$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: F3v6lpNoBMAFQP4nxkVMi4hTJARm+tx4sbmB7d0CFP8= Subject key identifier: D4:85:45:42:E2:0D:F0:CE:11:AD:A3:2B:F7:91:FD:E2:34:18:AA:9B Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: 31F732E8E8AC8B65C986CC3262FC7B0C131F3890 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 0307 Signing time: Fri 07 Feb 2025 11:03:24 +0000 Manifest this update: Fri 07 Feb 2025 10:58:24 +0000 Manifest next update: Sat 08 Feb 2025 15:01:24 +0000 Files and hashes: 1: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=) 2: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=) 3: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: WI5S8rqfVqQyCV/KC6esbi4nDYvGODhg0tCtqyUrufA=) 4: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=) 5: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=) 6: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=) 7: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=) 8: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=) 9: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=) 10: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=) 11: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=) 12: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=) 13: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=) 14: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=) 15: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 16: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=) 17: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=) 18: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=) 19: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=) 20: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=) 21: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 31:f7:32:e8:e8:ac:8b:65:c9:86:cc:32:62:fc:7b:0c:13:1f:38:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Feb 7 10:58:24 2025 GMT Not After : Feb 8 15:01:24 2025 GMT Subject: CN=D4854542E20DF0CE11ADA32BF791FDE23418AA9B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c8:10:f8:5c:93:b6:48:55:56:5f:65:5f:92:76: ee:c8:4a:4d:0e:49:21:61:42:e3:9f:ea:57:d8:6a: 2d:1b:63:74:5e:0c:8d:46:be:c3:b6:6e:6e:31:a5: 0c:32:fa:22:eb:9a:d3:52:8b:f9:41:37:a4:54:02: 48:fe:57:63:7a:6f:81:22:94:09:5b:b5:63:00:31: ef:1c:06:fa:7b:24:02:a2:c1:15:26:e8:77:23:38: d3:f7:ee:67:e4:04:9b:55:1c:9d:83:11:d2:31:d9: d7:24:ab:e1:5b:4c:97:44:f1:0b:10:bc:2a:aa:c5: 94:e1:dc:49:ad:63:11:78:c9:11:38:23:b5:12:33: e9:86:4a:7c:7a:99:47:53:88:31:34:f6:47:96:25: 5f:ce:16:d8:08:58:78:7c:24:1b:62:03:fb:16:a9: 40:5b:0a:70:4f:dc:ba:31:f0:a6:93:05:4a:0e:a7: c8:93:8d:e3:44:a0:e5:4c:37:a8:15:9a:d2:20:fc: 1d:41:2d:fc:e1:d8:41:13:4c:fa:2f:04:a1:a6:52: 67:12:09:c8:7f:15:91:b2:ed:64:0a:b3:3e:43:51: a6:33:7b:44:c6:ad:89:85:65:d1:98:10:31:85:73: 97:72:b3:ec:fb:b0:ca:3a:67:cb:db:48:c6:53:6c: 8d:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: D4:85:45:42:E2:0D:F0:CE:11:AD:A3:2B:F7:91:FD:E2:34:18:AA:9B X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6f:4c:82:b7:dd:d0:a0:a7:31:cc:19:de:5f:66:40:67:37:51: 9f:98:26:d7:8a:99:b1:60:f9:80:08:a7:ae:46:be:34:5f:db: ba:87:38:d7:a5:ca:04:a4:66:a2:9c:e1:03:9f:88:01:78:f2: e6:4a:c5:c7:35:51:0b:48:60:d9:6c:b2:86:cd:1f:85:54:aa: 94:bb:07:93:29:88:4d:3a:fe:37:82:64:f3:e0:8c:e2:e6:cc: fa:17:e9:20:ad:25:54:90:d8:a6:4e:5a:65:a9:ea:3d:76:09: 14:06:62:f5:a2:28:13:e5:b2:2d:6a:d3:f8:58:5e:e4:4a:11: 9a:b5:e9:47:80:1c:d8:7e:7d:6b:7f:12:69:ef:b7:5d:dd:6a: 03:bd:64:9c:a3:70:67:cc:b7:0f:bd:2c:aa:91:fd:cd:fe:fd: 68:59:42:54:ac:3b:6d:d9:36:fa:41:6c:9a:75:a9:19:53:0d: 24:18:03:79:7c:2f:c7:47:b2:4c:5f:73:d5:b9:02:fa:ab:78: ed:e3:81:90:4f:3e:69:0d:80:d5:af:a8:06:e9:3a:8b:f2:8c: d9:33:fc:d6:2e:a9:6c:66:f3:8c:43:dd:60:4e:53:eb:8f:56: cc:45:35:46:92:ae:2a:f1:4b:08:2c:c4:ab:28:e4:8f:c4:06: c9:7c:b2:b7 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUMfcy6Oisi2XJhswyYvx7DBMfOJAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTAyMDcxMDU4MjRaFw0yNTAyMDgxNTAxMjRaMDMxMTAvBgNV BAMTKEQ0ODU0NTQyRTIwREYwQ0UxMUFEQTMyQkY3OTFGREUyMzQxOEFBOUIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDIEPhck7ZIVVZfZV+Sdu7ISk0O SSFhQuOf6lfYai0bY3ReDI1GvsO2bm4xpQwy+iLrmtNSi/lBN6RUAkj+V2N6b4Ei lAlbtWMAMe8cBvp7JAKiwRUm6HcjONP37mfkBJtVHJ2DEdIx2dckq+FbTJdE8QsQ vCqqxZTh3EmtYxF4yRE4I7USM+mGSnx6mUdTiDE09keWJV/OFtgIWHh8JBtiA/sW qUBbCnBP3Lox8KaTBUoOp8iTjeNEoOVMN6gVmtIg/B1BLfzh2EETTPovBKGmUmcS Cch/FZGy7WQKsz5DUaYze0TGrYmFZdGYEDGFc5dys+z7sMo6Z8vbSMZTbI1VAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU1IVFQuIN8M4RraMr95H94jQYqpswHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb0yCt93QoKcxzBneX2ZA ZzdRn5gm14qZsWD5gAinrka+NF/buoc416XKBKRmopzhA5+IAXjy5krFxzVRC0hg 2Wyyhs0fhVSqlLsHkymITTr+N4Jk8+CM4ubM+hfpIK0lVJDYpk5aZanqPXYJFAZi 9aIoE+WyLWrT+Fhe5EoRmrXpR4Ac2H59a38Sae+3Xd1qA71knKNwZ8y3D70sqpH9 zf79aFlCVKw7bdk2+kFsmnWpGVMNJBgDeXwvx0eyTF9z1bkC+qt47eOBkE8+aQ2A 1a+oBuk6i/KM2TP81i6pbGbzjEPdYE5T649WzEU1RpKuKvFLCCzEqyjkj8QGyXyy tw== -----END CERTIFICATE-----Generated at Thu Feb 13 18:45:35 2025 by rpki-client