$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.mft File: 5d7856f3-fc7a-471b-9168-0c51be45b670.mft (raw, json) Hash identifier: 1/hj/BFE+Dj+HV60VFg0kOGS7R5EGOee2wk9pl3537s= Subject key identifier: DD:60:C4:C5:DB:E5:A3:AC:CE:4C:52:E9:45:9B:3C:11:32:55:4E:6C Authority key identifier: AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08 Certificate issuer: /CN=5d7856f3-fc7a-471b-9168-0c51be45b670 Certificate serial: 010D0C9F43285847FB55857FD2BBE98F03B46E00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.mft Manifest number: 010D0C9F432858451FEE3449154A4DC6EC53808E Signing time: Sun 24 Nov 2024 04:00:07 +0000 Manifest this update: Sun 24 Nov 2024 04:00:07 +0000 Manifest next update: Wed 27 Nov 2024 04:00:00 +0000 Files and hashes: 1: 380e9ba3-ebe2-39db-bb50-176c4fc87849.roa (hash: bIEHJfAamhV+HsDsRA1NlVGI9B8MBUMm2t7Nk6T063k=) 2: 5d7856f3-fc7a-471b-9168-0c51be45b670.crl (hash: QrSoJNEkUf2r3B7FeiOVaeuQzQFIAq2v7c4987wrdkw=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 25 Nov 2024 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:fb:55:85:7f:d2:bb:e9:8f:03:b4:6e:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=5d7856f3-fc7a-471b-9168-0c51be45b670 Validity Not Before: Nov 24 04:00:07 2024 GMT Not After : Nov 27 04:00:00 2024 GMT Subject: CN=15645c88-417d-4a30-85a1-18818402b43d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b1:64:27:92:f7:e2:c2:dc:2c:56:68:49:c1:d0: 13:0f:d8:b0:53:44:a4:62:4f:99:bd:62:16:33:9a: 44:de:37:fa:6d:36:ad:83:0c:d1:25:43:a7:fd:6e: d8:9d:2b:6f:e8:36:6c:e0:aa:60:43:7b:61:9c:06: da:34:dc:e4:b7:9b:14:8c:19:5b:fd:9a:1c:7f:9e: c8:93:86:57:a9:c7:0e:6c:83:61:98:b1:0b:9f:d4: 3f:cf:4a:9a:d9:82:e7:e7:1e:fe:d1:d0:2a:a3:8f: 8f:36:9e:b2:11:8c:bd:11:f2:aa:2c:66:09:7c:fb: 5f:12:84:a5:bb:bb:5a:e2:88:b3:36:26:7d:81:14: ff:0a:2a:fd:1c:eb:69:9e:a3:4f:e4:fe:b7:8e:44: d4:79:d2:78:8d:7d:1b:2c:a8:60:e9:7c:65:bf:b7: 2d:0f:3f:ba:f1:19:13:d3:17:25:74:01:57:25:2b: e5:27:59:dd:9f:19:c0:0b:85:f0:0b:f1:6d:33:1e: c4:a1:7c:b1:b1:49:29:f5:f8:bc:32:98:78:a5:dd: 69:f7:b6:6d:97:fd:da:51:eb:74:8c:e1:e1:eb:23: 43:e5:cb:63:b9:25:ae:c4:95:b2:97:a3:d4:f9:a3: 52:ab:22:fe:8f:ef:8f:06:c9:19:3c:73:20:d7:90: b8:ff Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:60:C4:C5:DB:E5:A3:AC:CE:4C:52:E9:45:9B:3C:11:32:55:4E:6C Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670/5d7856f3-fc7a-471b-9168-0c51be45b670.crl X509v3 Authority Key Identifier: keyid:AD:36:67:9F:20:A8:F2:0D:E2:01:09:35:C7:33:73:76:AD:23:80:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7856f3-fc7a-471b-9168-0c51be45b670.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 48:fb:90:f0:61:f5:8d:82:a4:08:f5:b1:fa:be:24:29:49:af: 39:b3:31:29:bb:c4:21:2d:bf:fc:31:0e:c3:c4:7e:94:2a:1d: e7:15:e1:48:cf:05:71:8b:d8:b4:56:25:11:b5:e0:45:fb:70: 87:67:42:9f:1e:3e:e4:70:1c:08:e2:2a:12:bb:b2:4f:ba:48: fe:39:37:1b:b2:5a:d1:af:38:2c:83:91:c7:d0:49:c8:26:96: cd:51:b0:c5:49:07:62:7a:78:14:bc:b5:0b:4a:93:d8:20:1c: d3:92:36:b5:ea:3d:ce:ee:7e:29:cd:a6:91:f2:08:f4:3c:11: 0b:78:2c:f0:ad:ac:b3:60:cb:62:24:e1:5c:02:36:03:ef:7e: e9:50:29:b1:bf:cb:63:3f:ca:d0:42:2f:4a:40:86:7b:be:dd: fc:03:ae:0f:1c:b9:55:ca:74:e5:e8:25:ad:9b:2d:63:b4:4e: fa:af:6d:4c:6c:b1:5c:27:89:63:9d:1a:b3:c5:d7:33:64:ce: 20:c5:5a:80:d8:22:e9:72:83:67:c3:5e:6b:99:dc:ea:25:05: d6:c2:7b:13:1b:e0:5b:50:b6:cd:57:ef:05:e3:d1:b3:2e:07: 34:3f:f3:75:c2:6e:c5:8d:c4:45:60:ba:82:c7:e5:c1:b8:49: 2c:aa:8d:37 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf7VYV/0rvpjwO0bgAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNWQ3ODU2ZjMtZmM3YS00NzFiLTkxNjgtMGM1MWJlNDVi NjcwMB4XDTI0MTEyNDA0MDAwN1oXDTI0MTEyNzA0MDAwMFowLzEtMCsGA1UEAxMk MTU2NDVjODgtNDE3ZC00YTMwLTg1YTEtMTg4MTg0MDJiNDNkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsWQnkvfiwtwsVmhJwdATD9iwU0SkYk+ZvWIW M5pE3jf6bTatgwzRJUOn/W7YnStv6DZs4KpgQ3thnAbaNNzkt5sUjBlb/Zocf57I k4ZXqccObINhmLELn9Q/z0qa2YLn5x7+0dAqo4+PNp6yEYy9EfKqLGYJfPtfEoSl u7ta4oizNiZ9gRT/Cir9HOtpnqNP5P63jkTUedJ4jX0bLKhg6Xxlv7ctDz+68RkT 0xcldAFXJSvlJ1ndnxnAC4XwC/FtMx7EoXyxsUkp9fi8Mph4pd1p97Ztl/3aUet0 jOHh6yND5ctjuSWuxJWyl6PU+aNSqyL+j++PBskZPHMg15C4/wIDAQABo4IDbjCC A2owHQYDVR0OBBYEFN1gxMXb5aOszkxS6UWbPBEyVU5sMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDc4 NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUxYmU0NWI2NzAvNWQ3ODU2ZjMtZmM3YS00 NzFiLTkxNjgtMGM1MWJlNDViNjcwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ODU2ZjMtZmM3YS00NzFiLTkx NjgtMGM1MWJlNDViNjcwLzVkNzg1NmYzLWZjN2EtNDcxYi05MTY4LTBjNTFiZTQ1 YjY3MC5jcmwwHwYDVR0jBBgwFoAUrTZnnyCo8g3iAQk1xzNzdq0jgAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC81ZDc4NTZmMy1mYzdhLTQ3MWItOTE2OC0wYzUx YmU0NWI2NzAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBI+5DwYfWNgqQI9bH6viQp Sa85szEpu8QhLb/8MQ7DxH6UKh3nFeFIzwVxi9i0ViURteBF+3CHZ0KfHj7kcBwI 4ioSu7JPukj+OTcbslrRrzgsg5HH0EnIJpbNUbDFSQdiengUvLULSpPYIBzTkja1 6j3O7n4pzaaR8gj0PBELeCzwrayzYMtiJOFcAjYD737pUCmxv8tjP8rQQi9KQIZ7 vt38A64PHLlVynTl6CWtmy1jtE76r21MbLFcJ4ljnRqzxdczZM4gxVqA2CLpcoNn w15rmdzqJQXWwnsTG+BbULbNV+8F49GzLgc0P/N1wm7FjcRFYLqCx+XBuEksqo03 -----END CERTIFICATE-----Generated at Sun Nov 24 05:20:36 2024 by rpki-client on console-ams.rpki-client.org