$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft File: JmLOFOkF4Y68t1IvkrNoS8SGW00.mft (raw, json) Hash identifier: cPNXgpJjhwkFQjQmuJHTeOStP96yQLsMSLHf8V0wVys= Subject key identifier: 4A:20:9E:E4:DC:5A:0C:18:F3:45:35:C5:C1:08:32:87:A7:20:E9:4D Authority key identifier: 55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 Certificate issuer: /CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Certificate serial: 5AB6C36AACE1747370D771DAD6028E41D5100F Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft Manifest number: AFE9 Signing time: Fri 22 Nov 2024 10:48:20 +0000 Manifest this update: Fri 22 Nov 2024 10:48:20 +0000 Manifest next update: Tue 26 Nov 2024 10:48:20 +0000 Files and hashes: 1: JmLOFOkF4Y68t1IvkrNoS8SGW00.crl (hash: VNguXkcKVMFBXzqZQM8aMFwlXG3tWw3JPrnlqfqhKzk=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5a:b6:c3:6a:ac:e1:74:73:70:d7:71:da:d6:02:8e:41:d5:10:0f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d Validity Not Before: Nov 22 10:48:20 2024 GMT Not After : Nov 26 10:48:20 2024 GMT Subject: serialNumber=1176132c9431cbb7109e97e751b159113bba942303f46b4401a03c7caa47d65f, CN=c0ce23ea-43fc-4be4-beee-c01478122a0e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:73:e7:92:39:42:eb:b5:cc:e4:8b:a9:19:f2: 44:e4:d2:5c:a9:c0:30:d5:2b:13:7a:74:1d:44:1e: d4:ce:bc:5a:44:86:ca:f2:59:b4:1e:d2:51:10:ec: 3e:42:c6:cb:ed:b0:58:4e:45:19:cc:83:a5:cb:b9: 07:a4:3d:5c:10:31:24:a8:f7:6a:0e:a3:55:61:7d: 45:d1:80:a8:7e:1f:6f:b3:47:68:39:bc:8d:fb:98: 85:de:13:a4:b8:a1:c8:b1:e8:e9:64:15:ae:43:c8: 01:81:40:31:17:4f:00:ad:7a:6f:d3:bc:4a:d4:56: 08:b3:39:6a:ab:28:e6:df:ca:8e:c4:af:54:91:43: a9:c9:ed:be:43:fa:12:09:f2:3a:a5:8d:f1:d4:ca: c2:0b:86:52:fa:76:23:71:19:43:e7:e1:83:7c:42: 04:5b:94:d4:b2:45:f4:33:3a:0c:bb:cf:52:79:64: 29:be:01:64:4e:5d:ed:fe:56:74:39:ef:cf:60:32: 55:8c:c7:97:76:69:72:5b:37:ec:d3:93:13:ff:10: 43:ec:be:24:7a:f2:49:59:c0:e5:44:46:36:b0:74: 49:b5:d2:09:f7:c6:b2:d3:31:9d:25:cb:cd:00:c1: 71:87:79:d7:ee:47:2f:78:50:a0:ef:22:e2:60:e5: fa:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 4A:20:9E:E4:DC:5A:0C:18:F3:45:35:C5:C1:08:32:87:A7:20:E9:4D X509v3 Authority Key Identifier: keyid:55:A8:DD:45:D9:44:13:F9:D1:92:F5:2C:63:CE:8C:FB:C6:14:96:B8 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1433ebff-dfd6-4c5c-b7ff-99c85139d4a8/278aab878f2662ce14e905e18ebcb7522f92b3684bc4865b4d.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/16f1ffee-7461-4674-bb05-fddefa9a02c6/JmLOFOkF4Y68t1IvkrNoS8SGW00.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 4d:d5:ab:ca:48:2c:3b:1b:e9:99:c9:f4:84:95:99:f0:a5:a2: 6c:50:fb:55:36:ec:1c:41:c4:ab:97:8c:e7:69:64:42:6e:66: e9:f7:37:e6:85:ff:f6:48:10:29:59:c6:06:14:28:19:1b:b3: 6b:52:c8:c9:fd:77:1c:96:a2:3b:63:9e:44:96:14:93:c3:64: be:5f:eb:30:30:f1:c0:fd:0f:0e:1b:76:52:bc:5a:c8:e7:58: 05:dc:e6:78:af:f2:ab:cc:67:e1:c8:d8:15:8f:da:74:a7:05: 6e:b8:1a:00:52:5a:e6:8c:14:0e:0e:b7:7e:f4:53:e4:24:16: 81:fc:24:8f:d0:a2:7e:d3:fd:6e:6e:1e:d0:ca:6a:61:13:c0: b8:3d:52:9c:5a:12:80:98:c0:e7:e5:81:2c:0f:08:c3:8c:76: 02:36:79:ff:b9:02:40:90:fd:f7:78:51:89:8d:65:f2:31:60: f7:e1:99:64:86:88:f3:b9:2d:45:8a:a3:7d:e8:cd:79:a8:19: 5e:fb:90:04:35:c1:0c:ec:a5:c2:4f:43:8c:ce:46:5f:ec:49: 6f:97:88:12:41:53:b3:32:fc:71:75:fd:66:d0:c5:78:b5:ca: b3:f5:8c:6d:44:7d:4c:15:d6:46:50:47:38:06:a5:d2:fd:04: 15:44:59:3f -----BEGIN CERTIFICATE----- MIIGBzCCBO+gAwIBAgITWrbDaqzhdHNw13Ha1gKOQdUQDzANBgkqhkiG9w0BAQsF ADA9MTswOQYDVQQDEzIyNzhhYWI4NzhmMjY2MmNlMTRlOTA1ZTE4ZWJjYjc1MjJm OTJiMzY4NGJjNDg2NWI0ZDAeFw0yNDExMjIxMDQ4MjBaFw0yNDExMjYxMDQ4MjBa MHoxSTBHBgNVBAUTQDExNzYxMzJjOTQzMWNiYjcxMDllOTdlNzUxYjE1OTExM2Ji YTk0MjMwM2Y0NmI0NDAxYTAzYzdjYWE0N2Q2NWYxLTArBgNVBAMTJGMwY2UyM2Vh LTQzZmMtNGJlNC1iZWVlLWMwMTQ3ODEyMmEwZTCCASIwDQYJKoZIhvcNAQEBBQAD ggEPADCCAQoCggEBALxz55I5Quu1zOSLqRnyROTSXKnAMNUrE3p0HUQe1M68WkSG yvJZtB7SURDsPkLGy+2wWE5FGcyDpcu5B6Q9XBAxJKj3ag6jVWF9RdGAqH4fb7NH aDm8jfuYhd4TpLihyLHo6WQVrkPIAYFAMRdPAK16b9O8StRWCLM5aqso5t/KjsSv VJFDqcntvkP6EgnyOqWN8dTKwguGUvp2I3EZQ+fhg3xCBFuU1LJF9DM6DLvPUnlk Kb4BZE5d7f5WdDnvz2AyVYzHl3Zpcls37NOTE/8QQ+y+JHrySVnA5URGNrB0SbXS CffGstMxnSXLzQDBcYd51+5HL3hQoO8i4mDl+u0CAwEAAaOCAsEwggK9MB0GA1Ud DgQWBBRKIJ7k3FoMGPNFNcXBCDKHpyDpTTAfBgNVHSMEGDAWgBRVqN1F2UQT+dGS 9Sxjzoz7xhSWuDAOBgNVHQ8BAf8EBAMCB4AwgfMGCCsGAQUFBwEBBIHmMIHjMIHg BggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmluLm5ldC9yZXBvc2l0b3J5L2Fy aW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2UtYjA4Yy0yMTcxZGEyMTU3ZDMv MDM1NzI3MmMtYTc5YS00NWJmLTk1ODYtOTJkZDQ5ZWYzMjIzLzE0MzNlYmZmLWRm ZDYtNGM1Yy1iN2ZmLTk5Yzg1MTM5ZDRhOC8yNzhhYWI4NzhmMjY2MmNlMTRlOTA1 ZTE4ZWJjYjc1MjJmOTJiMzY4NGJjNDg2NWI0ZC5jZXIwgZUGCCsGAQUFBwELBIGI MIGFMIGCBggrBgEFBQcwC4Z2cnN5bmM6Ly9ycGtpLXJzeW5jLnVzLWVhc3QtMi5h bWF6b25hd3MuY29tL3ZvbHVtZS8xNmYxZmZlZS03NDYxLTQ2NzQtYmIwNS1mZGRl ZmE5YTAyYzYvSm1MT0ZPa0Y0WTY4dDFJdmtyTm9TOFNHVzAwLm1mdDCBiAYDVR0f BIGAMH4wfKB6oHiGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIuYW1hem9u YXdzLmNvbS92b2x1bWUvMTZmMWZmZWUtNzQ2MS00Njc0LWJiMDUtZmRkZWZhOWEw MmM2L0ptTE9GT2tGNFk2OHQxSXZrck5vUzhTR1cwMC5jcmwwGAYDVR0gAQH/BA4w DDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUA MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJKoZIhvcNAQELBQADggEBAE3Vq8pI LDsb6ZnJ9ISVmfClomxQ+1U27BxBxKuXjOdpZEJuZun3N+aF//ZIEClZxgYUKBkb s2tSyMn9dxyWojtjnkSWFJPDZL5f6zAw8cD9Dw4bdlK8WsjnWAXc5niv8qvMZ+HI 2BWP2nSnBW64GgBSWuaMFA4Ot370U+QkFoH8JI/Qon7T/W5uHtDKamETwLg9Upxa EoCYwOflgSwPCMOMdgI2ef+5AkCQ/fd4UYmNZfIxYPfhmWSGiPO5LUWKo33ozXmo GV77kAQ1wQzspcJPQ4zORl/sSW+XiBJBU7My/HF1/WbQxXi1yrP1jG1EfUwV1kZQ RzgGpdL9BBVEWT8= -----END CERTIFICATE-----Generated at Fri Nov 22 11:46:05 2024 by rpki-client on console-ams.rpki-client.org