$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: Cw2Nfuq0xaDjRhHv2iK0GgDCB7kfs2loUOJgg46/KUU= Subject key identifier: C0:77:AC:AA:BF:0C:0A:AE:25:99:9D:8A:AF:60:B4:1C:48:BA:09:33 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F43285845E940DA9C5A1BC1AB7016A780 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A317F Signing time: Sat 18 May 2024 07:00:04 +0000 Manifest this update: Sat 18 May 2024 07:00:04 +0000 Manifest next update: Tue 21 May 2024 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: EHn5ZSABLtn2kzT3WH1wrb8YCROevn/DUfH5LMS+5kc=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: TC4uuG+8vbJqoPTUcnYsjtARIN89A+RK7XOs87vMP8w=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e9:40:da:9c:5a:1b:c1:ab:70:16:a7:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: May 18 07:00:04 2024 GMT Not After : May 21 07:00:00 2024 GMT Subject: CN=3eddce06-963f-43d3-ba1b-52dbebfa1f46 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:66:27:8b:55:79:80:34:b6:65:e4:da:47:9b: 44:b7:c2:10:6f:91:ae:e2:d8:38:80:4d:54:6a:af: 89:d0:a8:29:9b:bd:52:be:12:92:88:94:86:0f:ba: 34:3f:3d:fb:06:13:70:92:1e:15:65:81:74:05:81: 69:4d:69:b0:d5:8c:78:4b:06:ba:e3:7b:e2:4e:51: fb:c3:bc:e7:9a:af:9f:2f:22:d3:5c:d0:41:e9:3e: dd:7c:0a:5e:10:44:09:02:9d:ca:37:67:ca:95:07: 72:80:5c:51:d1:99:36:73:f0:7f:2f:e6:76:b5:1b: 67:a8:42:49:d8:a6:ac:0d:38:08:03:d9:03:17:f9: 24:5e:6c:71:5e:c4:2f:3a:85:3e:ba:b5:dc:63:52: 60:80:31:b7:f2:0d:4e:84:3b:aa:f9:e3:91:70:02: a1:c2:be:c1:80:fe:9a:3c:3c:01:ff:ec:63:fc:a6: 6b:ca:5a:a6:2f:4b:cd:54:1d:12:26:1a:33:dc:e4: 26:f3:1b:2a:f1:9e:a2:af:cf:be:a9:31:90:87:92: 71:13:4d:62:48:54:b1:99:b9:28:91:25:07:2a:2d: 94:1a:bb:cd:b8:c1:8d:6d:aa:c3:18:4a:dc:fd:99: c4:a4:f3:5d:27:3a:c1:ea:c7:c2:5a:5d:3a:c9:78: 80:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C0:77:AC:AA:BF:0C:0A:AE:25:99:9D:8A:AF:60:B4:1C:48:BA:09:33 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7f:37:eb:cd:99:49:37:e1:b2:8c:04:36:7c:0d:1a:33:fd:17: 74:f7:95:14:53:28:29:b2:c4:8c:8a:c9:25:f8:70:c8:e0:67: b3:2b:0c:34:4a:9e:31:2d:ad:12:00:95:59:97:df:36:2c:ad: 91:df:f0:e8:b3:7a:05:77:93:42:d2:bd:a0:a9:a2:07:32:34: 49:9b:cc:24:ac:ce:73:c7:ff:5d:07:57:9e:a9:4a:79:b2:31: 54:c4:3e:3f:2e:27:ba:81:d3:e3:71:69:24:72:2f:f9:01:11: 03:19:e7:db:f8:d3:1f:6e:93:3d:ea:be:6b:c6:d2:58:41:e1: dd:60:52:0c:30:a5:5c:2a:1f:6c:c6:4a:fa:b8:31:af:e4:c9: ab:42:fd:82:e1:df:59:88:07:83:ab:4d:60:2f:b7:da:48:fd: 2c:2d:11:5d:93:ae:90:7f:ab:fe:88:2d:1a:6d:29:7d:9b:81: 92:8e:21:c1:ee:87:3d:f3:26:31:e7:c6:59:05:09:11:83:a3: f3:26:dd:09:2a:c7:01:47:77:e3:0d:60:9e:9c:39:c0:ac:a4: 91:c5:c5:78:75:db:ce:12:d9:0c:32:ed:d3:a4:3b:03:6c:1c: 7b:18:83:8e:5b:70:b6:d4:19:0f:db:67:80:78:b0:2b:eb:ae: 85:3a:3b:67 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXpQNqcWhvBq3AWp4AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI0MDUxODA3MDAwNFoXDTI0MDUyMTA3MDAwMFowLzEtMCsGA1UEAxMk M2VkZGNlMDYtOTYzZi00M2QzLWJhMWItNTJkYmViZmExZjQ2MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2Yni1V5gDS2ZeTaR5tEt8IQb5Gu4tg4gE1U aq+J0Kgpm71SvhKSiJSGD7o0Pz37BhNwkh4VZYF0BYFpTWmw1Yx4Swa643viTlH7 w7znmq+fLyLTXNBB6T7dfApeEEQJAp3KN2fKlQdygFxR0Zk2c/B/L+Z2tRtnqEJJ 2KasDTgIA9kDF/kkXmxxXsQvOoU+urXcY1JggDG38g1OhDuq+eORcAKhwr7BgP6a PDwB/+xj/KZrylqmL0vNVB0SJhoz3OQm8xsq8Z6ir8++qTGQh5JxE01iSFSxmbko kSUHKi2UGrvNuMGNbarDGErc/ZnEpPNdJzrB6sfCWl06yXiAZQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMB3rKq/DAquJZmdiq9gtBxIugkzMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB/N+vNmUk34bKMBDZ8DRoz /Rd095UUUygpssSMiskl+HDI4GezKww0Sp4xLa0SAJVZl982LK2R3/Dos3oFd5NC 0r2gqaIHMjRJm8wkrM5zx/9dB1eeqUp5sjFUxD4/Lie6gdPjcWkkci/5AREDGefb +NMfbpM96r5rxtJYQeHdYFIMMKVcKh9sxkr6uDGv5MmrQv2C4d9ZiAeDq01gL7fa SP0sLRFdk66Qf6v+iC0abSl9m4GSjiHB7oc98yYx58ZZBQkRg6PzJt0JKscBR3fj DWCenDnArKSRxcV4ddvOEtkMMu3TpDsDbBx7GIOOW3C21BkP22eAeLAr666FOjtn -----END CERTIFICATE-----Generated at Sat May 18 13:31:28 2024 by rpki-client on console-fra.rpki-client.org