$ rpki-client -vvf repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft File: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft (raw, json) Hash identifier: kIYnFwACH36Lb1M6KuSEDtzZ3G7g9MO11hdvegBMQf0= Subject key identifier: 7D:CA:99:F9:27:01:12:A3:A0:20:8E:5A:5F:84:21:DE:99:9E:2F:B5 Authority key identifier: 7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED Certificate issuer: /CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Certificate serial: 4C5BF338D0EEA25D5605E523A765A3B8C17B7123 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject info access: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft Manifest number: 02E8 Signing time: Fri 22 Nov 2024 22:00:31 +0000 Manifest this update: Fri 22 Nov 2024 21:55:31 +0000 Manifest next update: Sun 24 Nov 2024 00:43:31 +0000 Files and hashes: 1: 7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl (hash: LSWZeUBi301IuD62FPHzhsanpwTFI4xXKexD4Pvbqqg=) 2: 3130342e33372e34302e302f32342d3234203d3e20393730.roa (hash: nQN+4wOuwotL/QEiaZ7hL2BRDxbM05YmppHCrNkMcGw=) 3: AS21957.asa (hash: v9+444bGaAkQtqJOIXn9P1VMcTrlW/WFkfocSw9xo/c=) 4: 3130342e33372e34312e302f32342d3234203d3e203231393537.roa (hash: XaNBV09FvARLrTtiUD7xLrsJU5+S/V2B1ry0LCMI7Cg=) 5: 3130342e33372e34322e302f32332d3234203d3e20393435.roa (hash: 15ZkZ3TfYDgn/2NuUygkkJxkxZnGlbkkKGi5Yto7PDI=) 6: 3130342e33372e34302e302f32322d3232203d3e2030.roa (hash: 3Dx9MrwmJlSexiC4AkX+YCkpXccMrukkkSZIGH658cU=) 7: AS970.asa (hash: uUtIUuFVFE42+T1fqnnQdo7h/4VRg1akAdGbbCnAbEY=) Validation: OK Signature path: rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/39065acc-beed-4115-bc6c-63de232f2a04.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 00:43:31 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4c:5b:f3:38:d0:ee:a2:5d:56:05:e5:23:a7:65:a3:b8:c1:7b:71:23 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351 Validity Not Before: Nov 22 21:55:31 2024 GMT Not After : Nov 24 00:43:31 2024 GMT Subject: CN=7DCA99F9270112A3A0208E5A5F8421DE999E2FB5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:0c:f1:52:e1:c6:69:c7:2e:2c:31:89:88:e4: 60:ce:06:c4:70:54:3c:b0:64:cf:5a:a3:29:c8:9a: d9:bb:bc:07:0e:da:de:2d:2b:41:45:31:5c:bd:d7: 86:fa:23:65:de:d2:aa:20:9e:27:87:28:cc:d0:1d: 6a:74:8c:e5:da:ab:8f:3b:c5:fc:1e:62:cf:14:ed: c3:72:fd:ae:67:a0:b1:d9:54:ad:9e:f0:fa:c0:05: 0f:48:eb:94:1d:b7:c9:ef:e8:de:bf:5d:f1:48:59: 63:1c:e2:5f:2d:0e:aa:12:af:52:54:5a:4c:e6:e2: a9:d9:7b:6b:49:46:d3:1d:74:79:d6:45:22:90:85: 0d:c4:76:98:6d:a3:2c:fc:c9:42:8e:a1:16:58:e6: 07:b7:92:f7:8f:c4:0a:b1:a6:15:b8:80:7c:ff:e6: d7:f7:50:64:8c:ec:98:7c:b8:1b:5a:b6:00:4d:83: fb:36:fd:f4:43:3b:8d:cc:f2:04:d4:b0:44:9d:e8: b7:78:24:af:c9:8b:7b:5c:b1:0c:4b:be:5e:69:b7: 75:51:75:1f:b0:55:4d:32:97:da:50:04:83:8a:e1: 5e:c4:a7:48:31:6d:12:05:40:02:b0:57:f1:86:d2: ab:b1:24:ae:50:4f:90:7b:81:de:9b:07:0f:1a:80: ed:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:CA:99:F9:27:01:12:A3:A0:20:8E:5A:5F:84:21:DE:99:9E:2F:B5 X509v3 Authority Key Identifier: keyid:7E:C9:B5:D2:25:08:C0:23:1C:15:DA:BD:AF:51:35:99:0B:66:BF:ED X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.crl Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/39065acc-beed-4115-bc6c-63de232f2a04/02ba3f5254b88681ec6c5450a38717479c0589b9956c51e351.cer Subject Information Access: Signed Object - URI:rsync://repo.kagl.me/rpki/KeatonAGLair/0/7EC9B5D22508C0231C15DABDAF5135990B66BFED.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 0d:0d:6a:1e:94:ee:52:41:0d:c3:52:a9:10:fe:4d:c1:30:96: 79:13:67:1e:fe:b0:40:87:48:e4:fb:58:eb:98:b8:17:70:c7: 07:9a:67:fa:37:6d:8a:8f:ff:9a:f3:4c:99:f7:5f:30:95:22: c9:d2:b5:68:39:5c:46:cb:9d:01:b7:75:69:53:79:0c:7b:04: 08:04:f8:30:6a:87:7d:43:a2:be:7f:ae:a6:a2:ba:73:63:76: 30:50:de:0e:c7:23:31:29:b5:0d:7d:f8:1a:ec:5e:46:dd:89: 2e:1c:c5:7b:3c:ad:4c:d5:bb:7a:e9:b1:16:72:a7:62:b2:3e: e4:96:52:41:8d:39:25:3d:73:f8:83:04:97:a6:1f:e1:e3:73: a8:26:ef:58:26:04:26:07:e6:10:45:49:7d:c5:d6:7e:68:21: 0e:22:ff:67:a3:d2:1f:ce:ed:51:45:55:b3:52:be:1b:ad:53: 0f:db:8a:14:94:52:62:08:9d:8d:1d:5b:5b:5b:9c:2f:6f:3b: 09:26:8b:d7:76:95:7b:5c:7e:86:22:9b:2d:78:6f:7b:7b:23: ef:7c:98:dc:1c:4f:a4:1c:83:f9:20:1c:21:82:06:78:76:ac: 62:27:df:99:07:b1:04:d0:1b:59:f7:8a:6b:17:0d:57:d9:b5: f1:95:9b:85 -----BEGIN CERTIFICATE----- MIIFeTCCBGGgAwIBAgIUTFvzONDuol1WBeUjp2WjuMF7cSMwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5 YzA1ODliOTk1NmM1MWUzNTEwHhcNMjQxMTIyMjE1NTMxWhcNMjQxMTI0MDA0MzMx WjAzMTEwLwYDVQQDEyg3RENBOTlGOTI3MDExMkEzQTAyMDhFNUE1Rjg0MjFERTk5 OUUyRkI1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogzxUuHGaccu LDGJiORgzgbEcFQ8sGTPWqMpyJrZu7wHDtreLStBRTFcvdeG+iNl3tKqIJ4nhyjM 0B1qdIzl2quPO8X8HmLPFO3Dcv2uZ6Cx2VStnvD6wAUPSOuUHbfJ7+jev13xSFlj HOJfLQ6qEq9SVFpM5uKp2XtrSUbTHXR51kUikIUNxHaYbaMs/MlCjqEWWOYHt5L3 j8QKsaYVuIB8/+bX91BkjOyYfLgbWrYATYP7Nv30QzuNzPIE1LBEnei3eCSvyYt7 XLEMS75eabd1UXUfsFVNMpfaUASDiuFexKdIMW0SBUACsFfxhtKrsSSuUE+Qe4He mwcPGoDtcwIDAQABo4ICeTCCAnUwHQYDVR0OBBYEFH3KmfknARKjoCCOWl+EId6Z ni+1MB8GA1UdIwQYMBaAFH7JtdIlCMAjHBXava9RNZkLZr/tMA4GA1UdDwEB/wQE AwIHgDBmBgNVHR8EXzBdMFugWaBXhlVyc3luYzovL3JlcG8ua2FnbC5tZS9ycGtp L0tlYXRvbkFHTGFpci8wLzdFQzlCNUQyMjUwOEMwMjMxQzE1REFCREFGNTEzNTk5 MEI2NkJGRUQuY3JsMIHzBggrBgEFBQcBAQSB5jCB4zCB4AYIKwYBBQUHMAKGgdNy c3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0 YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEt NDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTA2NWFjYy1iZWVkLTQxMTUtYmM2Yy02 M2RlMjMyZjJhMDQvMDJiYTNmNTI1NGI4ODY4MWVjNmM1NDUwYTM4NzE3NDc5YzA1 ODliOTk1NmM1MWUzNTEuY2VyMHEGCCsGAQUFBwELBGUwYzBhBggrBgEFBQcwC4ZV cnN5bmM6Ly9yZXBvLmthZ2wubWUvcnBraS9LZWF0b25BR0xhaXIvMC83RUM5QjVE MjI1MDhDMDIzMUMxNURBQkRBRjUxMzU5OTBCNjZCRkVELm1mdDAYBgNVHSABAf8E DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQ1q HpTuUkENw1KpEP5NwTCWeRNnHv6wQIdI5PtY65i4F3DHB5pn+jdtio//mvNMmfdf MJUiydK1aDlcRsudAbd1aVN5DHsECAT4MGqHfUOivn+upqK6c2N2MFDeDscjMSm1 DX34GuxeRt2JLhzFezytTNW7eumxFnKnYrI+5JZSQY05JT1z+IMEl6Yf4eNzqCbv WCYEJgfmEEVJfcXWfmghDiL/Z6PSH87tUUVVs1K+G61TD9uKFJRSYgidjR1bW1uc L287CSaL13aVe1x+hiKbLXhve3sj73yY3BxPpByD+SAcIYIGeHasYiffmQexBNAb WfeKaxcNV9m18ZWbhQ== -----END CERTIFICATE-----Generated at Sat Nov 23 00:05:18 2024 by rpki-client on console-ams.rpki-client.org