$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft File: B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft (raw, json) Hash identifier: Rz+y0TENBeIy3JM7qvrj59qtMAB/2r522Z9w4AmZmJ0= Subject key identifier: 6A:A5:49:EE:21:EF:73:01:58:FD:C7:9E:0A:14:1D:56:0D:1C:7B:51 Authority key identifier: B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 Certificate issuer: /CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Certificate serial: 29C07C95114137A87EA701823D420C6743F9B5A9 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft Manifest number: 017C Signing time: Thu 17 Apr 2025 23:02:51 +0000 Manifest this update: Thu 17 Apr 2025 22:57:49 +0000 Manifest next update: Sat 19 Apr 2025 01:15:49 +0000 Files and hashes: 1: B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl (hash: EEj9e3TIIt0aDCaFXOk6+IlqkhyzIlaJvUz4iV2dZp0=) 2: 326131313a663263303a666663373a3a2f34382d3438203d3e20323136313431.roa (hash: k/wmSIsicW6bIEYBgom+wqdJSOY7iu6zbHSV4HudHUM=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 18 Apr 2025 16:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 29:c0:7c:95:11:41:37:a8:7e:a7:01:82:3d:42:0c:67:43:f9:b5:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B8222A845C0CDC59E8D369AE23E116CDDEA08777 Validity Not Before: Apr 17 22:57:49 2025 GMT Not After : Apr 19 01:15:49 2025 GMT Subject: CN=6AA549EE21EF730158FDC79E0A141D560D1C7B51 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:98:b6:5b:e1:8b:f0:1e:9b:16:14:f6:e2:9f: cf:23:53:89:cf:4c:18:a0:ce:87:55:f6:a2:76:d3: 1a:47:31:41:4e:3a:be:8f:d8:2f:5e:97:48:68:0d: af:55:e6:89:98:bf:1c:76:19:1e:7c:e8:b9:d9:a0: cc:da:0c:2a:73:fc:27:4c:13:96:9a:e7:86:21:4e: a8:23:f5:2b:25:67:af:60:20:8c:91:71:a1:43:16: 15:8a:2b:60:ac:c8:02:e9:ea:23:d3:1c:fb:be:31: c5:85:5e:17:9c:7b:03:13:ed:6b:d0:e6:7a:b0:80: 70:59:e6:f7:d6:76:1d:fa:28:ab:aa:27:52:5d:7a: 64:79:e4:be:a9:8c:60:e1:ab:7a:2a:34:49:83:d1: 69:70:6b:a9:1c:77:48:55:e1:39:93:eb:8d:4d:3c: 61:10:c2:12:86:b5:32:bd:bc:76:4c:b1:03:10:f7: d7:24:31:f4:58:42:52:61:93:27:d5:d7:df:e3:38: b3:b1:dc:51:e6:8f:7d:19:30:0d:78:65:1c:3b:8d: bc:fa:da:7d:03:87:cb:32:d1:2f:6b:b8:6a:05:25: 80:e4:94:1f:45:0d:57:2d:75:a8:ba:f4:37:6d:df: de:0f:b9:30:25:fc:5f:94:68:c9:e7:74:c6:ce:97: 51:33 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6A:A5:49:EE:21:EF:73:01:58:FD:C7:9E:0A:14:1D:56:0D:1C:7B:51 X509v3 Authority Key Identifier: keyid:B8:22:2A:84:5C:0C:DC:59:E8:D3:69:AE:23:E1:16:CD:DE:A0:87:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/B8222A845C0CDC59E8D369AE23E116CDDEA08777.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_0980e262f081490999dd0d5e229e9cfa/0/B8222A845C0CDC59E8D369AE23E116CDDEA08777.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1a:c2:91:05:12:32:3c:cb:4a:eb:40:9a:d5:7b:db:4d:f2:bc: 34:4d:c9:2e:b2:5d:f9:0c:5c:de:f4:47:84:13:63:f7:dd:12: 25:66:e0:cf:ed:bc:4d:54:cc:b4:e6:cc:76:3e:d0:51:be:0a: 1a:de:de:13:6a:39:80:d9:d7:28:c2:41:9e:ba:7f:94:80:c1: f1:71:cc:b8:20:81:3c:7e:a7:eb:b1:a0:43:a0:79:57:6e:9b: 2f:d4:85:a4:11:3f:ae:8d:50:94:c8:a8:95:1d:02:9f:25:7e: e0:24:ff:bd:26:5f:8b:ea:d6:90:61:95:48:dd:07:46:f7:e4: 0e:2a:2b:23:ec:62:16:b4:13:30:71:e8:bb:54:c1:59:94:4b: 29:92:e9:6f:9c:0a:f1:a1:fc:98:58:9e:b8:1d:a8:9d:54:d3: 0c:1f:7c:a8:5d:86:d6:37:bc:65:1b:b9:57:8f:ba:34:3b:6a: cd:60:9a:cf:9e:c6:ac:ea:02:6d:5a:3b:f0:ff:46:66:9c:80: 12:4e:17:4e:a4:3c:02:cb:ac:ec:c8:72:00:7a:51:de:01:83: 85:fd:5b:c5:e4:9c:73:29:44:f9:ea:b0:32:f2:3c:fd:13:df: a9:16:50:d9:8d:81:eb:3e:d6:55:79:5f:b7:c6:96:a1:2d:9e: bc:7c:e6:f0 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUKcB8lRFBN6h+pwGCPUIMZ0P5takwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RE RUEwODc3NzAeFw0yNTA0MTcyMjU3NDlaFw0yNTA0MTkwMTE1NDlaMDMxMTAvBgNV BAMTKDZBQTU0OUVFMjFFRjczMDE1OEZEQzc5RTBBMTQxRDU2MEQxQzdCNTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdmLZb4YvwHpsWFPbin88jU4nP TBigzodV9qJ20xpHMUFOOr6P2C9el0hoDa9V5omYvxx2GR586LnZoMzaDCpz/CdM E5aa54YhTqgj9SslZ69gIIyRcaFDFhWKK2CsyALp6iPTHPu+McWFXhecewMT7WvQ 5nqwgHBZ5vfWdh36KKuqJ1JdemR55L6pjGDhq3oqNEmD0Wlwa6kcd0hV4TmT641N PGEQwhKGtTK9vHZMsQMQ99ckMfRYQlJhkyfV19/jOLOx3FHmj30ZMA14ZRw7jbz6 2n0Dh8sy0S9ruGoFJYDklB9FDVctdai69Ddt394PuTAl/F+UaMnndMbOl1EzAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUaqVJ7iHvcwFY/ceeChQdVg0ce1EwHwYDVR0j BBgwFoAUuCIqhFwM3Fno02muI+EWzd6gh3cwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzA5ODBlMjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAv QjgyMjJBODQ1QzBDREM1OUU4RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9CODIyMkE4NDVDMENEQzU5RThEMzY5QUUyM0UxMTZD RERFQTA4Nzc3LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzA5ODBl MjYyZjA4MTQ5MDk5OWRkMGQ1ZTIyOWU5Y2ZhLzAvQjgyMjJBODQ1QzBDREM1OUU4 RDM2OUFFMjNFMTE2Q0RERUEwODc3Ny5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABrCkQUSMjzLSutAmtV7 203yvDRNyS6yXfkMXN70R4QTY/fdEiVm4M/tvE1UzLTmzHY+0FG+Chre3hNqOYDZ 1yjCQZ66f5SAwfFxzLgggTx+p+uxoEOgeVdumy/UhaQRP66NUJTIqJUdAp8lfuAk /70mX4vq1pBhlUjdB0b35A4qKyPsYha0EzBx6LtUwVmUSymS6W+cCvGh/JhYnrgd qJ1U0wwffKhdhtY3vGUbuVePujQ7as1gms+exqzqAm1aO/D/RmacgBJOF06kPALL rOzIcgB6Ud4Bg4X9W8XknHMpRPnqsDLyPP0T36kWUNmNges+1lV5X7fGlqEtnrx8 5vA= -----END CERTIFICATE-----Generated at Fri Apr 18 01:52:43 2025 by rpki-client