$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft File: _YzK5b5juSvdyQt6W3TmlEnB6wQ.mft (raw, json) Hash identifier: ObEKGWOBEgHySsfpDv4NlogFv87s864QXIIsjoOPY3I= Subject key identifier: 43:B3:26:29:21:AB:04:96:C2:32:FE:00:3E:03:1A:C1:F0:03:BB:BF Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 Certificate issuer: /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Certificate serial: 238909FC2A3FB9CB3C6084C83AE73FCAB5DD40C9 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft Manifest number: 0225 Signing time: Wed 01 May 2024 15:02:08 +0000 Manifest this update: Wed 01 May 2024 15:02:08 +0000 Manifest next update: Sun 05 May 2024 15:02:08 +0000 Files and hashes: 1: 1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (hash: epih1wMRnyPidK7Q8s6o03AG4CBGBOmPA7SIz/hNXu8=) 2: 1e269d38-4454-4adc-9773-b958fab1020e.roa (hash: 5oOpMr1TF9JODBE5w5JeAYX+zc1m/Hc3pKbnbvn4wXQ=) 3: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (hash: m6MROWBUdz++O31/h18xAo6cZqVGuqjFlZzqZ2etLzQ=) 4: 476b6542-f865-4ad9-a41f-dd015bf0089e.roa (hash: XYC9byW0MgPXCfAjE5jVFflEQUoW1AEczaqi9X0S/uE=) 5: 784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa (hash: TBfRPBlY7D+ThorFVqQn3YnXkSVs+bQxbHN1aiRQIIM=) 6: _YzK5b5juSvdyQt6W3TmlEnB6wQ.crl (hash: lKHTRmrEhT8S7RDb+g49EMgzBdHWswWCqditS9JoLjw=) 7: ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa (hash: rfW43yBJeuRbx1ahaUHy2pLuFrP9VZD7GAi86NUJNdY=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 03 May 2024 00:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 23:89:09:fc:2a:3f:b9:cb:3c:60:84:c8:3a:e7:3f:ca:b5:dd:40:c9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04 Validity Not Before: May 1 15:02:08 2024 GMT Not After : May 5 15:02:08 2024 GMT Subject: serialNumber=831a22fc430df387cb6db4a8dc1845d9ec4d2d1a7dd26513be5dc87de7387581, CN=0099a7ea-794a-4a28-b164-49547626eb11 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:6b:f7:1b:00:bd:a6:6d:b3:72:94:b6:d3:0d: df:bf:dd:4a:25:26:33:94:38:5c:09:60:86:9b:4f: 5f:58:ba:eb:c7:93:bd:95:ad:0f:cc:3b:28:8f:fe: 6c:6d:d2:51:53:e4:19:ed:a3:7a:46:a3:e6:b1:26: 3a:de:3a:0d:4e:2c:44:1c:e9:77:d4:00:7a:68:c3: 83:ca:ad:86:2d:c9:eb:ff:8a:ce:c8:22:6a:c9:a9: f8:8c:9f:c5:50:bb:6d:0c:a3:77:a0:09:21:12:6b: 89:a5:de:cb:39:90:22:2d:33:4e:bc:8d:fb:c7:99: 8a:84:54:e7:81:ca:17:ee:e4:ae:3d:b2:d3:bd:29: 0f:3d:c7:d4:ce:70:14:67:d0:61:7d:d1:11:fd:2e: 6c:d8:c6:99:05:93:5f:b0:56:1d:91:c7:16:69:ff: bb:75:67:39:93:84:0a:e3:68:ef:97:6e:f5:39:4c: a3:28:bc:78:df:2d:49:5b:57:fe:f0:81:17:39:cb: e4:ac:8d:e5:d6:07:58:c9:11:6a:48:3c:37:d5:24: d2:d6:fe:0b:db:a8:be:de:b3:d2:23:58:bc:02:09: b7:d1:d4:d1:bc:b0:67:9f:65:f6:66:89:76:f6:30: ff:26:90:03:0f:ca:ec:9c:6a:4d:a9:97:75:16:7f: 15:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 43:B3:26:29:21:AB:04:96:C2:32:FE:00:3E:03:1A:C1:F0:03:BB:BF X509v3 Authority Key Identifier: keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 67:ac:ea:68:0c:44:41:f5:28:36:5a:f7:27:25:6e:00:90:c7: c9:fd:b8:b6:09:fd:3f:9e:57:6e:eb:3c:6b:00:55:51:48:77: 5d:0b:6a:17:84:10:00:c8:34:9f:f2:b9:14:65:69:23:09:34: 45:c2:22:40:79:b0:57:ca:0f:ef:94:6b:c9:50:c6:cb:34:64: 0c:8a:6a:7d:67:a4:82:36:e2:20:5a:04:c2:77:68:aa:ca:fd: 99:92:ac:d6:a1:a3:55:99:74:d9:86:da:1d:7f:31:27:a3:23: 86:75:67:93:e3:0c:4f:06:e8:1e:22:cc:9e:c3:71:db:50:51: 1d:53:8e:70:aa:e4:52:b9:0b:b1:61:d0:27:88:4d:7c:74:12: 2a:c6:f5:dd:5d:3d:b8:81:f2:b3:1b:9b:e6:3d:14:1d:c4:b8: 20:19:8a:f0:d9:e7:6a:78:55:a4:b4:fa:d3:91:39:fc:6a:d0: 27:31:28:1f:be:86:27:fd:0b:7b:81:5c:e3:97:dc:d7:b8:e1: a8:31:58:30:87:b7:24:ff:b8:0c:8e:0c:ff:25:88:b3:0f:98: 33:bb:f3:e5:37:c0:f3:03:21:c5:54:e3:b4:bd:04:7d:89:a8: ba:e2:85:85:49:d2:c8:22:5e:b3:c6:86:ce:4f:bf:76:cd:6d: 50:88:db:64 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUI4kJ/Co/ucs8YITIOuc/yrXdQMkwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3 YTViNzRlNjk0NDljMWViMDQwHhcNMjQwNTAxMTUwMjA4WhcNMjQwNTA1MTUwMjA4 WjB6MUkwRwYDVQQFE0A4MzFhMjJmYzQzMGRmMzg3Y2I2ZGI0YThkYzE4NDVkOWVj NGQyZDFhN2RkMjY1MTNiZTVkYzg3ZGU3Mzg3NTgxMS0wKwYDVQQDEyQwMDk5YTdl YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQDNa/cbAL2mbbNylLbTDd+/3UolJjOUOFwJYIabT19YuuvH k72VrQ/MOyiP/mxt0lFT5Bnto3pGo+axJjreOg1OLEQc6XfUAHpow4PKrYYtyev/ is7IImrJqfiMn8VQu20Mo3egCSESa4ml3ss5kCItM068jfvHmYqEVOeByhfu5K49 stO9KQ89x9TOcBRn0GF90RH9LmzYxpkFk1+wVh2RxxZp/7t1ZzmThArjaO+XbvU5 TKMovHjfLUlbV/7wgRc5y+SsjeXWB1jJEWpIPDfVJNLW/gvbqL7es9IjWLwCCbfR 1NG8sGefZfZmiXb2MP8mkAMPyuycak2pl3UWfxUFAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUQ7MmKSGrBJbCMv4APgMawfADu78wHwYDVR0jBBgwFoAUmcNUTAjJlFS4 eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05 YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2 M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3 ZTU1MmM2ZTM1L19Zeks1YjVqdVN2ZHlRdDZXM1RtbEVuQjZ3US5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYwLWU5N2U1NTJj NmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBnrOpo DERB9Sg2WvcnJW4AkMfJ/bi2Cf0/nldu6zxrAFVRSHddC2oXhBAAyDSf8rkUZWkj CTRFwiJAebBXyg/vlGvJUMbLNGQMimp9Z6SCNuIgWgTCd2iqyv2ZkqzWoaNVmXTZ htodfzEnoyOGdWeT4wxPBugeIsyew3HbUFEdU45wquRSuQuxYdAniE18dBIqxvXd XT24gfKzG5vmPRQdxLggGYrw2edqeFWktPrTkTn8atAnMSgfvoYn/Qt7gVzjl9zX uOGoMVgwh7ck/7gMjgz/JYizD5gzu/PlN8DzAyHFVOO0vQR9iai64oWFSdLIIl6z xobOT792zW1QiNtk -----END CERTIFICATE-----Generated at Wed May 1 15:36:01 2024 by rpki-client on console-ams.rpki-client.org