$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft File: 44C4C913D58F5EF847996241E969B60A1E3F1389.mft (raw, json) Hash identifier: WLKRxHxS97d5eaMNCxzBMxQIMguGi+TSyhMOCXk/2dM= Subject key identifier: 58:30:3D:C4:6B:F1:79:5C:8F:2F:86:A2:AB:42:4E:40:7E:75:F7:91 Authority key identifier: 44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 Certificate issuer: /CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Certificate serial: 66CBD9AC0B24E77B12C7B1C9B0B05A93A39BCDEB Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft Manifest number: 018D Signing time: Tue 29 Apr 2025 11:09:48 +0000 Manifest this update: Tue 29 Apr 2025 11:04:46 +0000 Manifest next update: Wed 30 Apr 2025 13:12:46 +0000 Files and hashes: 1: E42882C5C372E03CCD5EA87BB1B6FFEF1FF1BFF5.cer (hash: ZgkUmwBAN+BgyVFg/7xrYnbw3kS/Mk8fXnbXdBLqa28=) 2: 326131313a663263303a666530303a3a2f34302d3430203d3e20323130353631.roa (hash: 7hFQ2fphXwahaMoTubiz5LcppCCDV985Dg0s/VHtMx8=) 3: 44C4C913D58F5EF847996241E969B60A1E3F1389.crl (hash: 2XuhoM/Nvxk9YCmpvv1ApAGEppW4e7qo0Rrddhjz/nc=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Wed 30 Apr 2025 13:12:46 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:cb:d9:ac:0b:24:e7:7b:12:c7:b1:c9:b0:b0:5a:93:a3:9b:cd:eb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=44C4C913D58F5EF847996241E969B60A1E3F1389 Validity Not Before: Apr 29 11:04:46 2025 GMT Not After : Apr 30 13:12:46 2025 GMT Subject: CN=58303DC46BF1795C8F2F86A2AB424E407E75F791 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:57:51:20:ca:3f:2a:8c:e8:e5:ad:2a:f3:49: 8b:f8:0b:a6:c5:26:fc:0d:80:df:84:8f:8a:47:ff: 79:45:37:c4:0e:f0:f3:9e:1a:ae:6d:aa:61:b6:e2: 14:0a:e6:88:60:cd:6a:51:79:a3:06:61:cb:36:f5: f0:18:2e:59:26:b1:6e:ec:44:a8:4d:82:67:1b:26: 81:00:b4:4b:69:60:a0:c7:d9:1d:7b:8e:c1:c0:86: 61:ad:d1:ef:fc:85:00:eb:a5:6b:15:36:cf:08:b7: f5:f3:95:5c:2d:e0:01:ae:8e:84:73:18:26:18:19: f6:96:f2:03:f6:c0:f1:94:73:2f:39:24:ac:58:ae: 8d:d5:27:7d:32:01:11:13:3b:da:58:61:dd:f9:f8: f8:ec:e9:24:0f:55:42:9e:4b:b3:bb:e3:59:11:f8: 09:48:6f:e1:16:46:da:02:0b:6d:a8:38:99:5f:60: fa:1a:e5:8b:eb:18:ed:ba:a2:e3:2c:72:30:84:f7: 8a:3a:d9:d4:2c:d7:da:29:fe:1e:82:4d:9d:e4:e5: e7:35:b3:2f:c1:dc:cd:e8:bd:3e:31:c2:fd:7f:c7: c7:70:cf:b8:4b:52:97:22:c7:50:73:bd:06:9c:3c: 10:0c:d9:32:c9:88:c8:03:f5:ef:10:14:07:f5:8b: 57:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 58:30:3D:C4:6B:F1:79:5C:8F:2F:86:A2:AB:42:4E:40:7E:75:F7:91 X509v3 Authority Key Identifier: keyid:44:C4:C9:13:D5:8F:5E:F8:47:99:62:41:E9:69:B6:0A:1E:3F:13:89 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/44C4C913D58F5EF847996241E969B60A1E3F1389.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_d0f2db99fe1d4b36b9301c821220fe3a/0/44C4C913D58F5EF847996241E969B60A1E3F1389.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 5b:3a:7e:f0:a2:2e:75:86:57:ea:c4:86:12:be:9a:b7:02:c2: 79:28:00:96:26:14:d0:f3:b4:d8:53:dd:93:38:81:64:a7:2b: db:c7:48:0c:47:56:9f:fd:e7:01:c6:8b:d3:3c:30:02:db:0c: 46:38:ce:c9:7b:16:c7:aa:00:ca:c3:72:9a:c7:46:62:c9:43: d7:d8:82:c8:1b:a9:51:6a:71:e9:40:94:5a:8c:d1:70:19:85: 4d:bf:76:e9:b8:e3:38:71:7c:9a:0f:14:df:c3:2d:65:f2:be: 90:55:15:d6:04:cb:08:c0:79:17:8b:1d:63:88:ac:23:65:33: 76:2d:d3:c9:09:ae:a2:ff:43:c4:9c:9d:3c:3e:ac:8d:88:3c: 8c:8a:4c:7d:53:9e:26:94:58:d9:34:bc:1f:a9:93:39:a8:e3: e2:da:66:5b:ad:32:4c:d2:b4:b1:99:0b:10:22:97:b4:92:20: 69:84:32:c4:a9:c6:07:28:0e:30:a7:49:dd:31:62:53:71:99: 04:01:c6:22:a5:a8:92:86:3d:20:05:4f:d1:d8:e3:02:4e:2e: dc:9f:fe:4a:94:cc:35:ca:c3:ee:1b:12:8a:24:f4:02:02:08: d9:8a:53:4b:b5:d6:8c:c1:e9:ac:4a:ac:9d:15:b3:46:f0:af: c5:6e:57:d1 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUZsvZrAsk53sSx7HJsLBak6ObzeswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEEx RTNGMTM4OTAeFw0yNTA0MjkxMTA0NDZaFw0yNTA0MzAxMzEyNDZaMDMxMTAvBgNV BAMTKDU4MzAzREM0NkJGMTc5NUM4RjJGODZBMkFCNDI0RTQwN0U3NUY3OTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2V1Egyj8qjOjlrSrzSYv4C6bF JvwNgN+Ej4pH/3lFN8QO8POeGq5tqmG24hQK5ohgzWpReaMGYcs29fAYLlkmsW7s RKhNgmcbJoEAtEtpYKDH2R17jsHAhmGt0e/8hQDrpWsVNs8It/XzlVwt4AGujoRz GCYYGfaW8gP2wPGUcy85JKxYro3VJ30yARETO9pYYd35+Pjs6SQPVUKeS7O741kR +AlIb+EWRtoCC22oOJlfYPoa5YvrGO26ouMscjCE94o62dQs19op/h6CTZ3k5ec1 sy/B3M3ovT4xwv1/x8dwz7hLUpcix1BzvQacPBAM2TLJiMgD9e8QFAf1i1eXAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUWDA9xGvxeVyPL4aiq0JOQH5195EwHwYDVR0j BBgwFoAURMTJE9WPXvhHmWJB6Wm2Ch4/E4kwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhX2QwZjJkYjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAv NDRDNEM5MTNENThGNUVGODQ3OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80NEM0QzkxM0Q1OEY1RUY4NDc5OTYyNDFFOTY5QjYw QTFFM0YxMzg5LmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhX2QwZjJk Yjk5ZmUxZDRiMzZiOTMwMWM4MjEyMjBmZTNhLzAvNDRDNEM5MTNENThGNUVGODQ3 OTk2MjQxRTk2OUI2MEExRTNGMTM4OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAFs6fvCiLnWGV+rEhhK+ mrcCwnkoAJYmFNDztNhT3ZM4gWSnK9vHSAxHVp/95wHGi9M8MALbDEY4zsl7Fseq AMrDcprHRmLJQ9fYgsgbqVFqcelAlFqM0XAZhU2/dum44zhxfJoPFN/DLWXyvpBV FdYEywjAeReLHWOIrCNlM3Yt08kJrqL/Q8ScnTw+rI2IPIyKTH1TniaUWNk0vB+p kzmo4+LaZlutMkzStLGZCxAil7SSIGmEMsSpxgcoDjCnSd0xYlNxmQQBxiKlqJKG PSAFT9HY4wJOLtyf/kqUzDXKw+4bEook9AICCNmKU0u11ozB6axKrJ0Vs0bwr8Vu V9E= -----END CERTIFICATE-----Generated at Wed Apr 30 02:55:09 2025 by rpki-client