$ rpki-client -vvf rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft File: A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft (raw, json) Hash identifier: V4mJBy9rVkwSaB7cgT9+JYUWh6Ej0whvuHERAqR/+K4= Subject key identifier: 63:76:FA:C0:73:39:44:8C:50:F7:34:05:A0:B3:09:AC:EF:E2:E0:13 Authority key identifier: A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4 Certificate issuer: /CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4 Certificate serial: 248EE824DD398812931A97563E07C40C277BAEDE Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer Subject info access: rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft Manifest number: 036F Signing time: Thu 02 May 2024 09:49:58 +0000 Manifest this update: Thu 02 May 2024 09:44:58 +0000 Manifest next update: Fri 03 May 2024 11:06:58 +0000 Files and hashes: 1: 326130343a623930373a3a2f34372d3437203d3e20323131333231.roa (hash: y+knOuhafLtEBuxaPCS6EE6OUDRji6/1V8kQ78sToLg=) 2: 326130343a623930323a3a2f33322d3332203d3e203136353039.roa (hash: 17p8tCrH2OQv6xPOIrX/oE0xrvRLHpB045zI9Rxvdjc=) 3: 326130343a623930363a3a2f34382d3438203d3e2030.roa (hash: 80ZUUnVLacxMd5C8rL2zeQpWYPULkPBlGGWxaUPjhF4=) 4: 326130343a623930303a3a2f33302d3330203d3e2038353837.roa (hash: ivgkesCiMtIOryuo40vk9UC66yTXU489Jmz03jm+zKE=) 5: 3138352e34392e3134322e302f32342d3234203d3e2030.roa (hash: gYJkyFEkIktyZ+ka0t8u++fV/z0PpJWYOpv24NWJTdo=) 6: 326130343a623930303a3a2f33302d3332203d3e2038353837.roa (hash: PQqUgTvM7ETeWVignn6eJgWllMredVRO5ZH2rhFjrpk=) 7: 326130343a623930353a3a2f34382d3438203d3e203134363138.roa (hash: 6p4aFGl0dNowe4dDEzVpdf9C/WfLOZ1eqTuby7Oka6w=) 8: 3138352e34392e3134322e302f32332d3233203d3e20323131333231.roa (hash: pjOVigVrZmwtH9ozJGSqaEAEoLWZgAZAg9DnN+uwLn8=) 9: 326130343a623930373a3a2f34382d3438203d3e2030.roa (hash: g/P6/bjazXTPQ2zZ4hjx2lH8j7sT8qYq3wC8kE0iLvc=) 10: 326130343a623930343a3a2f34382d3438203d3e20323131333231.roa (hash: A+dtJHk9x6wVW6MqVzvQjBJjP5URhPa7hwbl1on+wTQ=) 11: 3138352e34392e3134302e302f32332d3233203d3e2038353837.roa (hash: SMSZB8wpVtSRYl1+06KZK/0op6J/ghngBhBk+x0FC1U=) 12: 5665DC4D31D2D8688792970C92271376F081D514.cer (hash: LA0Y7OY6/jgwtQrMaHxPaI4FqX6nE4Hclas91CZ3Iug=) 13: 3138352e34392e3134332e302f32342d3234203d3e20323131333231.roa (hash: 7ElQasPNwa4SPlS9mxZKUgHISHUBRxtLfLADoy9of5M=) 14: A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl (hash: XWDXHe4+JvkGxIktBASOVqUCYAR/oZoMgcruAR3PVCs=) 15: 326130343a623930353a3a2f34382d3438203d3e203136353039.roa (hash: SWUG37car5l0A/TpLhoLLdjzhGw06y1FDsQ3WqIFwrg=) 16: 326130343a623930323a3a2f33322d3332203d3e203134363138.roa (hash: AUY26owpcyXy/fUm8K+N7VW1WAEzZ6zExFbyoLcHsl4=) Validation: OK Signature path: rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 03 May 2024 08:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 24:8e:e8:24:dd:39:88:12:93:1a:97:56:3e:07:c4:0c:27:7b:ae:de Signature Algorithm: sha256WithRSAEncryption Issuer: CN=a81eb3a5eb3df634551a90722bc63ad7e022cac4 Validity Not Before: May 2 09:44:58 2024 GMT Not After : May 3 11:06:58 2024 GMT Subject: CN=6376FAC07339448C50F73405A0B309ACEFE2E013 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:c6:e2:e8:13:57:94:2a:11:74:5a:50:a7:25: ac:a6:74:83:14:53:d8:cf:1a:a9:80:ab:80:85:d9: aa:9b:e7:23:34:e8:74:37:c2:66:86:84:b9:2b:c5: c2:53:2f:34:70:b0:5b:64:a1:d4:3f:07:42:18:8d: 6e:01:2d:07:c0:a1:d7:08:d1:43:69:4e:05:e0:f9: 52:9f:c4:d5:66:a9:f6:69:a2:f6:89:d4:45:e5:43: 7d:b4:27:db:16:05:e3:f0:9d:e0:38:21:f2:b4:fc: 8c:c1:80:bb:9f:09:1b:94:fc:b7:fe:f0:fb:2b:e5: 18:ce:b1:ef:47:36:2c:09:cf:b7:bb:ae:19:ad:b6: 7d:44:db:21:d3:c6:45:06:31:d3:09:e2:11:88:69: 16:a7:9e:59:ce:6b:6b:d3:86:be:b7:39:6c:ac:38: 01:1a:39:0f:60:ea:9f:0a:84:a6:eb:30:7e:65:5b: 79:bd:7b:76:8b:e5:c6:b7:b5:08:03:54:df:14:f5: 7a:6e:92:a2:4e:14:bf:2e:1c:f2:7e:b4:49:3e:99: 9e:e6:9e:08:49:94:43:c0:7e:95:0e:c1:df:d5:fe: ba:8a:76:29:e4:8a:d3:c4:6f:63:c9:b4:d0:2e:86: a7:37:12:0f:22:13:50:21:43:e5:3f:41:59:31:ef: 94:53 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 63:76:FA:C0:73:39:44:8C:50:F7:34:05:A0:B3:09:AC:EF:E2:E0:13 X509v3 Authority Key Identifier: keyid:A8:1E:B3:A5:EB:3D:F6:34:55:1A:90:72:2B:C6:3A:D7:E0:22:CA:C4 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qB6zpes99jRVGpByK8Y61-AiysQ.cer Subject Information Access: Signed Object - URI:rsync://rsync.krill.cloud/repo/nlnetlabs/1/A81EB3A5EB3DF634551A90722BC63AD7E022CAC4.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a4:be:c5:10:0f:39:7b:79:73:90:da:e5:37:03:be:61:27:8e: 0c:9a:ac:fa:f2:0d:ec:33:95:6b:a5:24:3f:97:02:44:d0:9d: 1e:c2:b9:86:ce:9a:17:89:a2:f8:f9:ad:ba:b6:35:c3:1e:fa: 1b:dd:cd:7e:fb:01:fe:f3:96:d7:7f:fa:d6:03:92:93:4e:e5: ba:f3:0d:b3:5c:a4:27:a9:34:f8:91:d6:3c:e8:70:a4:88:69: 4a:bc:ec:1d:ce:22:e0:c1:58:a4:57:6d:6d:11:c8:53:83:b8: 12:54:ec:75:06:c0:10:fe:8c:c0:ff:cb:ac:7f:6a:f3:92:59: 24:91:35:11:15:b9:1b:c6:ac:10:0f:b4:e2:e9:c7:f9:5e:f5: 58:74:ad:9e:7e:f9:67:17:ab:f5:3c:cb:b1:c7:89:80:9a:9e: 3d:c2:e2:80:62:c0:ae:e4:d2:fc:dc:3b:2e:d8:fb:8f:7d:db: 5b:6d:d8:5c:6d:42:f4:bc:d6:0a:66:8c:ff:ff:37:ae:65:af: bf:70:e4:29:29:66:ca:0a:20:2c:9a:47:51:93:69:9d:63:f8: 64:76:5e:7e:ed:0b:1e:2f:8c:a4:40:3b:e2:5b:64:2c:36:c8: e0:fd:f8:bb:dd:51:6f:f1:c5:51:cc:4a:11:1e:bc:cc:49:0c: 71:ff:6f:42 -----BEGIN CERTIFICATE----- MIIE4zCCA8ugAwIBAgIUJI7oJN05iBKTGpdWPgfEDCd7rt4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYTgxZWIzYTVlYjNkZjYzNDU1MWE5MDcyMmJjNjNhZDdl MDIyY2FjNDAeFw0yNDA1MDIwOTQ0NThaFw0yNDA1MDMxMTA2NThaMDMxMTAvBgNV BAMTKDYzNzZGQUMwNzMzOTQ0OEM1MEY3MzQwNUEwQjMwOUFDRUZFMkUwMTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCexuLoE1eUKhF0WlCnJaymdIMU U9jPGqmAq4CF2aqb5yM06HQ3wmaGhLkrxcJTLzRwsFtkodQ/B0IYjW4BLQfAodcI 0UNpTgXg+VKfxNVmqfZpovaJ1EXlQ320J9sWBePwneA4IfK0/IzBgLufCRuU/Lf+ 8Psr5RjOse9HNiwJz7e7rhmttn1E2yHTxkUGMdMJ4hGIaRannlnOa2vThr63OWys OAEaOQ9g6p8KhKbrMH5lW3m9e3aL5ca3tQgDVN8U9XpukqJOFL8uHPJ+tEk+mZ7m nghJlEPAfpUOwd/V/rqKdinkitPEb2PJtNAuhqc3Eg8iE1AhQ+U/QVkx75RTAgMB AAGjggHtMIIB6TAdBgNVHQ4EFgQUY3b6wHM5RIxQ9zQFoLMJrO/i4BMwHwYDVR0j BBgwFoAUqB6zpes99jRVGpByK8Y61+AiysQwDgYDVR0PAQH/BAQDAgeAMGgGA1Ud HwRhMF8wXaBboFmGV3JzeW5jOi8vcnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5l dGxhYnMvMS9BODFFQjNBNUVCM0RGNjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0 LmNybDBkBggrBgEFBQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5y aXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvcUI2enBlczk5alJWR3BCeUs4WTYx LUFpeXNRLmNlcjBzBggrBgEFBQcBCwRnMGUwYwYIKwYBBQUHMAuGV3JzeW5jOi8v cnN5bmMua3JpbGwuY2xvdWQvcmVwby9ubG5ldGxhYnMvMS9BODFFQjNBNUVCM0RG NjM0NTUxQTkwNzIyQkM2M0FEN0UwMjJDQUM0Lm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApL7FEA85e3lz kNrlNwO+YSeODJqs+vIN7DOVa6UkP5cCRNCdHsK5hs6aF4mi+PmturY1wx76G93N fvsB/vOW13/61gOSk07luvMNs1ykJ6k0+JHWPOhwpIhpSrzsHc4i4MFYpFdtbRHI U4O4ElTsdQbAEP6MwP/LrH9q85JZJJE1ERW5G8asEA+04unH+V71WHStnn75Zxer 9TzLsceJgJqePcLigGLAruTS/Nw7Ltj7j33bW23YXG1C9LzWCmaM//83rmWvv3Dk KSlmygogLJpHUZNpnWP4ZHZefu0LHi+MpEA74ltkLDbI4P34u91Rb/HFUcxKER68 zEkMcf9vQg== -----END CERTIFICATE-----Generated at Thu May 2 13:51:11 2024 by rpki-client on console-fra.rpki-client.org