$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft File: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft (raw, json) Hash identifier: Du+SKLw9i46k3b67kLO26WIMFS9MS/DbzS+mFy1P3J8= Subject key identifier: A0:E3:D0:52:F0:1E:58:E9:6F:62:EE:8F:82:E8:F3:47:81:C4:7E:E3 Authority key identifier: 66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 Certificate issuer: /CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Certificate serial: 010D0C9F43285845C7DE6D3E2D33336DA9B4A980 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft Manifest number: 010D0C9F4328584073A84707688B06971843D5C1 Signing time: Mon 06 May 2024 08:00:04 +0000 Manifest this update: Mon 06 May 2024 08:00:04 +0000 Manifest next update: Thu 09 May 2024 08:00:00 +0000 Files and hashes: 1: 210b4d8d-c2de-3228-bebf-b27d5eeb562c.roa (hash: dTFTfQtFpXDBxcxWO7k27sjSEXGxWWzNwFBEuBNJtCs=) 2: 8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl (hash: QAjsZOEugD/Se5p9xNdhY8jl+iXzYoGwi6w1xBcT0tE=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Tue 07 May 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:c7:de:6d:3e:2d:33:33:6d:a9:b4:a9:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e8f2dbe-1f48-4507-8ef9-9732b4b82be3 Validity Not Before: May 6 08:00:04 2024 GMT Not After : May 9 08:00:00 2024 GMT Subject: CN=66f9f359-d678-4191-8ec3-1516d1dc1f13 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:85:ad:d9:86:2e:da:de:89:c2:8d:f4:8d:c7:30: 0c:fc:d5:00:5b:ae:03:fc:f1:dc:ee:a1:39:1f:82: 54:8d:6e:03:0e:68:47:12:de:0a:cd:f4:2b:41:3e: fb:7b:c9:80:cd:bf:19:38:27:29:b6:d4:29:07:9c: ac:cd:85:ef:75:b1:00:7f:de:2d:c5:a9:5f:4e:86: fd:8d:bb:06:f2:09:ad:c6:45:7b:58:e8:9b:2f:6c: 10:a2:de:e6:fa:d9:78:8e:a4:11:82:2b:ef:10:a7: 5e:48:c7:af:bc:b0:d2:be:be:31:df:2a:b3:e4:e4: 48:43:47:ae:cc:33:5c:33:ee:b2:94:f4:86:bc:93: 8f:1f:82:28:4c:67:6e:62:b1:ef:a8:48:0f:8d:96: 0c:61:8e:62:47:40:3b:00:67:1a:3d:2e:d7:1b:5a: 0b:3c:90:e9:f4:15:b2:91:6b:fc:8f:7d:bf:cc:eb: 7b:6d:2b:09:fc:1d:31:8a:a8:dd:9e:89:13:ea:33: 25:5a:83:bc:04:c7:8a:64:46:88:41:40:71:f7:80: f8:5e:89:41:1d:b5:81:d9:2a:8b:bd:52:ef:a4:a0: c1:6d:0b:32:50:e4:ad:eb:46:e7:68:2e:4e:67:62: b1:36:25:eb:65:a4:3f:28:dd:4e:eb:b8:d8:1b:59: da:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A0:E3:D0:52:F0:1E:58:E9:6F:62:EE:8F:82:E8:F3:47:81:C4:7E:E3 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.crl X509v3 Authority Key Identifier: keyid:66:54:89:B1:B8:B9:84:68:D9:D3:C5:23:0C:F0:94:90:41:A3:C8:30 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e8f2dbe-1f48-4507-8ef9-9732b4b82be3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 28:38:6e:4c:a3:21:c5:ee:ac:72:44:b0:99:ab:68:e4:eb:a8: 69:70:76:1c:77:9f:56:c2:0d:28:41:bf:b1:dc:34:8d:a0:0a: 48:06:90:79:17:0b:1a:a6:d7:a5:18:34:98:67:f2:fd:d1:82: f8:34:2a:ad:1d:50:35:5c:39:04:9c:52:23:c4:5f:e1:79:e7: 20:04:f6:9e:f0:20:96:24:88:93:dc:76:63:c1:b1:42:5f:d8: 00:db:7f:71:8d:47:f4:5c:e7:30:a0:c9:fe:3b:bb:3e:ee:6c: c6:e8:00:62:99:50:d0:de:51:a3:80:73:a7:dd:77:47:6e:be: b6:82:06:25:54:51:bc:15:e3:b7:bb:5d:5e:11:8c:b3:84:aa: da:65:19:97:b3:83:2a:e6:db:fa:ae:b2:07:0f:63:7e:2c:f1: fe:94:58:9d:03:d7:2d:3a:a6:8f:42:59:b9:e4:de:ba:42:43: e7:72:f5:25:5b:6e:e2:b3:12:36:af:88:e4:03:ea:0d:e2:36: a9:d5:04:d1:ee:0a:5d:35:b3:10:8f:13:3b:97:b3:c5:98:db: 91:4e:c3:30:6a:4f:46:3d:11:5d:e2:64:09:6e:cd:c4:46:d3: 55:91:0d:e5:32:cf:fc:07:49:87:6d:0a:f9:19:72:a5:00:3e: 51:71:18:f0 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXH3m0+LTMzbam0qYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU4ZjJkYmUtMWY0OC00NTA3LThlZjktOTczMmI0Yjgy YmUzMB4XDTI0MDUwNjA4MDAwNFoXDTI0MDUwOTA4MDAwMFowLzEtMCsGA1UEAxMk NjZmOWYzNTktZDY3OC00MTkxLThlYzMtMTUxNmQxZGMxZjEzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAha3Zhi7a3onCjfSNxzAM/NUAW64D/PHc7qE5 H4JUjW4DDmhHEt4KzfQrQT77e8mAzb8ZOCcpttQpB5yszYXvdbEAf94txalfTob9 jbsG8gmtxkV7WOibL2wQot7m+tl4jqQRgivvEKdeSMevvLDSvr4x3yqz5ORIQ0eu zDNcM+6ylPSGvJOPH4IoTGduYrHvqEgPjZYMYY5iR0A7AGcaPS7XG1oLPJDp9BWy kWv8j32/zOt7bSsJ/B0xiqjdnokT6jMlWoO8BMeKZEaIQUBx94D4XolBHbWB2SqL vVLvpKDBbQsyUOSt60bnaC5OZ2KxNiXrZaQ/KN1O67jYG1nadwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKDj0FLwHljpb2Luj4Lo80eBxH7jMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84ZThm MmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMyYjRiODJiZTMvOGU4ZjJkYmUtMWY0OC00 NTA3LThlZjktOTczMmI0YjgyYmUzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOGU4ZjJkYmUtMWY0OC00NTA3LThl ZjktOTczMmI0YjgyYmUzLzhlOGYyZGJlLTFmNDgtNDUwNy04ZWY5LTk3MzJiNGI4 MmJlMy5jcmwwHwYDVR0jBBgwFoAUZlSJsbi5hGjZ08UjDPCUkEGjyDAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy84ZThmMmRiZS0xZjQ4LTQ1MDctOGVmOS05NzMy YjRiODJiZTMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAoOG5MoyHF7qxyRLCZq2jk 66hpcHYcd59Wwg0oQb+x3DSNoApIBpB5FwsaptelGDSYZ/L90YL4NCqtHVA1XDkE nFIjxF/heecgBPae8CCWJIiT3HZjwbFCX9gA239xjUf0XOcwoMn+O7s+7mzG6ABi mVDQ3lGjgHOn3XdHbr62ggYlVFG8FeO3u11eEYyzhKraZRmXs4Mq5tv6rrIHD2N+ LPH+lFidA9ctOqaPQlm55N66QkPncvUlW27isxI2r4jkA+oN4jap1QTR7gpdNbMQ jxM7l7PFmNuRTsMwak9GPRFd4mQJbs3ERtNVkQ3lMs/8B0mHbQr5GXKlAD5RcRjw -----END CERTIFICATE-----Generated at Mon May 6 09:10:04 2024 by rpki-client on console-fra.rpki-client.org