$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: yKeBDaAaR1fU89xwPddFWjQxWcq8ck1gQHe9UnZRhLg= Subject key identifier: 57:56:4A:0E:B0:1B:A7:48:D1:BD:D9:82:F6:C4:75:A5:87:F1:C4:DB Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 0AB7C544CD613822E581CF6CD1C4416DDECA8F1F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0169 Signing time: Fri 04 Apr 2025 10:44:51 +0000 Manifest this update: Fri 04 Apr 2025 10:39:49 +0000 Manifest next update: Sat 05 Apr 2025 12:23:49 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: lUWEaJGUocmxxKrZbWkXaGEscXJXEZCP0Tv1bsV38Kw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0a:b7:c5:44:cd:61:38:22:e5:81:cf:6c:d1:c4:41:6d:de:ca:8f:1f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Apr 4 10:39:49 2025 GMT Not After : Apr 5 12:23:49 2025 GMT Subject: CN=57564A0EB01BA748D1BDD982F6C475A587F1C4DB Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:af:c4:f9:93:99:b1:af:d1:01:ac:c8:e3:b0:56: bb:6e:e5:b8:6a:a0:5d:74:0e:c6:2e:e0:38:59:67: af:2a:48:2f:ca:22:34:99:57:1e:50:cb:a0:6c:46: 4f:5d:c1:f1:7c:51:55:06:0e:fe:b4:c9:3f:6c:68: 0e:6b:35:1c:73:a5:76:57:32:4c:bb:9c:4c:ed:97: 50:9e:ee:20:d3:27:35:7e:38:aa:1a:99:dc:a6:7b: fb:40:2c:26:6d:de:8d:b3:af:47:2e:64:c9:7d:27: 23:61:63:44:f6:4f:56:c1:a5:51:ca:50:d1:c9:b1: 41:0e:81:07:f1:6d:98:09:70:7c:ec:be:b3:89:c4: cc:75:bf:a2:08:f6:88:b3:67:f4:8c:35:1e:03:f7: e7:b1:ae:73:9c:c8:22:93:d4:1d:fb:92:25:34:a0: db:0f:10:35:7a:9f:67:75:38:7b:3c:c2:e7:69:0d: ed:24:b3:9b:17:85:c6:04:bc:fb:8b:a7:58:ab:48: 8e:17:36:9b:b3:7a:dc:7d:05:a1:ef:8a:4a:ce:f2: e7:0e:49:90:ce:f1:2e:db:f4:d7:4c:a3:31:3a:03: 12:9a:eb:83:dc:05:f6:e4:4a:05:0f:14:de:34:d3: 1d:22:3d:a8:90:26:7d:f5:08:a1:6d:ac:8e:5a:09: a7:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 57:56:4A:0E:B0:1B:A7:48:D1:BD:D9:82:F6:C4:75:A5:87:F1:C4:DB X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 01:75:8e:f5:ae:c2:4e:db:b1:7c:13:7c:8e:47:4c:38:65:cc: 48:01:b4:43:7a:91:58:b5:ae:84:a1:58:ff:89:1f:81:1d:49: ff:e4:40:8f:73:d3:82:d2:11:f5:d2:22:fb:e0:7c:e1:81:66: ba:ef:e6:3e:00:9e:bd:36:63:5d:a2:a3:c8:1b:d3:62:7a:49: 83:ce:fd:13:f3:45:80:c9:de:9c:75:bf:07:8a:9b:b9:9a:85: ad:a4:c2:ed:02:e4:92:fa:cc:79:dc:57:00:68:db:f2:40:86: de:1e:ed:48:d8:96:0f:e9:42:1d:61:15:e8:ac:de:e9:30:05: f7:9f:64:38:d8:fd:84:e4:ea:db:8a:db:6b:aa:5b:e2:7a:af: 4c:97:8a:04:71:bd:43:7d:9a:3c:14:53:1f:c8:89:5d:21:7f: 0e:4f:c1:33:26:5a:77:ca:8f:e7:cf:7a:6f:4e:52:cd:4c:ed: 25:23:d9:3f:63:a2:0f:c9:c6:30:c5:d5:32:1e:e2:62:6e:ec: b9:07:f0:e1:ab:df:84:d1:e2:2f:66:ed:5f:e5:f0:5d:e9:df: d4:01:1d:b8:41:43:5b:b5:bd:e0:6e:19:d5:84:12:07:4a:dc: 0a:35:9a:1a:41:f9:4c:00:95:d0:fe:32:05:4d:f8:98:14:ac: fe:64:34:05 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCrfFRM1hOCLlgc9s0cRBbd7Kjx8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTA0MDQxMDM5NDlaFw0yNTA0MDUxMjIzNDlaMDMxMTAvBgNV BAMTKDU3NTY0QTBFQjAxQkE3NDhEMUJERDk4MkY2QzQ3NUE1ODdGMUM0REIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxPmTmbGv0QGsyOOwVrtu5bhq oF10DsYu4DhZZ68qSC/KIjSZVx5Qy6BsRk9dwfF8UVUGDv60yT9saA5rNRxzpXZX Mky7nEztl1Ce7iDTJzV+OKoamdyme/tALCZt3o2zr0cuZMl9JyNhY0T2T1bBpVHK UNHJsUEOgQfxbZgJcHzsvrOJxMx1v6II9oizZ/SMNR4D9+exrnOcyCKT1B37kiU0 oNsPEDV6n2d1OHs8wudpDe0ks5sXhcYEvPuLp1irSI4XNpuzetx9BaHvikrO8ucO SZDO8S7b9NdMozE6AxKa64PcBfbkSgUPFN400x0iPaiQJn31CKFtrI5aCaffAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUV1ZKDrAbp0jRvdmC9sR1pYfxxNswHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAAF1jvWuwk7bsXwTfI5H TDhlzEgBtEN6kVi1roShWP+JH4EdSf/kQI9z04LSEfXSIvvgfOGBZrrv5j4Anr02 Y12io8gb02J6SYPO/RPzRYDJ3px1vweKm7maha2kwu0C5JL6zHncVwBo2/JAht4e 7UjYlg/pQh1hFeis3ukwBfefZDjY/YTk6tuK22uqW+J6r0yXigRxvUN9mjwUUx/I iV0hfw5PwTMmWnfKj+fPem9OUs1M7SUj2T9jog/JxjDF1TIe4mJu7LkH8OGr34TR 4i9m7V/l8F3p39QBHbhBQ1u1veBuGdWEEgdK3Ao1mhpB+UwAldD+MgVN+JgUrP5k NAU= -----END CERTIFICATE-----Generated at Fri Apr 4 17:35:23 2025 by rpki-client