$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft File: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft (raw, json) Hash identifier: 1LZ0EkWU/NtCfJgP3e5qRtWg7KdZamDLhovRxZ0sywg= Subject key identifier: 83:CF:19:30:35:4A:2D:62:7B:27:A3:F9:A8:C3:8F:A2:44:AA:12:4D Authority key identifier: AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 Certificate issuer: /CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Certificate serial: 010D0C9F43285845EAC3FB8B8D7BBE6884E61680 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft Manifest number: 010D0C9F4328584073A825ACC8E0595BA4259AFF Signing time: Sat 18 May 2024 20:00:04 +0000 Manifest this update: Sat 18 May 2024 20:00:04 +0000 Manifest next update: Mon 20 May 2024 20:00:00 +0000 Files and hashes: 1: 98b76af4-cda3-3d94-9551-677ba0cc353a.roa (hash: XYRd9iPSbLndedIZvB9s695Dbnm3g/VSQ8UnTAytqYs=) 2: ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl (hash: EW8tu6DPJSB/mF0BesGFwuIUvnAkMzr0rC7X+gNZrGg=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 20 May 2024 20:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:ea:c3:fb:8b:8d:7b:be:68:84:e6:16:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ac2bd591-b45e-47c6-93f9-83fb4a95e9b4 Validity Not Before: May 18 20:00:04 2024 GMT Not After : May 20 20:00:00 2024 GMT Subject: CN=0ac0bbd0-78dc-49a0-b375-cfcab897ba0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9b:e1:eb:5b:fc:8a:7c:fc:60:91:03:62:03:35: e6:0d:18:a9:10:26:8e:ee:2b:5a:e9:c0:cf:44:10: b4:79:f1:0b:0b:7e:cd:f5:b1:28:60:e2:73:a0:79: ee:e0:28:51:fa:c4:c2:fd:07:60:ec:71:f0:e8:7f: b9:43:a5:dc:2f:b6:d9:bc:3d:4e:6d:45:08:78:b4: 20:99:65:76:a0:5b:53:c4:a1:22:17:6e:50:cd:36: 45:27:0a:36:31:9b:ab:68:c9:11:1a:3e:8c:55:dc: 53:67:18:f6:e5:c7:37:aa:d1:42:a2:a5:29:7f:ae: fb:9c:e6:a9:62:2b:0b:df:01:1f:2f:b5:40:63:26: 60:73:72:50:a6:c4:d1:dd:6a:ab:e9:af:4a:80:e4: 7b:56:7c:0c:0c:81:a4:c4:ca:8b:2b:4c:eb:13:8a: 4a:c6:d9:86:f6:88:95:bc:d3:c0:98:91:70:7a:11: e8:dd:9d:48:df:ca:bd:85:cc:72:5d:19:47:b7:df: 91:e8:95:86:b8:e3:37:26:3a:66:f1:73:87:5c:58: 53:bc:58:62:9d:6a:bf:07:14:3b:22:97:45:ba:d1: 7a:01:c6:3b:d5:1d:97:12:63:0f:98:1b:67:ce:01: b0:44:7a:33:f5:5f:13:9b:d5:84:d6:02:15:6b:27: be:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 83:CF:19:30:35:4A:2D:62:7B:27:A3:F9:A8:C3:8F:A2:44:AA:12:4D Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.crl X509v3 Authority Key Identifier: keyid:AE:45:74:0C:AE:48:17:9D:0A:80:51:1A:46:5B:D0:84:C6:B0:97:87 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/ac2bd591-b45e-47c6-93f9-83fb4a95e9b4.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:c7:08:71:ad:6f:d6:ba:98:16:25:39:30:90:f1:ea:75:3f: 2c:9d:f9:de:5a:9f:c2:fe:5a:3b:c5:d0:8b:1c:2a:ed:6e:3b: f8:ae:ac:44:cd:df:a5:b2:cf:13:83:74:41:86:0c:b1:a2:35: db:fa:a6:f5:e5:33:db:ff:72:a0:35:f2:cd:d1:f9:4d:a9:95: a1:d9:c0:1e:09:8d:78:b6:bb:af:d8:0f:18:11:bb:fb:0d:37: 35:ab:e0:e7:9e:17:b0:37:7c:ec:9a:cb:29:5d:81:c0:28:dd: a0:df:6c:89:b1:cf:ca:e8:08:a1:92:aa:15:4a:6c:5c:cd:c8: 19:c2:dc:89:ef:21:7f:aa:8f:21:f6:9d:26:2f:ae:43:c4:ba: ad:79:ab:08:d9:48:2e:3d:28:a5:21:f1:0c:2e:12:ba:e8:3b: 70:d1:f7:25:bc:f4:ac:e1:7d:19:bf:65:67:cb:fe:81:1c:98: 19:32:86:a5:c4:db:6c:0e:d3:05:5b:cd:e4:99:50:dd:3f:c2: 0c:b5:a3:04:75:94:a0:aa:bb:b9:55:b7:23:e7:17:43:02:42: 45:93:5b:0c:24:22:fc:15:39:6d:be:16:cd:9c:e3:6f:3f:b8: d0:9e:fa:eb:a5:9f:23:7e:f8:07:f0:09:06:93:ef:24:09:e0: 24:3d:f0:d2 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXqw/uLjXu+aITmFoAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYWMyYmQ1OTEtYjQ1ZS00N2M2LTkzZjktODNmYjRhOTVl OWI0MB4XDTI0MDUxODIwMDAwNFoXDTI0MDUyMDIwMDAwMFowLzEtMCsGA1UEAxMk MGFjMGJiZDAtNzhkYy00OWEwLWIzNzUtY2ZjYWI4OTdiYTBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+HrW/yKfPxgkQNiAzXmDRipECaO7ita6cDP RBC0efELC37N9bEoYOJzoHnu4ChR+sTC/Qdg7HHw6H+5Q6XcL7bZvD1ObUUIeLQg mWV2oFtTxKEiF25QzTZFJwo2MZuraMkRGj6MVdxTZxj25cc3qtFCoqUpf677nOap YisL3wEfL7VAYyZgc3JQpsTR3Wqr6a9KgOR7VnwMDIGkxMqLK0zrE4pKxtmG9oiV vNPAmJFwehHo3Z1I38q9hcxyXRlHt9+R6JWGuOM3Jjpm8XOHXFhTvFhinWq/BxQ7 IpdFutF6AcY71R2XEmMPmBtnzgGwRHoz9V8Tm9WE1gIVaye+mQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFIPPGTA1Si1ieyej+ajDj6JEqhJNMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJi ZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2ZiNGE5NWU5YjQvYWMyYmQ1OTEtYjQ1ZS00 N2M2LTkzZjktODNmYjRhOTVlOWI0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWMyYmQ1OTEtYjQ1ZS00N2M2LTkz ZjktODNmYjRhOTVlOWI0L2FjMmJkNTkxLWI0NWUtNDdjNi05M2Y5LTgzZmI0YTk1 ZTliNC5jcmwwHwYDVR0jBBgwFoAUrkV0DK5IF50KgFEaRlvQhMawl4cwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy9hYzJiZDU5MS1iNDVlLTQ3YzYtOTNmOS04M2Zi NGE5NWU5YjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABxwhxrW/WupgWJTkwkPHq dT8snfneWp/C/lo7xdCLHCrtbjv4rqxEzd+lss8Tg3RBhgyxojXb+qb15TPb/3Kg NfLN0flNqZWh2cAeCY14truv2A8YEbv7DTc1q+DnnhewN3zsmsspXYHAKN2g32yJ sc/K6AihkqoVSmxczcgZwtyJ7yF/qo8h9p0mL65DxLqteasI2UguPSilIfEMLhK6 6Dtw0fclvPSs4X0Zv2Vny/6BHJgZMoalxNtsDtMFW83kmVDdP8IMtaMEdZSgqru5 Vbcj5xdDAkJFk1sMJCL8FTltvhbNnONvP7jQnvrrpZ8jfvgH8AkGk+8kCeAkPfDS -----END CERTIFICATE-----Generated at Sat May 18 20:49:01 2024 by rpki-client on console-fra.rpki-client.org