$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft File: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft (raw, json) Hash identifier: i5mjEOml7qVV4tKhELVLw8s6qlvGuQaAPE9dF5EeHhs= Subject key identifier: 9E:8A:4B:25:B7:E9:C6:EA:0C:A8:31:7A:E6:09:D3:D4:AC:D1:CD:D0 Authority key identifier: 16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E Certificate issuer: /CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Certificate serial: 6F56672C2846EFE1A0E86EDDA57173B9AF125C97 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft Manifest number: 62 Signing time: Wed 18 Sep 2024 21:01:34 +0000 Manifest this update: Wed 18 Sep 2024 20:56:34 +0000 Manifest next update: Thu 19 Sep 2024 22:48:34 +0000 Files and hashes: 1: 16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl (hash: 6kdpoF2Z06p90Scu32Do1SxYGMPjAHhMSSfiZJ+WCCI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 10:30:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:56:67:2c:28:46:ef:e1:a0:e8:6e:dd:a5:71:73:b9:af:12:5c:97 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E Validity Not Before: Sep 18 20:56:34 2024 GMT Not After : Sep 19 22:48:34 2024 GMT Subject: CN=9E8A4B25B7E9C6EA0CA8317AE609D3D4ACD1CDD0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:bd:c6:b7:9c:2d:36:f4:5f:2c:d4:11:0e:12: 62:1a:a9:19:8c:1c:50:7c:d8:13:a5:9a:43:63:bb: ae:90:9a:21:75:7b:25:eb:88:f9:27:aa:b1:e1:4d: db:fc:0f:b7:0a:07:bd:f4:e1:05:74:fe:be:0a:4d: 16:da:a5:3e:5b:ec:5a:aa:71:c1:02:f1:a7:ed:7b: a5:df:75:28:9c:bb:3a:9a:b5:ba:7e:d4:20:b1:78: c4:d0:85:ab:1d:48:f1:6a:31:85:66:d2:23:9e:d5: 9b:55:25:e7:84:03:7b:54:fb:1b:89:a1:87:07:5a: 8a:00:28:9e:c4:f1:01:5a:b7:5c:e1:d3:88:5f:94: 4b:d7:70:b5:fb:93:58:38:9f:ca:3e:fe:1c:9e:53: 91:6e:3e:ff:80:86:e3:93:a7:d1:9f:6c:22:49:39: 3c:fd:db:aa:d3:f7:fc:bd:a0:d1:83:e1:6d:6f:1a: da:ec:3c:e4:79:a3:98:4c:ba:9e:ab:3f:c7:c0:b6: a3:a0:f3:ff:28:d7:9d:96:b5:5c:ab:0e:ee:4b:50: a3:29:6f:ec:ae:31:1a:1c:6f:13:49:bd:22:8f:73: 59:8b:de:12:3f:29:de:27:f9:7b:83:2a:e8:89:85: 8e:47:95:02:74:23:90:59:f5:e8:19:26:03:05:1e: f2:8f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:8A:4B:25:B7:E9:C6:EA:0C:A8:31:7A:E6:09:D3:D4:AC:D1:CD:D0 X509v3 Authority Key Identifier: keyid:16:82:1F:D2:2F:FB:74:E3:D7:FA:C3:AA:03:BE:6D:00:14:5B:9A:3E X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_9f297e7e1f534033aaf93ce1e3b46ffc/0/16821FD22FFB74E3D7FAC3AA03BE6D00145B9A3E.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 87:93:0c:d5:a4:8a:46:19:b2:c1:ca:1e:13:19:db:9b:25:02: ac:61:f0:dd:6c:a3:f3:0d:91:8a:b5:db:eb:cc:b8:7d:d0:9a: e4:ab:db:f8:36:a2:5e:9a:d1:18:61:a6:e9:1a:90:2e:5d:52: 7a:e5:91:70:40:e3:2e:d7:d4:98:1e:1e:cb:f0:d2:19:48:37: 3f:b0:6f:7f:0c:86:f6:c9:c5:36:a3:dd:72:83:fa:0c:6d:2d: e5:f4:a8:ac:db:47:52:da:0f:4b:c2:a8:32:87:72:17:64:17: 67:7d:01:36:75:c8:e1:05:3e:3e:3c:a2:25:a6:3a:e5:cb:2e: 8c:88:c7:b6:e2:09:32:61:5e:7d:4a:c9:a8:18:e2:85:20:27: 0e:a2:50:ee:ae:dc:0c:bd:c2:45:7d:37:47:69:92:ed:ab:8d: 19:4b:c1:33:bb:86:38:e3:a3:e4:b4:d3:57:0e:12:2e:38:52: 86:fb:c3:73:4b:93:4e:bb:10:5b:9c:0c:b2:9e:8d:bf:78:d4: f1:3b:53:7a:5c:91:b5:39:20:39:53:a9:9c:8a:85:5c:c2:55: 88:1e:5f:ca:5e:ce:9e:46:c7:f5:15:df:82:cf:95:b4:2b:e7: a3:5d:6d:23:e5:8a:ff:d5:93:f4:05:c6:0d:48:78:33:28:ac: ce:ec:5f:25 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb1ZnLChG7+Gg6G7dpXFzua8SXJcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAx NDVCOUEzRTAeFw0yNDA5MTgyMDU2MzRaFw0yNDA5MTkyMjQ4MzRaMDMxMTAvBgNV BAMTKDlFOEE0QjI1QjdFOUM2RUEwQ0E4MzE3QUU2MDlEM0Q0QUNEMUNERDAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVvca3nC029F8s1BEOEmIaqRmM HFB82BOlmkNju66QmiF1eyXriPknqrHhTdv8D7cKB7304QV0/r4KTRbapT5b7Fqq ccEC8afte6XfdSicuzqatbp+1CCxeMTQhasdSPFqMYVm0iOe1ZtVJeeEA3tU+xuJ oYcHWooAKJ7E8QFat1zh04hflEvXcLX7k1g4n8o+/hyeU5FuPv+AhuOTp9GfbCJJ OTz926rT9/y9oNGD4W1vGtrsPOR5o5hMup6rP8fAtqOg8/8o152WtVyrDu5LUKMp b+yuMRocbxNJvSKPc1mL3hI/Kd4n+XuDKuiJhY5HlQJ0I5BZ9egZJgMFHvKPAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUnopLJbfpxuoMqDF65gnT1KzRzdAwHwYDVR0j BBgwFoAUFoIf0i/7dOPX+sOqA75tABRbmj4wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzlmMjk3ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAv MTY4MjFGRDIyRkZCNzRFM0Q3RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xNjgyMUZEMjJGRkI3NEUzRDdGQUMzQUEwM0JFNkQw MDE0NUI5QTNFLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzlmMjk3 ZTdlMWY1MzQwMzNhYWY5M2NlMWUzYjQ2ZmZjLzAvMTY4MjFGRDIyRkZCNzRFM0Q3 RkFDM0FBMDNCRTZEMDAxNDVCOUEzRS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIeTDNWkikYZssHKHhMZ 25slAqxh8N1so/MNkYq12+vMuH3QmuSr2/g2ol6a0RhhpukakC5dUnrlkXBA4y7X 1JgeHsvw0hlINz+wb38MhvbJxTaj3XKD+gxtLeX0qKzbR1LaD0vCqDKHchdkF2d9 ATZ1yOEFPj48oiWmOuXLLoyIx7biCTJhXn1KyagY4oUgJw6iUO6u3Ay9wkV9N0dp ku2rjRlLwTO7hjjjo+S001cOEi44Uob7w3NLk067EFucDLKejb941PE7U3pckbU5 IDlTqZyKhVzCVYgeX8pezp5Gx/UV34LPlbQr56NdbSPliv/Vk/QFxg1IeDMorM7s XyU= -----END CERTIFICATE-----Generated at Wed Sep 18 23:06:26 2024 by rpki-client on console-ams.rpki-client.org