$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft File: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft (raw, json) Hash identifier: TsQ45j11upPSrpOGJqxceymbJpWD0Dw/ba2GI4jmlF4= Subject key identifier: B2:0F:F6:A7:EA:B0:72:77:68:6A:FE:B0:2B:43:0D:EC:A0:63:DB:DF Authority key identifier: 8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B Certificate issuer: /CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Certificate serial: 06DA4E112947EFB0A562F02844EA56B92BDD6AD2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft Manifest number: 0156 Signing time: Fri 31 Jan 2025 07:05:57 +0000 Manifest this update: Fri 31 Jan 2025 07:00:57 +0000 Manifest next update: Sat 01 Feb 2025 08:37:57 +0000 Files and hashes: 1: 3138352e3234302e3130372e302f32342d3234203d3e203439353434.roa (hash: o+hzP90nSI+T3y9sTbshYXhWjocfA2wlZEaogIaY53I=) 2: 3231322e3130332e34362e302f32342d3234203d3e20323134363534.roa (hash: giItWdgsE7yWexPIKe97URGAOm6cZvCTKiNZ9i0NMhU=) 3: 34352e39352e38322e302f32332d3234203d3e20383334.roa (hash: frw0+lIncjDquefRK1SPywkPVuuHH4cypuzNgcWVwZI=) 4: 3231322e3130332e34352e302f32342d3234203d3e2038303735.roa (hash: fHVIMx8xlYqpN0AXQfWLm0vqOUAEGFXc3sBROHoQyYA=) 5: 34352e39352e38302e302f32342d3234203d3e203136323736.roa (hash: 3x0cRO+g1bZbRHut+QAG7pwDzd80m15dxHMNduCBIhg=) 6: 3139332e32342e3233322e302f32332d3233203d3e20323134323430.roa (hash: IE183VqO+F52HWn1DPHjI/7o/gqGxmRRAt8wnHBpU6Q=) 7: 34352e39352e38312e302f32342d3234203d3e203239383032.roa (hash: RSLVUL+AislPXW7KHmpbzgP/rzQAkGuHFrgP4qIPD94=) 8: 3138352e3234302e3130342e302f32342d3234203d3e20323130353338.roa (hash: e7DAYp4SHfxn2VHLApclYeubQioRqGakPF4YwyLlJQg=) 9: 3231322e3130332e34342e302f32342d3234203d3e20323133393138.roa (hash: qGJQiTgIvP4Ve1lRuA50bfURyANdu4X5JKcPosVvvQA=) 10: 3231322e3130332e34362e302f32342d3234203d3e203336353330.roa (hash: t9QDON1eVcR3gZYWH6p3WJjbbL/s9cVQ8etTw5kRaOg=) 11: 3138352e3234302e3130362e302f32342d3234203d3e20323134343538.roa (hash: A4xSoaJgKGvgYyxTiRaQc7hyiiMELV+dvyPZYNnypk4=) 12: 3231322e3130332e34372e302f32342d3234203d3e203630313137.roa (hash: o2O6mm+3NiSpIxIRK8ZNrpzy6suVZYBh7tcixISbCrs=) 13: 39312e3139302e3135372e302f32342d3234203d3e20323130383330.roa (hash: LHHDMQAiPEKdKz+17Sj/aubO3T0fJoOtFfvF63ozlF8=) 14: 3139332e32342e3233342e302f32342d3234203d3e20383334.roa (hash: zJJG7VoT4Kt0tFDIVdSQP5pvruNZ9RVl5vYwDOxtyqM=) 15: 3231322e3130332e34362e302f32342d3234203d3e20323134303234.roa (hash: +O7KmmeGOAiM/7s29OldzouDmAm6+0CBbCoI9maEmZo=) 16: 3231322e3130332e34362e302f32342d3234203d3e20323135333034.roa (hash: x+zFsneByHb8r+N6ldY9/z0/OC8hSN0JgILp23SPjHI=) 17: 3139332e32342e3233352e302f32342d3234203d3e203630373831.roa (hash: 3IIPnO8jnB/C9bfC+8H124jFOjjxVU8ltj/gUK5jsA4=) 18: 3138352e3234302e3130352e302f32342d3234203d3e203630313137.roa (hash: nJLQI+3MB7hgnbhNjFug7l3lg1m6x3LnNsfdR2vKKGE=) 19: 3231322e3130332e34362e302f32342d3234203d3e20323134303235.roa (hash: LFB7Snp5rWp88wE9Fmb9QyFhVldn8ex5y7IOggpdBIs=) 20: 3138352e3234302e3130372e302f32342d3234203d3e20323036323836.roa (hash: uGwx7QYEVtWq3r41S0xDstrUOU9fM4LmhcP60xb6Uzo=) 21: 8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl (hash: YBegywtr2WQCbZp2C8V31VmNXWwLCXP5YiK0OQezGzk=) 22: 3139332e32342e3233322e302f32332d3233203d3e203530333030.roa (hash: 0GRRCttIttRIMhB7V0vunXGAKORf14Pml5dL3sloPKI=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 06:da:4e:11:29:47:ef:b0:a5:62:f0:28:44:ea:56:b9:2b:dd:6a:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8c12b4273832b4156fe0092f6ae7e5b3ce23ad8b Validity Not Before: Jan 31 07:00:57 2025 GMT Not After : Feb 1 08:37:57 2025 GMT Subject: CN=B20FF6A7EAB07277686AFEB02B430DECA063DBDF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:98:28:db:30:0e:14:fc:11:97:18:99:3a:97:db: 6c:22:c4:5e:77:bc:ca:e1:56:eb:88:cb:64:27:c0: 09:9d:54:63:71:83:bb:b9:70:f4:81:16:ce:58:f5: d2:72:a3:4f:83:ad:d1:78:58:6b:54:43:cb:cf:ba: 04:9c:7f:61:63:f4:ee:8d:0e:86:03:a6:c7:81:53: bb:19:69:66:49:25:e3:52:cd:b6:bf:fb:ad:0d:d8: 41:37:57:08:9b:6a:5e:fb:08:7a:9b:a4:60:3e:8e: a1:cd:57:7c:b6:64:a4:bc:c1:0a:5c:41:8d:ff:9c: 53:cf:67:42:a1:13:e6:81:52:8e:c6:0b:13:f1:9b: f6:fa:40:d8:21:2a:42:48:de:bf:a7:cb:40:0b:4e: 6e:a9:df:d0:a2:77:2e:9d:d6:08:08:a4:f6:3c:a7: 73:f2:53:b8:a7:33:83:a0:35:6f:43:07:69:f8:90: ff:f1:17:ec:42:e9:98:3a:bd:9b:7d:9b:8f:59:d3: b9:70:b6:1d:b5:07:19:2d:21:f9:2f:b3:00:1e:99: b3:a9:8a:52:06:46:87:e1:af:b1:a0:94:03:92:ab: 72:47:df:43:c6:11:55:09:d5:9c:48:46:97:99:bd: 76:17:75:76:21:2d:ba:f5:af:40:55:da:0c:91:26: 99:1f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B2:0F:F6:A7:EA:B0:72:77:68:6A:FE:B0:2B:43:0D:EC:A0:63:DB:DF X509v3 Authority Key Identifier: keyid:8C:12:B4:27:38:32:B4:15:6F:E0:09:2F:6A:E7:E5:B3:CE:23:AD:8B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jBK0JzgytBVv4Akvaufls84jrYs.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/8bfd6882-d6b3-4aa8-bc0a-711d68bd198b/0/8C12B4273832B4156FE0092F6AE7E5B3CE23AD8B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 91:97:22:5e:b9:25:be:21:05:6c:7e:8d:65:ed:cd:d5:b7:98: a7:cd:cb:44:f6:ba:82:cb:b0:b9:be:7e:e9:43:b6:80:d9:1a: 61:d3:4d:d2:ba:f3:e1:bf:36:c5:0f:2f:05:9f:83:6c:4e:84: f8:a8:72:8f:11:08:0a:22:b8:db:f7:40:11:44:01:c9:1f:2d: 36:d1:a5:d2:18:e0:ad:55:f1:69:e8:d4:50:ba:c5:77:d1:43: 00:6b:9c:51:b3:60:cd:f6:e4:e9:65:34:9d:91:73:55:49:2a: c0:c3:49:89:c6:60:97:1b:d6:f5:69:6e:9c:dc:27:a2:54:d7: 12:8b:ed:40:a6:6d:3d:9b:1e:26:51:73:89:03:f9:32:fb:b3: 15:b7:2f:ec:2d:43:92:f9:bd:72:81:60:99:3e:4e:98:62:ab: ec:85:30:0b:a6:37:39:8c:37:46:bb:9e:ed:25:59:33:ed:d5: 5a:f9:1e:8a:ce:84:c3:a4:cd:57:50:96:cd:d0:64:b0:88:e5: 40:f9:40:ed:04:82:2b:21:5c:71:c0:c6:fb:b5:fd:c8:cf:32: 59:d9:3d:56:68:fc:d7:52:e8:3f:5f:13:01:83:c6:11:ae:04: a0:fc:bf:e7:94:69:b7:08:9f:a8:5c:d9:50:18:a4:54:ff:35: af:3c:a9:ad -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUBtpOESlH77ClYvAoROpWuSvdatIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOGMxMmI0MjczODMyYjQxNTZmZTAwOTJmNmFlN2U1YjNj ZTIzYWQ4YjAeFw0yNTAxMzEwNzAwNTdaFw0yNTAyMDEwODM3NTdaMDMxMTAvBgNV BAMTKEIyMEZGNkE3RUFCMDcyNzc2ODZBRkVCMDJCNDMwREVDQTA2M0RCREYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYKNswDhT8EZcYmTqX22wixF53 vMrhVuuIy2QnwAmdVGNxg7u5cPSBFs5Y9dJyo0+DrdF4WGtUQ8vPugScf2Fj9O6N DoYDpseBU7sZaWZJJeNSzba/+60N2EE3Vwibal77CHqbpGA+jqHNV3y2ZKS8wQpc QY3/nFPPZ0KhE+aBUo7GCxPxm/b6QNghKkJI3r+ny0ALTm6p39Cidy6d1ggIpPY8 p3PyU7inM4OgNW9DB2n4kP/xF+xC6Zg6vZt9m49Z07lwth21BxktIfkvswAembOp ilIGRofhr7GglAOSq3JH30PGEVUJ1ZxIRpeZvXYXdXYhLbr1r0BV2gyRJpkfAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUsg/2p+qwcndoav6wK0MN7KBj298wHwYDVR0j BBgwFoAUjBK0JzgytBVv4Akvaufls84jrYswDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvOGJmZDY4ODItZDZiMy00YWE4LWJjMGEtNzExZDY4YmQx OThiLzAvOEMxMkI0MjczODMyQjQxNTZGRTAwOTJGNkFFN0U1QjNDRTIzQUQ4Qi5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL2pCSzBKemd5dEJWdjRBa3ZhdWZsczg0 anJZcy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84YmZkNjg4Mi1k NmIzLTRhYTgtYmMwYS03MTFkNjhiZDE5OGIvMC84QzEyQjQyNzM4MzJCNDE1NkZF MDA5MkY2QUU3RTVCM0NFMjNBRDhCLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkZciXrklviEFbH6NZe3N 1beYp83LRPa6gsuwub5+6UO2gNkaYdNN0rrz4b82xQ8vBZ+DbE6E+KhyjxEICiK4 2/dAEUQByR8tNtGl0hjgrVXxaejUULrFd9FDAGucUbNgzfbk6WU0nZFzVUkqwMNJ icZglxvW9WlunNwnolTXEovtQKZtPZseJlFziQP5MvuzFbcv7C1Dkvm9coFgmT5O mGKr7IUwC6Y3OYw3Rrue7SVZM+3VWvkeis6Ew6TNV1CWzdBksIjlQPlA7QSCKyFc ccDG+7X9yM8yWdk9Vmj811LoP18TAYPGEa4EoPy/55RptwifqFzZUBikVP81rzyp rQ== -----END CERTIFICATE-----Generated at Thu Apr 24 23:58:33 2025 by rpki-client