$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft File: 1A889E0950A8B6489E67E7C7189539FB887EAD71.mft (raw, json) Hash identifier: dvDXzcQwUF24G1iJHjadNftWEVPB+y1NeegboHsYnGc= Subject key identifier: 95:19:57:AA:96:2E:A1:4A:12:38:A3:D1:96:CB:AC:EE:C3:61:B0:5E Authority key identifier: 1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 Certificate issuer: /CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Certificate serial: 20AF36F2532711C750BB065B096C351F1AC9103E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft Manifest number: 65 Signing time: Thu 19 Sep 2024 04:56:55 +0000 Manifest this update: Thu 19 Sep 2024 04:51:55 +0000 Manifest next update: Fri 20 Sep 2024 05:32:55 +0000 Files and hashes: 1: 1A889E0950A8B6489E67E7C7189539FB887EAD71.crl (hash: NMqtVIF389FPL431eYOAOXQTxzJF9F9Fisz/cBv/r8Y=) 2: 326131313a663263303a666663323a3a2f34382d3438203d3e20313939333337.roa (hash: OX3RHdtuqmLEvG1ZYjgRikhuEWksaQB7VsQm/hmQ+LY=) 3: 326131313a663263303a666663313a3a2f34382d3438203d3e20313939333337.roa (hash: 8L2dffl4g1ilG1l5/B+kC7djnpjUVSHg7XLmPYAhjYI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Thu 19 Sep 2024 22:00:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 20:af:36:f2:53:27:11:c7:50:bb:06:5b:09:6c:35:1f:1a:c9:10:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A889E0950A8B6489E67E7C7189539FB887EAD71 Validity Not Before: Sep 19 04:51:55 2024 GMT Not After : Sep 20 05:32:55 2024 GMT Subject: CN=951957AA962EA14A1238A3D196CBACEEC361B05E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d0:18:fa:34:4f:8d:a1:61:4a:33:2b:93:65:a8: 9b:87:b5:a9:6b:78:bb:b0:36:bf:27:27:0d:57:74: 58:5a:5e:c2:9f:11:76:37:fe:dd:fa:11:cb:2b:4c: 2b:be:62:e0:21:c5:1d:dd:2d:65:fc:15:e5:14:b3: a1:9d:8e:7f:b6:4c:e9:fe:5b:39:3f:57:60:5d:15: d2:fd:3c:0d:e9:bf:9c:b6:56:46:c1:08:e1:aa:74: 02:76:c5:70:17:72:a0:5a:e6:c9:80:11:c2:1e:f7: cb:de:ec:9a:35:3b:8b:5e:1e:9f:29:e0:81:54:40: 50:35:ad:75:8d:5d:2e:56:f4:3c:52:ed:4d:7e:93: 2e:87:1d:93:82:a2:6d:0c:2a:34:22:1d:cd:10:1e: a2:1f:5e:b3:98:b4:82:23:45:ff:20:5c:8d:65:de: 99:6d:d6:05:e3:c9:1e:60:97:29:a7:55:05:c6:c6: db:5b:08:ea:54:3a:cb:20:8e:d1:68:2d:49:f3:e5: 88:32:25:d7:43:ca:53:ed:ae:c6:b2:2c:5d:ff:f1: 72:da:f6:89:cf:ea:c9:c1:c3:fc:0e:c5:20:27:7c: 4b:24:f0:08:97:19:fc:52:2c:37:3f:c2:2a:4a:69: da:ff:24:fa:a0:f6:b0:59:9f:bf:ea:ff:3d:da:3e: 93:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 95:19:57:AA:96:2E:A1:4A:12:38:A3:D1:96:CB:AC:EE:C3:61:B0:5E X509v3 Authority Key Identifier: keyid:1A:88:9E:09:50:A8:B6:48:9E:67:E7:C7:18:95:39:FB:88:7E:AD:71 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/1A889E0950A8B6489E67E7C7189539FB887EAD71.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a50d7178badf43beb9811c7ec27b489c/0/1A889E0950A8B6489E67E7C7189539FB887EAD71.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 61:ac:f2:48:2f:e4:2c:18:2a:4e:4b:1a:38:13:a4:ec:a5:81: fe:f6:fc:81:7a:5c:45:49:1d:c9:5c:6d:0d:cb:0e:77:60:9f: 30:88:4f:c5:8d:34:bb:98:39:bb:e1:2c:97:dd:fa:f2:92:a4: 79:3d:ac:3d:b1:22:2d:00:47:98:72:1b:a2:10:49:40:f9:85: 3d:90:06:20:37:3b:f1:02:b4:b4:e2:a9:4b:fd:21:b6:61:92: 3e:57:5f:9d:52:b1:de:c2:9c:12:fe:04:c3:c9:db:52:f6:38: a5:03:05:96:87:3a:27:e9:8f:ca:52:62:0c:cd:c8:fc:51:f8: 0a:a5:c8:49:1e:30:de:b6:ef:8a:a3:95:11:2b:37:c9:62:01: 57:84:c3:73:b1:cb:3d:ce:cb:45:d2:ed:19:9a:3e:de:35:6c: 80:1e:5c:a3:c3:d2:7e:5d:46:49:74:24:d7:fb:03:8b:ed:ed: e4:3c:7b:15:32:e3:f5:53:1d:7a:ba:67:77:ee:fd:76:68:0d: 5f:fa:f0:fb:82:98:e2:8e:c0:eb:7d:d4:49:30:01:d0:aa:aa: 78:50:c0:18:7f:3a:6c:ca:55:40:17:05:3d:28:bc:7e:fa:3c: ac:60:d8:eb:1d:cb:09:a3:20:1f:0e:4a:83:1d:f4:19:09:16: 30:be:7b:d2 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUIK828lMnEcdQuwZbCWw1HxrJED4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4 ODdFQUQ3MTAeFw0yNDA5MTkwNDUxNTVaFw0yNDA5MjAwNTMyNTVaMDMxMTAvBgNV BAMTKDk1MTk1N0FBOTYyRUExNEExMjM4QTNEMTk2Q0JBQ0VFQzM2MUIwNUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQGPo0T42hYUozK5NlqJuHtalr eLuwNr8nJw1XdFhaXsKfEXY3/t36EcsrTCu+YuAhxR3dLWX8FeUUs6Gdjn+2TOn+ Wzk/V2BdFdL9PA3pv5y2VkbBCOGqdAJ2xXAXcqBa5smAEcIe98ve7Jo1O4teHp8p 4IFUQFA1rXWNXS5W9DxS7U1+ky6HHZOCom0MKjQiHc0QHqIfXrOYtIIjRf8gXI1l 3plt1gXjyR5glymnVQXGxttbCOpUOssgjtFoLUnz5YgyJddDylPtrsayLF3/8XLa 9onP6snBw/wOxSAnfEsk8AiXGfxSLDc/wipKadr/JPqg9rBZn7/q/z3aPpPTAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUlRlXqpYuoUoSOKPRlsus7sNhsF4wHwYDVR0j BBgwFoAUGoieCVCotkieZ+fHGJU5+4h+rXEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E1MGQ3MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAv MUE4ODlFMDk1MEE4QjY0ODlFNjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8xQTg4OUUwOTUwQThCNjQ4OUU2N0U3QzcxODk1MzlG Qjg4N0VBRDcxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E1MGQ3 MTc4YmFkZjQzYmViOTgxMWM3ZWMyN2I0ODljLzAvMUE4ODlFMDk1MEE4QjY0ODlF NjdFN0M3MTg5NTM5RkI4ODdFQUQ3MS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGGs8kgv5CwYKk5LGjgT pOylgf72/IF6XEVJHclcbQ3LDndgnzCIT8WNNLuYObvhLJfd+vKSpHk9rD2xIi0A R5hyG6IQSUD5hT2QBiA3O/ECtLTiqUv9IbZhkj5XX51Ssd7CnBL+BMPJ21L2OKUD BZaHOifpj8pSYgzNyPxR+AqlyEkeMN6274qjlRErN8liAVeEw3Oxyz3Oy0XS7Rma Pt41bIAeXKPD0n5dRkl0JNf7A4vt7eQ8exUy4/VTHXq6Z3fu/XZoDV/68PuCmOKO wOt91EkwAdCqqnhQwBh/OmzKVUAXBT0ovH76PKxg2OsdywmjIB8OSoMd9BkJFjC+ e9I= -----END CERTIFICATE-----Generated at Thu Sep 19 07:12:22 2024 by rpki-client on console-fra.rpki-client.org