$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft File: 09F041F60B21B649820D0FEE0D7654D63DDD080D.mft (raw, json) Hash identifier: bmyzRdc4yfPEtcvvx8jTOd1KAOkz0LOD5YANiHkL3Lc= Subject key identifier: F4:32:82:EA:4C:4C:14:7E:80:91:97:24:4D:61:55:38:42:B1:2E:44 Authority key identifier: 09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D Certificate issuer: /CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Certificate serial: 7EB0FB62C32165BDB9CFF60907322F7A9214AC51 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft Manifest number: 3E Signing time: Fri 04 Apr 2025 10:22:34 +0000 Manifest this update: Fri 04 Apr 2025 10:17:32 +0000 Manifest next update: Sat 05 Apr 2025 11:01:32 +0000 Files and hashes: 1: 09F041F60B21B649820D0FEE0D7654D63DDD080D.crl (hash: jxsxRC5OkceOtn9ZgQq78N6MskD8jvYkr5Pa5i9/R9M=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 10:00:49 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7e:b0:fb:62:c3:21:65:bd:b9:cf:f6:09:07:32:2f:7a:92:14:ac:51 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=09F041F60B21B649820D0FEE0D7654D63DDD080D Validity Not Before: Apr 4 10:17:32 2025 GMT Not After : Apr 5 11:01:32 2025 GMT Subject: CN=F43282EA4C4C147E809197244D61553842B12E44 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:23:d7:d0:2a:d0:54:b8:ec:b7:58:1a:e6:01: 9a:a5:30:ca:15:e6:5d:fe:c8:50:6e:96:c1:5f:74: 38:f5:f1:45:fa:57:df:e0:65:b1:44:94:b1:32:6e: 1d:2f:06:6f:47:26:76:e0:e2:0d:6e:29:a1:3b:36: ea:ff:c7:04:28:fd:20:4c:74:c0:24:7e:f7:7a:48: d0:93:ce:92:64:0a:8c:99:be:0b:3c:5b:63:2e:ff: bd:27:11:57:7f:c6:6d:05:c4:5a:5c:fe:f1:f3:81: ea:a5:95:2b:b4:5f:12:d6:03:fb:c3:fb:ae:e4:2b: f1:18:d9:68:6d:92:55:81:57:ea:27:fc:62:28:ab: bf:8e:23:9b:aa:63:f6:6a:70:ba:03:62:4c:23:62: b7:48:c0:31:b8:77:9a:15:e7:f9:95:c0:32:4c:1b: a6:18:b0:4c:89:28:4e:a0:57:44:e2:e6:6a:b5:18: e3:06:27:03:f4:d3:e4:26:e4:eb:64:99:e4:49:e4: fa:cf:66:3f:c9:c0:13:89:c2:66:21:b9:68:5e:52: 6c:c9:f9:62:af:5c:ec:70:29:73:8c:c7:a1:c4:f0: 58:70:fc:3c:86:f3:10:99:d8:30:2d:dd:93:ea:d9: da:fc:6b:8d:9d:6e:6e:ef:2f:86:7d:7c:5a:e7:27: 77:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:32:82:EA:4C:4C:14:7E:80:91:97:24:4D:61:55:38:42:B1:2E:44 X509v3 Authority Key Identifier: keyid:09:F0:41:F6:0B:21:B6:49:82:0D:0F:EE:0D:76:54:D6:3D:DD:08:0D X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/09F041F60B21B649820D0FEE0D7654D63DDD080D.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_8491db83cda44c61b0940d0e3b0f9f6a/0/09F041F60B21B649820D0FEE0D7654D63DDD080D.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 27:e5:82:a6:6a:4d:36:22:4d:26:ed:4e:18:26:29:c5:5c:51: 49:b8:f1:be:2c:4c:94:e7:22:49:21:ef:26:54:2f:c9:cc:ab: e5:b1:4a:ec:76:a8:d4:b0:52:88:78:62:e8:87:b3:11:22:18: 88:a8:ba:2c:fa:d5:06:06:77:87:da:95:51:9c:d0:d6:5d:3f: 58:bf:32:7c:0d:a6:35:51:8d:27:c8:0a:04:bf:6c:1b:8d:da: dc:08:9b:9b:04:85:8f:0f:00:33:7d:b2:a5:52:32:e6:ba:4d: 11:7f:ed:24:55:38:b8:fe:1c:e2:ad:d8:df:22:97:29:a8:3e: b3:b5:2e:92:3b:43:14:71:c4:56:d8:e5:7d:74:2f:a2:63:53: 8f:a0:0c:2e:2b:e6:26:3d:67:58:64:29:8a:36:d0:11:fd:5a: 0b:56:bc:41:19:11:43:ce:41:ab:a5:b6:cf:50:2d:9f:8a:0a: e0:59:93:d7:11:b7:4e:6f:fe:14:0a:1c:b9:6f:9d:8b:81:81: f3:9c:7c:2e:61:37:90:2c:dc:be:d0:c6:7d:be:51:40:64:e5: fa:9c:5f:1d:bc:8a:44:db:67:fa:04:2d:e5:4b:28:aa:48:e6: 65:52:da:35:67:41:41:0b:62:a1:2a:61:24:c3:15:63:f0:41: 44:2b:69:6d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUfrD7YsMhZb25z/YJBzIvepIUrFEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYz REREMDgwRDAeFw0yNTA0MDQxMDE3MzJaFw0yNTA0MDUxMTAxMzJaMDMxMTAvBgNV BAMTKEY0MzI4MkVBNEM0QzE0N0U4MDkxOTcyNDRENjE1NTM4NDJCMTJFNDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDAI9fQKtBUuOy3WBrmAZqlMMoV 5l3+yFBulsFfdDj18UX6V9/gZbFElLEybh0vBm9HJnbg4g1uKaE7Nur/xwQo/SBM dMAkfvd6SNCTzpJkCoyZvgs8W2Mu/70nEVd/xm0FxFpc/vHzgeqllSu0XxLWA/vD +67kK/EY2WhtklWBV+on/GIoq7+OI5uqY/ZqcLoDYkwjYrdIwDG4d5oV5/mVwDJM G6YYsEyJKE6gV0Ti5mq1GOMGJwP00+Qm5OtkmeRJ5PrPZj/JwBOJwmYhuWheUmzJ +WKvXOxwKXOMx6HE8Fhw/DyG8xCZ2DAt3ZPq2dr8a42dbm7vL4Z9fFrnJ3dNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU9DKC6kxMFH6AkZckTWFVOEKxLkQwHwYDVR0j BBgwFoAUCfBB9gshtkmCDQ/uDXZU1j3dCA0wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzg0OTFkYjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAv MDlGMDQxRjYwQjIxQjY0OTgyMEQwRkVFMEQ3NjU0RDYzREREMDgwRC5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8wOUYwNDFGNjBCMjFCNjQ5ODIwRDBGRUUwRDc2NTRE NjNEREQwODBELmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzg0OTFk YjgzY2RhNDRjNjFiMDk0MGQwZTNiMGY5ZjZhLzAvMDlGMDQxRjYwQjIxQjY0OTgy MEQwRkVFMEQ3NjU0RDYzREREMDgwRC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBACflgqZqTTYiTSbtThgm KcVcUUm48b4sTJTnIkkh7yZUL8nMq+WxSux2qNSwUoh4YuiHsxEiGIiouiz61QYG d4falVGc0NZdP1i/MnwNpjVRjSfICgS/bBuN2twIm5sEhY8PADN9sqVSMua6TRF/ 7SRVOLj+HOKt2N8ilymoPrO1LpI7QxRxxFbY5X10L6JjU4+gDC4r5iY9Z1hkKYo2 0BH9WgtWvEEZEUPOQaults9QLZ+KCuBZk9cRt05v/hQKHLlvnYuBgfOcfC5hN5As 3L7Qxn2+UUBk5fqcXx28ikTbZ/oELeVLKKpI5mVS2jVnQUELYqEqYSTDFWPwQUQr aW0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:04:47 2025 by rpki-client