMT Subject: CN=DE9912658C7BBDB08E7F56D9D4266045A0966DFC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:00:96:07:6e:76:7d:68:a7:04:2d:19:16:64: 78:bd:62:f8:f0:24:f6:b2:5e:b9:e8:ab:c1:da:b4: 45:c6:fb:65:e0:8d:d3:fe:01:b6:d1:f1:b0:79:90: 99:d5:f0:20:ae:cf:a7:c7:69:25:63:89:67:4b:53: 9f:95:bf:68:16:f0:5c:8c:bd:c4:84:ab:88:25:2c: e2:77:8e:55:4b:b0:45:08:94:0e:69:ed:ec:e2:00: 9f:e3:90:c5:d5:d1:a3:8b:e8:d6:74:15:92:e3:80: a6:d5:54:3d:80:c6:e9:18:21:0e:16:4f:9f:a7:8a: 2a:ef:8b:51:c2:49:db:52:2d:8c:12:99:de:7b:63: c4:1b:48:c0:fd:2e:44:79:c8:5e:13:6d:e3:33:9a: 0f:68:91:ff:06:3f:17:c8:24:fc:51:27:eb:28:05: c8:1f:2f:11:da:08:1a:35:2b:38:87:2a:08:b3:cf: a2:ee:9f:d7:b5:fe:f3:d3:3e:d5:7f:08:41:d5:e4: 38:ab:f0:a4:5f:55:f7:64:e2:d4:e7:90:f9:65:ba: fb:90:63:8f:ec:11:cf:5e:44:d7:9b:87:29:13:c1: 03:5d:e6:e5:82:07:59:b6:b7:c9:d7:36:fe:62:67: ea:62:56:33:49:a4:34:e6:a8:7d:2e:27:01:84:d2: fe:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DE:99:12:65:8C:7B:BD:B0:8E:7F:56:D9:D4:26:60:45:A0:96:6D:FC X509v3 Authority Key Identifier: keyid:02:87:6C:11:92:4C:BD:A0:1B:E1:AD:39:A3:20:6C:FA:CD:CC:58:A3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair-TEST/1/02876C11924CBDA01BE1AD39A3206CFACDCC58A3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:6c:96:8a:4c:1c:3b:9c:11:af:1e:04:8e:28:8d:d0:21:49: ee:93:75:00:75:84:b1:fc:c0:7a:6b:95:dc:60:16:d4:42:93: 1a:10:99:be:93:a8:e5:bf:f2:11:88:f7:95:87:6f:bd:45:f1: 64:0a:f3:a3:c2:a0:68:6a:88:6b:2d:4b:c2:4f:78:49:63:8e: 99:b6:78:1a:cb:5b:2c:c5:8f:a7:9b:f6:f4:ac:de:36:df:d1: 7e:01:3c:6e:a9:0e:5f:76:91:30:cd:7f:71:8f:62:cb:4a:0b: 15:cf:4e:fe:aa:46:f3:76:bf:e6:29:60:19:c0:35:01:5a:4c: 4d:01:8c:ce:47:0a:c6:3a:94:37:4c:6e:da:4a:7d:9d:76:bd: dc:dd:a8:16:33:fe:87:74:57:4b:6c:a1:37:0d:f4:9a:68:27: b0:94:ee:c5:3a:ce:d8:a1:13:78:39:e1:e0:a8:ab:2b:6b:7d: 52:9a:c9:c3:99:6a:b2:13:9e:e4:80:39:80:c9:67:12:bf:d5: 13:df:68:d3:ec:4d:9c:d8:b0:6f:d5:58:9e:23:e6:f6:d0:8d: 46:a0:ad:02:37:31:0f:17:fa:0f:76:e2:93:0e:cb:41:87:47: d4:f0:92:1e:36:f3:21:4c:e6:4d:3b:77:fe:72:96:b7:9a:1c: 4c:71:aa:63 -----BEGIN CERTIFICATE----- MIIFGTCCBAGgAwIBAgIUHmDGBSXIhaxc6gsUPzQVviMq1u4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDI4NzZDMTE5MjRDQkRBMDFCRTFBRDM5QTMyMDZDRkFD RENDNThBMzAeFw0yNDA3MjYxMjM4NDhaFw0yNDA3MjcxNDEzNDhaMDMxMTAvBgNV BAMTKERFOTkxMjY1OEM3QkJEQjA4RTdGNTZEOUQ0MjY2MDQ1QTA5NjZERkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClAJYHbnZ9aKcELRkWZHi9Yvjw JPayXrnoq8HatEXG+2XgjdP+AbbR8bB5kJnV8CCuz6fHaSVjiWdLU5+Vv2gW8FyM vcSEq4glLOJ3jlVLsEUIlA5p7eziAJ/jkMXV0aOL6NZ0FZLjgKbVVD2AxukYIQ4W T5+niirvi1HCSdtSLYwSmd57Y8QbSMD9LkR5yF4TbeMzmg9okf8GPxfIJPxRJ+so BcgfLxHaCBo1KziHKgizz6Lun9e1/vPTPtV/CEHV5Dir8KRfVfdk4tTnkPlluvuQ Y4/sEc9eRNebhykTwQNd5uWCB1m2t8nXNv5iZ+piVjNJpDTmqH0uJwGE0v7vAgMB AAGjggIjMIICHzAdBgNVHQ4EFgQU3pkSZYx7vbCOf1bZ1CZgRaCWbfwwHwYDVR0j BBgwFoAUAodsEZJMvaAb4a05oyBs+s3MWKMwDgYDVR0PAQH/BAQDAgeAMGsGA1Ud HwRkMGIwYKBeoFyGWnJzeW5jOi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdM YWlyLVRFU1QvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1 OEEzLmNybDCBkwYIKwYBBQUHAQEEgYYwgYMwgYAGCCsGAQUFBzAChnRyc3luYzov L3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY4ZmRlZWMwYzAx OTAzM2RiZGVjYzRmYTQvMS8wMjg3NkMxMTkyNENCREEwMUJFMUFEMzlBMzIwNkNG QUNEQ0M1OEEzLmNlcjB2BggrBgEFBQcBCwRqMGgwZgYIKwYBBQUHMAuGWnJzeW5j Oi8vcmVwby5rYWdsLm1lL3Jwa2kvS2VhdG9uQUdMYWlyLVRFU1QvMS8wMjg3NkMx MTkyNENCREEwMUJFMUFEMzlBMzIwNkNGQUNEQ0M1OEEzLm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf2yW ikwcO5wRrx4EjiiN0CFJ7pN1AHWEsfzAemuV3GAW1EKTGhCZvpOo5b/yEYj3lYdv vUXxZArzo8KgaGqIay1Lwk94SWOOmbZ4GstbLMWPp5v29KzeNt/RfgE8bqkOX3aR MM1/cY9iy0oLFc9O/qpG83a/5ilgGcA1AVpMTQGMzkcKxjqUN0xu2kp9nXa93N2o FjP+h3RXS2yhNw30mmgnsJTuxTrO2KETeDnh4KirK2t9UprJw5lqshOe5IA5gMln Er/VE99o0+xNnNiwb9VYniPm9tCNRqCtAjcxDxf6D3bikw7LQYdH1PCSHjbzIUzm TTt3/nKWt5ocTHGqYw== -----END CERTIFICATE-----Generated at Fri Jul 26 14:12:21 2024 by rpki-client on console-ams.rpki-client.org