$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft File: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft (raw, json) Hash identifier: QlX33snTXrX+E0ozRIhX0kRZ8hd5fakB3RUXcqbac8g= Subject key identifier: 7D:E2:10:34:19:87:38:F8:53:7C:D6:70:12:A5:1A:BA:B2:EF:F2:CA Authority key identifier: AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 Certificate issuer: /CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Certificate serial: 784CF99AE8A7CB1822FE68EAA67CD07B63E57D41 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft Manifest number: BC Signing time: Tue 26 Nov 2024 14:46:22 +0000 Manifest this update: Tue 26 Nov 2024 14:41:20 +0000 Manifest next update: Wed 27 Nov 2024 18:41:20 +0000 Files and hashes: 1: AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl (hash: 70wYtfr4PZ5qHXdkGXkt9nDz64+COXSFNVR244gDWAY=) 2: 326131313a663263303a666663633a3a2f34382d3438203d3e20323135373638.roa (hash: ZrnGKp52VwdIW6ADcyljrQKRdejSedsJmdCAWzqhtHs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 27 Nov 2024 10:00:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:4c:f9:9a:e8:a7:cb:18:22:fe:68:ea:a6:7c:d0:7b:63:e5:7d:41 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439 Validity Not Before: Nov 26 14:41:20 2024 GMT Not After : Nov 27 18:41:20 2024 GMT Subject: CN=7DE21034198738F8537CD67012A51ABAB2EFF2CA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:3f:6b:99:ed:a4:59:f6:40:5f:90:ce:7e:aa: 40:f6:7e:24:be:07:84:cc:6e:68:07:d9:70:81:ea: eb:5d:f6:3e:c7:98:1f:e3:58:6f:fe:22:d4:47:d9: e7:e4:b3:71:3c:59:89:ee:69:96:1c:21:cc:32:94: c4:6b:a9:41:51:9e:34:1f:1a:e4:6d:d4:16:33:95: 79:71:5c:24:8a:05:6a:a4:53:d8:98:92:13:bf:d6: d1:74:65:cf:1f:c2:5a:5a:ae:38:92:4c:4f:fb:a3: 79:9d:c5:f5:68:6f:d5:81:85:e9:74:79:1b:2c:52: df:81:b5:59:54:f7:8f:36:cc:2a:33:a3:f0:ec:f1: d4:85:be:86:b4:0e:9c:7a:43:47:b9:df:42:c6:e4: 10:a1:ce:c0:b5:d4:5e:fd:99:5a:82:a4:e9:d9:0f: 28:f8:22:43:a5:72:8d:92:10:55:81:77:91:33:c0: f5:e2:3f:b5:ab:d2:18:f4:34:07:a7:1d:f2:2f:55: 7a:40:fb:44:04:c8:40:18:47:ec:dc:07:ad:56:69: 0a:fb:11:c9:1b:ce:25:e6:62:27:b6:a8:88:39:24: 2d:ad:46:da:76:4c:d0:ad:4d:33:a8:5a:54:5b:33: e1:e4:8b:b6:32:a2:d9:4e:66:74:0f:20:e3:89:22: 8e:e9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:E2:10:34:19:87:38:F8:53:7C:D6:70:12:A5:1A:BA:B2:EF:F2:CA X509v3 Authority Key Identifier: keyid:AF:5A:EE:5A:C3:83:5D:AD:FF:52:DC:E6:BE:76:F9:83:2B:C3:D4:39 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_a8405eb53de446a994d21f3c27ea3f98/0/AF5AEE5AC3835DADFF52DCE6BE76F9832BC3D439.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5e:6e:d9:ce:86:0d:b9:24:78:bc:99:74:a6:4b:14:cd:3c:4c: 26:97:f8:67:23:27:e5:26:ac:0c:b7:5a:a1:a7:ee:dd:b4:cd: fc:87:a8:09:61:be:d8:7d:ed:fe:2a:fe:0a:12:73:74:50:67: fb:9e:93:34:e1:d3:0c:ba:d7:0c:47:01:01:a8:76:fd:3d:a4: 35:d0:ec:18:18:b0:e6:fe:c5:c3:ed:06:5c:94:2a:dd:b0:82: d9:56:ee:8d:41:05:2b:a5:2b:f9:ef:e1:f6:3d:29:57:3b:27: 83:34:39:f0:30:64:5a:4d:2e:e7:a8:e4:5a:39:13:ec:6a:85: 75:81:51:1e:66:88:ca:4c:6a:ec:ec:e7:ab:0b:cb:8c:c5:06: e2:b0:83:e4:64:cb:b2:12:4f:82:e6:9b:dd:34:12:67:5b:2b: 6b:70:21:5e:ca:83:d9:ab:2e:93:2d:21:f0:1f:b5:5c:49:66: 80:d3:fe:61:be:12:98:91:24:fb:15:f0:62:e8:f3:03:ef:2f: 69:2b:37:40:3e:17:e3:5d:f0:05:94:9e:65:5b:84:2f:3f:04: d5:5c:97:d9:3a:46:7d:5a:d0:14:e2:fd:f4:a6:16:79:a9:f9: 19:95:65:0b:1b:ad:84:ba:db:ac:2c:04:49:b6:7a:81:98:15: ed:1c:6e:b3 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUeEz5muinyxgi/mjqpnzQe2PlfUEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMy QkMzRDQzOTAeFw0yNDExMjYxNDQxMjBaFw0yNDExMjcxODQxMjBaMDMxMTAvBgNV BAMTKDdERTIxMDM0MTk4NzM4Rjg1MzdDRDY3MDEyQTUxQUJBQjJFRkYyQ0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDoP2uZ7aRZ9kBfkM5+qkD2fiS+ B4TMbmgH2XCB6utd9j7HmB/jWG/+ItRH2efks3E8WYnuaZYcIcwylMRrqUFRnjQf GuRt1BYzlXlxXCSKBWqkU9iYkhO/1tF0Zc8fwlparjiSTE/7o3mdxfVob9WBhel0 eRssUt+BtVlU9482zCozo/Ds8dSFvoa0Dpx6Q0e530LG5BChzsC11F79mVqCpOnZ Dyj4IkOlco2SEFWBd5EzwPXiP7Wr0hj0NAenHfIvVXpA+0QEyEAYR+zcB61WaQr7 EckbziXmYie2qIg5JC2tRtp2TNCtTTOoWlRbM+Hki7YyotlOZnQPIOOJIo7pAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUfeIQNBmHOPhTfNZwEqUaurLv8sowHwYDVR0j BBgwFoAUr1ruWsODXa3/Utzmvnb5gyvD1DkwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2E4NDA1ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAv QUY1QUVFNUFDMzgzNURBREZGNTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9BRjVBRUU1QUMzODM1REFERkY1MkRDRTZCRTc2Rjk4 MzJCQzNENDM5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2E4NDA1 ZWI1M2RlNDQ2YTk5NGQyMWYzYzI3ZWEzZjk4LzAvQUY1QUVFNUFDMzgzNURBREZG NTJEQ0U2QkU3NkY5ODMyQkMzRDQzOS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAF5u2c6GDbkkeLyZdKZL FM08TCaX+GcjJ+UmrAy3WqGn7t20zfyHqAlhvth97f4q/goSc3RQZ/uekzTh0wy6 1wxHAQGodv09pDXQ7BgYsOb+xcPtBlyUKt2wgtlW7o1BBSulK/nv4fY9KVc7J4M0 OfAwZFpNLueo5Fo5E+xqhXWBUR5miMpMauzs56sLy4zFBuKwg+Rky7IST4Lmm900 EmdbK2twIV7Kg9mrLpMtIfAftVxJZoDT/mG+EpiRJPsV8GLo8wPvL2krN0A+F+Nd 8AWUnmVbhC8/BNVcl9k6Rn1a0BTi/fSmFnmp+RmVZQsbrYS626wsBEm2eoGYFe0c brM= -----END CERTIFICATE-----Generated at Tue Nov 26 17:13:36 2024 by rpki-client on console-fra.rpki-client.org