$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: dwhWpdUyKmwSBFFSa0gKwu61BWTfq58BWZZR8MjLXj4= Subject key identifier: 76:8C:8A:09:5D:78:ED:04:1B:59:E6:40:A3:67:4A:1C:CB:23:2A:AF Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 631D5768EB0E12DC96378C11CA17FAFE5E6F58A8 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 049A Signing time: Fri 28 Mar 2025 23:59:01 +0000 Manifest this update: Fri 28 Mar 2025 23:54:01 +0000 Manifest next update: Sun 30 Mar 2025 00:30:01 +0000 Files and hashes: 1: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 2: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 3: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MZau10zedWMcfacP+tAKMz6NiJl4IfcotdHySIsuAvo=) 4: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 5: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 6: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 7: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: r/yhCg+H/V+gvgUqqXgm6SF+8gfop7ZrFjkciDc1VEs=) 8: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 9: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 10: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 11: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 12: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 13: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 14: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 15: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 16: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: OBAzX7jZUk7Za1E5MEVxtdjyAyWEmCtcqgWHValavGM=) 17: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: gcrezpbkvcqBnSLpZetM8bEEnNHAAsTxciJcMFM8hRM=) 18: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: h9+xWUgc/GqqpI7EdBMrrud+7TknQJcJ3XGjSZXNhZY=) 19: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 20: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 21: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 22: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 23: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) 24: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 63:1d:57:68:eb:0e:12:dc:96:37:8c:11:ca:17:fa:fe:5e:6f:58:a8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Mar 28 23:54:01 2025 GMT Not After : Mar 30 00:30:01 2025 GMT Subject: CN=768C8A095D78ED041B59E640A3674A1CCB232AAF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d1:f7:30:67:b4:30:fe:e2:42:b2:44:c3:e6:ed: 08:82:11:9d:19:df:d7:67:dc:86:02:1d:40:c1:32: 79:aa:db:21:ba:e0:d6:d5:0c:f2:c1:bf:9e:a9:bf: 0f:fb:3f:7d:e0:bd:ba:31:96:4c:d1:db:21:52:e8: a1:c0:21:74:0c:74:ef:93:be:c8:36:4c:0e:4e:83: fb:90:09:7a:27:4f:96:bd:72:2a:91:f6:28:ce:c9: d1:ee:78:86:fa:e3:16:a9:19:ab:5e:fc:20:c7:76: 7c:f3:76:91:19:57:12:ad:07:e2:b2:a1:95:e9:40: fd:bc:2d:6f:c6:3b:40:75:11:6b:94:da:dc:ab:2e: e6:c8:0d:73:fc:46:ee:9b:19:be:bc:fa:ef:8b:5e: ab:e1:60:c4:ef:ed:fe:67:f4:3f:e2:14:2e:42:6d: 96:51:75:c0:d6:78:d4:77:c1:8e:72:70:2b:06:d1: 58:ee:80:09:95:98:a5:a2:c6:b2:f6:62:c2:a0:a9: 2e:5b:19:19:0f:44:28:15:b4:9e:1d:35:c3:3e:54: 26:d3:1d:9a:90:f1:52:7e:4b:cd:c2:80:ed:d6:7d: 2f:96:96:c8:e3:01:b0:c7:b8:23:ee:4e:85:bc:d7: bd:8b:98:ff:cb:10:94:63:4d:03:b2:88:29:40:fa: e7:4f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 76:8C:8A:09:5D:78:ED:04:1B:59:E6:40:A3:67:4A:1C:CB:23:2A:AF X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a1:ff:2d:4b:65:cb:5b:06:c1:e5:b5:45:61:32:34:07:ea:fb: 23:6a:48:1e:d5:49:09:0c:93:86:58:16:2b:89:b0:c1:8f:9c: ed:4d:a2:4f:a8:cf:70:68:1a:52:43:f8:09:7e:1e:15:66:43: d2:1b:bf:4c:c1:bd:bc:06:29:57:de:fe:fa:4b:90:bb:f1:b6: 93:f5:7f:43:bb:ae:29:cb:27:1e:da:0d:8f:79:77:51:bb:35: 2b:d9:8d:92:73:ed:65:72:72:69:37:19:f1:31:13:c6:2e:e5: f1:76:f5:f5:de:83:b0:64:ce:84:3c:4d:11:af:ca:b3:21:bb: 61:4d:ae:6b:f0:e6:e9:4e:16:18:cd:0a:e6:51:29:0d:9a:f7: 32:42:00:c0:9f:39:2a:df:ad:32:3a:14:f3:3a:35:76:3d:ec: 1e:76:6f:ad:dc:b3:75:de:97:dc:e2:4f:8d:33:20:f9:09:aa: 5b:27:0d:4f:b3:37:e9:39:2b:38:f4:90:8f:1b:92:89:ad:8b: 4f:ec:8e:de:27:1b:c0:b4:80:cc:d1:21:d3:3b:30:02:73:ab: d6:ce:8a:8a:e8:73:a7:cc:80:b5:a6:01:a7:72:80:81:62:97: eb:79:6a:50:a5:b9:a9:cb:6a:a9:51:29:f0:29:86:8e:a0:e2: 16:3f:e5:c7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUYx1XaOsOEtyWN4wRyhf6/l5vWKgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTAzMjgyMzU0MDFaFw0yNTAzMzAwMDMwMDFaMDMxMTAvBgNV BAMTKDc2OEM4QTA5NUQ3OEVEMDQxQjU5RTY0MEEzNjc0QTFDQ0IyMzJBQUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDR9zBntDD+4kKyRMPm7QiCEZ0Z 39dn3IYCHUDBMnmq2yG64NbVDPLBv56pvw/7P33gvboxlkzR2yFS6KHAIXQMdO+T vsg2TA5Og/uQCXonT5a9ciqR9ijOydHueIb64xapGate/CDHdnzzdpEZVxKtB+Ky oZXpQP28LW/GO0B1EWuU2tyrLubIDXP8Ru6bGb68+u+LXqvhYMTv7f5n9D/iFC5C bZZRdcDWeNR3wY5ycCsG0VjugAmVmKWixrL2YsKgqS5bGRkPRCgVtJ4dNcM+VCbT HZqQ8VJ+S83CgO3WfS+WlsjjAbDHuCPuToW8172LmP/LEJRjTQOyiClA+udPAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQUdoyKCV147QQbWeZAo2dKHMsjKq8wHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAof8tS2XLWwbB5bVFYTI0 B+r7I2pIHtVJCQyThlgWK4mwwY+c7U2iT6jPcGgaUkP4CX4eFWZD0hu/TMG9vAYp V97++kuQu/G2k/V/Q7uuKcsnHtoNj3l3Ubs1K9mNknPtZXJyaTcZ8TETxi7l8Xb1 9d6DsGTOhDxNEa/KsyG7YU2ua/Dm6U4WGM0K5lEpDZr3MkIAwJ85Kt+tMjoU8zo1 dj3sHnZvrdyzdd6X3OJPjTMg+QmqWycNT7M36TkrOPSQjxuSia2LT+yO3icbwLSA zNEh0zswAnOr1s6Kiuhzp8yAtaYBp3KAgWKX63lqUKW5qctqqVEp8CmGjqDiFj/l xw== -----END CERTIFICATE-----Generated at Sat Apr 5 04:32:37 2025 by rpki-client