$ rpki-client -vvf repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft File: A640AA61F1D62B9C940459804AE11BE99AD43842.mft (raw, json) Hash identifier: qFCD/sDoqqd95w05vYlSdTDJPYalftVZ/xTK3YnPh8g= Subject key identifier: E1:E0:69:9B:5C:C2:5A:B4:01:8F:EA:9D:B7:E4:3B:1E:E9:0B:ED:88 Authority key identifier: A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42 Certificate issuer: /CN=a640aa61f1d62b9c940459804ae11be99ad43842 Certificate serial: 5E5D898E3F1C374E5558190EAF32E1F42BCDDC10 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer Subject info access: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft Manifest number: 55 Signing time: Sat 01 Feb 2025 19:53:21 +0000 Manifest this update: Sat 01 Feb 2025 19:48:21 +0000 Manifest next update: Sun 02 Feb 2025 21:03:21 +0000 Files and hashes: 1: 326131343a396530363a3a2f33322d3438203d3e203336383332.roa (hash: S8TKZ/WVLOW7v2r6OhCSu4cWLuYCe6lC/UIiOKF9e5o=) 2: 326131343a396530303a6330303a3a2f33382d3438203d3e20323134383334.roa (hash: kVdj7Wq5Ef9Da1DNMIIj52YKl9MKNjhz3UDk6vAR5EM=) 3: 326131343a396530303a3230303a3a2f34302d3430203d3e20323134353135.roa (hash: x4Wz4xUi49scDcHSN021TbaKuu0PCcvyL3sKxMSMfkM=) 4: 326131343a396530303a3830303a3a2f33392d3430203d3e20323136303738.roa (hash: KXrP5XgowVFAYww6BWJGjNegozCUncXMfvJUxLIit08=) 5: 326131343a396530303a393130303a3a2f34302d3430203d3e203630323233.roa (hash: OcIfOI8Jb5u8vNNWna6QrbpheSZTAyuqn0ohlsjyBDw=) 6: 326131343a396530313a3130303a3a2f34302d3438203d3e20323133363530.roa (hash: LlJ7tyCGomIraMvtign/aBrCJxnl/8dLagjZil4xPss=) 7: AS60223.asa (hash: azt/7NRh9JNFe1ENwUnQ8ziXehMEmpcyeWDtmUB2X64=) 8: 326131343a396530303a393030303a3a2f34302d3430203d3e203630323233.roa (hash: +sdKUvG7KNct0W/9yKQ55EQssNuukXpt8jZj98VvwYI=) 9: 326131343a396530303a3430303a3a2f33382d3438203d3e20323134383334.roa (hash: BWHp2nIhhLhLdb75DtUHjKZyuuAsEmrFMSDX806kq4s=) 10: A640AA61F1D62B9C940459804AE11BE99AD43842.crl (hash: 9dkUDvm3gvT8Sig8jMVNtkVk85kiqtVYRA3FW7SETFg=) Validation: OK Signature path: rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 02 Feb 2025 21:03:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:5d:89:8e:3f:1c:37:4e:55:58:19:0e:af:32:e1:f4:2b:cd:dc:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a640aa61f1d62b9c940459804ae11be99ad43842 Validity Not Before: Feb 1 19:48:21 2025 GMT Not After : Feb 2 21:03:21 2025 GMT Subject: CN=E1E0699B5CC25AB4018FEA9DB7E43B1EE90BED88 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c7:8f:22:5a:a1:39:f4:5f:69:cf:9c:0c:1f:3c: 35:cf:d9:00:35:5c:59:4d:cf:76:af:bf:d9:3c:62: ff:17:fb:26:a8:ee:10:ae:25:d9:55:d4:2f:49:ab: 03:cf:0a:5a:b7:28:76:f2:38:c2:dc:a0:40:1d:a2: f1:3a:d8:1d:71:b1:9e:13:57:0a:51:26:e8:ff:61: 75:92:57:7e:07:aa:c5:59:63:e1:d0:02:0f:13:07: 9a:fb:1e:e9:94:b6:d5:cc:34:19:cb:35:9a:da:6d: fb:02:7d:5c:ab:0b:bf:b6:62:d1:a3:b2:d5:d3:06: 32:c5:50:16:f8:ab:f7:fb:91:a8:ce:b1:72:28:20: 9d:9d:77:d0:76:88:2c:07:27:1d:b6:08:6a:1f:c2: c4:f3:9d:2c:57:77:fa:fb:f3:11:e7:d1:55:3a:55: 97:f3:3e:0f:78:ec:32:29:a2:9d:8d:eb:7f:6a:88: e7:0c:88:2c:78:ab:b7:39:58:d8:74:f5:4a:c5:c1: 57:a8:b5:6d:f7:b0:4a:ec:38:82:f9:2f:13:ab:22: a6:95:27:2e:d7:fd:93:ff:43:56:6c:ec:00:88:5c: f0:d4:a6:61:89:d1:33:29:cb:eb:d5:02:26:12:e0: 93:95:18:bf:13:cc:56:17:a0:ab:93:8d:f7:07:ce: 05:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E1:E0:69:9B:5C:C2:5A:B4:01:8F:EA:9D:B7:E4:3B:1E:E9:0B:ED:88 X509v3 Authority Key Identifier: keyid:A6:40:AA:61:F1:D6:2B:9C:94:04:59:80:4A:E1:1B:E9:9A:D4:38:42 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkCqYfHWK5yUBFmASuEb6ZrUOEI.cer Subject Information Access: Signed Object - URI:rsync://repo.rpki.space/repo/Netiface/3/A640AA61F1D62B9C940459804AE11BE99AD43842.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:11:7e:d0:5d:a3:6c:ba:4b:36:fc:39:5c:2b:82:c4:3d:0f: 0c:d7:62:80:53:2c:bb:e6:ff:23:5a:79:3d:bc:a9:7c:11:96: 56:77:1c:67:0d:af:19:a7:49:88:63:44:3c:79:48:2b:70:36: 4a:52:97:be:f6:81:7b:c8:0c:e5:2c:d7:41:b4:77:16:30:2a: 83:9b:dd:19:76:6c:00:f7:61:9a:5a:61:a4:a1:60:84:9f:41: cd:b5:06:2a:e9:28:33:d0:cc:2f:f5:54:6f:5d:a8:11:7c:bf: 7f:66:14:c0:b2:f9:f8:a7:a8:ab:34:a6:12:08:fd:76:a6:dc: f5:c4:17:ea:d6:cf:a9:62:c7:94:56:c4:7c:33:c6:5a:a5:99: 63:2f:e1:15:59:f2:5e:b4:90:dd:75:77:55:fd:bb:d4:40:b9: 00:90:5f:e3:52:53:57:e6:d3:65:7e:7b:08:79:5e:b2:02:8a: 07:40:1a:fd:b3:6c:a0:98:f5:e1:f2:ad:64:70:c4:13:ac:63: 78:28:13:5a:02:44:0a:3d:24:f5:2b:c2:6d:bf:3d:77:e6:95: a3:b2:ee:09:c7:94:a0:a2:1e:db:e5:a6:17:b1:d5:a4:1f:87: 60:4d:5f:25:e0:1b:93:b2:39:c9:5d:5d:98:14:92:55:d3:0e: 6e:fd:23:9e -----BEGIN CERTIFICATE----- MIIE3TCCA8WgAwIBAgIUXl2Jjj8cN05VWBkOrzLh9CvN3BAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTY0MGFhNjFmMWQ2MmI5Yzk0MDQ1OTgwNGFlMTFiZTk5 YWQ0Mzg0MjAeFw0yNTAyMDExOTQ4MjFaFw0yNTAyMDIyMTAzMjFaMDMxMTAvBgNV BAMTKEUxRTA2OTlCNUNDMjVBQjQwMThGRUE5REI3RTQzQjFFRTkwQkVEODgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjyJaoTn0X2nPnAwfPDXP2QA1 XFlNz3avv9k8Yv8X+yao7hCuJdlV1C9JqwPPClq3KHbyOMLcoEAdovE62B1xsZ4T VwpRJuj/YXWSV34HqsVZY+HQAg8TB5r7HumUttXMNBnLNZrabfsCfVyrC7+2YtGj stXTBjLFUBb4q/f7kajOsXIoIJ2dd9B2iCwHJx22CGofwsTznSxXd/r78xHn0VU6 VZfzPg947DIpop2N639qiOcMiCx4q7c5WNh09UrFwVeotW33sErsOIL5LxOrIqaV Jy7X/ZP/Q1Zs7ACIXPDUpmGJ0TMpy+vVAiYS4JOVGL8TzFYXoKuTjfcHzgV3AgMB AAGjggHnMIIB4zAdBgNVHQ4EFgQU4eBpm1zCWrQBj+qdt+Q7HukL7YgwHwYDVR0j BBgwFoAUpkCqYfHWK5yUBFmASuEb6ZrUOEIwDgYDVR0PAQH/BAQDAgeAMGUGA1Ud HwReMFwwWqBYoFaGVHJzeW5jOi8vcmVwby5ycGtpLnNwYWNlL3JlcG8vTmV0aWZh Y2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQwNDU5ODA0QUUxMUJFOTlBRDQzODQyLmNy bDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcGtDcVlmSFdLNXlVQkZtQVN1RWI2WnJV T0VJLmNlcjBwBggrBgEFBQcBCwRkMGIwYAYIKwYBBQUHMAuGVHJzeW5jOi8vcmVw by5ycGtpLnNwYWNlL3JlcG8vTmV0aWZhY2UvMy9BNjQwQUE2MUYxRDYyQjlDOTQw NDU5ODA0QUUxMUJFOTlBRDQzODQyLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgxF+0F2jbLpLNvw5XCuC xD0PDNdigFMsu+b/I1p5PbypfBGWVnccZw2vGadJiGNEPHlIK3A2SlKXvvaBe8gM 5SzXQbR3FjAqg5vdGXZsAPdhmlphpKFghJ9BzbUGKukoM9DML/VUb12oEXy/f2YU wLL5+KeoqzSmEgj9dqbc9cQX6tbPqWLHlFbEfDPGWqWZYy/hFVnyXrSQ3XV3Vf27 1EC5AJBf41JTV+bTZX57CHlesgKKB0Aa/bNsoJj14fKtZHDEE6xjeCgTWgJECj0k 9SvCbb89d+aVo7LuCceUoKIe2+WmF7HVpB+HYE1fJeAbk7I5yV1dmBSSVdMObv0j ng== -----END CERTIFICATE-----Generated at Sun Feb 2 06:45:25 2025 by rpki-client