$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft File: 581a8b49-a06e-4497-972f-fd8792bfe9dd.mft (raw, json) Hash identifier: qjbpWnMahLH9pJRp7aIGArhuM9NdlMuJVE93mMHEIyw= Subject key identifier: 64:32:58:6A:59:B7:92:75:B1:05:CA:5C:56:90:BA:C5:EE:1B:F9:40 Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F43285845E97C6AE43D27469E9B97CF80 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft Manifest number: 010D0C9F4328584073A84969DC27396999B67C82 Signing time: Sat 18 May 2024 09:00:04 +0000 Manifest this update: Sat 18 May 2024 09:00:04 +0000 Manifest next update: Tue 21 May 2024 09:00:00 +0000 Files and hashes: 1: 0c3f5430-239f-317b-b59b-582d1725d1e6.roa (hash: Uk+ulXOW9JzjHLg3WYTaGmfYGsjdgpdnAkVRfUiIxJE=) 2: 350a606d-940e-30c5-834b-195460eb8f61.roa (hash: wSmY7jJHUckOCWgus7xPXAB64tK4avvkx0S5hQthyDg=) 3: 567679c0-162f-3c85-87b9-979c57a46579.roa (hash: g8+kUrBy55U/sEmBgoYlQviWe1ZkCKoIoj1AMurv6ac=) 4: 581a8b49-a06e-4497-972f-fd8792bfe9dd.crl (hash: JAVjbWOS+viTSr25wdvXnCwY3Nyi4+tqOtxrBQS0dTM=) 5: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (hash: 5qRfz0saKX9wqfGHSdLB0cFoYVp1+m6YaC4SZlk2g9o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 21 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e9:7c:6a:e4:3d:27:46:9e:9b:97:cf:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: May 18 09:00:04 2024 GMT Not After : May 21 09:00:00 2024 GMT Subject: CN=9908dc61-96ab-4b08-8a8a-d8101fef135a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:84:dc:54:bd:79:e7:fc:5a:1d:33:dd:ad:3f:64: aa:b1:ad:3e:fa:fe:da:f8:7f:2f:37:4b:d2:c3:1b: cd:3d:69:45:1a:02:86:cd:c4:77:65:3f:e9:0a:0a: 58:a4:b5:85:f9:ab:52:40:3e:9b:ff:35:a0:3e:8b: 47:0f:9b:a6:54:f4:f4:a6:d9:6a:c1:45:b7:60:a5: ba:f4:23:23:d7:26:c8:d8:37:b5:c7:52:8c:3c:14: 23:93:fc:cd:58:b1:35:9f:c0:45:7c:97:ee:3b:cb: 0a:68:63:ee:18:ee:da:ac:bb:8a:6e:b1:e7:23:e7: ca:b8:4d:f0:02:9c:28:41:42:12:c4:5a:43:e5:e7: 90:25:c8:61:02:23:b6:7d:3f:c2:66:0d:08:4b:0f: ba:7d:1c:bf:74:65:e5:de:b0:a9:25:44:58:c5:0d: 70:5f:1e:08:5d:29:18:61:d4:6b:ea:44:69:95:94: 6b:86:ed:eb:28:80:5f:93:59:f3:9e:5c:a8:17:49: c1:d3:93:c5:2c:70:7e:63:e5:bd:e5:1f:d3:47:4f: 39:9b:e2:2b:60:00:b4:02:af:55:64:03:6d:f6:42: 41:40:ce:47:2c:4a:a9:4f:b2:22:d5:9c:99:a5:03: e2:36:d1:66:07:19:ba:1f:41:cc:b5:3e:ae:2a:0d: cc:f3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 64:32:58:6A:59:B7:92:75:B1:05:CA:5C:56:90:BA:C5:EE:1B:F9:40 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 14:2c:50:6f:94:1c:c9:dd:40:7e:6a:c3:1a:e3:24:f2:44:59: b5:22:1f:96:24:f1:88:f9:cb:a8:cf:b2:cd:db:e4:e2:5f:e0: 63:8a:8f:8c:86:71:b1:f5:a5:af:58:ed:f6:41:2d:8e:68:ce: 26:de:e7:71:ec:81:03:89:e4:d2:e4:02:7d:e0:8a:04:97:c2: 9f:e9:8c:2b:3d:30:c1:47:70:b8:e8:f2:d8:fe:1b:00:14:ac: 6a:e3:de:1f:de:73:e5:b5:fd:8d:80:fc:82:57:9f:c9:0b:f9: 9b:97:0b:97:a2:33:68:74:c8:fa:31:5e:b8:5e:a2:e6:9a:de: 15:77:21:2d:bf:f2:cd:5f:e8:89:97:f8:e9:50:e6:d9:21:4c: cf:a7:4c:da:5b:e9:2b:1a:0a:c7:fa:07:2d:b0:9f:17:46:3a: 6c:c0:57:a7:d5:ac:2f:c1:45:1d:72:14:ef:20:bb:ca:68:1b: 12:a3:28:ee:3f:bd:97:e4:53:a1:4d:b3:41:f2:d6:47:f7:cb: bd:1c:ba:15:91:8e:59:ab:b0:ad:b7:31:f4:cd:a1:ef:2b:a9: 06:1f:1b:7e:4c:ee:ed:81:a9:08:1a:a7:1c:87:42:5d:f0:ed: 71:ae:e1:d4:90:06:eb:dc:9b:5f:dd:4c:a1:98:d4:d4:17:65: 3f:63:ce:0e -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXpfGrkPSdGnpuXz4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI0MDUxODA5MDAwNFoXDTI0MDUyMTA5MDAwMFowLzEtMCsGA1UEAxMk OTkwOGRjNjEtOTZhYi00YjA4LThhOGEtZDgxMDFmZWYxMzVhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhNxUvXnn/FodM92tP2Sqsa0++v7a+H8vN0vS wxvNPWlFGgKGzcR3ZT/pCgpYpLWF+atSQD6b/zWgPotHD5umVPT0ptlqwUW3YKW6 9CMj1ybI2De1x1KMPBQjk/zNWLE1n8BFfJfuO8sKaGPuGO7arLuKbrHnI+fKuE3w ApwoQUISxFpD5eeQJchhAiO2fT/CZg0ISw+6fRy/dGXl3rCpJURYxQ1wXx4IXSkY YdRr6kRplZRrhu3rKIBfk1nznlyoF0nB05PFLHB+Y+W95R/TR085m+IrYAC0Aq9V ZANt9kJBQM5HLEqpT7Ii1ZyZpQPiNtFmBxm6H0HMtT6uKg3M8wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFGQyWGpZt5J1sQXKXFaQusXuG/lAMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNTgxYThiNDktYTA2ZS00 NDk3LTk3MmYtZmQ4NzkyYmZlOWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAULFBvlBzJ3UB+asMa4yTy RFm1Ih+WJPGI+cuoz7LN2+TiX+Bjio+MhnGx9aWvWO32QS2OaM4m3udx7IEDieTS 5AJ94IoEl8Kf6YwrPTDBR3C46PLY/hsAFKxq494f3nPltf2NgPyCV5/JC/mblwuX ojNodMj6MV64XqLmmt4VdyEtv/LNX+iJl/jpUObZIUzPp0zaW+krGgrH+gctsJ8X RjpswFen1awvwUUdchTvILvKaBsSoyjuP72X5FOhTbNB8tZH98u9HLoVkY5Zq7Ct tzH0zaHvK6kGHxt+TO7tgakIGqcch0Jd8O1xruHUkAbr3Jtf3UyhmNTUF2U/Y84O -----END CERTIFICATE-----Generated at Sat May 18 15:35:25 2024 by rpki-client on console-fra.rpki-client.org