$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: K5G645RQUqBCtBce3MH9ksRd0a92iMkbmCSlB1IeaaI= Subject key identifier: FC:D6:3E:AE:00:75:6B:A2:AF:5B:20:EA:A5:B1:75:CB:0B:F4:3F:AC Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 1B106AF0994AE9AE4D622CC8501B0293F91528A7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0171 Signing time: Fri 04 Apr 2025 02:04:47 +0000 Manifest this update: Fri 04 Apr 2025 01:59:45 +0000 Manifest next update: Sat 05 Apr 2025 03:47:45 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: 4Xua38/naVSZoqXNR6zcn/KzTuDFuq4hSprkhGSw9E0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 03:47:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:10:6a:f0:99:4a:e9:ae:4d:62:2c:c8:50:1b:02:93:f9:15:28:a7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Apr 4 01:59:45 2025 GMT Not After : Apr 5 03:47:45 2025 GMT Subject: CN=FCD63EAE00756BA2AF5B20EAA5B175CB0BF43FAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:d6:1e:0c:c8:39:0d:3e:63:2e:fc:c7:2a:0e: a3:97:1d:26:10:fa:71:e4:5a:86:32:48:4d:6f:77: b8:5e:b3:ae:45:8f:53:3c:3c:3e:d9:d8:ad:4f:2b: 86:bc:0a:d8:17:ab:bd:88:90:bd:6e:fb:a7:d3:4c: ed:1a:d8:79:bd:74:5e:cc:c5:88:63:84:2f:9d:be: 79:ba:30:3d:f3:aa:12:21:8b:ea:d5:2f:ef:1d:41: 1a:0c:92:9b:2d:b8:df:10:99:0c:fa:f8:6b:e0:4f: 79:25:d7:63:19:45:5a:2e:01:4b:b3:22:29:8c:30: fa:a1:9c:40:f7:a3:3d:3b:fe:88:6e:d5:db:04:6a: c2:14:19:6f:26:e1:03:3b:9f:2c:da:1a:e2:7a:20: 11:fa:c4:fc:d9:b0:e7:0f:ee:0c:26:f9:22:1f:1f: 1e:16:eb:d6:b7:ce:bc:06:35:92:13:fc:e0:72:fc: 84:8c:f7:8b:3b:56:62:20:b0:21:1e:54:83:37:2f: 10:8a:ca:b2:b2:94:86:c0:0b:0e:5e:7f:a7:b9:9f: 67:1d:fa:95:ee:92:8d:10:95:36:85:ea:31:21:6f: af:18:7e:d0:fd:7d:bd:71:c2:03:e3:77:cd:60:0c: c5:cd:ed:11:01:81:23:c4:cb:47:6f:8b:9e:06:e5: ad:75 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FC:D6:3E:AE:00:75:6B:A2:AF:5B:20:EA:A5:B1:75:CB:0B:F4:3F:AC X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 83:7f:73:e5:ef:7c:f7:8d:a1:a8:cd:cb:93:c8:9b:48:93:0d: d6:d0:cd:2a:d0:a6:dd:dd:7d:52:b5:81:25:07:92:4e:06:41: 92:cf:67:30:74:62:91:7a:49:ff:f0:e0:87:9d:67:6c:27:79: b4:ca:4f:76:80:4d:c7:eb:49:a0:ae:90:c8:4d:4c:11:53:f5: ae:fe:d3:80:39:28:6a:a8:ea:c7:c0:eb:f5:0c:c5:5e:de:6f: dd:45:95:d8:39:ae:1b:56:60:64:c6:63:f8:4f:f9:3e:3f:44: 6a:bf:8e:ed:eb:f8:f9:ac:ba:15:3b:04:bb:6f:1b:66:20:a1: 82:a2:50:3e:41:fe:58:1d:2b:34:e3:9a:ec:15:69:a6:7a:4a: b6:83:6d:39:7f:52:da:ce:0a:bf:f2:07:a3:bc:2c:e3:bf:20: 5e:1a:22:be:d1:84:64:da:92:e0:0d:f0:33:b2:ee:4a:69:9e: cd:2c:78:67:1d:9e:93:4c:25:3f:96:aa:a2:a2:0c:1d:e8:8f: 07:f7:47:f2:39:26:62:28:4d:09:b4:b8:77:46:f9:c2:74:68: 92:31:ed:73:d1:93:08:04:69:20:c2:15:1c:00:06:29:01:a0: 0e:66:20:f4:fb:96:27:64:ba:b9:76:fa:f9:16:a8:12:6b:95: f7:e5:c6:3d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUGxBq8JlK6a5NYizIUBsCk/kVKKcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA0MDQwMTU5NDVaFw0yNTA0MDUwMzQ3NDVaMDMxMTAvBgNV BAMTKEZDRDYzRUFFMDA3NTZCQTJBRjVCMjBFQUE1QjE3NUNCMEJGNDNGQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCr1h4MyDkNPmMu/McqDqOXHSYQ +nHkWoYySE1vd7hes65Fj1M8PD7Z2K1PK4a8CtgXq72IkL1u+6fTTO0a2Hm9dF7M xYhjhC+dvnm6MD3zqhIhi+rVL+8dQRoMkpstuN8QmQz6+GvgT3kl12MZRVouAUuz IimMMPqhnED3oz07/ohu1dsEasIUGW8m4QM7nyzaGuJ6IBH6xPzZsOcP7gwm+SIf Hx4W69a3zrwGNZIT/OBy/ISM94s7VmIgsCEeVIM3LxCKyrKylIbACw5ef6e5n2cd +pXuko0QlTaF6jEhb68YftD9fb1xwgPjd81gDMXN7REBgSPEy0dvi54G5a11AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU/NY+rgB1a6KvWyDqpbF1ywv0P6wwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIN/c+XvfPeNoajNy5PI m0iTDdbQzSrQpt3dfVK1gSUHkk4GQZLPZzB0YpF6Sf/w4IedZ2wnebTKT3aATcfr SaCukMhNTBFT9a7+04A5KGqo6sfA6/UMxV7eb91Fldg5rhtWYGTGY/hP+T4/RGq/ ju3r+PmsuhU7BLtvG2YgoYKiUD5B/lgdKzTjmuwVaaZ6SraDbTl/UtrOCr/yB6O8 LOO/IF4aIr7RhGTakuAN8DOy7kppns0seGcdnpNMJT+WqqKiDB3ojwf3R/I5JmIo TQm0uHdG+cJ0aJIx7XPRkwgEaSDCFRwABikBoA5mIPT7lidkurl2+vkWqBJrlffl xj0= -----END CERTIFICATE-----Generated at Fri Apr 4 17:44:13 2025 by rpki-client