$ rpki-client -vvf rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft File: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft (raw, json) Hash identifier: qDqAUrgihyfxCfEGepPxhjf4p0VWuJReRrXMOmWa7r0= Subject key identifier: 94:FD:D5:39:0E:74:F2:BB:CA:5E:5E:D5:70:69:EF:0F:57:92:F3:B8 Authority key identifier: 4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 Certificate issuer: /CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Certificate serial: 51307A198FCF6F081B173215984796A40BFD383E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject info access: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft Manifest number: AF Signing time: Mon 05 May 2025 20:19:49 +0000 Manifest this update: Mon 05 May 2025 20:14:49 +0000 Manifest next update: Tue 06 May 2025 23:42:49 +0000 Files and hashes: 1: 3138352e3230342e31322e302f32332d3233203d3e203631393631.roa (hash: 05KBv20ho05+9nNhARljl3KvN1w1xbUcP6YBmhidjZI=) 2: 3138352e3230342e31342e302f32332d3233203d3e20323033393339.roa (hash: 0iU1VE4oIBeR0g+kEvaxFQYjnK8h1fW0reMHFIiSAYk=) 3: 4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl (hash: JvjZ0BcCicLqs4U4mM+0XMTrIFsB8IWeOYIsMXT/ca8=) 4: 326130613a663034303a3a2f32392d3239203d3e203631393631.roa (hash: n9oD82N/Oc74KjefJWuXbdniXyTRuYdzVFV6P1uLFxM=) 5: 323030313a3637383a3565343a3a2f34382d3438203d3e20343031353531.roa (hash: 4UYrDw3R1HMApdgBpMB/GcyfbyVxIeygboeA0NGcRKA=) 6: 323030313a3637383a3565343a3a2f34382d3438203d3e203631393631.roa (hash: 9lXsRq2vH27QU6oONZHHcOI2KgKrR7I1qDb4jmPN0NI=) 7: 323030313a3637383a3565343a3a2f34382d3438203d3e20323034303132.roa (hash: aQtSJ+DrPdjI6tdPjH35DjDz8hbObLwmapnYguKW8IE=) Validation: OK Signature path: rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 06 May 2025 18:19:10 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 51:30:7a:19:8f:cf:6f:08:1b:17:32:15:98:47:96:a4:0b:fd:38:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4e9a6c18f349b395c31c33bb7f9b9f5817bde9a8 Validity Not Before: May 5 20:14:49 2025 GMT Not After : May 6 23:42:49 2025 GMT Subject: CN=94FDD5390E74F2BBCA5E5ED57069EF0F5792F3B8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b7:4c:5e:41:da:84:0a:d7:6d:b2:c7:e7:db:0d: 4e:9f:52:24:8b:6b:04:64:30:68:d0:19:d2:3e:ac: e1:70:14:8f:ec:b9:5d:0b:2b:8b:a8:ba:c5:89:77: 58:87:4c:a9:b8:bb:13:50:b3:cd:c2:98:cf:d7:32: 23:83:3e:e0:49:43:36:20:ff:36:8e:e7:f7:a5:4b: 35:e9:fa:3e:31:ec:5b:c7:95:d6:76:16:e2:3e:ce: ac:b4:ab:a5:0f:fd:aa:20:aa:22:80:26:28:83:de: 35:b0:9a:73:d2:fa:03:67:b1:b1:69:cc:17:d1:e1: c4:4a:91:d2:a7:d1:a2:72:97:ae:47:b5:64:be:fe: 2c:66:17:c4:11:18:65:1a:b5:60:67:33:6b:54:2a: 83:88:b0:05:ec:8f:83:bc:d6:fb:5c:9b:ff:f6:9d: d2:0e:ce:71:23:e9:8e:53:90:c8:8d:95:42:aa:71: 13:f7:90:56:6a:d3:60:fb:b3:c7:05:2f:a7:82:4d: e0:24:a7:71:20:87:08:46:a4:6e:54:cb:69:bb:9e: 63:8d:fd:e1:95:3b:3e:dc:12:4d:de:02:2c:75:b6: 56:39:e8:75:58:22:cf:da:de:4a:c3:e8:44:41:4f: 59:8a:14:f6:91:fc:cb:bc:5d:2a:0a:dd:82:69:0c: 86:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:FD:D5:39:0E:74:F2:BB:CA:5E:5E:D5:70:69:EF:0F:57:92:F3:B8 X509v3 Authority Key Identifier: keyid:4E:9A:6C:18:F3:49:B3:95:C3:1C:33:BB:7F:9B:9F:58:17:BD:E9:A8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TppsGPNJs5XDHDO7f5ufWBe96ag.cer Subject Information Access: Signed Object - URI:rsync://rpki.nellicus.net/repo/nellicus/1/4E9A6C18F349B395C31C33BB7F9B9F5817BDE9A8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4c:33:c6:93:dd:9c:bf:92:9b:33:e7:c3:c6:bb:40:bf:7a:5b: 8e:60:c4:83:f9:8a:1f:30:ef:8c:e1:24:11:26:ec:6d:9a:2d: 00:29:03:58:6b:a2:8f:f5:3f:36:cd:2f:20:e9:f1:13:66:b7: d4:77:33:be:71:2c:97:75:8b:98:cd:2d:6d:c2:04:f0:51:cb: 37:65:6d:56:27:6d:54:be:95:85:c5:54:97:17:3f:d3:2b:9a: ec:ae:b4:74:8e:fd:c0:5b:49:b8:fe:56:ad:2a:05:86:ad:c8: f0:f5:a2:c9:47:46:bb:f3:d8:0c:22:88:48:17:1d:3d:31:ff: 4c:dc:a0:4f:f2:fe:e9:67:b6:7b:cc:0c:66:0f:05:21:f5:14: 0d:a0:03:82:45:f3:85:19:0c:0b:77:d7:07:ec:1e:02:ed:be: 4b:b3:87:2b:b3:cc:75:b6:f7:14:3d:9a:57:8c:3d:ae:40:b1: 21:a1:58:ae:b7:6c:1a:41:62:6d:7f:df:de:02:eb:aa:85:2e: dd:82:93:d7:e6:09:d0:db:60:18:66:a4:05:02:21:18:46:d1: c8:ac:2a:4d:f7:54:2f:6b:95:dd:c3:1e:28:bb:4d:9f:ca:8d: 2d:d9:7e:64:3a:fa:47:53:6a:ef:24:d1:34:22:c0:8f:c7:5b: f8:10:a5:ca -----BEGIN CERTIFICATE----- MIIE4TCCA8mgAwIBAgIUUTB6GY/PbwgbFzIVmEeWpAv9OD4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoNGU5YTZjMThmMzQ5YjM5NWMzMWMzM2JiN2Y5YjlmNTgx N2JkZTlhODAeFw0yNTA1MDUyMDE0NDlaFw0yNTA1MDYyMzQyNDlaMDMxMTAvBgNV BAMTKDk0RkRENTM5MEU3NEYyQkJDQTVFNUVENTcwNjlFRjBGNTc5MkYzQjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC3TF5B2oQK122yx+fbDU6fUiSL awRkMGjQGdI+rOFwFI/suV0LK4uousWJd1iHTKm4uxNQs83CmM/XMiODPuBJQzYg /zaO5/elSzXp+j4x7FvHldZ2FuI+zqy0q6UP/aogqiKAJiiD3jWwmnPS+gNnsbFp zBfR4cRKkdKn0aJyl65HtWS+/ixmF8QRGGUatWBnM2tUKoOIsAXsj4O81vtcm//2 ndIOznEj6Y5TkMiNlUKqcRP3kFZq02D7s8cFL6eCTeAkp3EghwhGpG5Uy2m7nmON /eGVOz7cEk3eAix1tlY56HVYIs/a3krD6ERBT1mKFPaR/Mu8XSoK3YJpDIb/AgMB AAGjggHrMIIB5zAdBgNVHQ4EFgQUlP3VOQ508rvKXl7VcGnvD1eS87gwHwYDVR0j BBgwFoAUTppsGPNJs5XDHDO7f5ufWBe96agwDgYDVR0PAQH/BAQDAgeAMGcGA1Ud HwRgMF4wXKBaoFiGVnJzeW5jOi8vcnBraS5uZWxsaWN1cy5uZXQvcmVwby9uZWxs aWN1cy8xLzRFOUE2QzE4RjM0OUIzOTVDMzFDMzNCQjdGOUI5RjU4MTdCREU5QTgu Y3JsMGQGCCsGAQUFBwEBBFgwVjBUBggrBgEFBQcwAoZIcnN5bmM6Ly9ycGtpLnJp cGUubmV0L3JlcG9zaXRvcnkvREVGQVVMVC9UcHBzR1BOSnM1WERIRE83ZjV1ZldC ZTk2YWcuY2VyMHIGCCsGAQUFBwELBGYwZDBiBggrBgEFBQcwC4ZWcnN5bmM6Ly9y cGtpLm5lbGxpY3VzLm5ldC9yZXBvL25lbGxpY3VzLzEvNEU5QTZDMThGMzQ5QjM5 NUMzMUMzM0JCN0Y5QjlGNTgxN0JERTlBOC5tZnQwGAYDVR0gAQH/BA4wDDAKBggr BgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsG AQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAEwzxpPdnL+SmzPn w8a7QL96W45gxIP5ih8w74zhJBEm7G2aLQApA1hroo/1PzbNLyDp8RNmt9R3M75x LJd1i5jNLW3CBPBRyzdlbVYnbVS+lYXFVJcXP9MrmuyutHSO/cBbSbj+Vq0qBYat yPD1oslHRrvz2AwiiEgXHT0x/0zcoE/y/ulntnvMDGYPBSH1FA2gA4JF84UZDAt3 1wfsHgLtvkuzhyuzzHW29xQ9mleMPa5AsSGhWK63bBpBYm1/394C66qFLt2Ck9fm CdDbYBhmpAUCIRhG0cisKk33VC9rld3DHii7TZ/KjS3ZfmQ6+kdTau8k0TQiwI/H W/gQpco= -----END CERTIFICATE-----Generated at Tue May 6 03:28:21 2025 by rpki-client