$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft File: 5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json) Hash identifier: G3fzLSRtQDnPmMbbzrjcOJWTvk3X39y931E6g6DoGz8= Subject key identifier: BC:FC:C0:FA:25:13:7B:F0:2F:81:51:4C:3E:F2:2B:37:99:EE:0A:52 Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E Certificate issuer: /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Certificate serial: 7BA3C16EA91756336F858BAB96A46A5878B8DC14 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft Manifest number: 02E7 Signing time: Thu 21 Nov 2024 22:03:12 +0000 Manifest this update: Thu 21 Nov 2024 22:03:12 +0000 Manifest next update: Mon 25 Nov 2024 22:03:12 +0000 Files and hashes: 1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: mkrqo/aAZ4fbLamYaEw+rlCj0mfMOUFXYufFoEE1YiA=) 2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: UmVrGPQDu4TsY/pDGOOFQ/CHEdS44JRPDzZD4Z7IyOw=) 3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: UBLhJRTDudXu2VzNhuKKSG+tIeilHZu6LVkVezXAAQk=) 4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: HV03F3jf+ioJ+RBKhnt/J5D5zuvAmLtLW36wPcFOpUI=) Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:a3:c1:6e:a9:17:56:33:6f:85:8b:ab:96:a4:6a:58:78:b8:dc:14 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267 Validity Not Before: Nov 21 22:03:12 2024 GMT Not After : Nov 25 22:03:12 2024 GMT Subject: serialNumber=0877bd8a890209dddc20b75b0758750c9d96cb9c3c1372d3bea01d7630f9c383, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:15:db:e0:89:82:6c:88:02:18:f5:87:cb:d6: 51:37:4e:b3:90:fd:57:d6:25:23:df:c3:b6:ce:e4: 19:a5:80:66:0c:da:ca:f7:03:ad:c2:c0:c3:3a:40: 18:72:76:6c:91:53:03:01:57:95:f2:f5:62:91:7d: 2f:a9:0f:73:6a:6f:9d:ed:fc:00:1c:26:b4:21:6d: 2e:2c:53:6d:93:43:78:28:6b:4b:8a:08:c0:7c:59: 52:65:5b:f0:f7:34:08:d8:95:f6:b6:2c:d4:5f:2b: 9b:4d:82:2d:b5:0c:55:e1:e3:59:d3:fc:bc:51:7a: c4:6c:38:50:9b:d0:5f:cb:63:1c:de:71:d0:26:21: 2f:7d:1b:90:0b:06:93:d7:dd:05:7f:67:ad:23:5b: 0e:f2:51:00:71:04:3e:66:bd:36:8b:be:36:61:37: 55:8f:91:72:f5:38:4f:8e:58:21:b7:57:81:82:e3: 69:77:7f:7f:9a:eb:9a:26:2d:41:23:09:67:cd:5e: 00:50:1a:d8:0f:21:e9:74:a4:96:65:a7:c1:1d:a2: 42:3b:ed:d9:82:2c:67:e1:30:e5:36:51:0c:e0:9a: 70:ae:04:2c:7e:b3:f6:31:e0:93:0e:e8:17:17:b8: c5:68:02:43:9b:60:ea:0c:8a:03:2e:e0:bb:30:30: 8f:37 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: BC:FC:C0:FA:25:13:7B:F0:2F:81:51:4C:3E:F2:2B:37:99:EE:0A:52 X509v3 Authority Key Identifier: keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 6a:d8:d5:13:5c:3a:e9:09:03:8c:ff:ce:79:45:a4:b8:71:d5: d4:63:5b:9c:f6:54:47:9c:83:1d:cd:00:68:70:5b:14:67:86: 6e:e4:18:63:a7:aa:b4:52:fe:31:a4:9d:7b:77:04:3a:42:60: 2f:9d:02:1a:ea:c1:3f:76:f0:4c:30:5c:9d:69:0a:d6:9b:fe: b0:c1:a1:75:2f:64:1d:27:32:fc:ba:d1:d6:d6:6d:d9:a2:f5: ab:54:21:bb:ff:d5:88:ee:87:f4:f1:09:a0:6e:01:e8:a3:25: 73:ca:29:e2:ca:14:c9:be:61:06:b6:83:de:12:7d:e8:2e:0d: 2f:cb:87:0e:cc:22:21:fc:fc:fc:4f:41:35:fe:4b:65:81:96: 10:9e:0a:58:62:6d:cb:6a:03:91:bd:0b:ee:eb:4c:ca:a5:e3: c7:00:4d:37:de:b2:d0:bc:b3:2f:f8:f1:97:cb:22:ef:c0:d0: f3:ab:1e:8d:e3:db:c0:2f:61:8f:a4:54:77:e5:af:b3:2c:9f: bd:ab:c2:f1:a1:31:5b:bf:ac:1b:f6:0f:1b:6a:88:24:68:c3: 46:6b:f3:d9:ba:99:2d:7d:c8:22:73:5a:89:43:2e:90:0a:b1: 2c:e6:e3:c5:be:99:47:df:45:9a:f2:85:d9:f6:64:44:02:98: 83:78:85:e8 -----BEGIN CERTIFICATE----- MIIGCDCCBPCgAwIBAgIUe6PBbqkXVjNvhYurlqRqWHi43BQwDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyNmY5Yjk4NWIwZmU1ZGVmMDliOTk0ZjhjZjYwYmFkOGM5 MDI5YzAwNjU3NzUwYjIyNjcwHhcNMjQxMTIxMjIwMzEyWhcNMjQxMTI1MjIwMzEy WjB6MUkwRwYDVQQFE0AwODc3YmQ4YTg5MDIwOWRkZGMyMGI3NWIwNzU4NzUwYzlk OTZjYjljM2MxMzcyZDNiZWEwMWQ3NjMwZjljMzgzMS0wKwYDVQQDEyQxNWYxNjgz YS1jMGMyLTQyNjYtOWE5Ni1lY2Y5ZWJhMzIzOWMwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQCyFdvgiYJsiAIY9YfL1lE3TrOQ/VfWJSPfw7bO5BmlgGYM 2sr3A63CwMM6QBhydmyRUwMBV5Xy9WKRfS+pD3Nqb53t/AAcJrQhbS4sU22TQ3go a0uKCMB8WVJlW/D3NAjYlfa2LNRfK5tNgi21DFXh41nT/LxResRsOFCb0F/LYxze cdAmIS99G5ALBpPX3QV/Z60jWw7yUQBxBD5mvTaLvjZhN1WPkXL1OE+OWCG3V4GC 42l3f3+a65omLUEjCWfNXgBQGtgPIel0pJZlp8EdokI77dmCLGfhMOU2UQzgmnCu BCx+s/Yx4JMO6BcXuMVoAkObYOoMigMu4LswMI83AgMBAAGjggLBMIICvTAdBgNV HQ4EFgQUvPzA+iUTe/AvgVFMPvIrN5nuClIwHwYDVR0jBBgwFoAUbcpl0HFNfvJW kLwJE9NU26yJKl4wDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz Lzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83Mjc2YjJmYS01 NDhkLTQ5NzAtODMxNC04ZDczOTQ1YzM0ZDgvNmY5Yjk4NWIwZmU1ZGVmMDliOTk0 ZjhjZjYwYmFkOGM5MDI5YzAwNjU3NzUwYjIyNjcuY2VyMIGVBggrBgEFBQcBCwSB iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvYjNmNmI2ODgtY2ZmNC00MDJmLTk3ZDUtMDJm NmYxODg2YjdlLzVkN3dtNWxQalBZTHJZeVFLY0FHVjNVTEltYy5tZnQwgYgGA1Ud HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv bmF3cy5jb20vdm9sdW1lL2IzZjZiNjg4LWNmZjQtNDAyZi05N2Q1LTAyZjZmMTg4 NmI3ZS81ZDd3bTVsUGpQWUxyWXlRS2NBR1YzVUxJbWMuY3JsMBgGA1UdIAEB/wQO MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQBq2NUT XDrpCQOM/855RaS4cdXUY1uc9lRHnIMdzQBocFsUZ4Zu5Bhjp6q0Uv4xpJ17dwQ6 QmAvnQIa6sE/dvBMMFydaQrWm/6wwaF1L2QdJzL8utHW1m3ZovWrVCG7/9WI7of0 8QmgbgHooyVzyiniyhTJvmEGtoPeEn3oLg0vy4cOzCIh/Pz8T0E1/ktlgZYQngpY Ym3LagORvQvu60zKpePHAE033rLQvLMv+PGXyyLvwNDzqx6N49vAL2GPpFR35a+z LJ+9q8LxoTFbv6wb9g8baogkaMNGa/PZupktfcgic1qJQy6QCrEs5uPFvplH30Wa 8oXZ9mREApiDeIXo -----END CERTIFICATE-----Generated at Fri Nov 22 00:23:31 2024 by rpki-client on console-fra.rpki-client.org