$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft File: gRVsLhSv751hliJ-LGA1oJ7w0lc.mft (raw, json) Hash identifier: zXhpz0+T4LaA+I6bbKbCXt6IKO8ocKt/dfTq3Cu/ARs= Subject key identifier: C2:8A:37:42:E7:4B:8E:9E:CC:64:22:B9:93:71:5F:90:B5:63:F9:3D Authority key identifier: 53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 Certificate issuer: /CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Certificate serial: 370EC06104FEB353C5CEC77D81AD16977AE96590 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft Manifest number: 02E7 Signing time: Fri 22 Nov 2024 00:02:54 +0000 Manifest this update: Fri 22 Nov 2024 00:02:54 +0000 Manifest next update: Tue 26 Nov 2024 00:02:54 +0000 Files and hashes: 1: abd82657-873c-4247-976a-fa627e8bd542.roa (hash: ip/5NWXCfTszQEDVF5dDWKJ5CVZ0afgiPW1QbjOcBbg=) 2: gRVsLhSv751hliJ-LGA1oJ7w0lc.crl (hash: /wW6meJgVlt+g9Y5CxnE2ZqHI6+daeo5PFMby6Mwyfg=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/3145ebff-dc84-45a9-b769-efbaaf5779e3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:0e:c0:61:04:fe:b3:53:c5:ce:c7:7d:81:ad:16:97:7a:e9:65:90 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b30530340881156c2e14afef9d6196227e2c6035a09ef0d257 Validity Not Before: Nov 22 00:02:54 2024 GMT Not After : Nov 26 00:02:54 2024 GMT Subject: serialNumber=f83c49cdf4838b677124f489d24c5a137bbc69ea573a7b5c37299923ebbf9eb5, CN=2c2421b9-0ce5-48c5-ac23-91a5565f7afc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:e3:d1:26:a8:37:97:05:4f:87:ec:a1:0e:00: 5a:96:01:f1:be:0a:10:45:b8:bb:0d:fc:3e:a6:a7: 88:9f:3c:e8:d7:93:df:ed:5c:16:c7:99:ed:db:63: 2f:a7:e8:56:0b:bd:b4:cd:40:c1:26:81:8e:5e:b7: 86:f2:1d:22:5c:94:0a:f0:a2:95:0c:1b:bc:4c:9e: 64:e8:73:dc:14:02:85:f6:bf:f7:82:23:08:74:c3: ea:bf:f0:62:ad:8d:ee:f9:12:09:3a:47:c1:ff:39: cd:76:b5:d4:e8:e9:dd:b3:b8:63:2c:8e:22:9f:76: 7b:af:9e:4e:c9:40:bc:24:d8:5f:09:fd:b8:27:aa: 4e:ef:30:4a:23:42:9d:54:ec:14:88:4c:e4:35:c8: 2f:50:8d:15:5e:14:a9:a0:bd:55:5c:cf:ab:96:21: dd:bd:4d:bf:02:9d:c6:12:d3:69:72:c4:aa:7d:9b: ca:ea:5a:4d:40:e1:c4:1e:23:d6:94:53:40:e2:2a: 09:0b:f7:4d:01:35:2b:9f:07:44:2c:b3:40:c0:54: 8e:fe:50:c6:21:28:4e:cc:d7:57:1d:70:4f:ad:ba: d0:f0:fe:55:81:52:e5:f3:08:93:54:a6:8d:ac:de: 6c:fc:30:38:34:14:5e:a6:40:5b:8e:0d:ec:cc:f3: 03:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C2:8A:37:42:E7:4B:8E:9E:CC:64:22:B9:93:71:5F:90:B5:63:F9:3D X509v3 Authority Key Identifier: keyid:53:EE:A0:29:BA:6E:EF:AD:CA:B4:D0:77:98:9D:D5:ED:47:55:B6:70 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3145ebff-dc84-45a9-b769-efbaaf5779e3/b30530340881156c2e14afef9d6196227e2c6035a09ef0d257.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/71e5236f-c6f1-4928-a1b9-8def09c06085/gRVsLhSv751hliJ-LGA1oJ7w0lc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 78:c4:16:5e:f8:ef:e1:2b:5c:c8:e4:c3:e7:cd:67:3d:be:76: 6c:53:49:bd:94:3e:50:2f:39:62:9d:21:dd:2b:c2:6e:57:8f: ea:7c:29:56:ac:e0:f3:45:4c:24:cd:00:89:e8:0a:f9:6e:ad: c8:57:f2:03:d5:4a:15:d6:4f:36:63:85:63:c3:0b:9f:71:da: 35:92:93:64:16:81:84:c9:46:b9:e4:30:c9:ae:0b:ee:d5:2d: da:02:4e:c8:97:da:cd:27:e3:c7:7c:93:c8:5e:33:bf:5b:98: 9e:8b:60:91:ef:e7:2b:2c:ba:af:e1:41:ed:3c:a8:20:9f:f7: 92:a7:bd:27:d7:d2:09:b5:54:73:85:5e:64:56:04:5b:13:ed: 15:aa:3d:f8:aa:ef:9a:f0:07:c6:3e:35:2a:65:04:9b:09:21: 82:ba:df:51:3a:20:90:80:e1:18:ec:12:b2:3a:31:57:f8:b4: a9:15:2b:ca:9d:7a:d3:ce:e5:af:50:42:d0:b4:50:92:46:bb: 99:e2:76:7f:a4:5f:98:b7:66:79:19:20:02:af:fa:f1:2a:68: 6c:c2:a1:2b:74:84:38:9b:7c:e7:43:97:e2:a3:30:88:c4:06: c7:1e:81:64:74:53:53:31:4c:2b:53:90:9d:9e:f1:84:b6:48: fc:65:a7:a1 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUNw7AYQT+s1PFzsd9ga0Wl3rpZZAwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyYjMwNTMwMzQwODgxMTU2YzJlMTRhZmVmOWQ2MTk2MjI3 ZTJjNjAzNWEwOWVmMGQyNTcwHhcNMjQxMTIyMDAwMjU0WhcNMjQxMTI2MDAwMjU0 WjB6MUkwRwYDVQQFE0BmODNjNDljZGY0ODM4YjY3NzEyNGY0ODlkMjRjNWExMzdi YmM2OWVhNTczYTdiNWMzNzI5OTkyM2ViYmY5ZWI1MS0wKwYDVQQDEyQyYzI0MjFi OS0wY2U1LTQ4YzUtYWMyMy05MWE1NTY1ZjdhZmMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCu49EmqDeXBU+H7KEOAFqWAfG+ChBFuLsN/D6mp4ifPOjX k9/tXBbHme3bYy+n6FYLvbTNQMEmgY5et4byHSJclArwopUMG7xMnmToc9wUAoX2 v/eCIwh0w+q/8GKtje75Egk6R8H/Oc12tdTo6d2zuGMsjiKfdnuvnk7JQLwk2F8J /bgnqk7vMEojQp1U7BSITOQ1yC9QjRVeFKmgvVVcz6uWId29Tb8CncYS02lyxKp9 m8rqWk1A4cQeI9aUU0DiKgkL900BNSufB0Qss0DAVI7+UMYhKE7M11cdcE+tutDw /lWBUuXzCJNUpo2s3mz8MDg0FF6mQFuODezM8wMRAgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUwoo3QudLjp7MZCK5k3FfkLVj+T0wHwYDVR0jBBgwFoAUU+6gKbpu763K tNB3mJ3V7UdVtnAwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMTQ1ZWJmZi1k Yzg0LTQ1YTktYjc2OS1lZmJhYWY1Nzc5ZTMvYjMwNTMwMzQwODgxMTU2YzJlMTRh ZmVmOWQ2MTk2MjI3ZTJjNjAzNWEwOWVmMGQyNTcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNzFlNTIzNmYtYzZmMS00OTI4LWExYjktOGRl ZjA5YzA2MDg1L2dSVnNMaFN2NzUxaGxpSi1MR0Exb0o3dzBsYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lLzcxZTUyMzZmLWM2ZjEtNDkyOC1hMWI5LThkZWYwOWMw NjA4NS9nUlZzTGhTdjc1MWhsaUotTEdBMW9KN3cwbGMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQB4xBZe +O/hK1zI5MPnzWc9vnZsU0m9lD5QLzlinSHdK8JuV4/qfClWrODzRUwkzQCJ6Ar5 bq3IV/ID1UoV1k82Y4Vjwwufcdo1kpNkFoGEyUa55DDJrgvu1S3aAk7Il9rNJ+PH fJPIXjO/W5iei2CR7+crLLqv4UHtPKggn/eSp70n19IJtVRzhV5kVgRbE+0Vqj34 qu+a8AfGPjUqZQSbCSGCut9ROiCQgOEY7BKyOjFX+LSpFSvKnXrTzuWvUELQtFCS RruZ4nZ/pF+Yt2Z5GSACr/rxKmhswqErdIQ4m3znQ5fiozCIxAbHHoFkdFNTMUwr U5CdnvGEtkj8Zaeh -----END CERTIFICATE-----Generated at Fri Nov 22 01:34:50 2024 by rpki-client on console-ams.rpki-client.org