$ rpki-client -vvf krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft File: 656E4422ABF129649200EB019A815F2B12236E92.mft (raw, json) Hash identifier: zaYH3p7y2wIPICxdWZIlI9UdV6CuL566wqZ6kl0BviQ= Subject key identifier: 1B:71:8B:90:12:B2:6A:D8:E5:43:5F:0B:12:7F:CE:2C:28:21:29:C9 Authority key identifier: 65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 Certificate issuer: /CN=656E4422ABF129649200EB019A815F2B12236E92 Certificate serial: 1477C37D2FD69D9F5F4A5B0D45E5C3D06C3B4C95 Authority info access: rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject info access: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft Manifest number: FC Signing time: Fri 16 May 2025 01:40:00 +0000 Manifest this update: Fri 16 May 2025 01:35:00 +0000 Manifest next update: Sat 17 May 2025 02:11:00 +0000 Files and hashes: 1: 3134372e32382e31302e302f32332d3234203d3e2039343334.roa (hash: VtH6E5X9bla/lP/1oDgzLC/IGBeO4Y+MgLQlG/MHRAA=) 2: 3134372e32382e31302e302f32332d3234203d3e203437303635.roa (hash: InllrUkC+i/L8Vq1qSaFZSxY2gcH0Pb1ZOihADOfZw0=) 3: 656E4422ABF129649200EB019A815F2B12236E92.crl (hash: 47D5LuXwZc0bK6izrXAz6NHJYDF0V7TiS+s93DaarDg=) 4: 34352e3133322e3139312e302f32342d3234203d3e2030.roa (hash: eOQL6KtS/fp/gIl2Pd8Tq6HVnPxMLD1miARzzAEJtqE=) 5: 34352e3133322e3139302e302f32342d3234203d3e2033393730.roa (hash: ZvFIRI5Y2rVZcFk84QTgqRybDF5ljbI4FjwVY0yfJVE=) Validation: OK Signature path: rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.crl rsync://ca.rg.net/rpki/RGnet-OU/bW-_qXU9uNhGQz21NR2ansB8lr0.mft rsync://rpki.ripe.net/repository/DEFAULT/bW-_qXU9uNhGQz21NR2ansB8lr0.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Fri 16 May 2025 18:28:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 14:77:c3:7d:2f:d6:9d:9f:5f:4a:5b:0d:45:e5:c3:d0:6c:3b:4c:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=656E4422ABF129649200EB019A815F2B12236E92 Validity Not Before: May 16 01:35:00 2025 GMT Not After : May 17 02:11:00 2025 GMT Subject: CN=1B718B9012B26AD8E5435F0B127FCE2C282129C9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:27:33:8a:50:db:0b:38:96:4b:ce:f9:dd:33: 24:24:e9:d8:d3:c5:97:aa:0f:13:03:b9:0b:6d:c4: aa:d3:f7:8c:2f:33:98:dd:e2:f5:c8:b4:4a:73:85: c2:ce:2d:5f:9c:a0:a5:2e:44:7b:33:72:71:8f:f2: 54:c4:2e:de:88:2a:a0:fd:43:97:3e:a7:6a:30:46: 43:6f:00:09:fd:d2:e7:c4:75:d7:7a:a0:44:34:e1: a2:5d:ed:1a:b9:e6:13:97:d7:86:70:5f:73:67:c1: a4:60:d1:8f:17:51:63:05:6c:e3:29:0e:2c:c7:db: c3:31:92:fe:73:63:10:cf:ff:35:3b:ac:b9:01:6a: c3:1c:ef:8d:66:a8:ac:e2:1b:9f:7d:c7:27:e6:95: f8:04:77:d1:1e:bc:b4:fe:91:e8:0f:6d:5f:4e:94: 8a:bf:3d:0b:54:66:a4:1f:a4:0d:f8:7d:e7:7a:c4: 2c:58:06:77:9b:92:b9:d6:6c:ed:38:dd:6b:fa:c5: 2b:9d:39:1a:a2:1c:59:09:70:3a:70:ad:d0:6b:58: d3:d9:8a:5f:a7:da:b5:c6:17:fe:fb:89:10:02:0e: 3e:f6:5b:06:c2:8a:3b:01:54:50:32:e6:c7:a9:ad: 5a:50:65:46:3e:d6:71:c4:24:6b:e9:db:a0:ae:f7: fd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 1B:71:8B:90:12:B2:6A:D8:E5:43:5F:0B:12:7F:CE:2C:28:21:29:C9 X509v3 Authority Key Identifier: keyid:65:6E:44:22:AB:F1:29:64:92:00:EB:01:9A:81:5F:2B:12:23:6E:92 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.crl Authority Information Access: CA Issuers - URI:rsync://ca.rg.net/rpki/RGnet-OU/ZW5EIqvxKWSSAOsBmoFfKxIjbpI.cer Subject Information Access: Signed Object - URI:rsync://krill.rg.net/repo/rpki-beacons-ca/0/656E4422ABF129649200EB019A815F2B12236E92.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption c4:e2:9a:57:1e:04:77:7e:f7:52:4d:6b:0c:00:81:6c:07:af: fa:6b:08:9a:c0:a1:10:ef:7f:a8:23:72:e9:4d:46:0c:1c:e2: b0:72:4f:6d:1f:b0:66:08:00:e5:23:19:93:39:27:42:1d:45: 7d:7d:67:be:99:7e:82:c9:67:82:b0:fc:0a:73:ec:8c:f2:f5: 6b:92:08:49:ca:ca:2e:3c:59:d7:d1:20:b7:a7:0a:f2:e4:fa: ae:be:26:e0:1a:5c:66:e5:2c:b7:7a:1d:11:fb:e2:45:72:5c: 2b:87:76:35:71:f2:2d:fb:74:dc:01:8f:08:5d:2f:76:b8:5f: e8:2e:fb:a3:e5:c6:26:9d:1d:2a:d1:3d:00:8b:2e:d0:fb:83: bb:37:1d:11:a0:89:60:f9:75:73:09:c3:39:03:04:70:03:55: 0c:3d:75:73:14:cd:2f:4a:24:ea:6f:ee:6a:83:2b:00:46:9d: 28:cf:f3:2f:4f:a0:97:14:5b:17:5b:79:a9:fa:59:2d:23:e8: b1:9a:99:fb:99:a6:56:eb:b5:bc:41:66:95:f3:cb:e5:15:f1: 3b:87:1d:44:42:38:d1:72:f1:e7:2c:30:4a:04:12:c8:53:13: f2:1b:46:49:67:04:57:1c:83:71:89:20:3e:e8:5a:61:3f:c2: 73:5c:f5:55 -----BEGIN CERTIFICATE----- MIIE3DCCA8SgAwIBAgIUFHfDfS/WnZ9fSlsNReXD0Gw7TJUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIx MjIzNkU5MjAeFw0yNTA1MTYwMTM1MDBaFw0yNTA1MTcwMjExMDBaMDMxMTAvBgNV BAMTKDFCNzE4QjkwMTJCMjZBRDhFNTQzNUYwQjEyN0ZDRTJDMjgyMTI5QzkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDNJzOKUNsLOJZLzvndMyQk6djT xZeqDxMDuQttxKrT94wvM5jd4vXItEpzhcLOLV+coKUuRHszcnGP8lTELt6IKqD9 Q5c+p2owRkNvAAn90ufEddd6oEQ04aJd7Rq55hOX14ZwX3NnwaRg0Y8XUWMFbOMp DizH28Mxkv5zYxDP/zU7rLkBasMc741mqKziG599xyfmlfgEd9EevLT+kegPbV9O lIq/PQtUZqQfpA34fed6xCxYBnebkrnWbO043Wv6xSudORqiHFkJcDpwrdBrWNPZ il+n2rXGF/77iRACDj72WwbCijsBVFAy5seprVpQZUY+1nHEJGvp26Cu9/2/AgMB AAGjggHmMIIB4jAdBgNVHQ4EFgQUG3GLkBKyatjlQ18LEn/OLCghKckwHwYDVR0j BBgwFoAUZW5EIqvxKWSSAOsBmoFfKxIjbpIwDgYDVR0PAQH/BAQDAgeAMGkGA1Ud HwRiMGAwXqBcoFqGWHJzeW5jOi8va3JpbGwucmcubmV0L3JlcG8vcnBraS1iZWFj b25zLWNhLzAvNjU2RTQ0MjJBQkYxMjk2NDkyMDBFQjAxOUE4MTVGMkIxMjIzNkU5 Mi5jcmwwWwYIKwYBBQUHAQEETzBNMEsGCCsGAQUFBzAChj9yc3luYzovL2NhLnJn Lm5ldC9ycGtpL1JHbmV0LU9VL1pXNUVJcXZ4S1dTU0FPc0Jtb0ZmS3hJamJwSS5j ZXIwdAYIKwYBBQUHAQsEaDBmMGQGCCsGAQUFBzALhlhyc3luYzovL2tyaWxsLnJn Lm5ldC9yZXBvL3Jwa2ktYmVhY29ucy1jYS8wLzY1NkU0NDIyQUJGMTI5NjQ5MjAw RUIwMTlBODE1RjJCMTIyMzZFOTIubWZ0MBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH DgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADAVBggrBgEFBQcB CAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQDE4ppXHgR3fvdSTWsMAIFs B6/6awiawKEQ73+oI3LpTUYMHOKwck9tH7BmCADlIxmTOSdCHUV9fWe+mX6CyWeC sPwKc+yM8vVrkghJysouPFnX0SC3pwry5PquvibgGlxm5Sy3eh0R++JFclwrh3Y1 cfIt+3TcAY8IXS92uF/oLvuj5cYmnR0q0T0Aiy7Q+4O7Nx0RoIlg+XVzCcM5AwRw A1UMPXVzFM0vSiTqb+5qgysARp0oz/MvT6CXFFsXW3mp+lktI+ixmpn7maZW67W8 QWaV88vlFfE7hx1EQjjRcvHnLDBKBBLIUxPyG0ZJZwRXHINxiSA+6FphP8JzXPVV -----END CERTIFICATE-----Generated at Fri May 16 14:33:38 2025 by rpki-client