$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft File: BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft (raw, json) Hash identifier: 00TKukIErQDy+TW7Amf6vSm4QdYbqKxkHCdurrwuhHY= Subject key identifier: 06:02:E0:E9:AF:1B:B0:57:70:F2:03:D9:F5:EC:7E:08:62:07:05:C0 Authority key identifier: BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A Certificate issuer: /CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a Certificate serial: 6D46B074DB5C1F8EC1D9FB802F4BBE5FAA3D51BA Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft Manifest number: 013C Signing time: Tue 26 Sep 2023 17:56:46 +0000 Manifest this update: Tue 26 Sep 2023 17:51:46 +0000 Manifest next update: Wed 27 Sep 2023 20:05:46 +0000 Files and hashes: 1: 34352e3132382e31342e302f32332d3234203d3e2039303837.roa (hash: 4HOOMnjm+MojOj7lIjw+v/q3/ZqZaY3dLO72oaCMblo=) 2: 34352e3132382e31342e302f32332d3234203d3e2033333230.roa (hash: ooNU723CrAk+Gb599bbA9d2K6aYJXJhSSD1sl+G5TR4=) 3: 34352e3134352e3234312e302f32342d3234203d3e2033333230.roa (hash: 0kWirCHyFrcYKrdUzmzBQPPkaUfyKw7n/pv4tjFb7cg=) 4: BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl (hash: jbg7bnwb45gWi396blc2AS+R8kTkhA40zT1tgMyjICg=) 5: 34352e39332e3138342e302f32332d3234203d3e2039303837.roa (hash: SrCBsxJBSc/3UrOfULulwdeurWBpaJfPHE6gwjXhZ6k=) 6: 34352e3134302e33392e302f32342d3234203d3e20343030383636.roa (hash: 3uhVVHAzEkHvgozZa3a6HyQvCgL4dJWJU1xBt9vw6FM=) 7: 34352e38392e3135302e302f32332d3234203d3e20333939303733.roa (hash: L5tdsDeAfp+WYWqW6TnkUu7sDI8ZfFCUruWTOpD74hc=) 8: 34352e3134352e3234302e302f32342d3234203d3e203531383437.roa (hash: X9RHAL3Xiw+8NCves4kxYM7wjqGEH7bmPe07s2/P5cE=) 9: 34352e3134352e3234322e302f32342d3234203d3e203631333137.roa (hash: k9o4uPn92mYpKDdrvkK3nMOkQUumkNxkptXLJkFqIdw=) 10: 34352e3134352e3234302e302f32342d3234203d3e20313531343837.roa (hash: zvXWi5nBiiQLCZWWYmwu9sOLexxpdHdTNXwkciRQh4M=) 11: 34352e3133322e3231362e302f32342d3234203d3e203634323637.roa (hash: 0PotdjwE4QhwJYjz/Z2iVYd94qDq05k+nY78msBghP0=) 12: 34352e3133322e3231372e302f32342d3234203d3e2039303837.roa (hash: s8ixp2ut5VCpiaKpwgFnUWLh5Bl17yscEN0WSX6x8DA=) 13: 34352e3134302e33362e302f32332d3234203d3e203536393133.roa (hash: fOba1agUo8pnC4GPtuZ51uarqIM3RCxXW0JlbxPFmO0=) 14: 34352e3133322e3231382e302f32342d3234203d3e20343030383636.roa (hash: ydf02qIuaRFSEA4FLxxyfEXBuOQDYdA5wxhlHfAjuDw=) 15: 34352e3132382e31322e302f32332d3234203d3e20333939303733.roa (hash: k5VZGYKXMkcaCiPxZA8841WMZ3NoGwPK+tMhJeVyF1Y=) 16: 34352e3133322e3231392e302f32342d3234203d3e203536393133.roa (hash: m7w27Q9Qqf87+jgkccgCWD+R0gWaJQozck3xY/uLfOQ=) 17: 34352e3134352e3234332e302f32342d3234203d3e2039303837.roa (hash: 5UcaomwbRAhOXY5FtschX6MHybdb7JeqtetSCRPMYGE=) 18: 34352e3134352e3234312e302f32342d3234203d3e2039303837.roa (hash: yvCvs1zpGqt7+8W170jNmsgamGWN60HRumBKP6fXJPs=) 19: 34352e3134302e33382e302f32342d3234203d3e203330363434.roa (hash: rtIH1kpCV/PT+bgf1KhIv+LcyuB7c0gtM+zlgGsAS4U=) 20: 34352e3134352e3234332e302f32342d3234203d3e2033333230.roa (hash: 7lz6mgVXvzMHj+gJjbjpOFcInyr5V2oKt6MxxcrpqwQ=) 21: 34352e3133322e3231372e302f32342d3234203d3e2033333230.roa (hash: VvgTeL5WQ9o3xgROcBOOKvan57BOgLXqcCGWRv2Oq/A=) 22: 34352e39332e3138362e302f32332d3234203d3e2033333230.roa (hash: Z6J1Rt05Fwv1sji//rVNRenkFuJ67bmdZzccVevp+XM=) 23: 34352e38392e3134382e302f32332d3234203d3e20333939303733.roa (hash: 6KIkDDGEaYSyObON58swKqtq4mGZIVRymKlO9lAZmag=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 6d:46:b0:74:db:5c:1f:8e:c1:d9:fb:80:2f:4b:be:5f:aa:3d:51:ba Signature Algorithm: sha256WithRSAEncryption Issuer: CN=bcd46dba34fe6620d72d9e7f576ef7a88a6c961a Validity Not Before: Sep 26 17:51:46 2023 GMT Not After : Sep 27 20:05:46 2023 GMT Subject: CN=0602E0E9AF1BB05770F203D9F5EC7E08620705C0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:74:2a:6d:ed:7a:3f:14:ef:8b:ac:2b:84:aa: 86:ef:2e:9e:95:bc:59:51:96:b9:84:a3:24:0a:94: 2b:5e:af:45:3b:c4:c0:15:d9:87:af:b9:88:e7:e6: fc:77:7b:46:80:70:fb:97:e1:34:5c:fe:f9:46:92: 21:ac:f0:4a:76:3c:c1:71:0d:d8:dd:6e:5f:50:e6: 36:dd:0a:4f:2b:1c:b5:02:54:5a:b1:c5:34:4f:23: cc:44:ba:70:d6:c8:50:96:38:10:f7:eb:8f:9c:09: a0:6b:98:5a:35:b4:17:b1:5a:ca:89:01:4c:ef:88: c8:3e:16:62:2d:21:ad:c4:bc:d6:60:0a:b1:25:fe: 1d:e4:c8:27:54:9d:e4:2f:df:e4:47:46:c6:f4:8b: c5:a5:cc:3b:db:98:cf:ed:d2:45:9c:bc:e4:3d:26: 4b:32:88:34:50:5d:b2:ea:d0:4e:5e:62:e6:07:9d: ff:1d:07:d9:ee:71:3e:9a:ce:15:6f:c5:4b:1d:61: 0a:cf:19:95:dd:d9:cf:3f:9d:9c:2d:f9:6d:17:30: 1b:dd:35:58:f4:6e:2b:51:e9:16:27:1c:03:9d:1e: 87:86:2e:6f:14:a8:83:c7:80:07:e2:95:b1:82:40: 6e:88:27:16:7d:cd:98:78:7f:ea:a6:01:d9:05:ba: 1d:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 06:02:E0:E9:AF:1B:B0:57:70:F2:03:D9:F5:EC:7E:08:62:07:05:C0 X509v3 Authority Key Identifier: keyid:BC:D4:6D:BA:34:FE:66:20:D7:2D:9E:7F:57:6E:F7:A8:8A:6C:96:1A X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNRtujT-ZiDXLZ5_V273qIpslho.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/7d6a1636-1758-4bbd-ae81-3a7107d9a845/0/BCD46DBA34FE6620D72D9E7F576EF7A88A6C961A.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 12:50:79:92:7c:2f:8d:4f:33:3c:76:b6:50:19:37:9b:57:b8: 5d:46:78:c5:73:c0:37:50:4a:d5:0a:4c:fa:f8:e1:18:2e:55: 0f:c4:57:45:9c:a2:07:a8:03:8e:bb:6b:64:6b:9e:80:a1:b1: ca:cf:88:f9:c2:12:71:59:df:2a:b2:ae:c0:4f:67:5a:60:29: f3:17:83:cf:6d:6a:3f:7c:02:c4:06:31:99:58:d8:9c:ad:12: 68:5d:3e:3c:9a:c6:d8:61:39:db:cd:9c:49:50:09:64:09:85: 63:62:05:4e:64:ae:7e:6b:cb:60:eb:56:70:e7:42:3d:b8:93: 95:49:55:0a:80:da:21:e1:b7:97:d2:0b:e0:dd:d3:c2:65:11: 22:7e:e8:cd:af:fd:f7:ce:0a:45:c9:05:67:c8:c4:22:a9:74: 5d:a1:ca:c6:82:f8:76:71:56:48:80:19:c5:26:af:cb:08:3a: bd:3c:fd:b6:7c:bb:4c:55:3d:d9:d6:d7:95:47:95:b8:86:49: c9:93:d6:7b:0a:f9:ac:e8:c0:d7:c1:bb:d2:5c:98:50:f7:f2: dd:e5:45:68:fd:35:49:82:94:b5:f0:5c:22:ee:3f:25:d1:2a: 59:e1:94:40:90:a6:c3:58:a2:c5:c5:49:2c:d6:7c:91:be:44: 09:03:32:ec -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUbUawdNtcH47B2fuAL0u+X6o9UbowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoYmNkNDZkYmEzNGZlNjYyMGQ3MmQ5ZTdmNTc2ZWY3YTg4 YTZjOTYxYTAeFw0yMzA5MjYxNzUxNDZaFw0yMzA5MjcyMDA1NDZaMDMxMTAvBgNV BAMTKDA2MDJFMEU5QUYxQkIwNTc3MEYyMDNEOUY1RUM3RTA4NjIwNzA1QzAwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsdCpt7Xo/FO+LrCuEqobvLp6V vFlRlrmEoyQKlCter0U7xMAV2YevuYjn5vx3e0aAcPuX4TRc/vlGkiGs8Ep2PMFx Ddjdbl9Q5jbdCk8rHLUCVFqxxTRPI8xEunDWyFCWOBD364+cCaBrmFo1tBexWsqJ AUzviMg+FmItIa3EvNZgCrEl/h3kyCdUneQv3+RHRsb0i8WlzDvbmM/t0kWcvOQ9 JksyiDRQXbLq0E5eYuYHnf8dB9nucT6azhVvxUsdYQrPGZXd2c8/nZwt+W0XMBvd NVj0bitR6RYnHAOdHoeGLm8UqIPHgAfilbGCQG6IJxZ9zZh4f+qmAdkFuh2ZAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUBgLg6a8bsFdw8gPZ9ex+CGIHBcAwHwYDVR0j BBgwFoAUvNRtujT+ZiDXLZ5/V273qIpslhowDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvN2Q2YTE2MzYtMTc1OC00YmJkLWFlODEtM2E3MTA3ZDlh ODQ1LzAvQkNENDZEQkEzNEZFNjYyMEQ3MkQ5RTdGNTc2RUY3QTg4QTZDOTYxQS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL3ZOUnR1alQtWmlEWExaNV9WMjczcUlw c2xoby5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS83ZDZhMTYzNi0x NzU4LTRiYmQtYWU4MS0zYTcxMDdkOWE4NDUvMC9CQ0Q0NkRCQTM0RkU2NjIwRDcy RDlFN0Y1NzZFRjdBODhBNkM5NjFBLm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAElB5knwvjU8zPHa2UBk3 m1e4XUZ4xXPAN1BK1QpM+vjhGC5VD8RXRZyiB6gDjrtrZGuegKGxys+I+cIScVnf KrKuwE9nWmAp8xeDz21qP3wCxAYxmVjYnK0SaF0+PJrG2GE5282cSVAJZAmFY2IF TmSufmvLYOtWcOdCPbiTlUlVCoDaIeG3l9IL4N3TwmURIn7oza/9984KRckFZ8jE Iql0XaHKxoL4dnFWSIAZxSavywg6vTz9tny7TFU92dbXlUeVuIZJyZPWewr5rOjA 18G70lyYUPfy3eVFaP01SYKUtfBcIu4/JdEqWeGUQJCmw1iixcVJLNZ8kb5ECQMy 7A==Generated at Wed Sep 27 11:10:20 2023 by rpki-client on console-ams.rpki-client.org