$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft File: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft (raw, json) Hash identifier: rWA6LN0oEHNtvEvSDRge6UJG3zchJc/KVQljhW1eAoA= Subject key identifier: E9:AD:63:08:45:37:F4:C4:82:C6:2B:A9:3C:43:5F:41:6D:0B:3A:75 Authority key identifier: 3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 Certificate issuer: /CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Certificate serial: 21A3573F18DAE8A780926FC3CB23892686CE2EA3 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft Manifest number: 04AF Signing time: Sun 13 Apr 2025 15:02:46 +0000 Manifest this update: Sun 13 Apr 2025 14:57:46 +0000 Manifest next update: Mon 14 Apr 2025 15:09:46 +0000 Files and hashes: 1: 3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl (hash: gDo6VvLzYRqU6fyOmuTBz+sQoUNSK6mCjS3xUNdpqwo=) 2: 3138352e3133302e36332e302f32342d3234203d3e203332313831.roa (hash: GFt7MPBQXAoRbBAZf/a6ypM3reYPwEU6C1kyEqDInRE=) 3: 3138352e3234342e39352e302f32342d3234203d3e203134363138.roa (hash: OBAzX7jZUk7Za1E5MEVxtdjyAyWEmCtcqgWHValavGM=) 4: 3138352e3131312e3138382e302f32342d3234203d3e203632353633.roa (hash: /OGL5Xocpa/mA4GEutGuQoiWc4p3DBj9VM0kpmdQZxo=) 5: 3138352e3231332e3234332e302f32342d3234203d3e203330343536.roa (hash: aTFuiZRKSKlOcP1bFw/QEJGr9kwsAqFvqfR62oNQfMc=) 6: 3138352e3133302e36322e302f32342d3234203d3e203239303636.roa (hash: mH/CiZmwU0yIfVsdjhTMAG/KAtonINfckXbmsVpawiw=) 7: 3138352e3234342e39352e302f32342d3234203d3e203136353039.roa (hash: 7MRl2ndToXr+/Nwpi0fWFQSP/EKXsP73R/4IMWd5dgM=) 8: 3138352e3232392e3230312e302f32342d3234203d3e20323030303137.roa (hash: ezbmX/yRe+yRvkLs/8FFZoupwCiBI67aZ+0JqkrMl4Q=) 9: 3138352e3231332e3234302e302f32342d3234203d3e203239353338.roa (hash: gcrezpbkvcqBnSLpZetM8bEEnNHAAsTxciJcMFM8hRM=) 10: 3138352e3232392e3230322e302f32342d3234203d3e20323130303330.roa (hash: fyEm36B55a1pd4HLESzxtTjALoxzu4leetK2j/pzqHY=) 11: 3138352e3232392e3230302e302f32342d3234203d3e203139343337.roa (hash: EP6RD+ZuD8/aeGRdu5DeM51xsrxE2M7oAfAneTY5Btg=) 12: 3138352e3232392e3230332e302f32342d3234203d3e20323036373335.roa (hash: FZGdNF2bcBn3tP8pVRjxMkfCiiAE12vqIDQ0utFcBVs=) 13: 3138352e3133302e36302e302f32342d3234203d3e203131383738.roa (hash: O475B5YNr+mk4vbByMFVmoqbRTenx4kmx66C3HIfdsg=) 14: 3138352e3231332e3234332e302f32342d3234203d3e20323034393238.roa (hash: W9NdT6aoX4s9PghUA97T0GAxnEF0Q0u3VMj+QX70R5Y=) 15: 3138352e3231332e3234302e302f32342d3234203d3e20323039323432.roa (hash: r/yhCg+H/V+gvgUqqXgm6SF+8gfop7ZrFjkciDc1VEs=) 16: 3138352e3231332e3234302e302f32342d3234203d3e2033323233.roa (hash: MZau10zedWMcfacP+tAKMz6NiJl4IfcotdHySIsuAvo=) 17: 3138352e3231332e3234322e302f32342d3234203d3e203232343237.roa (hash: 2mJFb3j98iS3WwOyYDzT/44zu56P1Mt1+w22nAIK9Eo=) 18: 326130363a356563303a3a2f34382d3438203d3e20323034363933.roa (hash: +zgqg7oCfaFMqowtNn81ipaj3irDs5wSCtc6B41Oes8=) 19: 3138352e3231332e3234312e302f32342d3234203d3e203631323732.roa (hash: KhYwWjM/5tZMAc1Ys2Qi/Z3IxKzkYaHG79mNsaA679A=) 20: 3138352e3133302e36312e302f32342d3234203d3e20323732363936.roa (hash: OQY6w4Q7ZQH092Yj40TGy9LpmPXnSdGe58D7QhrLuAk=) 21: 33362e3235352e39342e302f32332d3233203d3e203632323430.roa (hash: cEllpKs9D7QXOnlcaRDylPTaKGxvLoUwJx/hEnrKHPU=) 22: 39312e3133322e3232372e302f32342d3234203d3e20323132333335.roa (hash: L+rO+MXrQK3tGBKkhTiQd3Pp/oT0n0nJ8NfAxPcZ/Ik=) 23: 3138352e3234342e39342e302f32342d3234203d3e20333937343233.roa (hash: RdOuxQjMUqkQryMcrXonWYYeJva5RY8rohAdG2ITJdw=) 24: 39312e3133322e3232372e302f32342d3234203d3e20323132333834.roa (hash: NTiGjgrJWtlD9Roa9FRQtbjOAAcPR35U4Ayfj8SpKuI=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 21:a3:57:3f:18:da:e8:a7:80:92:6f:c3:cb:23:89:26:86:ce:2e:a3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3e870b9a7003c4fd9c51bd354a9defa3fb77b4a9 Validity Not Before: Apr 13 14:57:46 2025 GMT Not After : Apr 14 15:09:46 2025 GMT Subject: CN=E9AD63084537F4C482C62BA93C435F416D0B3A75 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:4e:53:3d:3a:a3:c7:62:0e:f9:67:42:40:14: 75:ba:2a:50:52:1c:60:52:79:d6:ae:71:fc:68:e3: 85:e9:ef:a0:4b:49:e0:e9:b4:52:9b:7b:7b:35:86: ab:10:60:06:61:b6:24:d8:bb:4e:8c:90:f4:f1:06: 5a:3f:ec:55:86:bf:7f:26:07:8e:8b:ef:59:33:42: 31:2a:97:7e:4f:0d:32:df:d2:05:3e:72:21:cc:dc: a7:e9:96:0f:0c:6f:bd:de:b8:31:e5:b0:9b:5e:c8: 1c:3e:d5:e4:60:fe:3c:e7:5e:80:af:e9:30:86:1f: 7d:d3:4a:19:fb:ba:74:81:1b:03:24:65:e5:66:ef: be:91:4a:c1:04:7a:ab:1b:ba:e0:a4:23:9f:74:a4: 73:03:f4:7f:e1:b1:fa:86:b8:fd:a8:58:40:61:b7: d1:a7:60:16:90:be:c6:2d:6f:8a:7b:b5:b5:ea:6f: ac:b5:be:ff:2b:35:05:ef:e7:44:37:ac:ea:65:d4: 68:c6:cc:e1:d1:53:53:b2:2c:41:5e:0f:8d:a8:c6: 21:a6:63:d4:8e:9b:43:c5:a6:ba:64:b5:00:12:11: 52:fe:b6:58:56:1f:b7:29:fe:00:d7:b9:eb:7a:c1: 28:d0:f4:53:53:9c:05:1f:d2:e3:c0:c2:da:1a:11: b7:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E9:AD:63:08:45:37:F4:C4:82:C6:2B:A9:3C:43:5F:41:6D:0B:3A:75 X509v3 Authority Key Identifier: keyid:3E:87:0B:9A:70:03:C4:FD:9C:51:BD:35:4A:9D:EF:A3:FB:77:B4:A9 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PocLmnADxP2cUb01Sp3vo_t3tKk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/c5d18e82-4d68-45a6-a5df-cac115ad2279/0/3E870B9A7003C4FD9C51BD354A9DEFA3FB77B4A9.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a2:25:26:bd:68:59:af:41:a0:31:ec:a5:b3:84:d7:d4:4b:8a: 7a:06:ac:ab:82:1c:97:84:95:f4:6e:d5:1b:83:64:ab:f1:3b: ad:01:6e:62:c1:a1:3e:f5:86:62:28:d2:07:c0:04:fb:1d:4c: e4:e9:6c:ec:a3:f9:99:33:20:5e:c9:d6:76:4e:99:0c:b5:64: 3a:a2:b4:12:e5:7b:af:21:4a:56:1d:a2:fe:97:12:c9:0e:21: 4a:9f:e7:28:2d:07:6e:80:8e:25:67:10:9b:3f:fd:f7:37:06: a2:f4:1f:40:79:3d:11:08:99:30:8b:a6:6e:43:0d:29:f4:bc: f2:13:e5:bd:d5:ad:3c:c7:8b:3a:d6:d1:a7:e1:5b:ff:8b:80: 12:19:d1:8d:92:ca:b3:55:66:8b:dc:9f:7f:a0:75:4b:a0:d1: 6c:4d:68:2e:fc:45:27:b3:81:8e:24:7e:88:1e:db:ed:ac:7c: f3:d8:19:0a:ea:72:7e:a8:c0:39:09:b5:5a:46:3f:a7:59:75: 66:46:5a:e4:91:04:91:1b:d5:80:a0:8d:ed:99:98:2b:fb:47: c6:1c:92:68:c7:d7:2b:40:17:9f:54:1d:4b:f8:ec:c0:f4:7d: 8f:7f:66:83:0b:d4:2a:d0:2a:4c:83:64:29:b8:d7:bd:e1:4d: e5:a6:8b:39 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUIaNXPxja6KeAkm/DyyOJJobOLqMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM2U4NzBiOWE3MDAzYzRmZDljNTFiZDM1NGE5ZGVmYTNm Yjc3YjRhOTAeFw0yNTA0MTMxNDU3NDZaFw0yNTA0MTQxNTA5NDZaMDMxMTAvBgNV BAMTKEU5QUQ2MzA4NDUzN0Y0QzQ4MkM2MkJBOTNDNDM1RjQxNkQwQjNBNzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQChTlM9OqPHYg75Z0JAFHW6KlBS HGBSedaucfxo44Xp76BLSeDptFKbe3s1hqsQYAZhtiTYu06MkPTxBlo/7FWGv38m B46L71kzQjEql35PDTLf0gU+ciHM3Kfplg8Mb73euDHlsJteyBw+1eRg/jznXoCv 6TCGH33TShn7unSBGwMkZeVm776RSsEEeqsbuuCkI590pHMD9H/hsfqGuP2oWEBh t9GnYBaQvsYtb4p7tbXqb6y1vv8rNQXv50Q3rOpl1GjGzOHRU1OyLEFeD42oxiGm Y9SOm0PFprpktQASEVL+tlhWH7cp/gDXuet6wSjQ9FNTnAUf0uPAwtoaEbdVAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU6a1jCEU39MSCxiupPENfQW0LOnUwHwYDVR0j BBgwFoAUPocLmnADxP2cUb01Sp3vo/t3tKkwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvYzVkMThlODItNGQ2OC00NWE2LWE1ZGYtY2FjMTE1YWQy Mjc5LzAvM0U4NzBCOUE3MDAzQzRGRDlDNTFCRDM1NEE5REVGQTNGQjc3QjRBOS5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL1BvY0xtbkFEeFAyY1ViMDFTcDN2b190 M3RLay5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9jNWQxOGU4Mi00 ZDY4LTQ1YTYtYTVkZi1jYWMxMTVhZDIyNzkvMC8zRTg3MEI5QTcwMDNDNEZEOUM1 MUJEMzU0QTlERUZBM0ZCNzdCNEE5Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoiUmvWhZr0GgMeyls4TX 1EuKegasq4Icl4SV9G7VG4Nkq/E7rQFuYsGhPvWGYijSB8AE+x1M5Ols7KP5mTMg XsnWdk6ZDLVkOqK0EuV7ryFKVh2i/pcSyQ4hSp/nKC0HboCOJWcQmz/99zcGovQf QHk9EQiZMIumbkMNKfS88hPlvdWtPMeLOtbRp+Fb/4uAEhnRjZLKs1Vmi9yff6B1 S6DRbE1oLvxFJ7OBjiR+iB7b7ax889gZCupyfqjAOQm1WkY/p1l1ZkZa5JEEkRvV gKCN7ZmYK/tHxhySaMfXK0AXn1QdS/jswPR9j39mgwvUKtAqTINkKbjXveFN5aaL OQ== -----END CERTIFICATE-----Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net