$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft File: 31586760843F668A816117EA02F6F30FE8F9C359.mft (raw, json) Hash identifier: SFWKSH2nau1MTtBnV3o9LsTQiKwWG1QAULWlocqskyM= Subject key identifier: 86:11:CF:36:CF:DC:52:C2:B7:37:84:61:91:1D:EC:2B:C4:0F:AB:86 Authority key identifier: 31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 Certificate issuer: /CN=31586760843F668A816117EA02F6F30FE8F9C359 Certificate serial: 379F7D570ED50E4D07AD356E4248F4E4F4234764 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft Manifest number: 018B Signing time: Tue 29 Apr 2025 15:05:41 +0000 Manifest this update: Tue 29 Apr 2025 15:00:39 +0000 Manifest next update: Wed 30 Apr 2025 15:53:39 +0000 Files and hashes: 1: 31586760843F668A816117EA02F6F30FE8F9C359.crl (hash: wNeuzzw3iW6wV+xtjwNiv7lCm1RSxarGqEcGAfifggQ=) 2: 326131313a663263303a666638303a3a2f34382d3438203d3e20323134353738.roa (hash: vL1deW40wo8pcYsREoOIq3gzs7RyvFvmmro5dlKeegY=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 23:37:59 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:9f:7d:57:0e:d5:0e:4d:07:ad:35:6e:42:48:f4:e4:f4:23:47:64 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=31586760843F668A816117EA02F6F30FE8F9C359 Validity Not Before: Apr 29 15:00:39 2025 GMT Not After : Apr 30 15:53:39 2025 GMT Subject: CN=8611CF36CFDC52C2B7378461911DEC2BC40FAB86 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ab:8a:a4:a0:61:74:54:66:62:bc:cb:da:54:95: 84:d7:35:13:78:9f:5f:89:23:71:c1:d5:70:1d:41: e6:bb:34:f0:6e:49:36:2c:b7:cf:81:97:84:83:3f: 3e:21:a7:a8:a1:af:29:ef:5a:ee:8c:4d:fc:2d:92: 86:11:76:9b:8f:39:5c:c3:48:0d:71:52:7e:2e:b8: 1c:f8:80:74:45:4e:9d:25:ec:0b:ed:0c:31:80:01: 1f:4e:7f:d1:82:82:92:90:19:dd:c0:ef:ad:ff:04: c6:8b:a6:c5:ff:30:cf:8a:3e:25:07:18:4f:3e:83: e7:7f:3b:8f:99:4f:8e:00:7b:8b:d6:d9:fd:03:a5: f5:58:21:39:44:5a:52:08:18:b7:1d:4e:6f:46:f0: 5a:31:b2:9c:97:64:30:97:a0:93:ae:01:23:26:3e: 1c:b8:ee:ad:23:13:db:01:e0:fa:80:e7:5a:a3:96: aa:cd:41:8b:ab:a6:4a:54:8c:f7:1e:8b:b7:4d:e7: 8f:0a:58:21:70:4f:37:dc:d1:de:c3:f1:e7:77:b3: 3c:48:61:98:39:98:6a:d3:1b:bb:d3:f2:7e:25:d7: ef:2c:1a:33:ed:92:b0:2e:e5:e5:e2:0a:8a:35:88: 62:68:74:14:d8:70:66:81:de:f0:ba:e5:05:a7:27: 53:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 86:11:CF:36:CF:DC:52:C2:B7:37:84:61:91:1D:EC:2B:C4:0F:AB:86 X509v3 Authority Key Identifier: keyid:31:58:67:60:84:3F:66:8A:81:61:17:EA:02:F6:F3:0F:E8:F9:C3:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/31586760843F668A816117EA02F6F30FE8F9C359.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67c5d4ad433e4cfc9086ea1f33f2d276/0/31586760843F668A816117EA02F6F30FE8F9C359.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6c:30:76:72:e3:05:e5:bd:6a:21:67:3f:81:66:b0:c9:15:1e: 29:31:1b:6d:0d:71:c3:8e:2e:6f:43:21:15:97:1d:ab:5b:37: 89:88:f6:b3:43:da:ae:08:0a:d0:16:f9:b6:cd:38:f6:83:05: e5:4a:ca:28:80:65:0b:c6:13:c4:06:b7:0c:17:b9:14:ff:55: 87:49:76:57:dc:81:35:e8:00:6b:84:68:da:65:61:7a:97:98: 48:17:19:35:97:b6:89:28:a0:9d:d3:4f:c4:04:50:32:73:25: 50:f5:66:62:3e:d5:95:1d:ff:e4:18:c7:0f:48:a1:1b:d7:8c: 1d:47:4b:77:e8:58:3e:47:5b:6d:ff:b6:b7:82:78:b4:23:24: dd:8f:9b:17:be:b5:d4:5e:f5:65:59:b2:05:13:62:42:0c:13: 48:69:a3:92:eb:71:de:42:7d:0a:ed:d8:88:1b:2f:e2:98:db: 8d:82:f1:43:95:ad:b9:66:bf:c3:28:5e:0f:ca:d3:05:93:4a: f3:b6:ad:3d:d9:78:92:c0:dd:4a:84:ae:71:2b:31:15:b8:16: ad:54:f7:13:01:ac:67:73:b1:8b:19:c0:92:d2:ac:27:ea:84: 78:e2:cf:db:eb:37:1b:50:0d:83:bb:7e:39:4a:f7:01:94:5d: 81:fa:be:75 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUN599Vw7VDk0HrTVuQkj05PQjR2QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZF OEY5QzM1OTAeFw0yNTA0MjkxNTAwMzlaFw0yNTA0MzAxNTUzMzlaMDMxMTAvBgNV BAMTKDg2MTFDRjM2Q0ZEQzUyQzJCNzM3ODQ2MTkxMURFQzJCQzQwRkFCODYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCriqSgYXRUZmK8y9pUlYTXNRN4 n1+JI3HB1XAdQea7NPBuSTYst8+Bl4SDPz4hp6ihrynvWu6MTfwtkoYRdpuPOVzD SA1xUn4uuBz4gHRFTp0l7AvtDDGAAR9Of9GCgpKQGd3A763/BMaLpsX/MM+KPiUH GE8+g+d/O4+ZT44Ae4vW2f0DpfVYITlEWlIIGLcdTm9G8FoxspyXZDCXoJOuASMm Phy47q0jE9sB4PqA51qjlqrNQYurpkpUjPcei7dN548KWCFwTzfc0d7D8ed3szxI YZg5mGrTG7vT8n4l1+8sGjPtkrAu5eXiCoo1iGJodBTYcGaB3vC65QWnJ1MtAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhhHPNs/cUsK3N4RhkR3sK8QPq4YwHwYDVR0j BBgwFoAUMVhnYIQ/ZoqBYRfqAvbzD+j5w1kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3YzVkNGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAv MzE1ODY3NjA4NDNGNjY4QTgxNjExN0VBMDJGNkYzMEZFOEY5QzM1OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy8zMTU4Njc2MDg0M0Y2NjhBODE2MTE3RUEwMkY2RjMw RkU4RjlDMzU5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3YzVk NGFkNDMzZTRjZmM5MDg2ZWExZjMzZjJkMjc2LzAvMzE1ODY3NjA4NDNGNjY4QTgx NjExN0VBMDJGNkYzMEZFOEY5QzM1OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGwwdnLjBeW9aiFnP4Fm sMkVHikxG20NccOOLm9DIRWXHatbN4mI9rND2q4ICtAW+bbNOPaDBeVKyiiAZQvG E8QGtwwXuRT/VYdJdlfcgTXoAGuEaNplYXqXmEgXGTWXtokooJ3TT8QEUDJzJVD1 ZmI+1ZUd/+QYxw9IoRvXjB1HS3foWD5HW23/treCeLQjJN2Pmxe+tdRe9WVZsgUT YkIME0hpo5Lrcd5CfQrt2IgbL+KY242C8UOVrblmv8MoXg/K0wWTSvO2rT3ZeJLA 3UqErnErMRW4Fq1U9xMBrGdzsYsZwJLSrCfqhHjiz9vrNxtQDYO7fjlK9wGUXYH6 vnU= -----END CERTIFICATE-----Generated at Tue Apr 29 16:23:27 2025 by rpki-client