$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft File: 6D7A266730928D9DFDFDACE36F73AC89E424E228.mft (raw, json) Hash identifier: XnKdCvx75WIq1iPERN7uO4/GxWw9hgBR48QCZXBu52s= Subject key identifier: 70:09:AA:50:EF:00:03:2E:54:9D:97:66:87:42:93:B6:CE:8D:1F:82 Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28 Certificate issuer: /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa Certificate serial: 3FA0B900F41947BCF8A86F32821635E334A113B1 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft Manifest number: 0411 Signing time: Fri 31 Jan 2025 04:09:27 +0000 Manifest this update: Fri 31 Jan 2025 04:04:27 +0000 Manifest next update: Sat 01 Feb 2025 04:40:27 +0000 Files and hashes: 1: 323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (hash: 6ZjP/n/SV8wJv/itzH0FAZKFfmnblLQYuHhOFAR029Q=) 2: 323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa (hash: R0+/Q92x5EzLtaNvVaeIfj9lan1Bg8z2kq+yv+mqvks=) 3: 323630323a663936643a6637623a3a2f34382d3438203d3e203233343730.roa (hash: OenykS9l6ecxi2eq3K6SpiRiFAarB/7i24z8fRJSTGI=) 4: 323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa (hash: 6FU0wv3D/IsFVQ2jtJYg8ZHC2qkQqDyXS+V84jg6PIA=) 5: 6D7A266730928D9DFDFDACE36F73AC89E424E228.crl (hash: 1t5eDhvWen0KTc1j6CModhpPFGkRL8gYyzaV23Fl5jk=) 6: 32332e3137382e37322e302f32342d3332203d3e203437323732.roa (hash: wTUFhxB1ra/9ePWw4ip99fGrwEoVBpfosSvBVZgBSUk=) 7: 323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa (hash: ylyooXUuucldJZnqampXTqc8rFKg9JpJvG7junCMFRc=) 8: 323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (hash: BH0RFSGNG6EI11e/xRpe5t4HbuCFO3Bk5xwKWl50p6E=) 9: 323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa (hash: v8NiyoiT15ZZeF21nSUuVEV/cKecXd5yB19bvFNMrZQ=) 10: 323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa (hash: Fo17SxW/je3elygYA2vgnvYffHfXDEOK6jOb3nwj05A=) 11: 323630323a663936643a3a2f34302d313238203d3e203437323732.roa (hash: RtouL0H6ZspH3/zYAI61KbQsp8rjkhmHpX8kJhfCk2c=) 12: 323630323a663936643a6130303a3a2f34302d3430203d3e203437323732.roa (hash: Yu1oNnw2w9h+HvMJcZ9U0fkkSMNfKnk7WW7I29GgzzE=) 13: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (hash: IwVe1aP9F++3yptOtYvTYTVHK5oG5UZqMj2hhb0sRQ4=) 14: 323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (hash: iRujg7GNZHRMOA4fp4OiJ9OlMbooU+3hRMbbYSf3g+g=) 15: 323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa (hash: fLWMsLSAdpUdkENXkPCdO/qjk63pnc3hh7Ird4qsmbo=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 3f:a0:b9:00:f4:19:47:bc:f8:a8:6f:32:82:16:35:e3:34:a1:13:b1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa Validity Not Before: Jan 31 04:04:27 2025 GMT Not After : Feb 1 04:40:27 2025 GMT Subject: CN=7009AA50EF00032E549D9766874293B6CE8D1F82 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c5:c7:f5:38:45:aa:c2:1e:72:62:ed:da:0c:20: 9d:91:20:a6:9d:e5:db:aa:20:fe:9f:1d:cf:7f:58: b8:61:0f:7f:da:38:56:eb:92:c0:2d:3e:b1:aa:be: b7:21:0e:12:48:ec:b3:e7:59:7d:dc:f7:42:c5:37: 38:0b:07:8a:bb:15:25:03:76:db:7a:0e:c1:2e:2e: f5:d5:c3:47:3a:30:8b:dc:6c:3b:1c:70:98:3d:ba: 94:3d:d0:74:05:c4:ef:a8:14:23:80:4f:ba:e9:0c: 96:21:1d:7d:dd:8f:b2:f5:f3:c9:72:9e:7e:24:e5: 25:19:e2:68:cb:c6:78:6e:d2:2f:95:fe:cb:dd:36: e6:c4:bf:bc:35:4f:6f:ac:fe:48:a0:4c:50:a2:dc: 13:40:4f:43:53:6c:a7:17:14:52:12:9a:8e:1d:7d: 89:68:88:98:07:dc:5f:86:5a:37:92:7e:65:c4:c4: 3d:99:8e:c4:e3:9c:86:80:a1:e1:a6:c2:42:bc:31: c5:0e:df:cf:ba:e9:28:d9:a5:47:73:cc:64:ac:c3: 1b:73:8d:ea:a3:37:74:a5:2f:74:a0:f1:9b:b1:9b: cf:1a:88:ee:9a:0c:de:c3:66:76:c5:eb:7a:cf:92: ca:eb:22:70:79:1a:9a:4d:18:d1:a0:89:56:c3:92: 86:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 70:09:AA:50:EF:00:03:2E:54:9D:97:66:87:42:93:B6:CE:8D:1F:82 X509v3 Authority Key Identifier: keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 8c:05:c2:f4:29:77:d5:ec:ba:dd:b7:fd:93:1e:c5:b6:a9:dd: b5:4e:5f:ba:ab:c1:2a:c4:c4:b8:20:d6:7c:99:6c:d3:8e:99: 13:a5:c2:89:2a:90:17:a8:4e:e0:bb:3b:46:c3:41:c6:24:28: 50:6b:49:0a:49:6b:15:e1:2a:9e:0a:5a:c1:6f:0c:a3:31:60: e5:15:2c:09:c2:52:76:09:5a:28:23:9f:ff:48:dd:cc:c3:48: a1:3c:a7:99:db:e6:d4:99:78:f8:66:f2:c6:87:9f:a3:6e:83: 13:d1:34:b0:9e:d2:fe:9b:31:09:fe:72:53:02:23:43:34:f0: dc:30:c4:78:80:85:28:eb:25:aa:77:db:a5:07:2a:23:bb:c9: 08:fd:72:16:e1:11:ca:ea:f2:50:0d:22:52:3f:83:e6:2d:d2: 3f:e4:ef:1e:bc:1f:f4:81:b0:fa:36:44:5e:0e:53:06:09:2f: 37:6d:8e:fa:59:8b:4b:65:08:84:63:38:7e:91:4e:7d:95:d4: 68:b7:6d:63:0e:fd:07:62:b1:b4:c6:f6:7f:6c:7d:4b:33:9d: 3e:51:6d:a7:8a:4e:ad:6c:79:d8:96:43:13:ee:b2:d0:e9:d3: 77:ba:bb:54:61:f6:10:98:44:62:d5:1d:2b:92:3f:39:af:41: 03:51:90:7b -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUP6C5APQZR7z4qG8yghY14zShE7EwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5 MmE1NzM3OWQ3ZjEzYmU4ZmEwHhcNMjUwMTMxMDQwNDI3WhcNMjUwMjAxMDQ0MDI3 WjAzMTEwLwYDVQQDEyg3MDA5QUE1MEVGMDAwMzJFNTQ5RDk3NjY4NzQyOTNCNkNF OEQxRjgyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxcf1OEWqwh5y Yu3aDCCdkSCmneXbqiD+nx3Pf1i4YQ9/2jhW65LALT6xqr63IQ4SSOyz51l93PdC xTc4CweKuxUlA3bbeg7BLi711cNHOjCL3Gw7HHCYPbqUPdB0BcTvqBQjgE+66QyW IR193Y+y9fPJcp5+JOUlGeJoy8Z4btIvlf7L3TbmxL+8NU9vrP5IoExQotwTQE9D U2ynFxRSEpqOHX2JaIiYB9xfhlo3kn5lxMQ9mY7E45yGgKHhpsJCvDHFDt/Puuko 2aVHc8xkrMMbc43qozd0pS90oPGbsZvPGojumgzew2Z2xet6z5LK6yJweRqaTRjR oIlWw5KGRwIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFHAJqlDvAAMuVJ2XZodCk7bO jR+CMB8GA1UdIwQYMBaAFG16Jmcwko2d/f2s429zrInkJOIoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2Mx LTI3NjU0M2EyNWM3ZC80LzZEN0EyNjY3MzA5MjhEOURGREZEQUNFMzZGNzNBQzg5 RTQyNEUyMjguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5MmE1 NzM3OWQ3ZjEzYmU4ZmEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzQvNkQ3QTI2Njcz MDkyOEQ5REZERkRBQ0UzNkY3M0FDODlFNDI0RTIyOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAIwFwvQp d9Xsut23/ZMexbap3bVOX7qrwSrExLgg1nyZbNOOmROlwokqkBeoTuC7O0bDQcYk KFBrSQpJaxXhKp4KWsFvDKMxYOUVLAnCUnYJWigjn/9I3czDSKE8p5nb5tSZePhm 8saHn6NugxPRNLCe0v6bMQn+clMCI0M08NwwxHiAhSjrJap326UHKiO7yQj9chbh Ecrq8lANIlI/g+Yt0j/k7x68H/SBsPo2RF4OUwYJLzdtjvpZi0tlCIRjOH6RTn2V 1Gi3bWMO/QdisbTG9n9sfUsznT5RbaeKTq1sediWQxPustDp03e6u1Rh9hCYRGLV HSuSPzmvQQNRkHs= -----END CERTIFICATE-----Generated at Fri Apr 25 14:50:32 2025 by rpki-client