$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft File: D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft (raw, json) Hash identifier: AEQQKptN5tqOddmyJ1DEHqv6nI3q1OLXBC9CDjoVn4I= Subject key identifier: 98:74:5F:C7:B8:3B:C3:D5:3C:15:98:61:7E:C4:4B:A7:16:15:C7:11 Authority key identifier: D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED Certificate issuer: /CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED Certificate serial: 63B8AE0FE6620F940E6862F3F1AD638F4BB4CD43 Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft Manifest number: 07 Signing time: Sun 26 Nov 2023 11:05:19 +0000 Manifest this update: Sun 26 Nov 2023 11:00:19 +0000 Manifest next update: Mon 27 Nov 2023 11:18:19 +0000 Files and hashes: 1: 326131313a323963303a393062313a3a2f34382d3438203d3e203437323732.roa (hash: SCMM3WEvVDRRSgA6Hh0qzxPYiQdhR9MNr5cREhqicfU=) 2: 326131313a323963303a396562303a3a2f34342d3434203d3e20323033303639.roa (hash: z1soeTlJr1oWM1euatG34Gmd/IZivXHijHIyNhJm5ZE=) 3: 326131313a323963303a393061303a3a2f34342d3434203d3e203437323732.roa (hash: 9Sqg/sk4coOSpH8ObyrGZzgJodxwbGlguXvFKnp126U=) 4: 326131313a323963303a393030313a3a2f34382d3438203d3e203437323732.roa (hash: E5QwVY3/hQMZj1uYTkVasC9Y6/ZOaSaoJYeV8hOoexc=) 5: 326131313a323963303a396430303a3a2f34302d3430203d3e203537313130.roa (hash: X5wwqoSWWfvkQwTqEj+mxjunFQPHw8Q84FckUkWTalE=) 6: 326131313a323963303a393062613a3a2f34382d3438203d3e203437323732.roa (hash: HfKa26sY8JJ8quPG4txmHtChcHBOM0mSm+VgLTL53u0=) 7: 326131313a323963303a393030363a3a2f34382d3438203d3e203437323732.roa (hash: 6oLOa2WNLj6dnhDaWl70EdTHvs7y7udiGvPDzhkhyYo=) 8: 326131313a323963303a393030373a3a2f34382d3438203d3e203437323732.roa (hash: jl7cpdOGcvFCj6JhcI927Ra6Pj+S0QFpbE4kefnktgQ=) 9: 326131313a323963303a393030323a3a2f34382d3438203d3e203437323732.roa (hash: iTzyYmadtlbNOMCfQLZ5MzEZQHCpKPy1d56jLZB1jSM=) 10: 326131313a323963303a393062333a3a2f34382d3438203d3e203437323732.roa (hash: Na7sHS9Ok9ZdlXMT+WTfvuk+Jig/BHvXuf2q4MbaXN4=) 11: 326131313a323963303a393030343a3a2f34382d3438203d3e203437323732.roa (hash: 9YX35znV8/EGjLcZWojItotjDf7yN4I5BfgMtCGXDI8=) 12: 326131313a323963303a393062373a3a2f34382d3438203d3e203437323732.roa (hash: DJ05reBcIQl5JcOKPIvFvx/9e5eEc7APDOL//JPIQrE=) 13: 326131313a323963303a393062323a3a2f34382d3438203d3e203437323732.roa (hash: woHke+LpOMHOv0a4HRSlrUZ1XrUY5z6XkJQ0TnPQG7g=) 14: 326131313a323963303a393030303a3a2f34382d3438203d3e203437323732.roa (hash: lPxOCf9jXGFrDDOamlQvTRfGCLDcWQZni7PSPu1tKvc=) 15: 326131313a323963303a393062363a3a2f34382d3438203d3e203437323732.roa (hash: PEGK83lB53sK2n0+53YH+r4KKR82wZnBBh5dNs4kvKA=) 16: 326131313a323963303a393062303a3a2f34382d3438203d3e203437323732.roa (hash: ePM8vOjQybjOGstUgN0g/qruejK+UfpS/kE7BgOH3j8=) 17: 326131313a323963303a393062353a3a2f34382d3438203d3e203437323732.roa (hash: 6C02JVwJwCMGyYTvy+Ei/evNKicaTYaMW8JrU8xAYeM=) 18: 326131313a323963303a393062393a3a2f34382d3438203d3e203437323732.roa (hash: 9UcknJN2cXaSrnkeAH1c2PP4ApWjMUy8g9R8Z4c2dZw=) 19: 326131313a323963303a393030353a3a2f34382d3438203d3e203437323732.roa (hash: LMuOZNed2WzLuww6OZQgdJR59kPdhPSMItpD7xJ1L8s=) 20: 326131313a323963303a393062383a3a2f34382d3438203d3e203437323732.roa (hash: PI3w9wsuMS5Tg/y3vYieyJraLDrz6aFQbAuuU+9dk8s=) 21: 326131313a323963303a393030333a3a2f34382d3438203d3e203437323732.roa (hash: Mk+kNFUgvSKxmKJfGvEcR5FfUvvZJ1hxooOwmpqfV14=) 22: 326131313a323963303a393062343a3a2f34382d3438203d3e203437323732.roa (hash: 5NeONABVJuJFLq1aiy81/KGgvVofXFIn2QxZ1Xwb5hA=) 23: D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl (hash: yia3t38mjMw+zRYbdotUbxlFwlIkPgJrW9sG75AQDSM=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 63:b8:ae:0f:e6:62:0f:94:0e:68:62:f3:f1:ad:63:8f:4b:b4:cd:43 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=D398429B497D38DBEC7EF14848B74ED6DAE1E2ED Validity Not Before: Nov 26 11:00:19 2023 GMT Not After : Nov 27 11:18:19 2023 GMT Subject: CN=98745FC7B83BC3D53C1598617EC44BA71615C711 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:08:4a:1c:52:24:b2:af:9c:77:2c:31:2c:13: 35:d3:1f:01:e6:0c:88:23:88:61:bc:ae:26:a1:3f: e9:1a:8a:c0:12:ac:ea:1e:78:80:e8:b4:28:29:20: 88:c3:9e:c2:ab:04:68:59:9f:e6:a7:ac:30:88:6e: 68:63:5b:c5:4b:73:8d:c7:c6:3e:30:88:10:11:da: dc:54:33:d3:48:7d:4e:11:54:6c:59:f7:c6:9f:5c: 27:9b:69:aa:5d:3e:3c:e6:e2:72:2a:00:ad:54:f6: 4f:ef:31:67:6a:a9:8f:d4:50:4d:4f:59:70:82:f9: 2d:49:9d:8e:bb:e8:6f:fe:fe:fc:11:54:58:db:48: b8:bf:df:f5:ab:6e:d5:2e:b3:fb:3f:b3:ee:6c:21: e7:d6:a4:82:29:2d:b5:c7:83:39:3f:19:e4:0e:c5: ec:17:f9:00:33:7f:0e:c5:dc:b9:66:f1:04:49:25: 28:33:ef:8b:a9:84:5f:ee:46:91:c1:51:9a:d0:da: c4:b1:4e:84:bc:9a:91:57:d5:c2:41:db:59:0f:be: 76:8d:91:e2:96:a1:88:dc:86:e2:87:94:62:b7:f1: bc:89:65:ae:90:7b:4b:11:a7:40:68:22:be:07:23: 8f:cc:82:fd:9b:e0:d0:aa:b6:d9:b8:89:35:a9:c5: 5c:df Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 98:74:5F:C7:B8:3B:C3:D5:3C:15:98:61:7E:C4:4B:A7:16:15:C7:11 X509v3 Authority Key Identifier: keyid:D3:98:42:9B:49:7D:38:DB:EC:7E:F1:48:48:B7:4E:D6:DA:E1:E2:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/81115bc6-10f6-4af3-ba09-8b687a56fbf5/0/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/37658aec-0d40-490e-bb63-343e46c3a17a/2/D398429B497D38DBEC7EF14848B74ED6DAE1E2ED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a7:34:cb:17:a2:2b:0b:07:4d:0d:c1:9e:f6:19:54:8d:24:8b: c5:64:dd:47:6a:82:5d:cf:b3:0f:d8:aa:2e:1c:b3:dd:23:dc: 01:0c:05:05:a6:ee:11:0d:6b:7d:db:f0:f1:a1:bd:a4:2f:f0: c3:02:5b:45:c0:a3:9b:ee:91:4c:15:dc:06:79:13:da:e8:3e: c7:46:51:de:97:b1:11:11:95:f8:d6:58:54:98:82:54:30:83: 9b:b2:46:99:16:c4:f8:21:84:5e:dd:4d:eb:59:41:0d:12:97: 8b:de:d2:32:5c:1e:8d:cd:05:26:13:cb:59:64:08:fc:42:89: 1c:db:38:77:b7:ff:0a:0f:48:08:43:ee:3a:e3:38:d2:89:5c: e9:bf:28:0e:d0:93:19:7f:3f:bf:93:57:36:25:57:c4:e6:ae: d6:e8:d9:50:3f:5e:b9:d2:7a:1c:c0:87:fa:c7:50:86:38:a4: e4:02:77:ab:ac:e5:3d:e0:20:8f:fc:57:21:ef:05:a2:75:55: 73:de:15:7e:9a:4d:46:7c:51:bc:98:37:f8:82:d9:bf:1c:02: 76:cf:b3:53:8f:75:2d:13:79:71:49:2f:56:08:6b:69:06:ef: 72:77:c6:4a:8c:5e:9d:e0:ec:bd:2d:ce:bd:60:d5:24:2a:5c: d2:3f:89:fe -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIUY7iuD+ZiD5QOaGLz8a1jj0u0zUMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZE QUUxRTJFRDAeFw0yMzExMjYxMTAwMTlaFw0yMzExMjcxMTE4MTlaMDMxMTAvBgNV BAMTKDk4NzQ1RkM3QjgzQkMzRDUzQzE1OTg2MTdFQzQ0QkE3MTYxNUM3MTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiCEocUiSyr5x3LDEsEzXTHwHm DIgjiGG8riahP+kaisASrOoeeIDotCgpIIjDnsKrBGhZn+anrDCIbmhjW8VLc43H xj4wiBAR2txUM9NIfU4RVGxZ98afXCebaapdPjzm4nIqAK1U9k/vMWdqqY/UUE1P WXCC+S1JnY676G/+/vwRVFjbSLi/3/WrbtUus/s/s+5sIefWpIIpLbXHgzk/GeQO xewX+QAzfw7F3Llm8QRJJSgz74uphF/uRpHBUZrQ2sSxToS8mpFX1cJB21kPvnaN keKWoYjchuKHlGK38byJZa6Qe0sRp0BoIr4HI4/Mgv2b4NCqttm4iTWpxVzfAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUmHRfx7g7w9U8FZhhfsRLpxYVxxEwHwYDVR0j BBgwFoAU05hCm0l9ONvsfvFISLdO1trh4u0wDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvMzc2NThhZWMtMGQ0MC00OTBlLWJiNjMtMzQzZTQ2YzNh MTdhLzIvRDM5ODQyOUI0OTdEMzhEQkVDN0VGMTQ4NDhCNzRFRDZEQUUxRTJFRC5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84MTExNWJjNi0xMGY2LTRh ZjMtYmEwOS04YjY4N2E1NmZiZjUvMC9EMzk4NDI5QjQ5N0QzOERCRUM3RUYxNDg0 OEI3NEVENkRBRTFFMkVELmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 LzM3NjU4YWVjLTBkNDAtNDkwZS1iYjYzLTM0M2U0NmMzYTE3YS8yL0QzOTg0MjlC NDk3RDM4REJFQzdFRjE0ODQ4Qjc0RUQ2REFFMUUyRUQubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQCnNMsX oisLB00NwZ72GVSNJIvFZN1HaoJdz7MP2KouHLPdI9wBDAUFpu4RDWt92/Dxob2k L/DDAltFwKOb7pFMFdwGeRPa6D7HRlHel7EREZX41lhUmIJUMIObskaZFsT4IYRe 3U3rWUENEpeL3tIyXB6NzQUmE8tZZAj8Qokc2zh3t/8KD0gIQ+464zjSiVzpvygO 0JMZfz+/k1c2JVfE5q7W6NlQP1650nocwIf6x1CGOKTkAnerrOU94CCP/Fch7wWi dVVz3hV+mk1GfFG8mDf4gtm/HAJ2z7NTj3UtE3lxSS9WCGtpBu9yd8ZKjF6d4Oy9 Lc69YNUkKlzSP4n+ -----END CERTIFICATE-----Generated at Sun Feb 16 21:44:52 2025 by rpki-client