$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: JHI3vnvACmdQ+jaR/8j5kPaHQzl0L5pH2HY+mkfrTPM= Subject key identifier: 40:E9:93:DE:87:33:AF:0C:56:76:2F:E5:1D:65:46:CC:93:97:B1:C7 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 7885A6F0EFB6FA19DAFB298A5DD427E6AE05EE33 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 0334 Signing time: Sat 18 Jan 2025 22:58:14 +0000 Manifest this update: Sat 18 Jan 2025 22:53:14 +0000 Manifest next update: Mon 20 Jan 2025 00:41:14 +0000 Files and hashes: 1: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: nQN+4wOuwotL/QEiaZ7hL2BRDxbM05YmppHCrNkMcGw=) 2: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: XaNBV09FvARLrTtiUD7xLrsJU5+S/V2B1ry0LCMI7Cg=) 3: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 4: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: xSOBn8AeP1kPDy8XcVcHUsUO63JI4G2iIveauyCDy4E=) 5: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: 15ZkZ3TfYDgn/2NuUygkkJxkxZnGlbkkKGi5Yto7PDI=) 6: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) 7: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: 3Dx9MrwmJlSexiC4AkX+YCkpXccMrukkkSZIGH658cU=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 Jan 2025 00:41:14 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:85:a6:f0:ef:b6:fa:19:da:fb:29:8a:5d:d4:27:e6:ae:05:ee:33 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Jan 18 22:53:14 2025 GMT Not After : Jan 20 00:41:14 2025 GMT Subject: CN=40E993DE8733AF0C56762FE51D6546CC9397B1C7 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:cb:ac:34:22:df:98:49:26:8d:3c:d1:82:04: c2:23:e3:a1:03:a6:30:ef:bf:f4:1a:70:f0:59:1d: 34:e8:73:1d:fb:1a:50:2a:62:59:7e:c8:6c:8d:48: 9c:52:66:5f:61:66:df:bc:fa:90:9f:b4:f5:65:51: 08:a7:0f:fa:98:ca:02:b1:b7:40:3a:2b:80:09:cd: b6:0e:96:6c:c4:45:d8:41:c5:45:8f:a6:f9:9d:23: 6d:d2:40:08:6b:48:e1:c2:ff:71:92:96:54:01:76: bf:5d:9c:ea:13:c9:18:49:e2:05:02:86:04:58:4f: b1:a2:78:34:bf:0b:e4:c7:b9:35:c8:8a:db:38:88: b0:18:ce:17:6d:ad:e5:6e:c2:62:5a:74:ce:97:4e: 0b:7d:36:cb:7a:45:b3:88:d1:5e:74:00:fe:5e:83: 09:d5:f1:1c:92:d7:bc:99:54:01:9c:11:58:65:c9: 02:89:78:31:f6:b6:ca:e7:3e:a4:4a:83:0f:7e:d2: 79:5d:8b:c7:61:e0:32:8f:a5:fe:0a:3d:85:32:ee: 47:ad:49:dc:e8:b9:d4:16:d1:2e:44:89:24:a9:6f: 74:99:42:50:66:d4:ea:85:3e:f1:1c:6f:8f:c0:22: 6b:00:dc:70:f6:73:b4:a2:d0:11:88:a1:23:54:07: 20:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:E9:93:DE:87:33:AF:0C:56:76:2F:E5:1D:65:46:CC:93:97:B1:C7 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 79:16:de:25:f6:ac:72:a7:be:2a:7a:a5:a7:b1:65:ff:eb:90: 52:61:84:0b:38:5a:81:95:fa:07:9e:80:36:8d:99:b2:15:6e: 2e:47:e3:e8:75:00:78:62:64:49:f0:4e:fe:24:94:67:7a:14: fe:5e:96:83:57:e1:bd:8e:f0:7d:0c:fd:de:79:ad:b1:bb:26: 1a:84:47:43:88:47:e2:1f:ff:ee:9c:37:24:e8:07:cb:90:6b: 78:7e:74:a8:6a:1f:26:d5:c8:58:05:98:44:10:a8:6f:60:6c: a0:38:b6:15:9c:97:6b:5a:f3:67:52:85:84:27:c9:9f:04:5a: 02:29:62:2c:20:43:34:9a:50:c4:45:e5:04:94:1c:b9:a4:34: 8c:cb:58:06:b8:d8:6d:1f:99:98:03:3a:29:51:ac:86:4e:fa: 7c:d4:52:a5:78:12:43:48:40:8c:6c:47:d5:f4:d3:6e:49:bc: ad:bf:d3:c4:c7:56:c5:e5:14:e2:87:27:bc:94:78:d9:f4:d7: 7d:69:e5:3a:e9:d8:b4:7e:e7:57:79:3a:c4:d0:6d:22:df:20: ce:e0:b2:14:c4:dc:25:08:3c:cd:c3:8d:4d:dc:09:d5:bf:51: e1:12:14:26:f7:e0:c2:87:c2:d3:a6:97:6a:b0:f2:23:70:63: 81:ef:0a:e9 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUeIWm8O+2+hna+ymKXdQn5q4F7jMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjUwMTE4MjI1MzE0WhcNMjUwMTIwMDA0MTE0 WjAzMTEwLwYDVQQDEyg0MEU5OTNERTg3MzNBRjBDNTY3NjJGRTUxRDY1NDZDQzkz OTdCMUM3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAususNCLfmEkm jTzRggTCI+OhA6Yw77/0GnDwWR006HMd+xpQKmJZfshsjUicUmZfYWbfvPqQn7T1 ZVEIpw/6mMoCsbdAOiuACc22DpZsxEXYQcVFj6b5nSNt0kAIa0jhwv9xkpZUAXa/ XZzqE8kYSeIFAoYEWE+xong0vwvkx7k1yIrbOIiwGM4Xba3lbsJiWnTOl04LfTbL ekWziNFedAD+XoMJ1fEckte8mVQBnBFYZckCiXgx9rbK5z6kSoMPftJ5XYvHYeAy j6X+Cj2FMu5HrUnc6LnUFtEuRIkkqW90mUJQZtTqhT7xHG+PwCJrANxw9nO0otAR iKEjVAcgYQIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFEDpk96HM68MVnYv5R1lRsyT l7HHMB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeRbe Jfascqe+Knqlp7Fl/+uQUmGECzhagZX6B56ANo2ZshVuLkfj6HUAeGJkSfBO/iSU Z3oU/l6Wg1fhvY7wfQz93nmtsbsmGoRHQ4hH4h//7pw3JOgHy5BreH50qGofJtXI WAWYRBCob2BsoDi2FZyXa1rzZ1KFhCfJnwRaAiliLCBDNJpQxEXlBJQcuaQ0jMtY BrjYbR+ZmAM6KVGshk76fNRSpXgSQ0hAjGxH1fTTbkm8rb/TxMdWxeUU4ocnvJR4 2fTXfWnlOunYtH7nV3k6xNBtIt8gzuCyFMTcJQg8zcONTdwJ1b9R4RIUJvfgwofC 06aXarDyI3Bjge8K6Q== -----END CERTIFICATE-----Generated at Sun Jan 19 01:56:44 2025 by rpki-client on console-fra.rpki-client.org