$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft File: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft (raw, json) Hash identifier: Yh38ABN5gBXwWl47BzLgVy73Wi0H/LSJydUsZ7yg1Ks= Subject key identifier: 85:D3:AC:D2:CC:4A:D5:7A:6F:98:19:B2:53:BA:4A:08:16:A4:29:CF Authority key identifier: FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 Certificate issuer: /CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Certificate serial: 3353031E4F5E9230F2FC6687EF7A01C773A604F7 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft Manifest number: 0199 Signing time: Sat 10 May 2025 08:52:18 +0000 Manifest this update: Sat 10 May 2025 08:47:15 +0000 Manifest next update: Sun 11 May 2025 12:12:15 +0000 Files and hashes: 1: FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl (hash: lvthOJFaJpC8ojA0xACPPKHSiR0mvmzc3TA7X7n2hEg=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 11 May 2025 12:12:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:53:03:1e:4f:5e:92:30:f2:fc:66:87:ef:7a:01:c7:73:a6:04:f7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3 Validity Not Before: May 10 08:47:15 2025 GMT Not After : May 11 12:12:15 2025 GMT Subject: CN=85D3ACD2CC4AD57A6F9819B253BA4A0816A429CF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:3b:a7:5c:74:db:5c:c1:33:8f:b3:a7:3a:c6: 42:d6:ba:82:73:85:35:eb:c0:74:d9:b4:c2:f8:9a: 91:e8:2e:2b:09:95:c1:9d:2b:84:29:e1:31:a9:7c: e5:57:e0:10:90:93:92:1f:e0:07:d4:58:b1:1a:50: 75:cb:a6:0f:5d:2a:48:6a:9b:88:ef:0a:a0:ce:d0: ae:64:4a:3c:23:fb:4a:8a:8b:7e:17:61:20:4f:61: fe:d9:e0:57:f1:0c:88:e2:8c:c5:d0:9d:73:09:cb: 2b:0e:03:e6:81:7c:f2:5d:61:7e:e1:8b:7a:80:14: ba:44:4c:6d:85:21:8a:1b:da:07:f0:db:89:67:a8: 0b:a0:89:55:70:c3:de:c1:90:35:11:ab:ac:83:0f: 78:49:1d:e6:92:03:65:18:7d:ca:ae:bb:67:92:4d: 12:bb:9f:4c:8d:47:78:84:6c:a6:29:81:02:ba:1a: 77:b7:3d:10:ef:0e:67:78:95:38:d0:4f:ca:ad:46: 1f:96:ce:63:eb:6e:64:87:46:a6:94:97:2f:a4:48: c1:2c:e0:c3:2f:3f:fd:a2:0e:71:3d:44:b4:2b:14: b4:61:ca:ce:6c:5f:84:11:b0:fe:55:61:3a:ca:a2: 21:6e:05:be:e6:2e:dc:36:01:5a:3e:b3:19:fa:bd: 22:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 85:D3:AC:D2:CC:4A:D5:7A:6F:98:19:B2:53:BA:4A:08:16:A4:29:CF X509v3 Authority Key Identifier: keyid:FA:7D:8F:1E:1C:10:5F:F7:ED:AF:03:DD:81:98:24:34:17:A5:FA:C3 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_67e1f2823b0b482eae19a775b9f818fc/0/FA7D8F1E1C105FF7EDAF03DD8198243417A5FAC3.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 92:95:c5:42:59:74:12:69:60:1a:69:90:d7:da:1d:81:bc:29: 64:ad:b0:7a:af:24:6c:da:c4:87:74:a8:f2:5c:5a:99:cd:d7: 3b:45:63:f1:c3:de:b8:f7:1e:70:72:88:05:e2:98:f6:4c:34: 5f:7e:27:08:52:8a:09:08:de:eb:66:26:04:bd:b3:aa:c0:0e: b3:30:72:22:07:3a:c5:51:cc:26:4a:da:5d:37:40:b8:1d:95: 94:38:be:50:ec:1e:48:d6:d6:66:84:b1:75:e0:9d:6a:d0:dd: d3:68:6d:01:94:eb:b1:26:01:6b:33:ff:e0:61:c6:b7:66:78: 6f:ed:d7:5f:b6:3e:85:4d:b0:63:f3:7b:70:92:09:3b:74:e0: 2c:61:94:6c:4a:87:bc:f4:36:eb:98:47:e5:39:e9:a7:a4:d7: c0:60:8d:06:f9:05:01:41:e0:61:76:fd:9e:7c:30:0a:11:de: 56:71:c6:7a:eb:30:59:3f:c4:30:63:02:d2:2b:40:70:35:fe: bc:a6:b3:f8:9c:bf:8a:ba:04:8e:87:e0:7d:de:68:b2:5e:e8: 4c:b3:92:1a:0c:3f:01:dc:4a:c4:87:e0:95:aa:6f:04:0a:5c: a3:11:6c:62:8e:b2:af:2d:8a:c7:4d:18:69:ca:e9:d7:79:db: c8:40:fc:b7 -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUM1MDHk9ekjDy/GaH73oBx3OmBPcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQx N0E1RkFDMzAeFw0yNTA1MTAwODQ3MTVaFw0yNTA1MTExMjEyMTVaMDMxMTAvBgNV BAMTKDg1RDNBQ0QyQ0M0QUQ1N0E2Rjk4MTlCMjUzQkE0QTA4MTZBNDI5Q0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLO6dcdNtcwTOPs6c6xkLWuoJz hTXrwHTZtML4mpHoLisJlcGdK4Qp4TGpfOVX4BCQk5If4AfUWLEaUHXLpg9dKkhq m4jvCqDO0K5kSjwj+0qKi34XYSBPYf7Z4FfxDIjijMXQnXMJyysOA+aBfPJdYX7h i3qAFLpETG2FIYob2gfw24lnqAugiVVww97BkDURq6yDD3hJHeaSA2UYfcquu2eS TRK7n0yNR3iEbKYpgQK6Gne3PRDvDmd4lTjQT8qtRh+WzmPrbmSHRqaUly+kSMEs 4MMvP/2iDnE9RLQrFLRhys5sX4QRsP5VYTrKoiFuBb7mLtw2AVo+sxn6vSK1AgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUhdOs0sxK1XpvmBmyU7pKCBakKc8wHwYDVR0j BBgwFoAU+n2PHhwQX/ftrwPdgZgkNBel+sMwDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzY3ZTFmMjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAv RkE3RDhGMUUxQzEwNUZGN0VEQUYwM0REODE5ODI0MzQxN0E1RkFDMy5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy9GQTdEOEYxRTFDMTA1RkY3RURBRjAzREQ4MTk4MjQz NDE3QTVGQUMzLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzY3ZTFm MjgyM2IwYjQ4MmVhZTE5YTc3NWI5ZjgxOGZjLzAvRkE3RDhGMUUxQzEwNUZGN0VE QUYwM0REODE5ODI0MzQxN0E1RkFDMy5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAJKVxUJZdBJpYBppkNfa HYG8KWStsHqvJGzaxId0qPJcWpnN1ztFY/HD3rj3HnByiAXimPZMNF9+JwhSigkI 3utmJgS9s6rADrMwciIHOsVRzCZK2l03QLgdlZQ4vlDsHkjW1maEsXXgnWrQ3dNo bQGU67EmAWsz/+BhxrdmeG/t11+2PoVNsGPze3CSCTt04CxhlGxKh7z0NuuYR+U5 6aek18BgjQb5BQFB4GF2/Z58MAoR3lZxxnrrMFk/xDBjAtIrQHA1/ryms/icv4q6 BI6H4H3eaLJe6EyzkhoMPwHcSsSH4JWqbwQKXKMRbGKOsq8tisdNGGnK6dd528hA /Lc= -----END CERTIFICATE-----Generated at Sat May 10 19:02:27 2025 by rpki-client