$ rpki-client -vvf rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft File: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft (raw, json) Hash identifier: 05Ul+4dSMYkLCS0klTzn7bmTh8iAUh0wSW34Nbp234A= Subject key identifier: 0A:1A:2D:FD:F4:15:0E:23:C4:97:C8:EB:BE:05:08:6F:1E:7C:8C:F2 Authority key identifier: 4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F Certificate issuer: /CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Certificate serial: 080E360FD81D937459E5B55018E0BA61745538F5 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject info access: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft Manifest number: 01A0 Signing time: Fri 09 May 2025 16:59:13 +0000 Manifest this update: Fri 09 May 2025 16:54:11 +0000 Manifest next update: Sat 10 May 2025 18:45:11 +0000 Files and hashes: 1: 4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl (hash: OUFitTux+dxrpIr15VmerDHRdSyPRSnvE6Sz8ank2bU=) Validation: OK Signature path: rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.crl rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/0839A93DAB544C296FFA143456844A8B2818B1D0.mft rsync://rpki.ripe.net/repository/DEFAULT/CDmpPatUTClv-hQ0VoRKiygYsdA.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sat 10 May 2025 17:23:23 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:0e:36:0f:d8:1d:93:74:59:e5:b5:50:18:e0:ba:61:74:55:38:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4BA4511F4B81C565CED3E70B3020FBD0ED05562F Validity Not Before: May 9 16:54:11 2025 GMT Not After : May 10 18:45:11 2025 GMT Subject: CN=0A1A2DFDF4150E23C497C8EBBE05086F1E7C8CF2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:eb:78:c1:72:4d:75:01:07:33:fe:99:42:cc:f2: d2:8f:f3:78:4f:11:ba:f3:87:02:6b:72:62:f8:30: 4d:14:55:e5:e0:a6:17:5b:5f:ea:6b:d0:27:4f:00: c0:46:09:3e:34:25:44:34:02:5d:d3:ca:1f:7d:6b: d8:fe:ea:3e:b4:ee:e5:ad:95:8b:77:31:41:a8:f4: 95:98:ab:4b:7a:db:e2:75:0b:ef:c3:27:9c:eb:b5: 55:c0:b5:00:69:25:8e:2f:94:4c:9c:af:f6:f8:99: dc:fd:72:c3:fe:5b:43:58:8a:29:1c:ba:36:d2:ac: fa:57:36:be:56:33:19:04:c0:66:ff:e4:c6:87:5a: a6:c3:df:55:75:b5:7d:27:41:6b:3e:e4:69:0c:37: 55:65:30:77:c7:d0:f1:34:a2:c6:55:a3:7b:38:3a: 8f:6e:5b:b1:0b:b2:61:dd:8b:49:88:19:90:7b:f8: 40:1d:88:84:b0:87:61:e7:5c:d1:c3:b8:a0:6e:eb: 00:b9:05:fb:c2:e4:4e:ea:fe:ee:29:cd:59:d8:0b: 1d:d6:c2:91:aa:93:60:b1:c4:b8:3a:90:2e:1d:3c: 59:2a:04:bb:5d:d2:31:8a:68:e8:ae:bb:d1:59:1a: 37:9b:31:d5:f1:89:34:e7:ee:91:8f:85:f0:c0:3f: 4f:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 0A:1A:2D:FD:F4:15:0E:23:C4:97:C8:EB:BE:05:08:6F:1E:7C:8C:F2 X509v3 Authority Key Identifier: keyid:4B:A4:51:1F:4B:81:C5:65:CE:D3:E7:0B:30:20:FB:D0:ED:05:56:2F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/dde837fb-6390-41b5-82a0-f0d02c03a2c6/7/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.cer Subject Information Access: Signed Object - URI:rsync://rpki-repo.as207960.net/repo/rpki_ca_973e7a98a71b49ffbb22b76ed5f129e2/0/4BA4511F4B81C565CED3E70B3020FBD0ED05562F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0e:88:44:b4:9e:e4:05:11:64:b5:60:6a:72:fc:83:44:4f:d3: 88:f4:22:7f:ed:6d:3a:50:14:eb:9a:d5:6b:08:78:e6:7a:ed: 44:33:2d:00:ae:35:cb:46:9c:86:20:21:bf:77:e4:ea:10:47: a0:bc:75:5c:12:5c:02:d8:b3:c1:2b:4f:22:d7:39:33:60:c4: 7b:6f:24:03:bb:89:c0:24:4f:73:07:ff:7d:b7:5b:7a:7f:e2: 4d:12:0f:5d:30:81:87:fd:d3:12:a1:67:16:89:06:eb:4e:d7: 85:50:13:fa:02:e2:8e:47:54:fd:0c:fa:9b:27:35:56:e2:83: 4a:71:4a:00:f2:92:87:c5:70:5b:8d:15:03:b8:0b:ca:90:d2: 9e:93:ab:20:1c:cd:24:50:94:ce:2d:60:69:f0:52:2c:f6:0b: 72:0e:25:74:bb:b1:7e:24:4e:41:51:69:cc:86:99:e9:88:15: 7d:42:0d:56:c1:07:6c:67:f7:59:16:a4:60:2b:29:3e:ab:12: d2:dc:38:31:e1:48:72:5c:9c:65:45:87:10:6b:ef:a2:5e:bc: 78:f5:67:df:25:53:75:fc:19:14:30:23:9a:5f:18:c2:2c:9e: 1a:eb:58:4f:be:47:b7:56:3c:4d:ca:e3:28:e8:06:b2:62:26: dc:99:63:ff -----BEGIN CERTIFICATE----- MIIFbjCCBFagAwIBAgIUCA42D9gdk3RZ5bVQGOC6YXRVOPUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBF RDA1NTYyRjAeFw0yNTA1MDkxNjU0MTFaFw0yNTA1MTAxODQ1MTFaMDMxMTAvBgNV BAMTKDBBMUEyREZERjQxNTBFMjNDNDk3QzhFQkJFMDUwODZGMUU3QzhDRjIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDreMFyTXUBBzP+mULM8tKP83hP EbrzhwJrcmL4ME0UVeXgphdbX+pr0CdPAMBGCT40JUQ0Al3Tyh99a9j+6j607uWt lYt3MUGo9JWYq0t62+J1C+/DJ5zrtVXAtQBpJY4vlEycr/b4mdz9csP+W0NYiikc ujbSrPpXNr5WMxkEwGb/5MaHWqbD31V1tX0nQWs+5GkMN1VlMHfH0PE0osZVo3s4 Oo9uW7ELsmHdi0mIGZB7+EAdiISwh2HnXNHDuKBu6wC5BfvC5E7q/u4pzVnYCx3W wpGqk2CxxLg6kC4dPFkqBLtd0jGKaOiuu9FZGjebMdXxiTTn7pGPhfDAP0+tAgMB AAGjggJ4MIICdDAdBgNVHQ4EFgQUChot/fQVDiPEl8jrvgUIbx58jPIwHwYDVR0j BBgwFoAUS6RRH0uBxWXO0+cLMCD70O0FVi8wDgYDVR0PAQH/BAQDAgeAMIGPBgNV HR8EgYcwgYQwgYGgf6B9hntyc3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQv cmVwby9ycGtpX2NhXzk3M2U3YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAv NEJBNDUxMUY0QjgxQzU2NUNFRDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5jcmwwgZ4G CCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3luYy5wYWFz LnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kZGU4MzdmYi02MzkwLTQxYjUtODJh MC1mMGQwMmMwM2EyYzYvNy80QkE0NTExRjRCODFDNTY1Q0VEM0U3MEIzMDIwRkJE MEVEMDU1NjJGLmNlcjCBmgYIKwYBBQUHAQsEgY0wgYowgYcGCCsGAQUFBzALhnty c3luYzovL3Jwa2ktcmVwby5hczIwNzk2MC5uZXQvcmVwby9ycGtpX2NhXzk3M2U3 YTk4YTcxYjQ5ZmZiYjIyYjc2ZWQ1ZjEyOWUyLzAvNEJBNDUxMUY0QjgxQzU2NUNF RDNFNzBCMzAyMEZCRDBFRDA1NTYyRi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEF BQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUF BwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAA6IRLSe5AURZLVganL8 g0RP04j0In/tbTpQFOua1WsIeOZ67UQzLQCuNctGnIYgIb935OoQR6C8dVwSXALY s8ErTyLXOTNgxHtvJAO7icAkT3MH/323W3p/4k0SD10wgYf90xKhZxaJButO14VQ E/oC4o5HVP0M+psnNVbig0pxSgDykofFcFuNFQO4C8qQ0p6TqyAczSRQlM4tYGnw Uiz2C3IOJXS7sX4kTkFRacyGmemIFX1CDVbBB2xn91kWpGArKT6rEtLcODHhSHJc nGVFhxBr76JevHj1Z98lU3X8GRQwI5pfGMIsnhrrWE++R7dWPE3K4yjoBrJiJtyZ Y/8= -----END CERTIFICATE-----Generated at Sat May 10 08:19:31 2025 by rpki-client