$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: bNrI3J2bAyLop/9EEhi35L39/i6wqrQWfwUg1PMlmCg= Subject key identifier: 2E:9B:8A:60:44:03:30:F3:D5:41:C9:A0:60:3A:E7:87:39:43:4F:88 Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 4F3AB7B1665DE926070BFFD6E2DA3B0018949155 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 022B Signing time: Sun 19 May 2024 00:03:27 +0000 Manifest this update: Sun 19 May 2024 00:03:27 +0000 Manifest next update: Thu 23 May 2024 00:03:27 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: xRtYqb+bzUTo8zq6IWyvXSy9TouHoCDOZJBvaq3SLGU=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: pCPituvBoRjT1yQ34Ys9KWmuoJ4f5lxCv0fn+2ea0J4=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 18:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:3a:b7:b1:66:5d:e9:26:07:0b:ff:d6:e2:da:3b:00:18:94:91:55 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: May 19 00:03:27 2024 GMT Not After : May 23 00:03:27 2024 GMT Subject: serialNumber=289c3e67c63e3191edbda815451b32fec230ec78d01ad453229a5155045a98ca, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:b7:bb:02:6e:db:83:4c:d3:98:3a:90:23:75: d4:86:57:94:8a:a0:08:3c:f5:6d:3c:19:db:a3:33: 29:51:ba:b8:b5:a8:10:0d:da:e6:9e:33:30:25:2d: a6:91:63:a7:57:7a:98:f1:97:a8:79:3f:7f:4c:f0: 7b:26:b9:eb:91:13:cb:be:a9:df:cc:ef:b6:1d:bc: fc:32:e0:7d:4c:c9:7e:29:53:69:99:71:67:f7:61: 52:b6:89:65:1f:f9:51:be:db:03:be:42:5f:f7:13: f2:b1:06:d7:40:43:21:83:6d:ac:c2:13:c3:ff:23: af:e2:8d:ce:40:b3:94:78:db:be:b4:fe:61:22:45: 64:7b:df:72:08:35:87:b8:ec:9a:88:6c:20:c2:59: 65:23:5d:9e:14:d6:7b:30:7f:c3:03:33:d9:9c:9e: d3:1c:17:04:91:31:0b:76:30:d3:73:89:8c:87:77: f1:be:27:5f:c0:38:d6:5e:cc:ba:b8:69:21:7b:a3: 1b:47:9c:cc:da:46:67:a4:88:69:d8:83:34:06:b7: e4:89:e6:68:4b:63:26:de:43:5d:9c:95:30:78:e6: 50:62:a8:9d:7f:d8:f9:d9:58:2e:dc:37:f6:3c:2a: d3:bd:07:62:25:5f:28:6e:b2:37:94:89:9c:f0:06: e4:cb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 2E:9B:8A:60:44:03:30:F3:D5:41:C9:A0:60:3A:E7:87:39:43:4F:88 X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 26:86:27:fd:d6:46:30:01:4c:fb:4b:4e:a9:78:f2:95:22:39: dc:2c:2e:e8:44:2c:26:a1:44:63:fd:1c:7e:7a:32:a9:df:bc: d7:4f:fa:82:91:f7:c8:d5:24:b7:0d:10:e4:ab:bb:39:8a:12: de:fc:53:21:af:38:ef:62:f2:5a:67:be:c8:5f:79:b9:56:64: 1b:a4:40:1d:07:b8:78:a0:81:68:7d:20:65:5e:f6:06:c7:b5: 7a:02:eb:a5:8a:5e:51:c7:2a:2b:1d:95:11:5b:e5:2b:ab:fb: 43:b3:3e:e1:6a:22:b2:a6:38:c4:0e:fa:a9:ef:13:a9:fd:5e: c1:ed:0b:f7:ce:48:66:ad:68:38:7a:dd:88:7b:0d:bd:33:77: 38:cf:e7:de:81:86:c0:b2:d5:df:97:f8:4a:b8:02:f0:b5:4d: fd:1f:f5:88:9a:65:9b:14:04:55:0d:b2:f3:dd:6f:bd:4a:b9: de:6f:fb:0d:51:c3:6b:9a:0f:17:8c:53:a3:d7:01:64:d4:20: a7:38:e3:37:86:ab:c3:dc:44:73:25:2c:cd:20:7a:92:b0:6c: d0:83:7a:50:34:b9:41:05:87:48:df:49:a5:c1:41:bc:4f:4e: 20:fc:cf:a5:e2:43:dd:bd:88:a0:b1:18:3e:ae:49:c3:48:a8: b5:92:3d:54 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUTzq3sWZd6SYHC//W4to7ABiUkVUwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjQwNTE5MDAwMzI3WhcNMjQwNTIzMDAwMzI3 WjB6MUkwRwYDVQQFE0AyODljM2U2N2M2M2UzMTkxZWRiZGE4MTU0NTFiMzJmZWMy MzBlYzc4ZDAxYWQ0NTMyMjlhNTE1NTA0NWE5OGNhMS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCQt7sCbtuDTNOYOpAjddSGV5SKoAg89W08GdujMylRuri1 qBAN2uaeMzAlLaaRY6dXepjxl6h5P39M8HsmueuRE8u+qd/M77YdvPwy4H1MyX4p U2mZcWf3YVK2iWUf+VG+2wO+Ql/3E/KxBtdAQyGDbazCE8P/I6/ijc5As5R42760 /mEiRWR733IINYe47JqIbCDCWWUjXZ4U1nswf8MDM9mcntMcFwSRMQt2MNNziYyH d/G+J1/AONZezLq4aSF7oxtHnMzaRmekiGnYgzQGt+SJ5mhLYybeQ12clTB45lBi qJ1/2PnZWC7cN/Y8KtO9B2IlXyhusjeUiZzwBuTLAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQULpuKYEQDMPPVQcmgYDrnhzlDT4gwHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAmhif9 1kYwAUz7S06pePKVIjncLC7oRCwmoURj/Rx+ejKp37zXT/qCkffI1SS3DRDkq7s5 ihLe/FMhrzjvYvJaZ77IX3m5VmQbpEAdB7h4oIFofSBlXvYGx7V6Auulil5Rxyor HZURW+Urq/tDsz7haiKypjjEDvqp7xOp/V7B7Qv3zkhmrWg4et2Iew29M3c4z+fe gYbAstXfl/hKuALwtU39H/WImmWbFARVDbLz3W+9Srneb/sNUcNrmg8XjFOj1wFk 1CCnOOM3hqvD3ERzJSzNIHqSsGzQg3pQNLlBBYdI30mlwUG8T04g/M+l4kPdvYig sRg+rknDSKi1kj1U -----END CERTIFICATE-----Generated at Sun May 19 00:59:30 2024 by rpki-client on console-fra.rpki-client.org