$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: wrW/7l/W7Q6T6kEof/FMHkdzM4q3WMqhajM86Ejnvko= Subject key identifier: 94:E4:BA:5A:24:C9:BF:D1:F3:99:D9:66:BB:71:FD:D2:A9:D7:16:50 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 4A5D8F57E8DB86A5E11CA44D051F8AD5ACBD3DE9 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 0445 Signing time: Fri 31 Jan 2025 18:30:57 +0000 Manifest this update: Fri 31 Jan 2025 18:25:57 +0000 Manifest next update: Sat 01 Feb 2025 21:47:57 +0000 Files and hashes: 1: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 2: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: hgOouETN68JjnwRVGuA3Qb1CgGL84jJbpDczZSdOrkw=) 3: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 4: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 5: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MZau10zedWMcfacP+tAKMz6NiJl4IfcotdHySIsuAvo=) 6: 3138352e3131312e3138392e302f32342d3234203d3e203631303934.roa (hash: 7GvIeRHulthBUpjBqsqDj1rm4KiFcp0loCD/HDsOBdE=) 7: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 8: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: 1mp0f8eHaMQpRA78Gkk4jwOU31yHu1aUXXw7yDxnVEo=) 9: 3138352e3231332e3234322e302f32342d3234203d3e203631333137.roa (hash: SKhTV84jNI1MhV+XLYyiYmvQWNoZGMyb4/D7Z/xQFXo=) 10: 33362e3235352e39322e302f32332d3234203d3e203630373831.roa (hash: 7osIUbxAsp8JXEl3vUE49emLTbi5wZizrI6LmhRbKog=) 11: 3138352e3133302e36302e302f32342d3234203d3e20323039383234.roa (hash: 3DvMUlL3ozouzilq8guog5+f3qPaL3kb/93EkJRtV9s=) 12: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: h1azTNafUjb7UdhKJgtNINL6z0yWbbbvs5e4uvD1ZDY=) 13: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 14: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: OBAzX7jZUk7Za1E5MEVxtdjyAyWEmCtcqgWHValavGM=) 15: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: HHehYmYO5S3nVqn5RxPN8IY1cV+6/LfOgSFg8yGTFv0=) 16: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 17: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: r/yhCg+H/V+gvgUqqXgm6SF+8gfop7ZrFjkciDc1VEs=) 18: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: UABDTXTWp8foWVTBYxxIWEuae7LAbLk9s44nxTvRACo=) 19: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 20: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 21: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: Os5pPaUq4wuSIVKgbNMacUddHXr+Tpw7Nr5HsfcIjhw=) 22: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: OulikBe5YgE49P/jkHMICdNhzYYGwq3YR1HyZyxS4o0=) 23: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: gcrezpbkvcqBnSLpZetM8bEEnNHAAsTxciJcMFM8hRM=) 24: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 25: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 26: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 4a:5d:8f:57:e8:db:86:a5:e1:1c:a4:4d:05:1f:8a:d5:ac:bd:3d:e9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Jan 31 18:25:57 2025 GMT Not After : Feb 1 21:47:57 2025 GMT Subject: CN=94E4BA5A24C9BFD1F399D966BB71FDD2A9D71650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ea:1f:6c:36:5b:d0:07:67:93:da:bb:7f:0c:ee: a7:61:a8:e9:d1:54:c4:8f:54:ca:e3:11:bb:50:ea: 8c:2b:0a:b1:92:e0:88:fa:95:f1:5f:e9:41:59:09: b4:e1:7e:28:c5:17:36:9d:45:d4:16:fb:32:d8:f4: 76:da:30:6d:70:9d:96:96:fd:55:9e:25:3b:6c:f0: 26:53:13:7f:84:38:94:3a:98:d8:33:46:aa:6d:d5: 16:65:a1:6c:bd:60:a6:a0:ba:5f:d6:d3:c4:1f:ac: 24:f9:51:69:43:79:56:22:fc:24:d8:95:90:2a:59: 98:70:d5:ef:42:a2:34:c0:7f:72:58:40:5e:08:c4: 6a:32:62:e7:57:c4:9f:fe:50:a6:9e:2a:a0:8e:30: dc:0a:5e:cb:2a:83:b9:4c:9f:4c:c9:0c:36:3e:d5: 52:3b:39:c6:7a:5b:5e:9e:ce:b1:52:e0:9b:26:03: a2:45:c6:99:51:a9:d3:0e:92:d7:45:3c:2a:11:b5: e6:85:23:58:8b:85:8b:a4:84:d2:ef:b2:94:17:ce: 22:0e:51:7f:42:02:0f:d4:9c:9c:cb:ac:5e:3b:51: a8:06:e4:87:9c:b8:75:d4:51:86:3d:07:ca:3f:43: 6f:38:57:f4:d5:05:37:0f:a9:2c:f4:3c:d8:02:24: 2d:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 94:E4:BA:5A:24:C9:BF:D1:F3:99:D9:66:BB:71:FD:D2:A9:D7:16:50 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption bc:91:99:32:54:75:5f:60:12:ed:fd:bb:ca:40:4f:d1:e1:b5: 3d:a5:32:ec:51:60:1b:89:20:31:ba:b1:ee:57:52:93:df:9d: 4f:8a:ca:61:b2:6c:e9:9d:49:c8:1e:28:91:9d:b4:49:7d:7e: 8c:d4:fa:59:ef:aa:0d:73:d9:69:25:7d:b3:8d:9d:b8:80:15: b0:7a:9e:02:fa:d0:0f:2e:f6:d3:18:2c:de:1c:65:a0:45:26: a2:8b:d9:09:fc:e3:8e:11:e2:2b:db:fb:cf:92:03:ee:ed:2b: 75:0a:05:07:0c:09:d2:24:c7:09:03:41:93:19:d3:36:59:cf: 5b:87:bd:c4:ac:b3:c9:ea:44:0b:b4:f4:66:33:bd:0b:3c:4b: 78:73:85:f9:f9:f6:07:2a:ce:c5:3e:b7:f1:23:e5:5e:82:7f: e1:a4:cf:a9:b8:1f:f3:55:5e:dd:c8:80:35:39:93:a9:ef:c8: 04:c2:c3:f3:83:a0:ee:08:e5:15:6f:dc:64:97:4d:3e:c9:eb: 71:7d:88:3f:ef:79:a2:40:ce:db:34:4a:89:fa:da:77:d3:5c: 2c:d8:a4:72:11:8d:de:f8:7d:ec:33:f3:8d:8f:38:6f:01:05: fa:f9:b7:81:72:8f:99:e0:e4:b1:ee:00:12:f6:b0:e5:36:4e: b5:03:e1:48 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUSl2PV+jbhqXhHKRNBR+K1ay9PekwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTAxMzExODI1NTdaFw0yNTAyMDEyMTQ3NTdaMDMxMTAvBgNV BAMTKDk0RTRCQTVBMjRDOUJGRDFGMzk5RDk2NkJCNzFGREQyQTlENzE2NTAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDqH2w2W9AHZ5Pau38M7qdhqOnR VMSPVMrjEbtQ6owrCrGS4Ij6lfFf6UFZCbThfijFFzadRdQW+zLY9HbaMG1wnZaW /VWeJTts8CZTE3+EOJQ6mNgzRqpt1RZloWy9YKagul/W08QfrCT5UWlDeVYi/CTY lZAqWZhw1e9CojTAf3JYQF4IxGoyYudXxJ/+UKaeKqCOMNwKXssqg7lMn0zJDDY+ 1VI7OcZ6W16ezrFS4JsmA6JFxplRqdMOktdFPCoRteaFI1iLhYukhNLvspQXziIO UX9CAg/UnJzLrF47UagG5IecuHXUUYY9B8o/Q284V/TVBTcPqSz0PNgCJC0bAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUlOS6WiTJv9Hzmdlmu3H90qnXFlAwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvJGZMlR1X2AS7f27ykBP 0eG1PaUy7FFgG4kgMbqx7ldSk9+dT4rKYbJs6Z1JyB4okZ20SX1+jNT6We+qDXPZ aSV9s42duIAVsHqeAvrQDy720xgs3hxloEUmoovZCfzjjhHiK9v7z5ID7u0rdQoF BwwJ0iTHCQNBkxnTNlnPW4e9xKyzyepEC7T0ZjO9CzxLeHOF+fn2ByrOxT638SPl XoJ/4aTPqbgf81Ve3ciANTmTqe/IBMLD84Og7gjlFW/cZJdNPsnrcX2IP+95okDO 2zRKifrad9NcLNikchGN3vh97DPzjY84bwEF+vm3gXKPmeDkse4AEvaw5TZOtQPh SA== -----END CERTIFICATE-----Generated at Thu Apr 24 19:16:02 2025 by rpki-client