$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: ShaLb2KR5UkuM+6tD9IU9vNfk9yle3kcUiaMkEWRYro= Subject key identifier: D3:30:28:94:AF:67:BA:7F:09:88:A6:29:DA:34:CC:CC:54:D8:82:33 Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 7C1290AD0DF5CBAB443BE14EBC7FB0ECE60CF91E Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 02FD Signing time: Thu 30 Jan 2025 23:58:22 +0000 Manifest this update: Thu 30 Jan 2025 23:53:22 +0000 Manifest next update: Sat 01 Feb 2025 02:46:22 +0000 Files and hashes: 1: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=) 2: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=) 3: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=) 4: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: xLKSRznwkoZPnrrHHqhECvojXnbRei7th1ndsutwS8E=) 5: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=) 6: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=) 7: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=) 8: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=) 9: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=) 10: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=) 11: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=) 12: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=) 13: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=) 14: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=) 15: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=) 16: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=) 17: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=) 18: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=) 19: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=) 20: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 21: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 7c:12:90:ad:0d:f5:cb:ab:44:3b:e1:4e:bc:7f:b0:ec:e6:0c:f9:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Jan 30 23:53:22 2025 GMT Not After : Feb 1 02:46:22 2025 GMT Subject: CN=D3302894AF67BA7F0988A629DA34CCCC54D88233 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:cb:cb:77:90:a8:ff:19:32:cb:a1:78:58:06: ea:39:c5:1c:75:20:0d:b6:50:0a:10:9d:ed:57:6f: 73:7c:6a:57:f4:74:5a:1a:20:91:8b:36:f2:c6:3a: be:3b:ba:16:29:a7:9c:3d:0a:22:dd:f7:53:90:00: 25:0c:d1:e3:3d:3b:07:09:88:5b:2a:02:05:6e:ee: c1:55:ec:19:62:b7:c5:e8:45:19:54:49:21:3e:66: 31:68:38:a6:e6:b3:93:4f:8e:ce:88:a6:6d:09:6a: a4:76:83:c4:48:b0:20:b9:31:14:d6:2d:10:fd:a2: 1b:c9:36:e6:dc:05:99:3d:37:73:9e:1e:92:01:fb: 49:ec:13:35:25:f8:6e:bb:79:35:85:cc:9a:db:13: e8:99:dc:79:eb:ef:f5:f7:f2:26:d9:a6:2d:86:82: 44:d9:d3:b8:87:14:5a:e0:52:05:1d:56:2c:d4:ed: 0f:09:fb:c0:9f:19:43:39:c4:d3:b1:27:2a:23:ea: fa:11:62:3f:6d:cb:d3:38:cd:be:97:13:7f:00:b9: d0:9c:b5:0b:5e:79:90:c8:4e:3e:ef:e3:4f:78:da: f9:73:d2:15:92:41:07:ab:01:81:81:0a:17:da:7f: 19:44:de:83:66:32:91:66:37:6a:49:b6:ad:90:78: 04:1d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D3:30:28:94:AF:67:BA:7F:09:88:A6:29:DA:34:CC:CC:54:D8:82:33 X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 46:02:cd:74:a6:90:75:ca:04:9e:f2:a2:a2:21:12:04:6c:a8: 56:87:65:71:82:4b:fe:2d:c9:64:5c:03:79:e8:84:5c:21:a5: 1b:e8:65:6b:ad:fa:c0:51:b7:55:e8:d5:30:f1:0d:77:19:66: 8b:62:97:f5:8e:ea:1a:cc:41:0a:a0:fc:e2:0e:c4:c9:6b:df: ff:12:c3:20:f8:ef:76:55:fe:84:0f:88:51:ff:c2:54:ab:a4: 2c:91:ee:66:8e:62:d2:be:4f:98:e6:5c:65:18:07:d7:23:37: 04:8e:35:0e:a7:bb:e4:8d:96:d8:5f:16:b9:f6:52:ad:a2:58: ae:de:18:d0:b8:eb:be:1e:f6:00:ce:e5:f7:08:8c:39:aa:fb: 7c:a3:f6:4d:a2:21:9a:22:58:53:82:0b:ab:e9:82:70:2c:ea: 82:1a:76:42:24:7b:b5:a1:f6:32:01:23:e2:d3:95:29:6c:d3: c1:f4:2c:bf:93:87:8e:4a:43:27:3b:2f:52:af:7a:c0:2d:69: 23:18:7a:39:56:7b:13:5f:16:c7:09:e0:f9:26:7a:59:65:94: 84:61:2c:3b:69:57:63:53:05:ba:7d:6f:c3:9b:ef:11:d2:bd: 2f:25:b0:79:6a:f3:ca:96:81:10:10:75:1d:57:a6:25:75:91: 42:b4:1e:ba -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUfBKQrQ31y6tEO+FOvH+w7OYM+R4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTAxMzAyMzUzMjJaFw0yNTAyMDEwMjQ2MjJaMDMxMTAvBgNV BAMTKEQzMzAyODk0QUY2N0JBN0YwOTg4QTYyOURBMzRDQ0NDNTREODgyMzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjy8t3kKj/GTLLoXhYBuo5xRx1 IA22UAoQne1Xb3N8alf0dFoaIJGLNvLGOr47uhYpp5w9CiLd91OQACUM0eM9OwcJ iFsqAgVu7sFV7Blit8XoRRlUSSE+ZjFoOKbms5NPjs6Ipm0JaqR2g8RIsCC5MRTW LRD9ohvJNubcBZk9N3OeHpIB+0nsEzUl+G67eTWFzJrbE+iZ3Hnr7/X38ibZpi2G gkTZ07iHFFrgUgUdVizU7Q8J+8CfGUM5xNOxJyoj6voRYj9ty9M4zb6XE38AudCc tQteeZDITj7v40942vlz0hWSQQerAYGBChfafxlE3oNmMpFmN2pJtq2QeAQdAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU0zAolK9nun8JiKYp2jTMzFTYgjMwHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgLNdKaQdcoEnvKioiES BGyoVodlcYJL/i3JZFwDeeiEXCGlG+hla636wFG3VejVMPENdxlmi2KX9Y7qGsxB CqD84g7EyWvf/xLDIPjvdlX+hA+IUf/CVKukLJHuZo5i0r5PmOZcZRgH1yM3BI41 Dqe75I2W2F8WufZSraJYrt4Y0Ljrvh72AM7l9wiMOar7fKP2TaIhmiJYU4ILq+mC cCzqghp2QiR7taH2MgEj4tOVKWzTwfQsv5OHjkpDJzsvUq96wC1pIxh6OVZ7E18W xwng+SZ6WWWUhGEsO2lXY1MFun1vw5vvEdK9LyWweWrzypaBEBB1HVemJXWRQrQe ug== -----END CERTIFICATE-----Generated at Thu Apr 24 23:59:22 2025 by rpki-client