$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft File: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft (raw, json) Hash identifier: 9XGGja99I2TPwQzW+oxL45KOliJbpQbnKCVeLmnWjP0= Subject key identifier: A6:40:70:EA:DB:1B:51:4C:1E:6C:34:42:B3:A5:86:16:1E:DE:B4:97 Authority key identifier: 1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 Certificate issuer: /CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Certificate serial: 44271EC3EF7C3FC75A5A777510D6A56CA413B60E Authority info access: rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft Manifest number: 0209 Signing time: Sun 13 Apr 2025 07:39:16 +0000 Manifest this update: Sun 13 Apr 2025 07:34:16 +0000 Manifest next update: Mon 14 Apr 2025 11:05:16 +0000 Files and hashes: 1: 1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl (hash: JDUUCbvbV4HAEQU40BwaFqK1BSFabC8HHSHxVI8C8+s=) 2: 326130663a383563313a3361323a3a2f34382d3438203d3e20323135323432.roa (hash: PeIsCkDSoavJPo2g0zxTJ1XkAim2DieAEnHktN86nIs=) 3: 326130663a383563313a3766363a3a2f34382d3438203d3e20323135323432.roa (hash: s8PXZ6xun7QdEzluX2KYTIUVTeLEFzlJ1flicK9iKH8=) 4: 326130663a383563313a3766343a3a2f34382d3438203d3e20323135323432.roa (hash: Z++XNVAKl2i3elIZ9myp5G2o2TKjv3Anv7s5uuElaws=) 5: 326130663a383563313a3766383a3a2f34382d3438203d3e20323135323432.roa (hash: 7RQ0gXCWkNwXJyLVMAjMT4ifOZKJ140AG/jnIia+kz4=) 6: 326130663a383563313a3766393a3a2f34382d3438203d3e20323135323432.roa (hash: ZhIUpj5tVPDcWiQ+3SY61ZE9RRhM2AJ7zchpU/cGNbk=) 7: 326130663a383563313a3766313a3a2f34382d3438203d3e20323135313234.roa (hash: gq6me54MBqnqosS7iLksDmqAJs8yyfHwMXcZfgP1ijQ=) 8: 326130663a383563313a3766313a3a2f34382d3438203d3e20323035343633.roa (hash: hLmxywOTn2v4iv//wqgMLMQxfJouQHupbxrvDFSX9Zg=) 9: 326130663a383563313a3766613a3a2f34382d3438203d3e20323135323432.roa (hash: M4zqLtdUHSAbU4GatESAUlsOQgWU2zpPTfy3/5JmOsg=) 10: 326130663a383563313a3766353a3a2f34382d3438203d3e20323135373631.roa (hash: 17qN8Bd0gWBZvDkn96RHqKMURz1HVyJmOiwn1OSD2G0=) 11: 326130663a383563313a3766373a3a2f34382d3438203d3e20323135323432.roa (hash: polxJUQuuGvo82QFQvRtgLcGzpMrITqZaH9JMW5PByU=) 12: 326130663a383563313a3766323a3a2f34382d3438203d3e20323135323432.roa (hash: GcV9N8X9s2uHdEzyPc2IWdnUBlbIkV9Ott353G6xxsA=) 13: 326130663a383563313a3766623a3a2f34382d3438203d3e20323135323432.roa (hash: 6RxmKyitzJl4tEe1yv4vU5lxANHGsLOEl2k3HSP2ddo=) 14: 326130663a383563313a3766303a3a2f34382d3438203d3e20323033353131.roa (hash: F6VJOi3vW8ih7gU8rCzD7A7gIu39IHtVGsLlId1ILkM=) 15: 326130663a383563313a3730313a3a2f34382d3438203d3e20323033353131.roa (hash: Tk4tJu5bvTD5dR9NoM2pYvWxSXCc2/x84lQAlZZqzIs=) 16: 326130663a383563313a3766333a3a2f34382d3438203d3e20323035343633.roa (hash: kyhJCUB0IZ58PgjtuOoqKcwGy0FM5AeasKvHtiY4Nqs=) 17: 326130663a383563313a3730303a3a2f34302d3430203d3e20323135323432.roa (hash: LIVxcxtvoeze2S46mPqGSXeLOCk0JK2W2QKOiQjUdZQ=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 44:27:1e:c3:ef:7c:3f:c7:5a:5a:77:75:10:d6:a5:6c:a4:13:b6:0e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1A90A6AE1542A353CCA74977EB2BFE2A49C18377 Validity Not Before: Apr 13 07:34:16 2025 GMT Not After : Apr 14 11:05:16 2025 GMT Subject: CN=A64070EADB1B514C1E6C3442B3A586161EDEB497 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:b7:88:8d:92:5f:cc:9b:99:b9:cc:f4:00:79: 2d:d7:56:fb:58:cc:24:2d:88:5a:17:9c:32:71:44: f2:76:c5:84:d7:c2:9f:39:f6:bd:48:c3:3d:29:61: 68:ac:63:46:57:f7:7e:0c:60:83:a3:4a:50:c2:cc: 21:31:e1:f1:4e:21:dc:24:44:ec:3b:cd:bb:a7:28: db:c7:b8:8d:cc:fe:fa:08:97:27:5b:ec:ab:9b:74: e1:b2:37:18:ab:93:a7:1d:2f:6e:a5:45:c6:76:4e: fa:61:69:3d:d5:2a:9e:ef:3e:0e:b8:b9:5e:aa:50: 3f:fc:fb:4e:43:ae:24:7b:33:e8:75:37:a7:6e:6f: 6e:1b:3b:08:4d:6d:64:47:c2:4d:30:f9:00:fa:8f: 51:77:03:2a:92:26:54:aa:e9:dd:bf:21:31:83:0f: 68:92:56:3b:26:90:1e:3e:97:7b:f7:3b:4b:b8:62: d7:aa:47:95:d7:ae:99:01:5b:a4:30:1f:a9:c6:36: 83:f7:e8:fe:36:60:b8:c1:14:be:0e:0d:29:f3:39: 9a:18:98:78:8f:2c:14:7a:07:d4:6b:4f:f9:43:76: 1b:91:db:81:f8:c9:95:88:0b:c4:d8:f4:12:a0:3d: de:40:94:38:45:3d:13:c3:b8:b4:06:d9:93:70:42: ec:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A6:40:70:EA:DB:1B:51:4C:1E:6C:34:42:B3:A5:86:16:1E:DE:B4:97 X509v3 Authority Key Identifier: keyid:1A:90:A6:AE:15:42:A3:53:CC:A7:49:77:EB:2B:FE:2A:49:C1:83:77 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.crl Authority Information Access: CA Issuers - URI:rsync://rsync.paas.rpki.ripe.net/repository/84d51810-1987-4701-8f1f-8425111964f4/0/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/d06333c6-946d-4b0b-95ef-daba262a42e1/1/1A90A6AE1542A353CCA74977EB2BFE2A49C18377.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 39:86:9b:21:70:de:16:cc:69:40:e1:d8:68:c8:57:d0:e9:74: b1:19:8e:04:91:04:76:35:d7:3b:99:6a:cf:7e:28:5b:ff:cd: 8d:4b:02:80:1a:f3:b5:bb:cb:ce:d6:25:92:a0:4d:58:76:96: cb:af:fa:ff:fc:9a:c2:a7:3d:20:53:71:8a:f9:c2:e7:18:f3: 78:02:78:80:aa:ac:0c:50:32:da:a1:ac:54:76:61:7f:40:a9: 48:93:a5:9b:91:3f:79:77:fa:1b:a5:9f:c8:4f:01:bf:80:3d: 9a:53:4e:c1:cc:e0:6e:d8:73:b4:7b:b5:f6:32:0d:5d:bc:27: 00:5b:69:a1:63:d9:87:9a:f0:ac:1a:f9:79:48:64:6b:f8:31: 83:45:b3:4f:ba:b5:c5:66:bd:e5:62:1e:2c:23:ba:f1:71:9d: 5f:ad:be:1d:12:b1:ce:43:d2:6c:43:07:4d:c4:e7:c2:ca:5b: 54:50:3c:db:2e:b3:72:bd:f5:65:8c:57:4a:c6:88:4c:4f:3b: 99:97:d4:af:35:0d:41:d2:e2:f5:47:d4:dd:7b:d0:6b:cf:17: e3:df:e0:3d:cf:82:12:70:ff:0d:75:2a:7d:31:b7:72:ca:85: 21:81:b3:bc:e8:55:49:2f:61:95:19:bf:88:06:b2:0c:ef:40: ef:97:5e:09 -----BEGIN CERTIFICATE----- MIIFeDCCBGCgAwIBAgIURCcew+98P8daWnd1ENalbKQTtg4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0 OUMxODM3NzAeFw0yNTA0MTMwNzM0MTZaFw0yNTA0MTQxMTA1MTZaMDMxMTAvBgNV BAMTKEE2NDA3MEVBREIxQjUxNEMxRTZDMzQ0MkIzQTU4NjE2MUVERUI0OTcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClt4iNkl/Mm5m5zPQAeS3XVvtY zCQtiFoXnDJxRPJ2xYTXwp859r1Iwz0pYWisY0ZX934MYIOjSlDCzCEx4fFOIdwk ROw7zbunKNvHuI3M/voIlydb7KubdOGyNxirk6cdL26lRcZ2TvphaT3VKp7vPg64 uV6qUD/8+05DriR7M+h1N6dub24bOwhNbWRHwk0w+QD6j1F3AyqSJlSq6d2/ITGD D2iSVjsmkB4+l3v3O0u4YteqR5XXrpkBW6QwH6nGNoP36P42YLjBFL4ODSnzOZoY mHiPLBR6B9RrT/lDdhuR24H4yZWIC8TY9BKgPd5AlDhFPRPDuLQG2ZNwQuzLAgMB AAGjggKCMIICfjAdBgNVHQ4EFgQUpkBw6tsbUUwebDRCs6WGFh7etJcwHwYDVR0j BBgwFoAUGpCmrhVCo1PMp0l36yv+KknBg3cwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZDA2MzMzYzYtOTQ2ZC00YjBiLTk1ZWYtZGFiYTI2MmE0 MmUxLzEvMUE5MEE2QUUxNTQyQTM1M0NDQTc0OTc3RUIyQkZFMkE0OUMxODM3Ny5j cmwwgZ4GCCsGAQUFBwEBBIGRMIGOMIGLBggrBgEFBQcwAoZ/cnN5bmM6Ly9yc3lu Yy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS84NGQ1MTgxMC0xOTg3LTQ3 MDEtOGYxZi04NDI1MTExOTY0ZjQvMC8xQTkwQTZBRTE1NDJBMzUzQ0NBNzQ5NzdF QjJCRkUyQTQ5QzE4Mzc3LmNlcjCBngYIKwYBBQUHAQsEgZEwgY4wgYsGCCsGAQUF BzALhn9yc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5 L2QwNjMzM2M2LTk0NmQtNGIwYi05NWVmLWRhYmEyNjJhNDJlMS8xLzFBOTBBNkFF MTU0MkEzNTNDQ0E3NDk3N0VCMkJGRTJBNDlDMTgzNzcubWZ0MBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQA5hpsh cN4WzGlA4dhoyFfQ6XSxGY4EkQR2Ndc7mWrPfihb/82NSwKAGvO1u8vO1iWSoE1Y dpbLr/r//JrCpz0gU3GK+cLnGPN4AniAqqwMUDLaoaxUdmF/QKlIk6WbkT95d/ob pZ/ITwG/gD2aU07BzOBu2HO0e7X2Mg1dvCcAW2mhY9mHmvCsGvl5SGRr+DGDRbNP urXFZr3lYh4sI7rxcZ1frb4dErHOQ9JsQwdNxOfCyltUUDzbLrNyvfVljFdKxohM TzuZl9SvNQ1B0uL1R9Tde9Brzxfj3+A9z4IScP8NdSp9MbdyyoUhgbO86FVJL2GV Gb+IBrIM70Dvl14J -----END CERTIFICATE-----Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net