$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft File: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft (raw, json) Hash identifier: sjdlf8yD8m4aLFYtbUy4oLMUv1HiSwJhilIqxoViNRw= Subject key identifier: B5:D4:C3:CB:89:33:F0:F5:53:37:98:43:A2:1F:C1:0A:EB:AF:5A:94 Authority key identifier: 8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C Certificate issuer: /CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Certificate serial: 53E8063E29C02CC6A5CBF5291F4AE998972D9680 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft Manifest number: 017D Signing time: Fri 31 Jan 2025 04:19:32 +0000 Manifest this update: Fri 31 Jan 2025 04:14:32 +0000 Manifest next update: Sat 01 Feb 2025 05:17:32 +0000 Files and hashes: 1: 326131343a373538313a343836303a3a2f34342d3438203d3e20313531353434.roa (hash: 2KFsAHpLftCLwZtbIHo+pYTrjbgMoXhuDq6pQ1osTQE=) 2: 326131343a373538313a343535353a3a2f34382d3438203d3e20323136333735.roa (hash: zxhwJ8BRHSfhv2IzHdjrBBfqb2fcq5amMTROJBgH6K8=) 3: 326131343a373538313a343832303a3a2f34342d3438203d3e20323135323233.roa (hash: uw3KMHJgZ6Bs1XgZHu5jmQaEivCBCHNoA88XalRkJlM=) 4: 326131343a373538313a343835633a3a2f34382d3438203d3e20313431303637.roa (hash: dkDlXn7ZTKwdhEvN1AyaOINvq0aj0JnSzR14swqFK7s=) 5: 8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl (hash: jXg9H2xmUUFrbNrR+INMpyK56OI2z5Ksrm6EABIfAvo=) 6: 326131343a373538313a343635303a3a2f34342d3438203d3e20313335363539.roa (hash: 3t/0qmEuc7HUJ6jbuOuPnmd3ve4/XpcLhj4VdVBS4pk=) 7: 326131343a373538313a343833303a3a2f34342d3438203d3e20323135323231.roa (hash: 5kwf5snTkmK7LtAATO7gOLvfpi+re7REaK8WEI28poM=) 8: 326131343a373538313a343831303a3a2f34342d3438203d3e20323135363734.roa (hash: balCDraqmFeCDcT6AARLgPE7wx/XlJCm9PVdBomS9WU=) 9: 326131343a373538313a343331303a3a2f34342d3438203d3e20323135313731.roa (hash: hVA/d2YR4xdsAHy1uTxjAUm6BOK9lZFHu6XowWZ2ALI=) 10: 326131343a373538313a343834303a3a2f34342d3438203d3e20323135323839.roa (hash: Bo15fqP9Ac/cIgSIHZ4Z4OZP/kjLDe1d5T3u0s2HgVw=) 11: 326131343a373538313a343934303a3a2f34342d3438203d3e20323135313731.roa (hash: xBUUDC7moivahh8wpHqIH+vMJn4fPyDzPmTcv5Fy8T0=) 12: 326131343a373538313a343535303a3a2f34342d3438203d3e20323136333735.roa (hash: j3Yxep+MI4lCkRyN6TayldqjXbBq5gnnYN1fkBIgW/k=) 13: 326131343a373538313a343534303a3a2f34342d3438203d3e203434383137.roa (hash: IFxu47mX+KW2yr5BPkyWwe9T/nmoVdlGCmb5Yjhy+6o=) 14: 326131343a373538313a343835663a3a2f34382d3438203d3e20313530323439.roa (hash: 5xKTuxtl6gU1soXvS6gNX1GeC3WIfuH+Q7hlbZVvBVo=) 15: 326131343a373538313a343536303a3a2f34342d3438203d3e20323135313731.roa (hash: KfVtaM6pSil5IlE25aJ6GsX8ukKL88HTbLxoecGenMs=) 16: 326131343a373538313a343030303a3a2f33362d3438203d3e203434383137.roa (hash: 2OjyaJbbNxiK1KbQufJXFdY8QVhoqDcSSIjvfQsPK/M=) 17: 326131343a373538313a343835303a3a2f34342d3438203d3e20323135333739.roa (hash: Fb9U5onYhJ0bwRtEjYGUTxLrzqugr5G6uA9CKAt2Qds=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 53:e8:06:3e:29:c0:2c:c6:a5:cb:f5:29:1f:4a:e9:98:97:2d:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C Validity Not Before: Jan 31 04:14:32 2025 GMT Not After : Feb 1 05:17:32 2025 GMT Subject: CN=B5D4C3CB8933F0F553379843A21FC10AEBAF5A94 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:df:09:a7:8e:37:23:89:5f:12:be:3d:25:17:d3: 23:7a:d7:ae:98:d1:e9:ba:a1:6d:6b:5a:f7:66:63: 81:35:90:fa:6c:95:6b:08:17:3d:e4:b2:fb:d1:5f: aa:46:21:2b:d7:28:08:ef:aa:e0:75:eb:e2:de:d7: f6:8f:54:ec:7e:5c:5f:c5:47:99:36:f8:c2:6a:84: 29:0e:ec:c4:67:a3:a1:c1:41:81:03:ef:4c:0c:cb: 99:74:a1:1e:df:fb:cd:42:dc:04:49:d1:f9:10:0f: 5b:c0:f2:d2:e6:79:fa:e6:a6:1d:59:a4:fa:5c:a6: 97:ed:f8:5c:24:71:26:53:2d:40:ec:6b:50:80:c8: cf:25:78:f0:e0:38:d6:9a:b7:09:10:29:81:df:5d: 61:6e:15:4b:48:9c:91:86:6e:ef:3c:6b:11:14:90: 70:0b:7b:d7:a2:01:5b:da:43:c4:32:71:b4:a5:5a: 69:58:cc:64:da:a2:d4:a0:5b:cf:cd:11:4c:eb:52: 52:e4:95:0a:77:d4:4a:0b:5e:2d:67:c6:87:4b:e4: e8:74:15:50:22:a9:fc:ef:99:db:84:40:a3:82:cb: 8b:59:27:95:be:99:44:06:d1:71:a9:af:e7:5c:7a: 6a:b0:53:26:03:a0:fe:10:54:5f:08:db:8e:b3:0f: 0f:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B5:D4:C3:CB:89:33:F0:F5:53:37:98:43:A2:1F:C1:0A:EB:AF:5A:94 X509v3 Authority Key Identifier: keyid:8E:07:D3:1C:64:52:F7:A6:B2:4E:63:CD:DC:49:0E:12:E0:AF:B3:8C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/89270f6c-a3fe-4299-b079-309ed97f3824/0/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/311e47c4-02f0-4657-9022-d2b83cff8755/4/8E07D31C6452F7A6B24E63CDDC490E12E0AFB38C.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 33:ce:4e:4b:20:75:20:09:79:56:95:7f:7e:3b:c1:5c:e4:08: ca:0f:dd:12:e3:67:19:3f:40:b2:4b:27:0f:b6:fc:35:4d:00: 5f:88:10:52:8d:80:2a:6b:b4:a4:d1:a2:cd:57:d9:3b:7f:6d: 08:54:8a:0c:56:57:ec:e7:e8:25:88:d5:9c:83:fb:b2:bc:95: 62:a1:eb:c4:73:92:b3:0a:13:30:29:f5:64:3e:c0:b8:c8:fb: ce:80:9a:1a:cb:68:80:33:78:7c:77:4d:0f:6b:9a:0e:a2:ae: 7f:cd:83:b1:12:45:75:8b:0f:4b:72:d8:10:55:99:43:2b:5f: b2:13:ad:ac:b3:c4:69:9e:4f:4e:9f:4c:0f:59:b0:dc:b0:34: f1:62:8c:9a:4e:73:3e:53:80:f1:68:a2:ff:17:90:23:59:50: eb:df:6c:f6:ca:ca:95:77:7c:65:30:48:78:83:4e:3a:00:d2: 7f:c2:8e:ea:0a:bc:6e:5c:02:11:5f:18:2a:ab:c6:f6:f0:14: fc:29:f0:8f:ea:2b:66:b4:82:19:8f:67:d1:f4:8a:b7:9b:14: 8d:65:73:30:43:f0:15:f8:19:04:b9:62:5f:50:a3:6d:8d:71: 41:51:d7:2f:84:7e:95:7f:13:95:2b:52:b2:bd:19:68:a2:b3: ff:c4:33:ce -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUU+gGPinALMaly/UpH0rpmJctloAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJF MEFGQjM4QzAeFw0yNTAxMzEwNDE0MzJaFw0yNTAyMDEwNTE3MzJaMDMxMTAvBgNV BAMTKEI1RDRDM0NCODkzM0YwRjU1MzM3OTg0M0EyMUZDMTBBRUJBRjVBOTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDfCaeONyOJXxK+PSUX0yN6166Y 0em6oW1rWvdmY4E1kPpslWsIFz3ksvvRX6pGISvXKAjvquB16+Le1/aPVOx+XF/F R5k2+MJqhCkO7MRno6HBQYED70wMy5l0oR7f+81C3ARJ0fkQD1vA8tLmefrmph1Z pPpcppft+FwkcSZTLUDsa1CAyM8lePDgONaatwkQKYHfXWFuFUtInJGGbu88axEU kHALe9eiAVvaQ8QycbSlWmlYzGTaotSgW8/NEUzrUlLklQp31EoLXi1nxodL5Oh0 FVAiqfzvmduEQKOCy4tZJ5W+mUQG0XGpr+dcemqwUyYDoP4QVF8I246zDw8RAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUtdTDy4kz8PVTN5hDoh/BCuuvWpQwHwYDVR0j BBgwFoAUjgfTHGRS96ayTmPN3EkOEuCvs4wwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzExZTQ3YzQtMDJmMC00NjU3LTkwMjItZDJiODNjZmY4 NzU1LzQvOEUwN0QzMUM2NDUyRjdBNkIyNEU2M0NEREM0OTBFMTJFMEFGQjM4Qy5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84OTI3MGY2Yy1hM2ZlLTQy OTktYjA3OS0zMDllZDk3ZjM4MjQvMC84RTA3RDMxQzY0NTJGN0E2QjI0RTYzQ0RE QzQ5MEUxMkUwQUZCMzhDLmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzMxMWU0N2M0LTAyZjAtNDY1Ny05MDIyLWQyYjgzY2ZmODc1NS80LzhFMDdEMzFD NjQ1MkY3QTZCMjRFNjNDRERDNDkwRTEyRTBBRkIzOEMubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAzzk5L IHUgCXlWlX9+O8Fc5AjKD90S42cZP0CySycPtvw1TQBfiBBSjYAqa7Sk0aLNV9k7 f20IVIoMVlfs5+gliNWcg/uyvJVioevEc5KzChMwKfVkPsC4yPvOgJoay2iAM3h8 d00Pa5oOoq5/zYOxEkV1iw9LctgQVZlDK1+yE62ss8Rpnk9On0wPWbDcsDTxYoya TnM+U4DxaKL/F5AjWVDr32z2ysqVd3xlMEh4g046ANJ/wo7qCrxuXAIRXxgqq8b2 8BT8KfCP6itmtIIZj2fR9Iq3mxSNZXMwQ/AV+BkEuWJfUKNtjXFBUdcvhH6VfxOV K1KyvRloorP/xDPO -----END CERTIFICATE-----Generated at Sat Apr 26 03:15:04 2025 by rpki-client