$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: G2XUOzG2IyuwnkqYu4wORfVp6KujipNp0PVXOxtKAj4= Subject key identifier: 91:2D:EC:69:57:83:FF:B4:8E:B3:0F:DA:92:3B:C5:55:55:97:FD:74 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 70CCBC587E7127A19E08EEFCDE42DE0D9C15CBEC Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: B8 Signing time: Sat 23 Nov 2024 07:00:38 +0000 Manifest this update: Sat 23 Nov 2024 06:55:36 +0000 Manifest next update: Sun 24 Nov 2024 09:06:36 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: T/2PCq+oQKpQBZNN0EnQZAqyRxLvMjCeKZxMOd0jTN0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 23 Nov 2024 17:45:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 70:cc:bc:58:7e:71:27:a1:9e:08:ee:fc:de:42:de:0d:9c:15:cb:ec Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Nov 23 06:55:36 2024 GMT Not After : Nov 24 09:06:36 2024 GMT Subject: CN=912DEC695783FFB48EB30FDA923BC5555597FD74 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ce:8b:dd:31:fd:4a:eb:00:b9:52:fc:b7:99:39: 44:f0:3a:f6:55:e3:92:75:c0:1d:29:19:6e:50:a7: c8:84:4c:b7:5e:0a:4f:b8:57:b2:67:f4:c2:10:fd: c4:a5:74:4d:b5:0c:16:bb:b2:d3:1f:52:ad:76:9a: e7:f4:16:69:17:5a:04:2d:2e:8b:38:fb:80:10:34: e5:92:cb:1c:a4:c1:a9:0e:ea:14:81:fa:74:6b:2f: ec:00:f2:e5:4a:53:4a:97:82:47:22:85:03:7d:55: c0:72:da:f2:94:72:e5:85:e9:f0:39:94:7a:5d:3f: fa:19:55:8b:f1:5f:5c:f0:13:75:eb:21:da:7b:ae: 72:d4:65:76:bf:06:19:29:a1:f2:2d:94:47:44:22: c9:ee:17:09:e8:57:cc:7c:1c:8c:a8:5f:71:da:72: 9e:12:d0:09:82:3e:c3:90:69:b7:d7:e3:f4:76:7e: 4e:3b:92:39:8c:c0:29:b3:18:7b:bb:66:6d:7a:3b: 51:4b:9a:02:cf:a7:ce:2c:f4:7b:84:cc:ec:f3:4b: 14:d2:3e:e8:47:36:fc:25:c4:7b:ba:0f:d5:21:da: 15:1c:fa:96:ea:a8:a0:c3:e2:d1:81:9e:24:fa:76: a5:07:8d:70:51:f1:06:10:6a:62:39:c3:3d:32:60: 56:49 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 91:2D:EC:69:57:83:FF:B4:8E:B3:0F:DA:92:3B:C5:55:55:97:FD:74 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 1b:d7:93:43:ae:e9:7b:b8:a1:9f:23:f8:59:95:ef:ad:75:0b: 76:d8:7b:f3:38:62:f0:73:2d:17:bb:37:3d:af:c3:1b:38:01: cf:47:53:15:1d:df:0a:08:7d:02:32:50:44:53:77:40:67:04: f0:6d:3a:51:8b:9a:aa:99:ce:a7:6b:11:55:53:2a:ce:e7:fa: bf:df:f3:90:a0:44:d5:58:89:12:69:86:b2:0b:e3:56:14:9e: 60:a7:51:0f:cf:55:5e:75:f6:10:12:aa:c9:ba:73:db:46:fe: f9:46:07:97:cd:40:22:04:09:ef:f7:0e:65:af:c2:1c:d8:6f: 74:ab:14:ca:0d:9f:79:be:0c:3f:9a:64:22:4e:7f:89:cd:2d: ec:17:e8:6c:d0:a2:2b:2d:44:cf:79:64:0f:16:fe:55:0f:bc: c8:a6:47:c0:41:54:db:1c:f7:22:56:ba:cf:bc:34:51:6e:c0: 26:6b:26:e3:42:4f:ef:23:c5:14:be:75:65:c1:9f:9f:6d:22: c4:b6:fd:9e:f1:3f:81:a5:b4:2f:7b:82:dd:c7:ca:bf:93:14: 56:42:bb:81:7f:93:bc:72:66:46:77:b3:da:d9:15:02:d9:e4: c3:d6:98:b0:f1:d0:21:e8:8f:bb:d8:bc:09:b9:93:1c:c7:2b: 76:e9:d3:4d -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUcMy8WH5xJ6GeCO783kLeDZwVy+wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNDExMjMwNjU1MzZaFw0yNDExMjQwOTA2MzZaMDMxMTAvBgNV BAMTKDkxMkRFQzY5NTc4M0ZGQjQ4RUIzMEZEQTkyM0JDNTU1NTU5N0ZENzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOi90x/UrrALlS/LeZOUTwOvZV 45J1wB0pGW5Qp8iETLdeCk+4V7Jn9MIQ/cSldE21DBa7stMfUq12muf0FmkXWgQt Los4+4AQNOWSyxykwakO6hSB+nRrL+wA8uVKU0qXgkcihQN9VcBy2vKUcuWF6fA5 lHpdP/oZVYvxX1zwE3XrIdp7rnLUZXa/BhkpofItlEdEIsnuFwnoV8x8HIyoX3Ha cp4S0AmCPsOQabfX4/R2fk47kjmMwCmzGHu7Zm16O1FLmgLPp84s9HuEzOzzSxTS PuhHNvwlxHu6D9Uh2hUc+pbqqKDD4tGBniT6dqUHjXBR8QYQamI5wz0yYFZJAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUkS3saVeD/7SOsw/akjvFVVWX/XQwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABvXk0Ou6Xu4oZ8j+FmV 7611C3bYe/M4YvBzLRe7Nz2vwxs4Ac9HUxUd3woIfQIyUERTd0BnBPBtOlGLmqqZ zqdrEVVTKs7n+r/f85CgRNVYiRJphrIL41YUnmCnUQ/PVV519hASqsm6c9tG/vlG B5fNQCIECe/3DmWvwhzYb3SrFMoNn3m+DD+aZCJOf4nNLewX6GzQoistRM95ZA8W /lUPvMimR8BBVNsc9yJWus+8NFFuwCZrJuNCT+8jxRS+dWXBn59tIsS2/Z7xP4Gl tC97gt3Hyr+TFFZCu4F/k7xyZkZ3s9rZFQLZ5MPWmLDx0CHoj7vYvAm5kxzHK3bp 000= -----END CERTIFICATE-----Generated at Sat Nov 23 09:08:00 2024 by rpki-client on console-ams.rpki-client.org