$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: 9X4qOmP9Kb1aviPo4zKZB9RXCJC+bUaTxdIuxj/yBnY= Subject key identifier: 2F:54:D9:42:6E:FF:65:BF:36:A3:54:8C:45:CF:4A:90:D6:21:BC:0E Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F43285845F771D68E16F15B1DD835A500 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF022284 Signing time: Thu 23 May 2024 09:00:04 +0000 Manifest this update: Thu 23 May 2024 09:00:04 +0000 Manifest next update: Sat 25 May 2024 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: tS7cfPIi52hor/xxHZw4U4AMhxW+LdYgRKuFcxpLYXU=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: +9o+uQXuwwvwY4M4b27rVKeAlFoZVk6SjWbisxL+g18=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 25 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:f7:71:d6:8e:16:f1:5b:1d:d8:35:a5:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: May 23 09:00:04 2024 GMT Not After : May 25 09:00:00 2024 GMT Subject: CN=b96149b4-bc8d-4eb1-a109-51b2ecbea64f Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c6:4b:ae:21:b9:0d:8b:c5:dd:d4:53:3c:ac:d7: c7:6e:1e:cc:c6:7d:b7:0e:db:f6:6e:78:80:49:09: 46:f9:f3:cc:c4:ef:5f:21:55:77:b0:58:6d:37:81: 83:7d:18:3e:88:1d:29:f8:37:7d:aa:6b:1b:15:fa: 9b:9f:ff:5b:7c:79:8f:ec:9d:d6:a1:19:71:18:da: 90:43:61:00:28:a7:81:41:c1:f6:72:d3:64:7a:14: 92:0e:09:dd:df:2b:4d:73:9b:a8:92:c7:c7:d2:0d: 23:c1:12:48:8f:f3:92:26:fe:4c:23:15:77:5b:27: 14:06:ea:3a:39:a3:ad:3f:ec:85:38:5f:cd:94:b5: 6b:0e:b2:8a:50:94:87:fb:f3:d4:b2:f7:75:b6:27: 5b:ed:79:4a:48:a7:40:a3:2c:88:96:7a:eb:17:5b: 1b:27:d2:a7:9f:09:97:17:bb:ee:eb:ac:b3:ab:3d: f4:07:7e:6f:5a:52:29:1e:c6:35:0a:6b:fa:67:ac: e4:8d:dc:cc:6e:40:cb:66:af:2c:d5:21:df:88:59: c2:c4:a8:6f:2c:f6:b9:42:f5:c1:c2:35:ed:28:5a: f0:9f:f7:5f:2f:1c:82:35:d4:8c:00:a1:13:8b:8c: b9:f0:07:3d:86:5a:79:e8:b6:3c:63:78:16:b1:14: 17:a9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2F:54:D9:42:6E:FF:65:BF:36:A3:54:8C:45:CF:4A:90:D6:21:BC:0E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 73:5b:20:d9:e5:92:7b:5a:ba:2d:64:db:bc:e4:6f:8d:1d:bd: f7:6d:07:f3:4c:ca:11:12:18:03:98:5b:41:d8:96:cc:2e:0d: bb:a3:6b:2f:f7:be:9c:9b:72:61:ca:f1:a4:4b:0e:b9:bc:e7: a3:0d:e3:55:e5:41:0d:9e:d0:36:e4:f8:44:68:72:13:9f:95: 74:fe:7e:63:1b:ae:a9:56:f2:d3:47:13:5a:4e:a0:49:c9:ce: fd:25:52:9e:ce:87:cd:b2:af:84:e5:ab:ce:fe:94:43:18:76: f2:8e:f8:9f:44:5e:60:98:fc:1b:26:0e:0a:b8:c9:e3:39:11: cd:44:db:6e:ad:f0:51:b3:74:3c:f9:3c:ab:8d:d9:70:d4:fd: 50:08:67:72:15:b1:fb:dc:84:6c:07:07:fb:2d:3a:1c:f7:a6: 77:4e:4f:05:8c:c5:9c:aa:9b:05:4f:53:e0:4f:06:b0:40:18: 0e:3f:41:56:a3:98:e0:79:9b:7d:19:b8:43:bc:cf:38:21:ec: d4:b3:42:09:00:73:66:fd:03:5b:e7:f6:7e:76:8c:09:d5:4b: 78:5b:d2:43:15:4c:b4:ca:da:ec:ce:a7:b1:c1:82:fa:73:24: 4c:58:ae:b5:2e:44:32:84:dc:be:32:4f:3a:eb:de:03:21:18: 6c:54:39:0d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEX3cdaOFvFbHdg1pQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI0MDUyMzA5MDAwNFoXDTI0MDUyNTA5MDAwMFowLzEtMCsGA1UEAxMk Yjk2MTQ5YjQtYmM4ZC00ZWIxLWExMDktNTFiMmVjYmVhNjRmMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxkuuIbkNi8Xd1FM8rNfHbh7Mxn23Dtv2bniA SQlG+fPMxO9fIVV3sFhtN4GDfRg+iB0p+Dd9qmsbFfqbn/9bfHmP7J3WoRlxGNqQ Q2EAKKeBQcH2ctNkehSSDgnd3ytNc5uoksfH0g0jwRJIj/OSJv5MIxV3WycUBuo6 OaOtP+yFOF/NlLVrDrKKUJSH+/PUsvd1tidb7XlKSKdAoyyIlnrrF1sbJ9KnnwmX F7vu66yzqz30B35vWlIpHsY1Cmv6Z6zkjdzMbkDLZq8s1SHfiFnCxKhvLPa5QvXB wjXtKFrwn/dfLxyCNdSMAKETi4y58Ac9hlp56LY8Y3gWsRQXqQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFC9U2UJu/2W/NqNUjEXPSpDWIbwOMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBzWyDZ5ZJ7WrotZNu85G+N Hb33bQfzTMoREhgDmFtB2JbMLg27o2sv976cm3JhyvGkSw65vOejDeNV5UENntA2 5PhEaHITn5V0/n5jG66pVvLTRxNaTqBJyc79JVKezofNsq+E5avO/pRDGHbyjvif RF5gmPwbJg4KuMnjORHNRNturfBRs3Q8+Tyrjdlw1P1QCGdyFbH73IRsBwf7LToc 96Z3Tk8FjMWcqpsFT1PgTwawQBgOP0FWo5jgeZt9GbhDvM84IezUs0IJAHNm/QNb 5/Z+dowJ1Ut4W9JDFUy0ytrszqexwYL6cyRMWK61LkQyhNy+Mk86694DIRhsVDkN -----END CERTIFICATE-----Generated at Thu May 23 10:19:19 2024 by rpki-client on console-ams.rpki-client.org