$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft File: F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft (raw, json) Hash identifier: kbzWoH8LIztjCmHuCZRFuuQ/VXC8mCdRE7H9CdHskKs= Subject key identifier: 32:94:25:4D:D8:24:FF:B9:D8:6A:63:7C:BF:E8:FA:75:91:13:41:DA Authority key identifier: F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 Certificate issuer: /CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Certificate serial: 3B676A85A03E4D99F5405901EEBCA9DB66ACBC7F Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft Manifest number: 0168 Signing time: Fri 04 Apr 2025 00:57:27 +0000 Manifest this update: Fri 04 Apr 2025 00:52:25 +0000 Manifest next update: Sat 05 Apr 2025 04:15:25 +0000 Files and hashes: 1: F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl (hash: cwVvzduYdZPDWmU2ziXDBAIcBdCbpHKImXwXOtGafrI=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 05 Apr 2025 04:15:25 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3b:67:6a:85:a0:3e:4d:99:f5:40:59:01:ee:bc:a9:db:66:ac:bc:7f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=F794DFA009EA90B4CBBB340DE4C255446986D7C6 Validity Not Before: Apr 4 00:52:25 2025 GMT Not After : Apr 5 04:15:25 2025 GMT Subject: CN=3294254DD824FFB9D86A637CBFE8FA75911341DA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:aa:6a:d8:ff:de:05:b7:c0:73:1d:89:4b:3a: 90:23:29:fc:fa:43:e3:03:3a:f5:c3:31:36:a7:2c: 0a:f1:6a:ec:ca:5c:45:46:b4:84:c0:cd:44:38:80: fc:04:4f:de:7a:55:47:75:06:4b:94:df:75:6c:e3: a1:d5:7e:28:48:17:0b:4b:4a:55:b2:3c:4d:8e:a4: ac:71:9a:fb:8e:e3:95:46:6c:c4:1f:72:aa:cf:c4: 2a:45:a7:da:c8:76:53:03:ce:46:1e:85:2d:2b:a1: 82:14:b9:6e:b9:03:dc:b8:79:14:eb:71:fe:12:be: 88:19:0f:55:7f:e9:62:36:34:82:51:b9:dc:51:8b: ac:51:c8:00:cd:b3:9f:1d:4c:75:d6:68:07:72:d3: 22:27:5c:c5:8a:f1:97:65:1a:fb:b1:fd:86:d2:45: ab:cd:1e:e3:2a:95:57:e2:08:fd:9d:8f:95:75:92: 5e:37:f9:99:e4:d2:27:b6:20:00:79:76:1a:a2:aa: 12:63:ef:b7:9c:2d:67:7f:8f:40:b2:05:f1:1b:38: b9:a5:eb:d3:ba:fe:62:1a:cb:5c:8d:d1:e8:97:4f: 23:76:de:08:ae:44:6c:c3:4d:c7:31:1c:d5:6d:0b: d9:c5:0a:9f:d8:28:13:ff:65:60:13:0f:ae:63:04: e6:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 32:94:25:4D:D8:24:FF:B9:D8:6A:63:7C:BF:E8:FA:75:91:13:41:DA X509v3 Authority Key Identifier: keyid:F7:94:DF:A0:09:EA:90:B4:CB:BB:34:0D:E4:C2:55:44:69:86:D7:C6 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/F794DFA009EA90B4CBBB340DE4C255446986D7C6.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_de53339823204f748d440d2cf026dda9/0/F794DFA009EA90B4CBBB340DE4C255446986D7C6.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 95:f1:44:a4:c1:f7:91:21:57:f0:4b:5d:34:4f:be:a8:88:92: 91:86:9e:32:c0:c3:7c:58:c0:42:2d:33:0a:86:34:24:fa:b3: 72:11:b7:4f:fc:19:ef:28:65:b4:f6:3c:36:9a:02:7a:04:4a: f0:2e:3d:ae:99:99:12:a9:24:e2:cf:a2:ab:4f:87:b5:e3:fa: f2:ef:7b:b7:5a:7d:78:a3:cd:ae:34:eb:25:d7:2c:78:eb:fb: 89:b4:aa:79:19:fc:cb:e6:2e:76:bb:b3:04:30:fb:c1:06:cd: 0f:ee:88:ab:2f:75:1d:3b:1c:7b:7e:fa:d1:3b:7c:5b:12:36: ec:6e:d2:51:91:9f:b9:d1:d5:f0:85:06:4a:1c:d5:91:12:dd: e0:ab:d9:31:a8:18:b6:cd:f6:71:df:be:1b:d0:e7:f6:38:62: f7:ab:67:b3:6e:6f:fc:6f:27:17:b3:d6:15:11:24:5f:d4:ed: 60:4e:34:ad:e9:b2:c8:ed:62:29:45:2d:6d:ab:a7:7b:99:54: 02:99:ea:ed:78:ed:c0:cf:67:94:df:f3:13:fd:3c:75:47:35: a6:24:6f:e8:a8:d1:6d:c8:35:2f:ff:da:e2:ef:2a:15:31:03: d3:2b:49:f8:f5:c0:c1:e1:d5:14:1d:49:ad:2a:20:51:6b:c9: 04:aa:29:fb -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUO2dqhaA+TZn1QFkB7ryp22asvH8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2 OTg2RDdDNjAeFw0yNTA0MDQwMDUyMjVaFw0yNTA0MDUwNDE1MjVaMDMxMTAvBgNV BAMTKDMyOTQyNTRERDgyNEZGQjlEODZBNjM3Q0JGRThGQTc1OTExMzQxREEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqqmrY/94Ft8BzHYlLOpAjKfz6 Q+MDOvXDMTanLArxauzKXEVGtITAzUQ4gPwET956VUd1BkuU33Vs46HVfihIFwtL SlWyPE2OpKxxmvuO45VGbMQfcqrPxCpFp9rIdlMDzkYehS0roYIUuW65A9y4eRTr cf4SvogZD1V/6WI2NIJRudxRi6xRyADNs58dTHXWaAdy0yInXMWK8ZdlGvux/YbS RavNHuMqlVfiCP2dj5V1kl43+Znk0ie2IAB5dhqiqhJj77ecLWd/j0CyBfEbOLml 69O6/mIay1yN0eiXTyN23giuRGzDTccxHNVtC9nFCp/YKBP/ZWATD65jBObNAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUMpQlTdgk/7nYamN8v+j6dZETQdowHwYDVR0j BBgwFoAU95TfoAnqkLTLuzQN5MJVRGmG18YwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2RlNTMzMzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAv Rjc5NERGQTAwOUVBOTBCNENCQkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GNzk0REZBMDA5RUE5MEI0Q0JCQjM0MERFNEMyNTU0 NDY5ODZEN0M2LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2RlNTMz Mzk4MjMyMDRmNzQ4ZDQ0MGQyY2YwMjZkZGE5LzAvRjc5NERGQTAwOUVBOTBCNENC QkIzNDBERTRDMjU1NDQ2OTg2RDdDNi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJXxRKTB95EhV/BLXTRP vqiIkpGGnjLAw3xYwEItMwqGNCT6s3IRt0/8Ge8oZbT2PDaaAnoESvAuPa6ZmRKp JOLPoqtPh7Xj+vLve7dafXijza406yXXLHjr+4m0qnkZ/MvmLna7swQw+8EGzQ/u iKsvdR07HHt++tE7fFsSNuxu0lGRn7nR1fCFBkoc1ZES3eCr2TGoGLbN9nHfvhvQ 5/Y4YverZ7Nub/xvJxez1hURJF/U7WBONK3pssjtYilFLW2rp3uZVAKZ6u147cDP Z5Tf8xP9PHVHNaYkb+io0W3INS//2uLvKhUxA9MrSfj1wMHh1RQdSa0qIFFryQSq Kfs= -----END CERTIFICATE-----Generated at Fri Apr 4 17:37:55 2025 by rpki-client