$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: zd8seT+g2qOGpExLXonD7OKRDm7WFgK8nKo78ZIy4v4= Subject key identifier: B7:01:A0:C3:80:D9:54:C8:7A:19:7D:85:83:1C:11:73:5E:0E:92:77 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 2E6D4C7EE60CE888411239CED4580E864E256B22 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 0166 Signing time: Thu 03 Apr 2025 22:54:33 +0000 Manifest this update: Thu 03 Apr 2025 22:49:31 +0000 Manifest next update: Sat 05 Apr 2025 02:48:31 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: DNyRgDCx/qkJz/MWuoZmA7irzUcQ8zznlP+Tge8Wtvw=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 02:48:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:6d:4c:7e:e6:0c:e8:88:41:12:39:ce:d4:58:0e:86:4e:25:6b:22 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Apr 3 22:49:31 2025 GMT Not After : Apr 5 02:48:31 2025 GMT Subject: CN=B701A0C380D954C87A197D85831C11735E0E9277 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:e3:7f:81:1f:5a:d4:f4:cd:c0:77:ca:2c:f5: 80:95:9c:ea:eb:53:a1:7d:e3:41:54:f8:d3:ce:28: b5:72:96:da:6d:5b:d2:05:50:1d:b1:42:fd:45:6c: d4:a1:8c:0e:a4:03:32:0b:ab:22:34:a2:55:e8:87: 73:4c:d7:67:70:38:6b:c7:af:57:a6:06:f4:1b:b4: 71:b4:2a:fe:97:b8:b1:b6:ee:ba:43:cb:d8:21:54: bb:d0:ad:ff:48:18:75:70:e1:28:8c:07:6b:0c:49: cf:3b:76:95:67:43:37:92:31:39:fa:d8:a4:73:31: f6:bb:02:b4:17:ac:5a:bf:d2:9c:3d:16:66:82:d0: a6:05:d3:23:30:06:af:6f:81:30:3e:b1:e4:42:f9: 2e:f6:73:b9:cc:a7:27:ce:d9:e1:8c:5b:ed:df:ed: 81:22:b9:01:ac:be:26:b2:1d:0c:ae:cf:f3:2c:dc: 63:b9:b7:0c:f5:5a:68:03:2a:66:fb:58:2c:d3:c0: 27:13:d9:1c:a3:fd:24:bc:e5:28:0a:e4:99:ff:20: ea:9d:00:f3:c9:3d:74:ae:17:c3:87:04:9d:ad:c6: f5:19:68:a5:e2:ff:6b:84:19:bf:c5:88:7c:e5:85: ab:d8:01:a8:73:69:47:42:2f:15:77:e6:1f:c8:26: 5a:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B7:01:A0:C3:80:D9:54:C8:7A:19:7D:85:83:1C:11:73:5E:0E:92:77 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 76:bc:61:55:6e:de:73:43:2e:d0:8e:7b:9b:45:b8:58:f5:04: 4a:3c:92:94:0a:eb:65:79:09:40:f0:f6:77:9d:4d:24:ba:d5: 4e:d0:2e:af:d1:5c:f0:05:b3:a2:06:6f:b5:a6:97:6a:0f:73: 6a:87:4e:40:f4:47:2c:9b:de:79:73:96:12:e7:6d:f0:ae:63: 37:a7:3d:f9:07:74:f2:70:e0:7c:34:d4:6c:89:cb:7e:dc:86: d4:ce:81:9a:6b:4e:b4:24:fa:b5:c8:c0:eb:2d:9c:9f:e0:19: af:bb:7d:8d:1d:c5:6c:6d:a7:81:42:95:6e:15:e6:ad:53:e2: 0a:fc:82:94:14:7a:73:61:49:20:a0:c7:58:cf:96:fc:79:5e: a8:7e:bd:46:d9:80:0d:be:b8:63:1b:6b:0b:09:48:a9:e8:ab: 52:05:ab:2c:86:4a:3b:d2:d3:87:8d:d1:bf:53:60:97:c7:21: e4:6b:e5:41:bc:fd:91:3d:e1:9a:57:4f:27:21:1c:a4:d3:01: 16:33:98:86:97:05:3c:d3:67:f5:5c:8e:0d:e6:95:3e:32:e8: 5c:57:9b:d9:9f:08:ff:40:f7:3c:fe:bc:54:8a:13:74:90:9e: fe:fd:3f:e1:70:2f:24:d7:6c:02:3a:0c:85:a8:35:13:37:e6: b2:91:6a:51 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIULm1MfuYM6IhBEjnO1FgOhk4layIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNTA0MDMyMjQ5MzFaFw0yNTA0MDUwMjQ4MzFaMDMxMTAvBgNV BAMTKEI3MDFBMEMzODBEOTU0Qzg3QTE5N0Q4NTgzMUMxMTczNUUwRTkyNzcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCs43+BH1rU9M3Ad8os9YCVnOrr U6F940FU+NPOKLVyltptW9IFUB2xQv1FbNShjA6kAzILqyI0olXoh3NM12dwOGvH r1emBvQbtHG0Kv6XuLG27rpDy9ghVLvQrf9IGHVw4SiMB2sMSc87dpVnQzeSMTn6 2KRzMfa7ArQXrFq/0pw9FmaC0KYF0yMwBq9vgTA+seRC+S72c7nMpyfO2eGMW+3f 7YEiuQGsviayHQyuz/Ms3GO5twz1WmgDKmb7WCzTwCcT2Ryj/SS85SgK5Jn/IOqd APPJPXSuF8OHBJ2txvUZaKXi/2uEGb/FiHzlhavYAahzaUdCLxV35h/IJlofAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUtwGgw4DZVMh6GX2FgxwRc14OkncwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAHa8YVVu3nNDLtCOe5tF uFj1BEo8kpQK62V5CUDw9nedTSS61U7QLq/RXPAFs6IGb7Wml2oPc2qHTkD0Ryyb 3nlzlhLnbfCuYzenPfkHdPJw4Hw01GyJy37chtTOgZprTrQk+rXIwOstnJ/gGa+7 fY0dxWxtp4FClW4V5q1T4gr8gpQUenNhSSCgx1jPlvx5Xqh+vUbZgA2+uGMbawsJ SKnoq1IFqyyGSjvS04eN0b9TYJfHIeRr5UG8/ZE94ZpXTychHKTTARYzmIaXBTzT Z/Vcjg3mlT4y6FxXm9mfCP9A9zz+vFSKE3SQnv79P+FwLyTXbAI6DIWoNRM35rKR alE= -----END CERTIFICATE-----Generated at Fri Apr 4 17:07:11 2025 by rpki-client