$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft File: 6D7A266730928D9DFDFDACE36F73AC89E424E228.mft (raw, json) Hash identifier: utAv955oTul0P6uRIdiDxZeMdvUfAZ0PCXMbaO8lg8I= Subject key identifier: 52:06:E8:01:BF:A1:32:4D:D2:1D:40:06:A2:ED:09:8C:5F:C3:91:7D Authority key identifier: 6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28 Certificate issuer: /CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa Certificate serial: 0EB21065FE40ECDD9652B7EA15930A3D9910ABC7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft Manifest number: 0419 Signing time: Thu 06 Feb 2025 00:34:32 +0000 Manifest this update: Thu 06 Feb 2025 00:29:32 +0000 Manifest next update: Fri 07 Feb 2025 03:42:32 +0000 Files and hashes: 1: 323630323a663936643a6666643a3a2f34382d3438203d3e203437323732.roa (hash: fLWMsLSAdpUdkENXkPCdO/qjk63pnc3hh7Ird4qsmbo=) 2: 323630323a663936643a3330303a3a2f34302d313238203d3e203437323732.roa (hash: iRujg7GNZHRMOA4fp4OiJ9OlMbooU+3hRMbbYSf3g+g=) 3: 323630323a663936643a6130303a3a2f34302d3430203d3e203437323732.roa (hash: Yu1oNnw2w9h+HvMJcZ9U0fkkSMNfKnk7WW7I29GgzzE=) 4: 323630323a663936643a6637313a3a2f34382d3438203d3e203437323732.roa (hash: ylyooXUuucldJZnqampXTqc8rFKg9JpJvG7junCMFRc=) 5: 323630323a663936643a3a2f34302d313238203d3e203437323732.roa (hash: RtouL0H6ZspH3/zYAI61KbQsp8rjkhmHpX8kJhfCk2c=) 6: 323630323a663936643a3930303a3a2f34302d3438203d3e203437323732.roa (hash: 6FU0wv3D/IsFVQ2jtJYg8ZHC2qkQqDyXS+V84jg6PIA=) 7: 323630323a663936643a3230303a3a2f34302d313238203d3e203437323732.roa (hash: BH0RFSGNG6EI11e/xRpe5t4HbuCFO3Bk5xwKWl50p6E=) 8: 323630323a663936643a3130303a3a2f34382d313238203d3e203437323732.roa (hash: 6ZjP/n/SV8wJv/itzH0FAZKFfmnblLQYuHhOFAR029Q=) 9: 32332e3137382e37322e302f32342d3332203d3e203437323732.roa (hash: wTUFhxB1ra/9ePWw4ip99fGrwEoVBpfosSvBVZgBSUk=) 10: 323630323a663936643a6637623a3a2f34382d3438203d3e203233343730.roa (hash: OenykS9l6ecxi2eq3K6SpiRiFAarB/7i24z8fRJSTGI=) 11: 32332e3137322e3132302e302f32342d3332203d3e203437323732.roa (hash: IwVe1aP9F++3yptOtYvTYTVHK5oG5UZqMj2hhb0sRQ4=) 12: 323630323a663936643a6666623a3a2f34382d3438203d3e203437323732.roa (hash: R0+/Q92x5EzLtaNvVaeIfj9lan1Bg8z2kq+yv+mqvks=) 13: 323630323a663936643a6637323a3a2f34382d3438203d3e203437323732.roa (hash: v8NiyoiT15ZZeF21nSUuVEV/cKecXd5yB19bvFNMrZQ=) 14: 323630323a663936643a6630303a3a2f34342d3434203d3e203437323732.roa (hash: Fo17SxW/je3elygYA2vgnvYffHfXDEOK6jOb3nwj05A=) 15: 6D7A266730928D9DFDFDACE36F73AC89E424E228.crl (hash: QPWjBgv8cEiMWWoEGUwJczsSNGc4jH0mWpkAtcmseoQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 0e:b2:10:65:fe:40:ec:dd:96:52:b7:ea:15:93:0a:3d:99:10:ab:c7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa Validity Not Before: Feb 6 00:29:32 2025 GMT Not After : Feb 7 03:42:32 2025 GMT Subject: CN=5206E801BFA1324DD21D4006A2ED098C5FC3917D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:ba:73:ac:fb:3e:e5:81:cf:76:14:24:cb:76: 7b:3a:e2:82:69:e0:e9:27:a9:f4:61:06:28:6f:b6: 52:ca:c8:e8:46:1f:dc:29:8b:3f:f8:85:41:9e:00: 18:67:1a:2c:a1:0a:35:a0:56:37:25:2a:1a:5f:80: fa:29:ca:55:ee:08:f9:ec:0d:4e:48:95:78:93:65: 04:10:f7:9f:8b:e2:0f:93:f0:9b:c2:47:84:b9:9b: d2:61:bf:85:be:46:dd:25:92:51:17:96:22:b9:a9: 84:78:81:bc:ba:49:86:bd:42:73:b9:e0:2d:a6:bb: 21:7f:4c:3c:b4:b4:62:6d:c5:9f:f4:36:1f:31:6a: 90:31:4e:3a:51:d6:94:20:ec:93:af:76:82:c2:df: e7:9c:7e:37:5b:fd:ea:30:79:f4:85:c2:58:8f:86: 42:7c:5d:61:b6:58:64:0f:be:32:0a:b2:d6:a0:f2: 00:7c:ad:f1:3c:aa:5e:c2:9f:ca:b3:2b:8c:53:e7: ab:77:70:a1:75:bf:37:f9:91:45:0d:1d:72:b2:a1: 40:f0:2d:45:28:1f:55:b8:3d:48:95:b2:b9:ba:3e: d7:fc:86:6a:a0:b8:c3:55:1e:02:67:bc:48:96:04: ee:e4:57:95:2a:19:44:14:0d:1c:ee:7b:cd:8e:99: 14:95 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 52:06:E8:01:BF:A1:32:4D:D2:1D:40:06:A2:ED:09:8C:5F:C3:91:7D X509v3 Authority Key Identifier: keyid:6D:7A:26:67:30:92:8D:9D:FD:FD:AC:E3:6F:73:AC:89:E4:24:E2:28 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/02c7706b-3baf-42cb-bdf7-782b036252b3/f44c82daba68b40f65cfc17445f89b2192a57379d7f13be8fa.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/3253d973-d5bf-4541-bcc1-276543a25c7d/4/6D7A266730928D9DFDFDACE36F73AC89E424E228.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:b3:71:2a:1a:17:e4:33:ba:c1:91:34:f3:01:ce:a7:49:ff: 8f:88:bd:00:c2:e5:ba:04:aa:a0:55:33:71:0c:7e:ff:54:37: 46:03:f1:fb:27:a8:0a:fc:fd:1d:6e:59:73:f8:59:ce:44:91: 2e:5d:0b:cd:69:0f:85:e3:4c:fb:88:8b:7c:17:3d:3e:02:f5: 95:61:cc:92:d3:9f:31:43:20:95:9b:4a:70:4f:f8:3b:5c:be: 18:39:2e:b0:4d:9a:5c:7b:6d:35:a3:2e:e6:dc:ef:ba:03:c9: a1:52:f7:2b:69:9d:0a:27:bc:68:d1:d6:36:0f:75:15:f2:2d: a8:35:a8:c5:d3:79:06:98:73:e8:a4:34:d9:4c:c6:05:5b:9f: fb:1d:b5:b4:eb:24:30:34:b3:eb:eb:5b:86:fe:51:50:cf:8a: e2:78:b1:16:eb:f2:cf:49:90:fc:f6:42:06:75:e0:c9:98:91: 78:81:3e:99:63:9d:d1:b3:2d:c0:9a:61:4d:51:f4:a6:05:50: de:36:29:c8:37:1f:03:69:99:73:53:00:c1:6a:cb:23:76:3e: 17:6c:84:68:62:21:e3:5a:fa:57:69:8d:70:f0:b8:1b:9e:78: 6c:49:2c:03:14:c4:ee:9e:c6:53:e3:75:a8:14:33:c0:2c:bc: a7:a2:ea:0a -----BEGIN CERTIFICATE----- MIIF1zCCBL+gAwIBAgIUDrIQZf5A7N2WUrfqFZMKPZkQq8cwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5 MmE1NzM3OWQ3ZjEzYmU4ZmEwHhcNMjUwMjA2MDAyOTMyWhcNMjUwMjA3MDM0MjMy WjAzMTEwLwYDVQQDEyg1MjA2RTgwMUJGQTEzMjRERDIxRDQwMDZBMkVEMDk4QzVG QzM5MTdEMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAprpzrPs+5YHP dhQky3Z7OuKCaeDpJ6n0YQYob7ZSysjoRh/cKYs/+IVBngAYZxosoQo1oFY3JSoa X4D6KcpV7gj57A1OSJV4k2UEEPefi+IPk/CbwkeEuZvSYb+FvkbdJZJRF5YiuamE eIG8ukmGvUJzueAtprshf0w8tLRibcWf9DYfMWqQMU46UdaUIOyTr3aCwt/nnH43 W/3qMHn0hcJYj4ZCfF1htlhkD74yCrLWoPIAfK3xPKpewp/KsyuMU+erd3Chdb83 +ZFFDR1ysqFA8C1FKB9VuD1IlbK5uj7X/IZqoLjDVR4CZ7xIlgTu5FeVKhlEFA0c 7nvNjpkUlQIDAQABo4IC1zCCAtMwHQYDVR0OBBYEFFIG6AG/oTJN0h1ABqLtCYxf w5F9MB8GA1UdIwQYMBaAFG16Jmcwko2d/f2s429zrInkJOIoMA4GA1UdDwEB/wQE AwIHgDCBlQYDVR0fBIGNMIGKMIGHoIGEoIGBhn9yc3luYzovL3JzeW5jLnBhYXMu cnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5LzMyNTNkOTczLWQ1YmYtNDU0MS1iY2Mx LTI3NjU0M2EyNWM3ZC80LzZEN0EyNjY3MzA5MjhEOURGREZEQUNFMzZGNzNBQzg5 RTQyNEUyMjguY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2It NGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wMmM3NzA2Yi0zYmFmLTQyY2ItYmRmNy03 ODJiMDM2MjUyYjMvZjQ0YzgyZGFiYTY4YjQwZjY1Y2ZjMTc0NDVmODliMjE5MmE1 NzM3OWQ3ZjEzYmU4ZmEuY2VyMIGeBggrBgEFBQcBCwSBkTCBjjCBiwYIKwYBBQUH MAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkv MzI1M2Q5NzMtZDViZi00NTQxLWJjYzEtMjc2NTQzYTI1YzdkLzQvNkQ3QTI2Njcz MDkyOEQ5REZERkRBQ0UzNkY3M0FDODlFNDI0RTIyOC5tZnQwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAGezcSoa F+QzusGRNPMBzqdJ/4+IvQDC5boEqqBVM3EMfv9UN0YD8fsnqAr8/R1uWXP4Wc5E kS5dC81pD4XjTPuIi3wXPT4C9ZVhzJLTnzFDIJWbSnBP+Dtcvhg5LrBNmlx7bTWj Lubc77oDyaFS9ytpnQonvGjR1jYPdRXyLag1qMXTeQaYc+ikNNlMxgVbn/sdtbTr JDA0s+vrW4b+UVDPiuJ4sRbr8s9JkPz2QgZ14MmYkXiBPpljndGzLcCaYU1R9KYF UN42Kcg3HwNpmXNTAMFqyyN2PhdshGhiIeNa+ldpjXDwuBueeGxJLAMUxO6exlPj dagUM8AsvKei6go= -----END CERTIFICATE-----Generated at Sat Apr 5 06:24:08 2025 by rpki-client