$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft File: 821620585D145A1ED109B75A9CC91508C584F9F7.mft (raw, json) Hash identifier: lp43mCzp8cmls2ZfbGNU0ZIWgHQKRxu/v84mYvqmhC8= Subject key identifier: EE:EF:A6:CF:A2:11:64:25:30:6B:CF:79:B8:B5:43:48:79:36:64:3C Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7 Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7 Certificate serial: 2F96671BE190C963A098EEC80361AA22AD01F819 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft Manifest number: 03 Signing time: Fri 21 Apr 2023 03:34:08 +0000 Manifest this update: Fri 21 Apr 2023 03:29:08 +0000 Manifest next update: Sat 22 Apr 2023 05:15:08 +0000 Files and hashes: 1: 326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa (hash: pBD1RODip2MAI10JTtypUYfjzrWtEfdsCrGSkmhSRME=) 2: 326130613a363034303a3a2f34302d3438203d3e203438353831.roa (hash: wuB0qWNMcq3vWnnOuMe2ZE2uF5cEdNRGJDdQSLHwruU=) 3: 326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa (hash: gTEOzKzjbC9BGZANwAWs4WxpMHAlOSFuXc09BNInggk=) 4: 326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa (hash: jYVzvnXnuwtrVqz6JTX8APoDfZh6uSo6rLlFqM6o0n8=) 5: 326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa (hash: e1/OQjq6aFtzTX/maNnrghhVwC2qjo0no/IvQWqURr8=) 6: 326130353a646663313a3a2f34302d3430203d3e20323034383537.roa (hash: ygXVhV9SYiRmFREYilEiSIACkrZXElr6TONr3dIhsxo=) 7: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (hash: 2UzpijYu6ppbrXSoP64q7eyqlCPWXHynlMUw49H76BU=) 8: 821620585D145A1ED109B75A9CC91508C584F9F7.crl (hash: db4g5/Mz2lWP2yKHtTvNFjcrhEq3t4AZY5i/Van6gu8=) 9: 326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa (hash: fgxIxZ1XNrN1aJeFz6mmodtExCtvPBV3wpHKFwKdrdg=) 10: 326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa (hash: cnMYmblZ7aVKh9Wu7Tu523dZzDXUW4qvK4JoLNfoi4w=) 11: 326130613a363034303a3a2f34302d3430203d3e20323034383537.roa (hash: /C+c29Wdsjcq1UlvTgAWjXYQ3hY/eojietNMNAbUnX4=) 12: 326130613a363034303a3a2f34302d3438203d3e203530323234.roa (hash: bjS6urRsw65uOP0E7N9KHSKrpfiYf/NpxAhkh5JJh9I=) 13: 326130353a646663313a3a2f34302d3438203d3e203530323234.roa (hash: 9SiH+5L7yS+LU6D2kpAdYQ4du/nM3r/mVeF+T2kFrqE=) 14: 326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa (hash: FR7aH2CyyS0q/vRrw7lzEU6YP8XBNnRfokgDAi5tQ6o=) 15: 326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa (hash: kH1HbBWnIp0kP2MUGnIvIQqABD3xNrCtteMHYgwsMEg=) 16: 326130353a646663313a3a2f34302d3438203d3e203438353831.roa (hash: 4x/y/aOrXXt5v4gpx54t1fJRJ1zf8plblkTs+4/2Z70=) 17: 326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa (hash: 3yJInx37xUv3lNsuP3EzhLlNz8bOXf3P8Y41OF6Y7Ag=) 18: 326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa (hash: 4Sw++NzbUPjKW0w7m8ELWm938N69sJnOSV3fXvINWLk=) 19: 326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa (hash: 8dPeHDoxWv+aRdOrOzdep2Jdk6flrpPwL5Ide1O6PBU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 2f:96:67:1b:e1:90:c9:63:a0:98:ee:c8:03:61:aa:22:ad:01:f8:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7 Validity Not Before: Apr 21 03:29:08 2023 GMT Not After : Apr 22 05:15:08 2023 GMT Subject: CN=EEEFA6CFA2116425306BCF79B8B543487936643C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:65:e3:00:e0:72:5e:59:90:ae:d9:52:a8:f0: 21:8c:a1:d9:23:fa:11:ee:47:e0:0f:b9:6a:92:35: 23:32:81:f9:cf:bf:12:bc:fa:c0:23:fc:86:8a:6e: 54:c2:e5:17:81:27:3d:14:65:15:bd:d7:3c:7f:35: 52:28:30:8e:ac:19:04:55:a9:14:52:6c:d9:a2:a0: 2f:10:c5:7f:33:76:47:8c:8e:72:ee:2f:bb:ac:27: 22:4c:db:89:ba:bd:ff:18:f6:06:54:6e:80:76:38: d6:f4:1d:e4:08:67:15:79:5a:8b:7a:2b:fb:46:64: bb:a9:45:d9:86:61:c8:f0:8a:92:c1:a1:af:02:b6: bb:c8:e6:8b:8e:c4:6e:6c:e7:bd:62:f8:12:d3:7f: 67:17:60:a4:29:2b:35:93:03:04:44:ba:ae:4c:75: 3e:73:e0:92:ae:67:8f:10:9e:cb:18:a0:87:8e:4a: b0:11:0c:71:c6:ac:4f:bd:a0:7f:88:bf:3a:6e:b7: 4e:9b:24:5a:88:ea:bf:0c:11:bd:7b:c2:f5:a0:03: 94:7f:04:53:80:92:6a:d0:c5:1f:8e:66:3e:54:21: 17:ad:9a:67:b4:fa:c2:c8:78:75:80:39:cf:47:d0: 18:40:38:20:d0:3b:20:e5:9d:a2:af:21:dd:e6:43: bb:4d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: EE:EF:A6:CF:A2:11:64:25:30:6B:CF:79:B8:B5:43:48:79:36:64:3C X509v3 Authority Key Identifier: keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:46:1c:88:90:fd:03:12:ac:69:f8:22:71:0d:e5:97:ae:86: 70:58:e0:a4:5a:bb:ee:0b:e2:6a:63:70:e1:85:c1:63:02:d4: e0:5b:34:be:1c:28:7d:f1:f3:db:6d:74:41:1e:71:69:4f:2c: 73:3a:03:3b:89:82:32:e1:57:12:2a:8b:b4:4e:6f:d4:0d:2e: 84:ad:fd:42:db:19:81:b2:40:c3:eb:58:f9:f0:07:48:5c:c9: b3:2b:5a:3d:bb:04:5d:39:7f:1b:0a:9c:c1:16:2e:60:24:30: 5b:91:7c:df:62:55:d3:b8:82:79:95:96:fa:e7:cb:61:25:18: fd:9b:8e:f0:eb:95:04:36:4d:41:b2:19:ec:29:a1:22:9d:a9: 57:90:48:4d:2e:48:aa:2d:c3:bc:ff:5d:64:5b:d1:12:d3:12: a9:d5:f6:74:5b:d0:99:5b:1a:bb:c3:8e:0b:76:c5:9e:28:7e: 72:97:92:36:df:15:f1:1b:3a:6f:b2:29:b6:bd:5b:d9:68:0f: fd:3b:a5:54:a4:4e:08:b5:45:e4:59:84:6b:6c:86:d7:fe:c4: bb:45:11:1b:cd:24:b0:20:a9:b3:10:33:b6:14:f9:d2:f4:e3: e2:58:44:e1:39:52:de:10:dd:de:f5:91:a3:a3:d5:a6:48:1a: f5:80:6c:a8 -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUL5ZnG+GQyWOgmO7IA2GqIq0B+BkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD NTg0RjlGNzAeFw0yMzA0MjEwMzI5MDhaFw0yMzA0MjIwNTE1MDhaMDMxMTAvBgNV BAMTKEVFRUZBNkNGQTIxMTY0MjUzMDZCQ0Y3OUI4QjU0MzQ4NzkzNjY0M0MwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuZeMA4HJeWZCu2VKo8CGModkj +hHuR+APuWqSNSMygfnPvxK8+sAj/IaKblTC5ReBJz0UZRW91zx/NVIoMI6sGQRV qRRSbNmioC8QxX8zdkeMjnLuL7usJyJM24m6vf8Y9gZUboB2ONb0HeQIZxV5Wot6 K/tGZLupRdmGYcjwipLBoa8CtrvI5ouOxG5s571i+BLTf2cXYKQpKzWTAwREuq5M dT5z4JKuZ48QnssYoIeOSrARDHHGrE+9oH+Ivzput06bJFqI6r8MEb17wvWgA5R/ BFOAkmrQxR+OZj5UIRetmme0+sLIeHWAOc9H0BhAOCDQOyDlnaKvId3mQ7tNAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQU7u+mz6IRZCUwa895uLVDSHk2ZDwwHwYDVR0j BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdmYTQ0 LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAE1GHIiQ/QMSrGn4InEN5ZeuhnBY4KRau+4L4mpjcOGFwWMC1OBbNL4c KH3x89ttdEEecWlPLHM6AzuJgjLhVxIqi7ROb9QNLoSt/ULbGYGyQMPrWPnwB0hc ybMrWj27BF05fxsKnMEWLmAkMFuRfN9iVdO4gnmVlvrny2ElGP2bjvDrlQQ2TUGy GewpoSKdqVeQSE0uSKotw7z/XWRb0RLTEqnV9nRb0JlbGrvDjgt2xZ4ofnKXkjbf FfEbOm+yKba9W9loD/07pVSkTgi1ReRZhGtshtf+xLtFERvNJLAgqbMQM7YU+dL0 4+JYROE5Ut4Q3d71kaOj1aZIGvWAbKg= -----END CERTIFICATE-----Generated at Sat Apr 5 06:20:19 2025 by rpki-client