$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft File: nSpHi7CwjmYbCy-fvok1vJwqKKE.mft (raw, json) Hash identifier: shPy+baaNMAvBUH+tLzoqq0XhY67w/T/NhmZDFoDIZ0= Subject key identifier: 15:84:27:CF:3A:B1:EF:C2:36:91:65:C7:E2:09:E2:9D:79:92:18:33 Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Certificate serial: 0194BD1796DC5CECD6746CDC4FB9BECED707 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft Manifest number: 1659 Signing time: Fri 31 Jan 2025 16:00:27 +0000 Manifest this update: Fri 31 Jan 2025 16:00:27 +0000 Manifest next update: Sat 01 Feb 2025 16:00:27 +0000 Files and hashes: 1: 1I3r14eWi8whXikK8thT9CcoONo.roa (hash: dXuHPX+CiFtynaQ4blRvwT5aMYi7pulbdieYpQUIG6A=) 2: 2YDpGlb85Y0B3UH_SPABkYLwtdQ.roa (hash: QPWUocA76Z5UzbYjqNVViSp6W2KYqM6syIyvYYqrKhA=) 3: 3hMaHzXe4LiFftoitJO_mkffdQQ.roa (hash: ReD4cMIohZpT0r3tcFOjop5SjVzc1b18CqRcWBiQXec=) 4: 3hua107VErvGO7427wUpbuLdn2s.roa (hash: wodKZMIIfHhljh0061fiAldhyJClYSTPP0B2Bltn6KE=) 5: 82BDDs4JetPr60bFvcYZDrvzjxI.roa (hash: CBIyzSw3mmqC6JboqzBFcaRqhyCaa652ZQLSgqdfjUM=) 6: 8CQBrrS-j-1B9miXerZBPWN0E04.roa (hash: IgNUgLrU9w4bfwtQNbKEOfHSLgwVWsWrNB10KO3X8Qc=) 7: 8H-r3nrY3C3dFkZxRkq6E6t8KwE.roa (hash: wXZjtlqLtDvqOx2n3rVwhvWI7PVPWffrE0Wk2qIC1oY=) 8: 8S9TckYMQov5oiiWug0DZjKuCOc.roa (hash: 92kUpIXbrkkCV9MuEV771IRCYbEG1j+E6CGDnKJYUYc=) 9: 8_cbKcsvz03ezCHnLIRnjxJjxDY.roa (hash: Cwbvv7xx7gAXFXCstVELE3slFw0mAtERkNRky6NVutg=) 10: 8izvkYFDSOWONCfNHXcJ313VtsM.roa (hash: EgORFt4rdkHiYwy2FIi6dDPxT5R/z6IelFcETgv61v4=) 11: 9cU04mvRvFgaah5DiDi0s15gZuQ.roa (hash: 784hHOn8vcz53y3rpBapaHSJ8PnVw21U9hVaizMMphw=) 12: AZC62770KiKI8dqBMwhR-AAzfRA.roa (hash: zOkUwCGYZe4NMLVCX8y/KIwY9vaHpv9HqkSIKpx5lx4=) 13: EqsgARk6AP3U4984d7IvaImCQZo.roa (hash: DK8aChe2hOHrNDEbXgdFqjmcoqmce+I4444uFmSu1ME=) 14: GHwHdmTeJDy2sGN31_t6u-KueqY.roa (hash: BbuFOl2cQXU+25aZF1TEtbiEz/GZpPq6dQbzRWPouO4=) 15: I0tEsHEaSYIGsOITCVP8O8A9EGc.roa (hash: p+VrMCFUSvQu54AVZi+bulw3hCssQs4D3No74IFUxPQ=) 16: IckYL8DK3tfkJIr04FxsrieCbGA.roa (hash: URP/gWULXpGnZH0cYWR2LsQutob4N8DMLCrm1MmVhsw=) 17: K2ACtRNCGmRQye07bIMPkpZgE2s.roa (hash: 78zwHUxHw0F7uUk5+QU9T/2Rqpr245qyZIOi/YTRYak=) 18: KfKDUYRtE2w33wh8p7CmpXO4HW8.roa (hash: wVjtt49/KgqAnCCpcpmtlyZAKDWMfmDqCBsf2O+Tf80=) 19: LKJSkF92rgE0QpPnTPqDrvB_o48.roa (hash: lAoYASdueW8ShkDV13s1svUZETieHEz4XalA6REmONs=) 20: LYAPcuoXoX8kmfw18N7DGKOPjJM.roa (hash: fSbnMw8CAP2G5rZjE6RhvM0I3NOjjrdkXeYCUP9n5do=) 21: LiRCJEF1GRfh_5vbmWcOv_p0lTE.roa (hash: NU8nORXk0tMgRu1+oWvxfayJoiRtSiELlponc22utxQ=) 22: Lpz565UF_hEboDFDHeWBZVEQ21M.roa (hash: b/r/RQ3PU+HhAUuB6uyPyzIuwGmDsQuSa71JKVhYBIE=) 23: PPlpAUhcq29VP2v3m7syA9uMDCo.roa (hash: nHKo/zohhSmZ4/ydw/x18mDX6DX+0CLHM4NAp37hesI=) 24: TqPc2jRE7QtyFSDZIoz1O4MgPJA.roa (hash: KvsyNCbnY5XKFg+R6Z3kjYr4HcA8cSuPfGasIaZKjys=) 25: USKS0btdbaHoI_bpJ6edPiW0uJk.roa (hash: +gF0rP5N678e2LNBu80N29IUdvnNyB6k2/C5AZRZF3M=) 26: ZKuWDSYfwdQ8YvY1ipYy_cUNBC0.roa (hash: Lb5v9vqBNrc0vpKXBtBQdLp8ILzYYi+Kqmx+CxBbTyc=) 27: _7b-wK6kLzxf7iWesXkqkfFcpNY.roa (hash: ru9q3GENXuaiBoAszK3nQ0h0s8M2NWFrfv9sPgO9mQE=) 28: abGDmQE8tFwuEcvF_d8vfROKIVQ.roa (hash: H78UR+WlIMT6Vv86HmqCFwNPByRMRVIZvCQthLmsx5g=) 29: aibPICuSr1Uy0nK_E97YFi4aCS8.roa (hash: AtT4NX8Iz99gpJFOdvPwLrVX408Nzp/TkkFGqs541tQ=) 30: b2yocVZXIOpecOetC_ElRgzyl5M.roa (hash: 9zFvZ+ffs107FCXlayYlz0Ea4puh2yOZasKqOdWeHhI=) 31: bdt1m5_G1cMVOuZarSY_r58Gf4o.roa (hash: zR7TyRIRITyUe3XdfMuQFBtj66m12aRCvg/EB7JPPdw=) 32: bfSpyGzoTi5WfKQn9jFnMtVpIh0.roa (hash: cnjO12gyScllVXrI8BbzFNNE7HM06oskLaLT1vlIsys=) 33: cNJ0CYne8j3KUhWzMsSa9145MMU.roa (hash: NFQOqVnYZhHy5eAmayHKkBOtG3ARGZ8J2qdI3iTPJDY=) 34: cpCz0Rz5WbHD738ALw8Cjaps_ko.roa (hash: lZBZnZxxQZSo7sy3mDWnxFjeYTGLWgaHGr5fkKsqGAM=) 35: eA-m4nFC6kxWduztRvkm-CKMrQ0.roa (hash: TDknQ/pJ/NPsWGCq1PTWID8WVJws14ZF2rHbFZhOV1Q=) 36: fJqWvzVHBXHAJcQ3IG3g9sggzn0.roa (hash: zuG5gAbhgI1YXyNr8S5VVlXycb19xy6Hl9w2Q38bUY4=) 37: fulwWfpqRCqpiPPprhykhPke6JQ.roa (hash: MXc6G1RwV1omzeL0EAHY0w18X+5u6aWDsAUpnD5S7Uk=) 38: gUnvqabgjFuZZqPEsRfFyMGXFJM.roa (hash: srGZ4Htu3smmiXwJeoF/K3aRLO1/y7rAki7pua611kw=) 39: gj6ujg7n9rszZ97PaMgxAObTMkc.roa (hash: +VCA/8+apgrcm47YAa5E2xMKM/rptLNPI6LAR55hHSI=) 40: iJhote5hlTzr7iZBs3RH4sIBmI4.roa (hash: 9KGuToq7A3Qh7DWu4j0QWU9MKBt1MROra5DyTey9X2s=) 41: jQtkyfhvw7ej3LVCzDZ-NlINCeo.roa (hash: Pw7RR4DGFCuMzGziRsvzxXgNxRF36G9tlqJPCKuA2iU=) 42: j__aq3iFBPVxZdDjpGZ65fzJ6Wg.roa (hash: RAipwcTF9FXS+bEQE7It7yZOFxgZeTmaKaRu1+QOgPE=) 43: jwl5tBkH_e_d2gT8BkNAC996Ado.roa (hash: qsRp91wAleuzLXiIRB6lgIa2gH5GoA41iMKeFtwL+Y8=) 44: lslVJEZevud-p9UGIkZHIDelIYk.roa (hash: jj7yYsSoSjG8IooQ01j3NwBayite1QHot2daijTZWug=) 45: mB1L2pEcJICBWEdxAaLsI5iDh0c.roa (hash: w7J8b7TdvKm4RlASKrDAIN+aB9a6nuhL0I/bEBbBKzg=) 46: m_TDjPgYK3Z1bcU0rqPJFJXQms8.roa (hash: c8QRvuGKQxkUunGSt7YmzFZoL0M+5o13RL+CJneHMVE=) 47: mk2Q9tnWw3UAIx-x9xntE7-7U90.roa (hash: MvqwiSqGy+XWj27WKnS1zRsHkBnklDc3odvJxS02TfM=) 48: nSpHi7CwjmYbCy-fvok1vJwqKKE.crl (hash: u3jYIhRi/AaJJRiuuB4H6uY6/ndZEskDiJ4vqktnJ60=) 49: neGGwHeo0i0C5uST-ngtmZnDdtg.roa (hash: 0Ko//uGrPQcwGK+qTU2xAsrpw/3r8SuqsQv3rAlInt4=) 50: nupUDi_qr4iqGhGngql4DkwDGWs.roa (hash: 6hNFnAOiuYWCMRck2GbCUNTrO5nKvIaGCFp9oGoolFc=) 51: ofG8yjoX2iv8hvMpbbpBaZC9QfM.roa (hash: KDIzJYYR2zOglkX2ggi6G9XMlNStiEu64vM2/HGSaW4=) 52: qrb-tdWSEhPD0BUJE19AeClKurg.roa (hash: j6SZUm4sJ64X8j9MxTBSyy+oAIngQTC9+nOP66oGhMU=) 53: ryTyw64KDoM9VZcpVTbfxAnFAMA.roa (hash: Qe3Z/a1dn0vF5jF0XsGDyAzcP+kHfxv4VC1drPYspAw=) 54: sPm3yKEGTVunxhEBkT59OiMpjy8.roa (hash: P7y0ud0FVfGPIpqYLex1EiTtxyaX6ULKnwIyEobZygw=) 55: tRAobnnBcsUw71HfQl4GWebl7xo.roa (hash: oY3FMa/4LRtMqYkCzZJIheH9akN68M5haFqok3/Oo34=) 56: tz-hVQmOWmibMQG8OZz-Wijeki4.roa (hash: s8ORULSvUCrIJKVsQmefyvkUuFaBPr9jGQeMFdwFw2E=) 57: whaXv3m2KXUyLqTDL7uFEenX45U.roa (hash: 4I07kPqNYvHv2/46zJ8GoUsaXFdHKGqhCU3Tx9Bw2+U=) 58: yuDAkfr-Px9t0yqsVQka_a1yL6c.roa (hash: eBfQkAKvn4WAHObOrFWLxRSneFFvNDDBrLH1/mfwlP8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 01:94:bd:17:96:dc:5c:ec:d6:74:6c:dc:4f:b9:be:ce:d7:07 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1 Validity Not Before: Jan 31 16:00:27 2025 GMT Not After : Feb 1 16:00:27 2025 GMT Subject: CN=158427cf3ab1efc2369165c7e209e29d79921833 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:ff:f3:f2:24:8b:5d:99:e6:ff:7e:d2:7b:f7: 71:53:19:53:79:7e:b7:22:b6:3e:19:ec:78:d5:48: 2d:fd:ae:7f:b5:05:e5:62:51:55:aa:68:a7:5a:27: 3a:49:bd:77:1e:39:fd:32:b0:1b:4f:87:a1:de:3f: d3:5c:f4:d3:66:ee:69:21:0a:18:72:b8:c5:e1:5d: 12:5d:5f:31:7a:c4:30:c7:89:a3:ab:fc:78:de:8f: 11:24:a3:f7:8f:51:a1:c2:60:b1:8d:3f:2e:66:9d: 03:9b:02:3c:d4:42:1f:05:a8:5f:78:4d:d0:7a:fb: 24:08:73:56:e8:70:86:96:73:c5:0b:9c:90:8d:86: 20:4a:03:f0:0f:f9:1a:6d:f1:7c:40:0d:f0:c8:8c: a7:42:9e:54:77:da:cc:5e:89:b2:4a:e0:9d:c7:58: 0e:19:2c:7b:4e:30:a6:16:b9:41:6e:47:cd:1e:d8: bd:36:58:79:9d:39:7e:7b:63:bb:c8:3f:08:63:fa: 08:a8:41:84:44:2b:a4:2c:8d:1b:e3:50:e1:81:2c: c3:d0:4e:ce:7f:af:0e:37:be:a8:f1:40:6b:f7:0a: 30:e9:64:4a:62:94:f9:c7:ac:25:c2:2c:69:01:57: 7b:15:78:36:1c:76:24:59:45:55:aa:ee:99:90:7d: ba:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 15:84:27:CF:3A:B1:EF:C2:36:91:65:C7:E2:09:E2:9D:79:92:18:33 X509v3 Authority Key Identifier: keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 97:41:da:79:34:08:74:72:41:35:5c:5d:ed:57:3e:53:27:fe: cb:8b:9a:50:4f:20:62:61:9c:9d:ff:e1:d9:59:c1:fa:c6:59: 86:e0:de:07:c2:10:18:dd:f7:cf:18:57:8a:b1:74:d6:3c:d0: f0:c7:38:f1:2c:0f:55:60:32:8f:1c:fb:99:81:9b:a2:26:12: 60:c9:12:58:ac:68:72:5c:f8:9e:e5:ae:00:1a:a6:26:86:9f: c2:d1:11:42:ba:c6:e4:5c:3a:c2:d0:fa:2b:6b:cc:0d:82:33: ed:c5:4b:18:74:cd:b6:be:15:95:c0:5a:02:e3:36:f9:7f:17: b6:3b:64:33:59:50:84:2f:e1:16:7f:75:df:a8:fb:9c:24:bf: 0a:7a:dc:29:80:a7:fc:ec:75:b5:49:ce:06:20:80:32:d3:85: 7f:eb:b6:e9:19:b0:6b:b6:81:9c:20:66:7f:d0:04:48:b1:54: d4:3d:77:8f:fc:6a:ac:d2:fe:de:49:0f:6c:64:c1:97:21:f4: cf:c5:b9:5a:ef:06:11:88:3f:b2:0b:0a:a9:1d:81:1a:7e:dd: 71:e1:15:bd:46:fb:0f:06:54:20:26:99:d9:49:ce:1d:07:28: f6:ce:c2:c4:82:e4:c4:67:e9:fd:93:b4:79:c4:2b:8f:58:62: dd:b8:53:27 -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZS9F5bcXOzWdGzcT7m+ztcHMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy YTI4YTEwHhcNMjUwMTMxMTYwMDI3WhcNMjUwMjAxMTYwMDI3WjAzMTEwLwYDVQQD EygxNTg0MjdjZjNhYjFlZmMyMzY5MTY1YzdlMjA5ZTI5ZDc5OTIxODMzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtf/z8iSLXZnm/37Se/dxUxlTeX63 IrY+Gex41Ugt/a5/tQXlYlFVqminWic6Sb13Hjn9MrAbT4eh3j/TXPTTZu5pIQoY crjF4V0SXV8xesQwx4mjq/x43o8RJKP3j1GhwmCxjT8uZp0DmwI81EIfBahfeE3Q evskCHNW6HCGlnPFC5yQjYYgSgPwD/kabfF8QA3wyIynQp5Ud9rMXomySuCdx1gO GSx7TjCmFrlBbkfNHti9Nlh5nTl+e2O7yD8IY/oIqEGERCukLI0b41DhgSzD0E7O f68ON76o8UBr9wow6WRKYpT5x6wlwixpAVd7FXg2HHYkWUVVqu6ZkH26DQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFBWEJ886se/CNpFlx+IJ4p15khgzMB8GA1UdIwQY MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt ZWVmMzUxMWY2YzYwLzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAl0HaeTQI dHJBNVxd7Vc+Uyf+y4uaUE8gYmGcnf/h2VnB+sZZhuDeB8IQGN33zxhXirF01jzQ 8Mc48SwPVWAyjxz7mYGboiYSYMkSWKxoclz4nuWuABqmJoafwtERQrrG5Fw6wtD6 K2vMDYIz7cVLGHTNtr4VlcBaAuM2+X8XtjtkM1lQhC/hFn9136j7nCS/CnrcKYCn /Ox1tUnOBiCAMtOFf+u26Rmwa7aBnCBmf9AESLFU1D13j/xqrNL+3kkPbGTBlyH0 z8W5Wu8GEYg/sgsKqR2BGn7dceEVvUb7DwZUICaZ2UnOHQco9s7CxILkxGfp/ZO0 ecQrj1hi3bhTJw== -----END CERTIFICATE-----Generated at Thu Apr 24 19:04:44 2025 by rpki-client