$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: tKj6OyBqRF3Fnf8wjoFvgqpTEZSLA7VpbuHi21Xzo+c= Subject key identifier: 65:76:E2:E8:7F:28:01:D3:22:D9:2A:76:14:C4:83:25:B5:2C:52:95 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 558C323FD67C9935B2235AF4AD8E587FAA1C60BE Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 0191 Signing time: Mon 28 Apr 2025 13:20:12 +0000 Manifest this update: Mon 28 Apr 2025 13:15:10 +0000 Manifest next update: Tue 29 Apr 2025 14:49:10 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: EwLj7m6Ie9X0rOMOz2q2YVZeEoSVwqqJh9CR7fLWnKk=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 29 Apr 2025 14:49:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 55:8c:32:3f:d6:7c:99:35:b2:23:5a:f4:ad:8e:58:7f:aa:1c:60:be Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: Apr 28 13:15:10 2025 GMT Not After : Apr 29 14:49:10 2025 GMT Subject: CN=6576E2E87F2801D322D92A7614C48325B52C5295 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:73:bf:58:ff:f4:6e:73:7b:07:d0:3d:9f:aa: 9c:e5:54:f1:78:e8:3f:b9:37:28:bc:f9:3c:8b:53: eb:52:f3:13:ba:1c:74:fd:89:63:7f:b0:85:96:b0: 77:d1:42:af:9f:10:c5:5e:55:31:1c:75:0e:e7:0a: f7:ca:47:23:80:65:db:89:e1:28:c8:c0:d8:a5:70: 09:ad:53:1a:64:2a:2b:e4:bf:e0:c1:83:8d:02:4a: f3:ef:3a:c4:d3:ca:bc:e7:85:da:e5:ab:c6:d5:f5: 6f:e2:cd:43:ab:d8:a5:f0:95:40:6a:bb:ae:a3:ba: ad:33:88:a4:06:0f:47:44:7b:20:40:c0:1c:20:66: 92:e2:a6:77:d1:53:b6:9d:65:3c:26:dc:ca:be:6b: 73:00:e2:b8:d0:e6:94:ee:d8:b8:35:f6:c1:dd:05: 8a:fa:27:8f:09:95:e8:d4:b0:a8:b4:f5:ab:d9:9b: 91:84:f3:39:8b:0b:d3:42:34:f1:98:44:f2:9b:fc: c7:06:a4:4a:02:04:ad:73:f4:ea:6e:7a:9a:81:4b: 88:f7:33:28:bf:d5:b5:d4:90:6e:a0:99:15:79:1e: 3e:9b:11:63:b8:22:28:12:e6:bb:aa:56:b3:3c:bb: a8:c3:66:76:41:48:8d:e4:d4:59:81:37:14:fd:51: 61:43 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:76:E2:E8:7F:28:01:D3:22:D9:2A:76:14:C4:83:25:B5:2C:52:95 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 37:30:e1:23:dd:83:2c:19:71:b0:19:8a:77:de:ed:c9:5f:a5: f7:27:eb:f4:e7:3b:f3:40:41:53:4d:23:76:90:b7:27:63:e4: 1d:ba:88:71:03:d7:b9:c2:c0:41:52:68:e0:16:e6:b6:c9:01: a1:0e:2e:8c:34:79:b9:45:8d:b7:c4:e6:fa:82:be:91:b1:51: f6:68:c8:7d:04:20:8b:5f:dd:d4:66:fb:b1:70:60:77:70:77: e9:7f:ab:76:ba:f8:ef:a3:e7:9c:92:30:6b:9e:02:8f:3f:c9: 1e:b9:63:8e:4b:31:cd:b5:3f:19:c5:23:97:42:f9:a4:9f:4b: 23:b2:1a:eb:59:db:20:c8:8c:a6:50:29:0a:30:7b:fd:84:7d: 72:eb:37:fe:4c:4d:43:fe:d4:c1:75:d0:56:12:11:50:b4:0f: d0:f2:7d:ff:e7:4f:3e:34:58:20:c9:be:46:15:d6:11:ed:10: 7f:f3:75:42:00:8b:ec:2c:63:a6:b2:a4:d7:e8:e6:c6:bc:0d: 20:84:dc:a3:7f:cf:cb:01:76:7e:80:22:52:92:e6:21:87:79: de:ed:0f:04:1f:d9:b2:2c:20:86:c4:eb:c8:33:88:2d:a2:14: 0d:c0:82:10:a1:f9:be:5c:6c:5c:57:2b:af:cd:ac:b1:40:63: 0f:7e:c5:12 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUVYwyP9Z8mTWyI1r0rY5Yf6ocYL4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA0MjgxMzE1MTBaFw0yNTA0MjkxNDQ5MTBaMDMxMTAvBgNV BAMTKDY1NzZFMkU4N0YyODAxRDMyMkQ5MkE3NjE0QzQ4MzI1QjUyQzUyOTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZc79Y//Ruc3sH0D2fqpzlVPF4 6D+5Nyi8+TyLU+tS8xO6HHT9iWN/sIWWsHfRQq+fEMVeVTEcdQ7nCvfKRyOAZduJ 4SjIwNilcAmtUxpkKivkv+DBg40CSvPvOsTTyrznhdrlq8bV9W/izUOr2KXwlUBq u66juq0ziKQGD0dEeyBAwBwgZpLipnfRU7adZTwm3Mq+a3MA4rjQ5pTu2Lg19sHd BYr6J48JlejUsKi09avZm5GE8zmLC9NCNPGYRPKb/McGpEoCBK1z9OpuepqBS4j3 Myi/1bXUkG6gmRV5Hj6bEWO4IigS5ruqVrM8u6jDZnZBSI3k1FmBNxT9UWFDAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUZXbi6H8oAdMi2Sp2FMSDJbUsUpUwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBADcw4SPdgywZcbAZinfe 7clfpfcn6/TnO/NAQVNNI3aQtydj5B26iHED17nCwEFSaOAW5rbJAaEOLow0eblF jbfE5vqCvpGxUfZoyH0EIItf3dRm+7FwYHdwd+l/q3a6+O+j55ySMGueAo8/yR65 Y45LMc21PxnFI5dC+aSfSyOyGutZ2yDIjKZQKQowe/2EfXLrN/5MTUP+1MF10FYS EVC0D9Dyff/nTz40WCDJvkYV1hHtEH/zdUIAi+wsY6aypNfo5sa8DSCE3KN/z8sB dn6AIlKS5iGHed7tDwQf2bIsIIbE68gziC2iFA3AghCh+b5cbFxXK6/NrLFAYw9+ xRI= -----END CERTIFICATE-----Generated at Mon Apr 28 23:27:23 2025 by rpki-client