$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft File: _YzK5b5juSvdyQt6W3TmlEnB6wQ.mft (raw, json) Hash identifier: M0hdmWD7F5T09EAkZG6GIAUPM0+HFeuEhrQFVHGfW40= Subject key identifier: CB:DF:A4:27:7A:39:DE:3A:9E:5B:AF:C8:6F:E7:FF:D1:52:3D:07:B0 Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 6DB75C1D13F69D1A10F2D3E45A302B27F31CE5E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft Manifest number: 02F3 Signing time: Fri 22 Nov 2024 00:43:12 +0000 Manifest this update: Fri 22 Nov 2024 00:43:12 +0000 Manifest next update: Tue 26 Nov 2024 00:43:12 +0000 Files and hashes: 1: 1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (hash: BP+rBmuqhw45e9mCp06KkyiB6qVtQaC+4ZvVuPX5OeE=) 2: 1e269d38-4454-4adc-9773-b958fab1020e.roa (hash: 9fRuFMa0MwU7LNv0Nxywq5F/PsGRsvzup2x9PfE/w+g=) 3: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (hash: iAaT7Ky/LenM1MbpLHPOcThmzAAL6HqlmJoN9uuH4ZY=) 4: 476b6542-f865-4ad9-a41f-dd015bf0089e.roa (hash: IfPcBOzBiwRSCJi/gzn9aNLNyZBEqDjmRJXa6nfKQXM=) 5: 784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa (hash: 8mbckqS0RKwlc0AmBOX9QH9cS4doHED2ijmRouL6jDU=) 6: _YzK5b5juSvdyQt6W3TmlEnB6wQ.crl (hash: 8pP6suDse7OKr5dhH0WpCfdidKaVoaUYfhmf06X8HPM=) 7: ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa (hash: O5rdhn6tgo4UbOYv+KdDJDvNoPDSX6jcu1H0b8R4Jyg=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6d:b7:5c:1d:13:f6:9d:1a:10:f2:d3:e4:5a:30:2b:27:f3:1c:e5:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: Nov 22 00:43:12 2024 GMT Not After : Nov 26 00:43:12 2024 GMT Subject: serialNumber=b7814ebcc6e5f2eed594bfdad85ebc3347c3f3ead9cbb85542430863663593d9, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:12:b6:63:c2:e8:68:d2:ed:44:31:81:28:ad: bb:43:cc:d2:41:16:52:80:08:f4:0d:c8:46:40:c1: c9:74:ff:69:69:ad:79:03:57:48:eb:48:54:9f:f8: 75:1e:3a:3c:19:97:0d:4f:31:d3:b0:06:ef:48:d0: b9:c6:7e:ad:af:26:fa:ee:31:a3:0a:b3:90:99:50: d7:ab:6e:dc:14:ed:fb:2b:03:06:29:c2:3a:18:00: ed:09:47:bd:19:cc:cf:62:7d:1d:5f:29:5d:25:52: f6:2b:94:63:3b:67:8f:b2:42:f2:44:ba:df:35:82: e9:62:8f:f2:32:85:69:57:b2:98:3d:ad:02:b8:83: fd:dc:fc:c4:9a:6b:8d:d4:2b:36:ad:da:74:ea:24: a4:7d:0c:f9:9f:02:2f:91:1a:8c:cd:96:1c:7b:60: 53:2b:99:c2:aa:10:41:89:07:ef:ef:6d:96:9d:1c: b7:4f:8f:8a:e3:5e:f8:62:dd:64:e8:69:c9:1d:86: 5d:75:f6:08:07:5e:7f:a7:e7:cd:ea:53:81:19:e2: 24:82:5a:0f:f1:c1:66:75:36:4e:30:72:33:9d:bd: c9:73:de:a1:6f:2a:00:30:2b:18:0d:cf:13:12:dc: fc:a5:f8:6e:4d:2e:ee:7a:3e:19:34:e5:c1:b8:6d: 25:57 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CB:DF:A4:27:7A:39:DE:3A:9E:5B:AF:C8:6F:E7:FF:D1:52:3D:07:B0 X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 28:c0:be:44:85:d7:1e:50:75:ae:0f:8a:63:0f:1e:6f:93:72: da:84:69:00:a1:0e:f3:a6:f0:74:07:3b:d3:af:6a:d1:c6:9d: aa:7c:63:e1:91:2c:d6:0a:11:8c:ba:c2:89:84:b4:c0:66:63: e1:10:6c:25:ae:0c:6d:f9:fd:ca:de:b2:04:78:ad:1f:ca:41: 0f:02:29:77:a4:4e:37:15:96:90:c7:a6:aa:61:ec:2d:7d:af: 27:96:44:44:b4:48:c2:c1:5f:d7:00:91:09:a4:78:f2:1a:a7: e8:ca:01:8e:b2:08:34:1e:78:7b:0c:a5:30:f8:3f:75:40:bc: 87:de:41:34:bb:60:87:e1:de:59:a6:94:96:db:f0:80:f9:a0: f9:6c:49:13:71:b4:8d:7d:52:40:f3:5e:12:7e:06:6e:29:3d: cb:f3:2e:88:60:29:00:75:4c:e4:57:f5:39:8d:50:cc:18:94: 76:6b:30:33:36:55:e6:3f:ad:c9:9c:bf:a2:ef:20:03:9a:48: 3b:3f:99:04:a9:ff:5b:44:b9:f9:8b:7d:fd:c0:0b:1d:b1:ad: f4:3f:6c:cc:25:6a:33:9f:77:32:23:e1:2d:4c:2b:fe:0c:b7: f1:62:95:b9:16:84:28:fa:30:a5:19:05:73:94:59:31:e6:aa: 4d:e8:f2:e1 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUbbdcHRP2nRoQ8tPkWjArJ/Mc5ecwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjQxMTIyMDA0MzEyWhcNMjQxMTI2MDA0MzEy WjB6MUkwRwYDVQQFE0BiNzgxNGViY2M2ZTVmMmVlZDU5NGJmZGFkODVlYmMzMzQ3 YzNmM2VhZDljYmI4NTU0MjQzMDg2MzY2MzU5M2Q5MS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC1ErZjwuho0u1EMYEorbtDzNJBFlKACPQNyEZAwcl0/2lp rXkDV0jrSFSf+HUeOjwZlw1PMdOwBu9I0LnGfq2vJvruMaMKs5CZUNerbtwU7fsr AwYpwjoYAO0JR70ZzM9ifR1fKV0lUvYrlGM7Z4+yQvJEut81gulij/IyhWlXspg9 rQK4g/3c/MSaa43UKzat2nTqJKR9DPmfAi+RGozNlhx7YFMrmcKqEEGJB+/vbZad HLdPj4rjXvhi3WToackdhl119ggHXn+n583qU4EZ4iSCWg/xwWZ1Nk4wcjOdvclz 3qFvKgAwKxgNzxMS3Pyl+G5NLu56Phk05cG4bSVXAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUy9+kJ3o53jqeW6/Ib+f/0VI9B7AwHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L19Zeks1YjVqdVN2ZHlRdDZXM1RtbEVuQjZ3US5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYwLWU5N2U1NTJj NmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAowL5E hdceUHWuD4pjDx5vk3LahGkAoQ7zpvB0BzvTr2rRxp2qfGPhkSzWChGMusKJhLTA ZmPhEGwlrgxt+f3K3rIEeK0fykEPAil3pE43FZaQx6aqYewtfa8nlkREtEjCwV/X AJEJpHjyGqfoygGOsgg0Hnh7DKUw+D91QLyH3kE0u2CH4d5ZppSW2/CA+aD5bEkT cbSNfVJA814SfgZuKT3L8y6IYCkAdUzkV/U5jVDMGJR2azAzNlXmP63JnL+i7yAD mkg7P5kEqf9bRLn5i339wAsdsa30P2zMJWozn3cyI+EtTCv+DLfxYpW5FoQo+jCl GQVzlFkx5qpN6PLh -----END CERTIFICATE-----Generated at Fri Nov 22 02:08:44 2024 by rpki-client on console-fra.rpki-client.org