$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: lN2wQsHgkRdgVUvPGhfoCnEBG8HGIzNCQGY6bHE/iac= Subject key identifier: DC:13:A2:FA:58:A8:0C:28:DD:BD:C4:9D:4B:6B:A2:BC:2B:FC:74:58 Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 39F0BFF8624312E87216F92E64F19B942CD4A033 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: 0167 Signing time: Fri 04 Apr 2025 01:03:06 +0000 Manifest this update: Fri 04 Apr 2025 00:58:04 +0000 Manifest next update: Sat 05 Apr 2025 03:15:04 +0000 Files and hashes: 1: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=) 2: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: 2Mbdv5yYBdjkFflhPVsqCdrd+XiuGB7Mqp0/lTpmCO0=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 03:15:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 39:f0:bf:f8:62:43:12:e8:72:16:f9:2e:64:f1:9b:94:2c:d4:a0:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Apr 4 00:58:04 2025 GMT Not After : Apr 5 03:15:04 2025 GMT Subject: CN=DC13A2FA58A80C28DDBDC49D4B6BA2BC2BFC7458 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:db:7f:be:4c:f7:43:04:30:5e:b8:c5:8c:41:76: 37:7a:b2:c8:4b:91:32:f0:18:85:7e:b6:19:66:42: b6:6f:4b:b2:9e:83:aa:9f:79:ce:af:3a:e2:04:8f: 13:97:2f:26:35:ab:b5:97:4e:7e:24:dc:52:08:08: ad:32:c7:76:90:a9:7f:09:1b:10:ec:5f:b7:3a:30: 61:6c:0b:69:9b:85:20:50:ef:60:90:f4:a1:2c:c6: 48:40:0b:ba:71:30:14:74:71:d5:f4:5f:d1:f2:a9: 8a:ec:a0:f7:8c:dc:34:64:e5:cd:bd:65:e1:f7:58: 97:87:a4:a3:da:c1:e1:64:d7:60:42:48:bb:eb:8e: 03:98:d4:c4:99:7e:3c:d6:1d:2d:1b:0b:15:91:54: d3:0a:65:b5:17:1e:cd:1c:14:15:7f:76:b7:15:ba: 49:09:6b:a4:41:c5:f2:8d:67:96:9f:1f:5c:b0:d4: a9:ac:e9:35:4b:b8:17:39:53:ad:75:9e:fe:6a:77: 66:4d:95:a7:74:e2:c4:34:29:ef:15:df:aa:1f:0d: bf:45:6b:0a:7c:16:73:df:fb:59:d0:23:1e:4a:a9: 19:5e:da:5f:e7:4e:d8:27:92:90:3d:56:b2:b6:37: 60:7b:22:16:aa:5f:ba:be:ff:54:98:47:37:51:f8: 71:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DC:13:A2:FA:58:A8:0C:28:DD:BD:C4:9D:4B:6B:A2:BC:2B:FC:74:58 X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 86:df:c0:52:da:1f:3d:4d:ec:42:55:46:dd:0c:97:d6:d6:20: c3:0e:88:c2:bb:e7:f2:28:90:c4:a9:db:61:6d:cf:b3:f7:78: 74:08:4d:ac:98:28:e7:10:7c:16:db:41:f7:06:b8:f9:5c:6d: 2e:9f:f0:95:7a:1e:49:25:07:5c:dc:17:09:23:0b:90:f4:d9: 76:55:44:ea:ef:44:37:58:49:d5:76:03:6f:97:5d:4a:e4:dd: a2:3c:62:cc:d0:12:b2:39:80:e6:67:27:5e:80:44:e0:13:8d: a1:7f:0c:07:67:85:8e:1c:4c:2b:7d:bb:c9:5c:39:54:1c:78: d5:29:56:9b:d5:df:77:db:53:32:b9:38:13:99:78:3b:b1:b8: 77:a0:09:b1:d8:09:04:08:b5:e6:88:3d:cc:45:fb:9b:e8:8f: ab:f4:07:d3:67:3c:8c:d9:96:8a:3e:d1:e9:55:78:7b:f2:11: 72:5d:7c:1c:0d:a4:47:96:e9:c0:72:5b:91:01:4e:b7:75:94: 91:0c:6d:e6:92:41:45:98:c2:c7:41:57:1e:64:68:c1:87:19: ac:b1:f9:bc:ff:1e:64:56:ef:01:e2:41:97:f3:7f:94:66:d0: c4:3a:db:35:5b:d2:58:37:6f:0a:91:c3:c4:8f:39:d5:e3:2e: 61:64:74:cb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUOfC/+GJDEuhyFvkuZPGblCzUoDMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNTA0MDQwMDU4MDRaFw0yNTA0MDUwMzE1MDRaMDMxMTAvBgNV BAMTKERDMTNBMkZBNThBODBDMjhEREJEQzQ5RDRCNkJBMkJDMkJGQzc0NTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDbf75M90MEMF64xYxBdjd6sshL kTLwGIV+thlmQrZvS7Keg6qfec6vOuIEjxOXLyY1q7WXTn4k3FIICK0yx3aQqX8J GxDsX7c6MGFsC2mbhSBQ72CQ9KEsxkhAC7pxMBR0cdX0X9HyqYrsoPeM3DRk5c29 ZeH3WJeHpKPaweFk12BCSLvrjgOY1MSZfjzWHS0bCxWRVNMKZbUXHs0cFBV/drcV ukkJa6RBxfKNZ5afH1yw1Kms6TVLuBc5U611nv5qd2ZNlad04sQ0Ke8V36ofDb9F awp8FnPf+1nQIx5KqRle2l/nTtgnkpA9VrK2N2B7IhaqX7q+/1SYRzdR+HG/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQU3BOi+lioDCjdvcSdS2uivCv8dFgwHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIbfwFLaHz1N7EJVRt0M l9bWIMMOiMK75/IokMSp22Ftz7P3eHQITayYKOcQfBbbQfcGuPlcbS6f8JV6Hkkl B1zcFwkjC5D02XZVROrvRDdYSdV2A2+XXUrk3aI8YszQErI5gOZnJ16AROATjaF/ DAdnhY4cTCt9u8lcOVQceNUpVpvV33fbUzK5OBOZeDuxuHegCbHYCQQIteaIPcxF +5voj6v0B9NnPIzZloo+0elVeHvyEXJdfBwNpEeW6cByW5EBTrd1lJEMbeaSQUWY wsdBVx5kaMGHGayx+bz/HmRW7wHiQZfzf5Rm0MQ62zVb0lg3bwqRw8SPOdXjLmFk dMs= -----END CERTIFICATE-----Generated at Fri Apr 4 17:07:10 2025 by rpki-client