$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft File: 98A87CAD5B710890A9528F166F4202393824E6B8.mft (raw, json) Hash identifier: gS8/IoitvmjIHgwy4nGxcZ6ZxevdUK6Rc/uVXCvNEPg= Subject key identifier: E5:ED:5D:68:2E:A4:0D:61:63:C1:95:8E:05:D7:9B:FA:A1:05:E9:3B Authority key identifier: 98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 Certificate issuer: /CN=98a87cad5b710890a9528f166f4202393824e6b8 Certificate serial: D925AB4BF2883B90704082DEE7E1CED582AEC0 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft Manifest number: 035E Signing time: Sun 13 Apr 2025 02:49:15 +0000 Manifest this update: Sun 13 Apr 2025 02:44:15 +0000 Manifest next update: Mon 14 Apr 2025 05:27:15 +0000 Files and hashes: 1: 326131313a353730323a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: jpJvrreRDifLrtBDiVkCHa/ih9KUqNO+TXds5XFOzYA=) 2: 326131313a353730303a3a2f33322d3332203d3e203438303730.roa (hash: M1W/UI7nVvcG5IlyKmaYpsnNndD+L3rNJ9g8XuVAe1c=) 3: 0E4EBC431E3513FC3F641DB880E2B2FE1D040A30.cer (hash: 6xKp24gU5DBAB1Kw+WWXfVQhj34i1+UyseAfrABT8A8=) 4: 39342e3132362e3233342e302f32342d3234203d3e203438303730.roa (hash: P6VpVcg2APhRrCeqSdvJWAeWYuUD0ufb44Yi4WeNSS4=) 5: 39342e3132362e3233382e302f32342d3234203d3e203438303730.roa (hash: XD3V5dJXTVRCxQzxxC2QHwrcf2NvhNrbOoV/LwRhC+0=) 6: 326131313a353730343a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: vfJJza7tgDeLAPDMVyN5V6KQIqwick9H3Cppm/e5D7Y=) 7: 39342e3132362e3233362e302f32342d3234203d3e203438303730.roa (hash: U7ZpZq92KRjLluBChNmcNbVK0yuDCFIu2VYYNCvyYhE=) 8: 326131313a353730363a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: AfUd0g6EM08gdKu3gWYFuswqhaPb+uAVwfADq4dSUAA=) 9: 326131313a353730373a3a2f33322d3332203d3e203438303730.roa (hash: abkTgvFhAoj4f+KMDGBQF/dpnMqoiBMVzOOia/8N82A=) 10: AS48070.asa (hash: YsK0/rV2BmXeHeRJ0VrNqX7Hbez3e33zUXMrV6bup5Y=) 11: 98A87CAD5B710890A9528F166F4202393824E6B8.crl (hash: Gxpj6YE4q9G7wujpkvQqVHfyw4B152TXb8v7A7KB63A=) 12: 39342e3132362e3233352e302f32342d3234203d3e203438303730.roa (hash: OiF9NTgLIvpgOtsU+ET8v0G7trHw/6kgGm+sQfii6jA=) 13: 326131313a353730373a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: yXrlXEmbJ+W468Anpz8E2TYdQ5p48eYhmRv8EWEFWss=) 14: 326131313a353730313a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 8rSYC/rmOaG6QMucx38lab+ttuAxpdA8gF20Sx392S0=) 15: 39342e3132362e3233372e302f32342d3234203d3e203438303730.roa (hash: GzEfYNi6/vde9duBI4GoacY9I1ImrO0osp4FqLdS6w0=) 16: 39342e3132362e3233322e302f32342d3234203d3e203438303730.roa (hash: QSf1f4sZpmKAqesOD+5GkB0Z3X1d4jZecHW/qgpOz7c=) 17: 326131313a353730313a31303a3a2f34342d3434203d3e20323030313938.roa (hash: TMlytZ8X0slW9x4jJKyuBdUnUnMpROm7M/wSYhg+WrM=) 18: 39342e3132362e3233392e302f32342d3234203d3e203438303730.roa (hash: WtMw6gTmYTWCmtNsyMU8znGs+9TK96TMgDW07igAViw=) 19: 326131313a353730333a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: 4u/gNCBvytd7eZSyyMh6T2KiCJ3m+wg7l3GvlAdV7y4=) 20: 39342e3132362e3233332e302f32342d3234203d3e203438303730.roa (hash: 2t1rBhnp/nx2NbYLLBT6459cj12qNkxF/Y+7pwb3JUg=) 21: 326131313a353730353a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: abdx96bGasEt79nv1n4PdtuPD35/cpm50ioY9tC3qus=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: d9:25:ab:4b:f2:88:3b:90:70:40:82:de:e7:e1:ce:d5:82:ae:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=98a87cad5b710890a9528f166f4202393824e6b8 Validity Not Before: Apr 13 02:44:15 2025 GMT Not After : Apr 14 05:27:15 2025 GMT Subject: CN=E5ED5D682EA40D6163C1958E05D79BFAA105E93B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c1:d3:fd:90:27:04:f5:89:08:81:f8:a3:c8:c6: 89:d3:71:92:1b:62:5b:8b:a2:3b:3c:f2:10:fb:76: 27:88:e0:7f:1a:0b:d4:10:0d:d2:a8:50:18:eb:df: 1a:84:39:b8:1b:01:4a:72:9b:48:24:92:e0:cf:8d: c4:a9:90:89:8f:c5:cf:13:a9:3b:63:dd:e3:58:86: 87:2f:d3:10:84:ca:5d:7c:b5:69:93:1e:39:a3:ec: 70:b5:11:3a:00:7b:ae:5c:30:7e:48:4a:7d:b8:bf: 0f:2b:01:91:90:91:57:bc:6d:aa:ff:d5:7f:94:ad: dd:bb:e4:7e:3c:f4:53:bd:8d:31:72:88:0a:9e:08: 87:34:37:c2:95:71:10:ff:74:1c:5d:1d:eb:0d:8f: dc:14:1e:80:e0:6a:4b:65:1b:13:23:34:9b:c5:95: c3:e0:cc:5b:b6:40:1c:97:e5:86:3d:b1:87:46:fa: 22:a6:ec:31:b1:83:a0:42:31:ea:2a:e0:7a:0a:a6: 65:5b:26:46:ce:5d:79:db:36:52:91:69:bc:59:aa: 26:1c:a6:36:aa:b0:12:7e:5e:c7:8e:af:54:00:a9: 7a:e6:f9:d4:e1:7b:9d:11:1f:47:cf:e7:fc:1a:3a: b3:1a:cd:8b:3a:c5:8d:89:a6:a3:77:1b:74:9e:a5: bc:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E5:ED:5D:68:2E:A4:0D:61:63:C1:95:8E:05:D7:9B:FA:A1:05:E9:3B X509v3 Authority Key Identifier: keyid:98:A8:7C:AD:5B:71:08:90:A9:52:8F:16:6F:42:02:39:38:24:E6:B8 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mKh8rVtxCJCpUo8Wb0ICOTgk5rg.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/dce196fe-4b1a-46ea-9c95-4af12964a49d/0/98A87CAD5B710890A9528F166F4202393824E6B8.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 69:a8:f8:f6:8f:09:e6:2d:ab:22:6d:16:c7:f8:84:24:2f:f4: f5:b5:65:28:25:d4:1c:21:fa:98:65:bf:da:9d:50:94:16:de: 90:bc:a2:c3:f0:1b:28:d1:74:45:89:da:d0:8c:36:32:68:db: cc:a6:fc:fc:ea:00:e5:e5:3d:7a:3c:cf:c2:45:74:a4:6b:00: 09:01:ae:11:34:58:03:92:ec:1d:76:4c:32:dd:28:40:b7:56: 50:3c:3e:d0:fb:31:39:05:a7:bb:ba:88:3a:33:d1:70:0e:02: 37:f0:3d:44:80:70:dd:10:d9:f7:72:b6:d9:71:f1:e8:58:3e: 06:fb:76:e3:47:53:d1:d4:c4:1f:99:95:b7:3b:6c:36:1c:c6: 5d:4e:37:49:08:1a:94:b0:c3:be:3a:db:b7:ac:bb:82:ba:62: 2f:2e:e9:df:10:07:34:14:0d:51:57:80:02:4c:c9:fc:95:f1: e6:c5:ad:3b:92:53:69:a6:c1:25:30:6f:16:9a:ba:1e:a3:8c: 9b:4d:4e:82:43:0a:c2:d2:d4:7c:45:57:e1:19:25:68:eb:89: 32:1a:48:3e:35:49:db:aa:db:53:cc:18:c9:4c:dd:d6:80:42: 0f:28:be:8c:8d:c1:74:e6:40:de:83:a3:7f:19:a9:0c:40:62: 3a:48:79:d1 -----BEGIN CERTIFICATE----- MIIFPTCCBCWgAwIBAgIUANklq0vyiDuQcECC3ufhztWCrsAwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoOThhODdjYWQ1YjcxMDg5MGE5NTI4ZjE2NmY0MjAyMzkz ODI0ZTZiODAeFw0yNTA0MTMwMjQ0MTVaFw0yNTA0MTQwNTI3MTVaMDMxMTAvBgNV BAMTKEU1RUQ1RDY4MkVBNDBENjE2M0MxOTU4RTA1RDc5QkZBQTEwNUU5M0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDB0/2QJwT1iQiB+KPIxonTcZIb YluLojs88hD7dieI4H8aC9QQDdKoUBjr3xqEObgbAUpym0gkkuDPjcSpkImPxc8T qTtj3eNYhocv0xCEyl18tWmTHjmj7HC1EToAe65cMH5ISn24vw8rAZGQkVe8bar/ 1X+Urd275H489FO9jTFyiAqeCIc0N8KVcRD/dBxdHesNj9wUHoDgaktlGxMjNJvF lcPgzFu2QByX5YY9sYdG+iKm7DGxg6BCMeoq4HoKpmVbJkbOXXnbNlKRabxZqiYc pjaqsBJ+XseOr1QAqXrm+dThe50RH0fP5/waOrMazYs6xY2JpqN3G3SepbzBAgMB AAGjggJHMIICQzAdBgNVHQ4EFgQU5e1daC6kDWFjwZWOBdeb+qEF6TswHwYDVR0j BBgwFoAUmKh8rVtxCJCpUo8Wb0ICOTgk5rgwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvZGNlMTk2ZmUtNGIxYS00NmVhLTljOTUtNGFmMTI5NjRh NDlkLzAvOThBODdDQUQ1QjcxMDg5MEE5NTI4RjE2NkY0MjAyMzkzODI0RTZCOC5j cmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2kucmlw ZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL21LaDhyVnR4Q0pDcFVvOFdiMElDT1Rn azVyZy5jZXIwgZ4GCCsGAQUFBwELBIGRMIGOMIGLBggrBgEFBQcwC4Z/cnN5bmM6 Ly9yc3luYy5wYWFzLnJwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9kY2UxOTZmZS00 YjFhLTQ2ZWEtOWM5NS00YWYxMjk2NGE0OWQvMC85OEE4N0NBRDVCNzEwODkwQTk1 MjhGMTY2RjQyMDIzOTM4MjRFNkI4Lm1mdDAYBgNVHSABAf8EDjAMMAoGCCsGAQUF Bw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYIKwYBBQUH AQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaj49o8J5i2rIm0Wx/iE JC/09bVlKCXUHCH6mGW/2p1QlBbekLyiw/AbKNF0RYna0Iw2MmjbzKb8/OoA5eU9 ejzPwkV0pGsACQGuETRYA5LsHXZMMt0oQLdWUDw+0PsxOQWnu7qIOjPRcA4CN/A9 RIBw3RDZ93K22XHx6Fg+Bvt240dT0dTEH5mVtztsNhzGXU43SQgalLDDvjrbt6y7 grpiLy7p3xAHNBQNUVeAAkzJ/JXx5sWtO5JTaabBJTBvFpq6HqOMm01OgkMKwtLU fEVX4RklaOuJMhpIPjVJ26rbU8wYyUzd1oBCDyi+jI3BdOZA3oOjfxmpDEBiOkh5 0Q== -----END CERTIFICATE-----Generated at Mon Apr 14 20:34:30 2025 by rpki-client on console.sobornost.net