$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft File: 52a20e5a-3a5d-4417-92d7-250e134c6d09.mft (raw, json) Hash identifier: MW0ToNiXavvo+sqrPzDKbxt+ajwiHrfAEjj0DeiJvq4= Subject key identifier: C1:64:B0:8F:67:4B:AC:4E:88:9C:B2:6F:E5:25:E0:AB:55:D8:C5:0E Authority key identifier: 1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 Certificate issuer: /CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Certificate serial: 010D0C9F43285845F01DCB1B5C1DAB2001AFAF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft Manifest number: 010D0C9F4328584073A82194633A7F2D5BDD0D19 Signing time: Mon 20 May 2024 18:00:04 +0000 Manifest this update: Mon 20 May 2024 18:00:04 +0000 Manifest next update: Wed 22 May 2024 18:00:00 +0000 Files and hashes: 1: 1ed11bba-2055-382e-ae61-183dfc3956d0.roa (hash: G/7sRPGv7LGNEZruWxHlDPu8Z/Os6CFMfG7Eto5BOuw=) 2: 3c529cbb-9f8d-34c8-9371-e628e7734516.roa (hash: NvbmgAVZWH8cbe0paNQhbF+OgseWXs+CVAhTzZrRpfc=) 3: 49c3092c-17fe-3a81-b3ed-14f55620d8c0.roa (hash: IKkxLoOXor7//5XwqtvHkqhTXxh3xGdXNXVUY9ksDEI=) 4: 52a20e5a-3a5d-4417-92d7-250e134c6d09.crl (hash: B0iUPYG2Z+Yh3Ox6c91azpq4pBIIauuHVRjtPZ/0yic=) 5: d71bc207-ec65-3381-a9cd-02c1fbbed0b1.roa (hash: cZ7dGIjwBLHK03irCCbJmV0+6NfoDA+yYTRSLyzWGNo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Wed 22 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f0:1d:cb:1b:5c:1d:ab:20:01:af:af:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=52a20e5a-3a5d-4417-92d7-250e134c6d09 Validity Not Before: May 20 18:00:04 2024 GMT Not After : May 22 18:00:00 2024 GMT Subject: CN=b0f4a038-6780-4cbe-88b1-31b8718c1407 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:55:c8:44:ae:3b:ed:57:90:3f:e9:74:9b:5e: 49:b5:c4:2d:c7:08:a9:a0:c0:fd:00:a6:b0:b6:18: e2:9c:69:03:51:ea:eb:34:2e:3d:7c:ce:61:42:00: 58:35:9c:a8:8c:f6:ed:e7:2d:42:97:91:a9:44:dc: e4:a4:ec:8e:f9:e8:95:c6:e6:7e:6b:3c:9e:20:ce: a5:00:94:7c:6d:a7:ef:ef:d0:db:6a:d8:f0:bb:21: 58:e9:05:e6:ab:52:93:f5:74:fb:82:ab:d0:63:3c: 92:13:14:cd:3f:6f:dc:8b:37:ac:51:26:a2:b8:92: d0:7b:ca:52:7e:33:2a:6e:e7:ea:12:35:59:2a:b0: a4:db:b4:af:db:59:5b:f6:1d:02:62:a5:d2:39:1d: fe:0d:ea:46:82:c8:7c:32:18:f0:ec:75:c0:e0:dd: 8e:b5:a5:f7:e4:f0:12:3b:a1:2e:c5:7a:11:3a:9e: 3e:7a:13:e4:5a:33:99:c7:a0:10:87:0d:a8:bc:e4: 5b:78:1b:ff:8f:3f:7a:42:1b:16:0e:86:b7:d7:3d: 01:7c:77:c7:8b:ba:e8:3c:a8:0c:3a:1b:01:de:0b: 68:1a:86:35:7c:d0:cc:3f:b3:15:50:02:a3:0a:2a: 6c:45:5a:01:16:0d:20:16:c9:dc:5d:09:8a:53:1e: af:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C1:64:B0:8F:67:4B:AC:4E:88:9C:B2:6F:E5:25:E0:AB:55:D8:C5:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09/52a20e5a-3a5d-4417-92d7-250e134c6d09.crl X509v3 Authority Key Identifier: keyid:1C:A4:54:68:97:CC:ED:EC:C6:86:9D:F0:34:D4:D7:FA:97:30:62:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/52a20e5a-3a5d-4417-92d7-250e134c6d09.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 31:f0:f2:42:42:6a:db:af:73:b1:92:96:5b:ef:b4:7d:96:e4: 78:a5:e4:7f:04:17:82:49:dd:09:66:5e:37:c2:b8:f8:a3:a1: 55:e9:a0:ad:0a:fa:88:80:97:35:04:97:f9:3b:84:e9:88:7a: 6c:75:42:fe:94:fc:c5:2f:68:46:95:30:93:e3:d7:36:fd:ab: de:31:93:02:8f:a8:a5:71:0c:79:bd:59:f0:54:bf:ef:01:e2: 30:7f:f8:04:af:37:c1:93:cb:a9:d8:a6:f2:34:7b:23:01:25: a7:1c:6a:bf:69:27:82:2e:9d:a5:1b:54:21:17:0a:95:c1:4e: 73:6a:0a:c9:d4:b4:fc:e8:d9:31:b1:d2:29:5c:a1:7e:93:74: b1:cc:14:8d:69:f4:08:03:1b:e4:0f:51:c0:42:4e:ad:65:e8: 07:41:25:97:0b:aa:5f:2b:1e:fb:86:31:f3:26:42:fd:26:3c: 5b:69:1d:72:9c:29:34:a1:03:38:48:bc:dd:f4:ad:ba:1c:f3: a1:c0:77:30:8a:e3:19:ff:51:34:48:06:e3:c6:e5:fe:d4:e2: cb:29:83:bc:9c:d0:03:6d:f5:b3:6c:a9:5f:b0:03:56:ba:9a: 80:5a:ab:1b:2c:2d:77:40:e2:c8:0f:7e:be:19:42:a2:76:0c: 59:d0:e1:2c -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXwHcsbXB2rIAGvr4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTJhMjBlNWEtM2E1ZC00NDE3LTkyZDctMjUwZTEzNGM2 ZDA5MB4XDTI0MDUyMDE4MDAwNFoXDTI0MDUyMjE4MDAwMFowLzEtMCsGA1UEAxMk YjBmNGEwMzgtNjc4MC00Y2JlLTg4YjEtMzFiODcxOGMxNDA3MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXIRK477VeQP+l0m15JtcQtxwipoMD9AKaw thjinGkDUerrNC49fM5hQgBYNZyojPbt5y1Cl5GpRNzkpOyO+eiVxuZ+azyeIM6l AJR8bafv79DbatjwuyFY6QXmq1KT9XT7gqvQYzySExTNP2/cizesUSaiuJLQe8pS fjMqbufqEjVZKrCk27Sv21lb9h0CYqXSOR3+DepGgsh8Mhjw7HXA4N2OtaX35PAS O6EuxXoROp4+ehPkWjOZx6AQhw2ovORbeBv/jz96QhsWDoa31z0BfHfHi7roPKgM OhsB3gtoGoY1fNDMP7MVUAKjCipsRVoBFg0gFsncXQmKUx6vYwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMFksI9nS6xOiJyyb+Ul4KtV2MUOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81MmEy MGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBlMTM0YzZkMDkvNTJhMjBlNWEtM2E1ZC00 NDE3LTkyZDctMjUwZTEzNGM2ZDA5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTJhMjBlNWEtM2E1ZC00NDE3LTky ZDctMjUwZTEzNGM2ZDA5LzUyYTIwZTVhLTNhNWQtNDQxNy05MmQ3LTI1MGUxMzRj NmQwOS5jcmwwHwYDVR0jBBgwFoAUHKRUaJfM7ezGhp3wNNTX+pcwYnAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy81MmEyMGU1YS0zYTVkLTQ0MTctOTJkNy0yNTBl MTM0YzZkMDkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAx8PJCQmrbr3OxkpZb77R9 luR4peR/BBeCSd0JZl43wrj4o6FV6aCtCvqIgJc1BJf5O4TpiHpsdUL+lPzFL2hG lTCT49c2/aveMZMCj6ilcQx5vVnwVL/vAeIwf/gErzfBk8up2KbyNHsjASWnHGq/ aSeCLp2lG1QhFwqVwU5zagrJ1LT86NkxsdIpXKF+k3SxzBSNafQIAxvkD1HAQk6t ZegHQSWXC6pfKx77hjHzJkL9JjxbaR1ynCk0oQM4SLzd9K26HPOhwHcwiuMZ/1E0 SAbjxuX+1OLLKYO8nNADbfWzbKlfsANWupqAWqsbLC13QOLID36+GUKidgxZ0OEs -----END CERTIFICATE-----Generated at Tue May 21 14:39:55 2024 by rpki-client on console-fra.rpki-client.org