$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft File: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft (raw, json) Hash identifier: V4tVIVYtwpAXMWLjgqmC5DeWr6GkKREu4PUrzcd1Mqs= Subject key identifier: 88:A2:EB:20:92:6B:2A:48:8A:AF:80:45:70:97:C9:C8:77:2B:39:39 Authority key identifier: DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 Certificate issuer: /CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Certificate serial: 6F6680F1BE8FAAC810F106374639474A4E0C2DC3 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft Manifest number: 018B Signing time: Mon 28 Apr 2025 02:52:53 +0000 Manifest this update: Mon 28 Apr 2025 02:47:51 +0000 Manifest next update: Tue 29 Apr 2025 05:46:51 +0000 Files and hashes: 1: 326131313a663263303a666665303a3a2f34342d3434203d3e20323038303531.roa (hash: bIttpen3IjgsR1QdlNNcRrtX2dBZba5UCB54iz2dEbU=) 2: DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl (hash: 2ee3T1tu0+dw/VpgHM/+W32AIDJoJO3BpSpwFpcTiDs=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 03:46:22 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6f:66:80:f1:be:8f:aa:c8:10:f1:06:37:46:39:47:4a:4e:0c:2d:c3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1 Validity Not Before: Apr 28 02:47:51 2025 GMT Not After : Apr 29 05:46:51 2025 GMT Subject: CN=88A2EB20926B2A488AAF80457097C9C8772B3939 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e0:f7:7a:f9:8e:ed:01:f0:f8:cb:65:76:26:47: 49:fd:da:1c:db:ec:94:bd:63:eb:59:2d:3f:67:bf: 50:22:d2:9b:0d:57:c2:04:63:ce:de:af:d3:27:bf: de:20:22:14:22:c8:df:8a:33:ce:c2:7b:3e:5a:c4: 0a:93:73:6e:26:a8:47:44:de:45:ab:50:3f:2f:70: 7f:f3:5d:f7:44:31:81:85:3f:88:64:18:90:e8:10: c4:17:4e:ae:b0:30:6d:04:08:62:80:27:01:59:46: ff:7f:4f:03:8d:fe:5d:61:ed:aa:77:d5:07:d7:7a: 31:ed:e8:16:27:67:c7:04:05:92:38:16:10:da:b5: 45:6b:41:47:bf:18:7e:e0:ab:27:fc:18:80:3a:12: 37:ef:6b:42:c9:fd:88:c2:7b:eb:2c:12:49:42:3d: dd:80:84:6e:60:4b:d2:cc:1c:45:6f:61:e7:90:cf: 7f:a9:05:78:31:81:da:9c:39:70:4c:04:8a:60:3e: 63:f3:73:f4:e7:d7:3f:d8:9b:1b:77:7a:4b:82:0b: f5:81:f1:ab:e1:a1:c6:d9:dd:4a:4a:fe:5e:e1:4a: 55:67:e1:24:71:3d:ed:b6:60:2f:cf:d7:74:a1:0c: c2:6c:bf:60:51:0a:db:03:df:66:16:10:62:16:f5: ea:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 88:A2:EB:20:92:6B:2A:48:8A:AF:80:45:70:97:C9:C8:77:2B:39:39 X509v3 Authority Key Identifier: keyid:DC:2D:34:FE:0F:8C:90:B2:A8:CA:EC:47:27:D6:BA:31:B9:8D:25:D1 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_5c5522ba69fe47d2b63c7b6531a244f8/0/DC2D34FE0F8C90B2A8CAEC4727D6BA31B98D25D1.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 19:53:6c:cc:58:9d:ea:32:1d:f8:69:71:05:28:9e:ad:9a:86: c9:d8:b9:17:4d:0d:65:19:61:b8:84:9b:9c:4e:fe:b1:64:7a: 3b:67:99:b3:a4:e6:53:67:56:47:ec:d5:92:74:fb:c8:39:05: 04:1b:49:f9:4f:ec:a9:bb:53:19:7b:f4:d2:d2:82:02:1a:fa: f0:c4:76:a6:81:f7:22:3d:70:d8:0c:ca:f7:09:3c:a0:36:3c: 0f:4f:43:25:12:39:79:49:8b:0b:b5:ae:c2:32:7c:c9:42:ed: ba:d9:c3:fd:e0:0a:1b:f5:9a:45:f5:b5:63:05:85:f2:b8:a7: 28:62:05:aa:92:57:be:b8:fa:be:1c:64:58:d2:ad:9a:20:cf: e9:d4:16:34:62:47:1c:21:0d:33:54:d7:ee:4c:ae:16:27:15: b1:a6:d4:68:63:d8:2d:fb:f8:5d:aa:b0:57:79:34:4b:5d:0a: 99:9f:21:90:a4:ea:a6:a1:4b:29:af:22:d6:b2:d1:5b:d8:d8: 1e:05:d1:aa:0f:45:6a:46:1c:8a:58:0c:25:22:d8:25:9d:fc: 0b:7e:b9:34:f3:18:e1:51:90:a9:9b:45:8b:3a:35:90:b6:5b: 03:41:4b:99:4a:73:fe:23:a6:9a:61:9a:8f:bf:a5:58:01:ee: e2:46:93:63 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUb2aA8b6PqsgQ8QY3RjlHSk4MLcMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoREMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFC OThEMjVEMTAeFw0yNTA0MjgwMjQ3NTFaFw0yNTA0MjkwNTQ2NTFaMDMxMTAvBgNV BAMTKDg4QTJFQjIwOTI2QjJBNDg4QUFGODA0NTcwOTdDOUM4NzcyQjM5MzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg93r5ju0B8PjLZXYmR0n92hzb 7JS9Y+tZLT9nv1Ai0psNV8IEY87er9Mnv94gIhQiyN+KM87Cez5axAqTc24mqEdE 3kWrUD8vcH/zXfdEMYGFP4hkGJDoEMQXTq6wMG0ECGKAJwFZRv9/TwON/l1h7ap3 1QfXejHt6BYnZ8cEBZI4FhDatUVrQUe/GH7gqyf8GIA6Ejfva0LJ/YjCe+ssEklC Pd2AhG5gS9LMHEVvYeeQz3+pBXgxgdqcOXBMBIpgPmPzc/Tn1z/Ymxt3ekuCC/WB 8avhocbZ3UpK/l7hSlVn4SRxPe22YC/P13ShDMJsv2BRCtsD32YWEGIW9er/AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUiKLrIJJrKkiKr4BFcJfJyHcrOTkwHwYDVR0j BBgwFoAU3C00/g+MkLKoyuxHJ9a6MbmNJdEwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzVjNTUyMmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAv REMyRDM0RkUwRjhDOTBCMkE4Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9EQzJEMzRGRTBGOEM5MEIyQThDQUVDNDcyN0Q2QkEz MUI5OEQyNUQxLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzVjNTUy MmJhNjlmZTQ3ZDJiNjNjN2I2NTMxYTI0NGY4LzAvREMyRDM0RkUwRjhDOTBCMkE4 Q0FFQzQ3MjdENkJBMzFCOThEMjVEMS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBABlTbMxYneoyHfhpcQUo nq2ahsnYuRdNDWUZYbiEm5xO/rFkejtnmbOk5lNnVkfs1ZJ0+8g5BQQbSflP7Km7 Uxl79NLSggIa+vDEdqaB9yI9cNgMyvcJPKA2PA9PQyUSOXlJiwu1rsIyfMlC7brZ w/3gChv1mkX1tWMFhfK4pyhiBaqSV764+r4cZFjSrZogz+nUFjRiRxwhDTNU1+5M rhYnFbGm1Ghj2C37+F2qsFd5NEtdCpmfIZCk6qahSymvItay0VvY2B4F0aoPRWpG HIpYDCUi2CWd/At+uTTzGOFRkKmbRYs6NZC2WwNBS5lKc/4jppphmo+/pVgB7uJG k2M= -----END CERTIFICATE-----Generated at Mon Apr 28 15:21:54 2025 by rpki-client