$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: Rpz+3kpBM/B3Qt3vOCZaDZhMN7WuRxC9t/jihtzrpxc= Subject key identifier: 54:D0:7C:C7:66:4E:4B:CD:DC:65:37:DA:0E:86:F7:6A:E4:64:16:EE Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 5FD49B5CAF25BEBD1897B44082D38401D958CCF6 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: A8 Signing time: Sat 09 Nov 2024 13:06:41 +0000 Manifest this update: Sat 09 Nov 2024 13:01:41 +0000 Manifest next update: Sun 10 Nov 2024 14:05:41 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: p/JBXmDbZO5T6bM5Yo0BbX9QfikgYz4kSEPP850XPZ8=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 10 Nov 2024 10:30:12 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5f:d4:9b:5c:af:25:be:bd:18:97:b4:40:82:d3:84:01:d9:58:cc:f6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: Nov 9 13:01:41 2024 GMT Not After : Nov 10 14:05:41 2024 GMT Subject: CN=54D07CC7664E4BCDDC6537DA0E86F76AE46416EE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b4:1a:04:19:4d:69:d2:23:56:f2:79:e9:2c: 29:90:45:35:57:2e:3c:ba:5b:bb:b7:af:0e:1f:c5: 1f:2c:b8:2d:6e:5e:85:c5:ab:63:9e:cb:b2:84:3f: 45:59:8f:c4:4a:dd:fa:c3:bb:ac:2f:24:df:2f:12: 2f:81:cc:d6:7e:f4:ce:39:83:0e:1b:d1:a7:70:25: 6a:16:ab:c3:d8:fc:9d:e6:b9:0d:67:32:a0:a7:4d: e3:76:c7:b8:6e:b7:ff:95:c1:23:dc:5b:2a:a1:be: 10:81:59:bb:4c:1f:fe:9b:68:9f:74:8d:96:0b:71: 28:df:34:ca:cf:b9:54:73:8f:9e:5d:07:20:1c:35: 4a:f3:f4:3c:90:6a:1e:94:44:20:bf:5a:5c:da:4f: 1d:91:95:fc:39:f5:37:45:d2:6a:ba:f3:a0:a1:75: 43:26:b9:63:7b:77:8c:09:41:54:47:c5:14:cb:8b: 09:15:ae:61:1f:7f:89:f4:f5:cc:e1:c5:df:81:0f: 17:3b:af:7b:96:bc:ad:97:3a:9a:87:fa:fd:13:aa: ef:2a:c1:32:8a:fc:4a:c6:6f:c3:b1:e1:60:79:b6: b3:3f:c4:ba:85:73:70:21:b4:04:e9:8f:41:8f:04: f9:6d:f6:d0:82:8e:b4:7a:5d:0a:7e:5b:ab:2e:5e: df:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 54:D0:7C:C7:66:4E:4B:CD:DC:65:37:DA:0E:86:F7:6A:E4:64:16:EE X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6d:19:0a:f9:65:ee:99:c7:05:c2:c3:e8:b2:49:6a:d3:56:4c: 83:e7:19:42:f0:d1:e0:6e:5e:7c:33:d3:50:a0:cb:4d:51:da: 8c:9d:49:8a:7f:4a:5d:e4:07:c8:c9:b7:44:9f:8c:e3:26:67: 3e:06:80:00:f5:42:a9:04:01:fd:68:36:fe:c2:1c:e6:d0:9b: ca:fb:2c:39:29:af:a2:66:7e:e8:f3:f8:c8:ad:63:b3:b6:19: ec:1d:fe:3b:d3:b0:ac:7d:d1:9f:af:2b:f2:d3:39:c1:ea:0a: f5:48:6b:16:a4:c9:48:23:6a:62:a4:a2:9d:6a:3c:85:22:ed: e1:e8:ab:4d:e7:da:e1:f3:85:97:4b:af:af:b7:30:a7:a7:9d: e9:47:a0:eb:b8:66:f9:32:fe:f2:51:50:07:70:79:40:56:71: 4f:00:1e:da:83:c4:a5:58:ba:d3:4f:75:84:d3:29:17:fc:11: 17:d4:39:37:9d:32:38:9a:35:d1:e6:69:4f:1c:ea:da:a5:fa: cf:e3:4e:de:85:64:3c:e3:99:c2:6a:48:03:30:a3:cc:a9:4f: 88:71:0a:b0:b6:82:04:20:82:83:d2:f3:18:b5:5b:67:96:84: 03:52:7f:79:ac:17:13:10:5f:cd:3a:9f:de:15:50:ed:d3:0d: 7f:7a:6f:7a -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUX9SbXK8lvr0Yl7RAgtOEAdlYzPYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNDExMDkxMzAxNDFaFw0yNDExMTAxNDA1NDFaMDMxMTAvBgNV BAMTKDU0RDA3Q0M3NjY0RTRCQ0REQzY1MzdEQTBFODZGNzZBRTQ2NDE2RUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4tBoEGU1p0iNW8nnpLCmQRTVX Ljy6W7u3rw4fxR8suC1uXoXFq2Oey7KEP0VZj8RK3frDu6wvJN8vEi+BzNZ+9M45 gw4b0adwJWoWq8PY/J3muQ1nMqCnTeN2x7hut/+VwSPcWyqhvhCBWbtMH/6baJ90 jZYLcSjfNMrPuVRzj55dByAcNUrz9DyQah6URCC/WlzaTx2Rlfw59TdF0mq686Ch dUMmuWN7d4wJQVRHxRTLiwkVrmEff4n09czhxd+BDxc7r3uWvK2XOpqH+v0Tqu8q wTKK/ErGb8Ox4WB5trM/xLqFc3AhtATpj0GPBPlt9tCCjrR6XQp+W6suXt+bAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUVNB8x2ZOS83cZTfaDob3auRkFu4wHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAG0ZCvll7pnHBcLD6LJJ atNWTIPnGULw0eBuXnwz01Cgy01R2oydSYp/Sl3kB8jJt0SfjOMmZz4GgAD1QqkE Af1oNv7CHObQm8r7LDkpr6Jmfujz+MitY7O2Gewd/jvTsKx90Z+vK/LTOcHqCvVI axakyUgjamKkop1qPIUi7eHoq03n2uHzhZdLr6+3MKennelHoOu4Zvky/vJRUAdw eUBWcU8AHtqDxKVYutNPdYTTKRf8ERfUOTedMjiaNdHmaU8c6tql+s/jTt6FZDzj mcJqSAMwo8ypT4hxCrC2ggQggoPS8xi1W2eWhANSf3msFxMQX806n94VUO3TDX96 b3o= -----END CERTIFICATE-----Generated at Sat Nov 9 14:17:50 2024 by rpki-client on console-ams.rpki-client.org