$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft File: 821620585D145A1ED109B75A9CC91508C584F9F7.mft (raw, json) Hash identifier: 6kecht2rpMeOtVljnXvBU+TJEtUdrY18KsLMCOVoXAg= Subject key identifier: 17:04:BA:6B:BD:2D:82:E9:2B:1F:D9:1C:FB:F5:12:BC:50:A2:B7:28 Authority key identifier: 82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7 Certificate issuer: /CN=821620585D145A1ED109B75A9CC91508C584F9F7 Certificate serial: 23071BC1E6ED0AD72CE349BE63DF691B11349770 Authority info access: rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft Manifest number: 04 Signing time: Fri 21 Apr 2023 11:32:41 +0000 Manifest this update: Fri 21 Apr 2023 11:27:41 +0000 Manifest next update: Sat 22 Apr 2023 11:55:41 +0000 Files and hashes: 1: 326130613a363034303a313030303a3a2f34302d3430203d3e20323034383537.roa (hash: 8dPeHDoxWv+aRdOrOzdep2Jdk6flrpPwL5Ide1O6PBU=) 2: 326130613a363034303a363030303a3a2f34302d3438203d3e203530323234.roa (hash: gTEOzKzjbC9BGZANwAWs4WxpMHAlOSFuXc09BNInggk=) 3: 326130613a363034303a363065303a3a2f34342d3438203d3e20323033383637.roa (hash: cnMYmblZ7aVKh9Wu7Tu523dZzDXUW4qvK4JoLNfoi4w=) 4: 326130353a646663313a316666663a3a2f34382d3438203d3e20323038353438.roa (hash: 4Sw++NzbUPjKW0w7m8ELWm938N69sJnOSV3fXvINWLk=) 5: 326130613a363034303a3a2f34302d3438203d3e203530323234.roa (hash: bjS6urRsw65uOP0E7N9KHSKrpfiYf/NpxAhkh5JJh9I=) 6: 326130353a646663313a316665303a3a2f34342d3438203d3e20323132363138.roa (hash: FR7aH2CyyS0q/vRrw7lzEU6YP8XBNnRfokgDAi5tQ6o=) 7: 821620585D145A1ED109B75A9CC91508C584F9F7.crl (hash: /WpFKNuhuP9MNc9L4JVjMMD5MJUiRz8EFMnsbKNfLvU=) 8: 326130613a363034303a313030303a3a2f34302d3438203d3e203530323234.roa (hash: fgxIxZ1XNrN1aJeFz6mmodtExCtvPBV3wpHKFwKdrdg=) 9: 326130613a363034303a313030303a3a2f34302d3438203d3e203438353831.roa (hash: jYVzvnXnuwtrVqz6JTX8APoDfZh6uSo6rLlFqM6o0n8=) 10: 326130613a363034303a363030303a3a2f34302d3438203d3e203438353831.roa (hash: e1/OQjq6aFtzTX/maNnrghhVwC2qjo0no/IvQWqURr8=) 11: 326130613a363034303a3a2f34302d3430203d3e20323034383537.roa (hash: /C+c29Wdsjcq1UlvTgAWjXYQ3hY/eojietNMNAbUnX4=) 12: 326130613a363034303a363066643a3a2f34382d3438203d3e20323033363335.roa (hash: kH1HbBWnIp0kP2MUGnIvIQqABD3xNrCtteMHYgwsMEg=) 13: 326130353a646663313a3a2f34302d3438203d3e203530323234.roa (hash: 9SiH+5L7yS+LU6D2kpAdYQ4du/nM3r/mVeF+T2kFrqE=) 14: 326130613a363034303a363030303a3a2f34302d3430203d3e20323034383537.roa (hash: pBD1RODip2MAI10JTtypUYfjzrWtEfdsCrGSkmhSRME=) 15: 326130353a646663313a3a2f34302d3438203d3e203438353831.roa (hash: 4x/y/aOrXXt5v4gpx54t1fJRJ1zf8plblkTs+4/2Z70=) 16: 326130613a363034303a3a2f34302d3438203d3e203438353831.roa (hash: wuB0qWNMcq3vWnnOuMe2ZE2uF5cEdNRGJDdQSLHwruU=) 17: 326130353a646663313a3a2f34302d3430203d3e20323034383537.roa (hash: ygXVhV9SYiRmFREYilEiSIACkrZXElr6TONr3dIhsxo=) 18: 326130353a646663313a316630303a3a2f34302d3438203d3e203438353831.roa (hash: 3yJInx37xUv3lNsuP3EzhLlNz8bOXf3P8Y41OF6Y7Ag=) 19: 326130353a646663313a316664303a3a2f34342d3438203d3e20313939313737.roa (hash: 2UzpijYu6ppbrXSoP64q7eyqlCPWXHynlMUw49H76BU=) Validation: Failed, unable to get local issuer certificate Certificate: Data: Version: 3 (0x2) Serial Number: 23:07:1b:c1:e6:ed:0a:d7:2c:e3:49:be:63:df:69:1b:11:34:97:70 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=821620585D145A1ED109B75A9CC91508C584F9F7 Validity Not Before: Apr 21 11:27:41 2023 GMT Not After : Apr 22 11:55:41 2023 GMT Subject: CN=1704BA6BBD2D82E92B1FD91CFBF512BC50A2B728 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d5:58:9e:f6:4b:a3:32:19:ac:ef:8f:c7:f6:de: aa:cc:cc:ce:d3:b6:4d:d0:88:e8:5e:4a:d9:28:af: 08:23:00:c1:3c:cb:32:f5:4c:62:3b:ee:b5:67:b8: fc:b1:c6:21:db:8f:0f:5b:22:b6:40:67:9e:c0:a4: 7c:f4:df:a7:2b:98:23:af:c6:4e:b8:d7:9c:0c:c7: 55:ce:67:ef:6e:05:94:1a:b0:81:d5:a6:a9:e8:7c: 37:4d:5a:40:c4:ce:cc:e8:bf:4b:50:d7:02:7c:24: 33:36:38:9b:55:54:4f:c1:45:f1:7f:3d:99:52:60: 08:b0:ca:7b:7d:0e:66:6c:b7:91:87:c8:b3:e9:7c: aa:04:94:b5:f7:a5:96:22:90:09:12:60:41:5e:ac: 1e:bf:ae:0b:92:d6:57:a7:2f:bc:b4:2a:5a:9a:35: 8d:66:22:0f:17:af:28:79:71:45:f9:2c:e6:a9:4e: 5a:86:ff:6b:77:9b:66:5d:67:d7:d0:06:6e:df:27: a7:cb:31:01:08:f7:0b:84:1d:f8:d8:29:cc:03:5a: 80:42:e4:e4:e6:61:c4:c1:4d:83:7f:91:03:c2:bd: bb:92:3b:e2:a1:97:de:1f:54:aa:91:c6:90:4e:77: 76:ac:48:7e:7b:dd:4b:45:8f:22:5d:67:fa:69:14: 43:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 17:04:BA:6B:BD:2D:82:E9:2B:1F:D9:1C:FB:F5:12:BC:50:A2:B7:28 X509v3 Authority Key Identifier: keyid:82:16:20:58:5D:14:5A:1E:D1:09:B7:5A:9C:C9:15:08:C5:84:F9:F7 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.crl Authority Information Access: CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/821620585D145A1ED109B75A9CC91508C584F9F7.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/40d6c6f5-aa32-49d7-abfa-e6084bc7fa44/1/821620585D145A1ED109B75A9CC91508C584F9F7.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 04:ef:63:34:70:47:fe:d0:ce:84:91:2d:64:9f:b0:c5:5d:fc: fe:f8:04:08:df:54:fc:85:50:a3:a6:93:fa:49:46:d5:1f:16: d5:dd:0c:1c:eb:46:61:44:ae:a5:36:73:dc:4f:ab:d8:c5:00: 1a:91:fa:59:3f:01:e5:26:0e:a4:9c:63:34:af:2a:cb:71:49: f1:0f:58:c0:89:d2:92:22:dd:a7:f1:db:bf:c1:dc:c7:17:f8: 83:a2:70:53:fc:3f:d1:e2:a8:21:c3:cc:38:71:1a:fc:ea:36: fa:7f:88:a7:db:f7:40:4d:4a:e5:12:32:c5:d4:98:e2:e1:c8: 55:ca:a4:a9:7f:2b:44:9f:78:e4:7b:8a:fc:24:5b:36:54:a5: a9:ff:f4:be:2c:38:d8:c5:9c:97:76:23:60:d6:3d:3e:78:4c: 83:5a:82:c1:c9:35:81:75:b5:b1:cd:f5:b6:da:ca:9d:17:92: 40:bf:40:88:02:d8:d7:14:bf:c0:23:26:85:31:34:b0:21:a9: 0b:42:02:3a:5a:2b:5c:e9:82:52:6a:99:3d:1c:5b:b8:3b:05: f4:59:e6:c3:b7:47:13:fc:30:6d:64:db:7d:45:95:21:71:a7: 4a:65:34:50:ee:4c:90:41:6d:9c:93:ca:46:52:cd:74:d1:c8: eb:05:aa:7c -----BEGIN CERTIFICATE----- MIIFUzCCBDugAwIBAgIUIwcbwebtCtcs40m+Y99pGxE0l3AwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhD NTg0RjlGNzAeFw0yMzA0MjExMTI3NDFaFw0yMzA0MjIxMTU1NDFaMDMxMTAvBgNV BAMTKDE3MDRCQTZCQkQyRDgyRTkyQjFGRDkxQ0ZCRjUxMkJDNTBBMkI3MjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVWJ72S6MyGazvj8f23qrMzM7T tk3QiOheStkorwgjAME8yzL1TGI77rVnuPyxxiHbjw9bIrZAZ57ApHz036crmCOv xk6415wMx1XOZ+9uBZQasIHVpqnofDdNWkDEzszov0tQ1wJ8JDM2OJtVVE/BRfF/ PZlSYAiwynt9DmZst5GHyLPpfKoElLX3pZYikAkSYEFerB6/rguS1lenL7y0Klqa NY1mIg8Xryh5cUX5LOapTlqG/2t3m2ZdZ9fQBm7fJ6fLMQEI9wuEHfjYKcwDWoBC 5OTmYcTBTYN/kQPCvbuSO+Khl94fVKqRxpBOd3asSH573UtFjyJdZ/ppFEMrAgMB AAGjggJdMIICWTAdBgNVHQ4EFgQUFwS6a70tgukrH9kc+/USvFCitygwHwYDVR0j BBgwFoAUghYgWF0UWh7RCbdanMkVCMWE+fcwDgYDVR0PAQH/BAQDAgeAMIGVBgNV HR8EgY0wgYowgYeggYSggYGGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdm YTQ0LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5j cmwwegYIKwYBBQUHAQEEbjBsMGoGCCsGAQUFBzAChl5yc3luYzovL2Nsb3VkaWUt cmVwby5ycGtpLmFwcC9yZXBvL0NMT1VESUUtUlBLSS8wLzgyMTYyMDU4NUQxNDVB MUVEMTA5Qjc1QTlDQzkxNTA4QzU4NEY5RjcuY2VyMIGeBggrBgEFBQcBCwSBkTCB jjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0 L3JlcG9zaXRvcnkvNDBkNmM2ZjUtYWEzMi00OWQ3LWFiZmEtZTYwODRiYzdmYTQ0 LzEvODIxNjIwNTg1RDE0NUExRUQxMDlCNzVBOUNDOTE1MDhDNTg0RjlGNy5tZnQw GAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQC AAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQEL BQADggEBAATvYzRwR/7QzoSRLWSfsMVd/P74BAjfVPyFUKOmk/pJRtUfFtXdDBzr RmFErqU2c9xPq9jFABqR+lk/AeUmDqScYzSvKstxSfEPWMCJ0pIi3afx27/B3McX +IOicFP8P9HiqCHDzDhxGvzqNvp/iKfb90BNSuUSMsXUmOLhyFXKpKl/K0SfeOR7 ivwkWzZUpan/9L4sONjFnJd2I2DWPT54TINagsHJNYF1tbHN9bbayp0XkkC/QIgC 2NcUv8AjJoUxNLAhqQtCAjpaK1zpglJqmT0cW7g7BfRZ5sO3RxP8MG1k231FlSFx p0plNFDuTJBBbZyTykZSzXTRyOsFqnw= -----END CERTIFICATE-----Generated at Thu May 8 10:35:39 2025 by rpki-client