$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft File: 8e52f155-d56d-401a-89c5-76d2d44d8b68.mft (raw, json) Hash identifier: zyDkXDn3xU08+JJVQeOE3MtOCzlIAbvq3XyvDyZMdXk= Subject key identifier: 03:73:59:C5:55:E6:A5:5C:37:75:90:56:47:8F:65:8C:C0:6B:8A:2B Authority key identifier: D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B Certificate issuer: /CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Certificate serial: 010D0C9F43285847F242CBA21FD82577E0C31410 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft Manifest number: 010D0C9F43285844E1DD6403F35822E7E368001A Signing time: Wed 20 Nov 2024 22:00:07 +0000 Manifest this update: Wed 20 Nov 2024 22:00:07 +0000 Manifest next update: Fri 22 Nov 2024 22:00:00 +0000 Files and hashes: 1: 106d4534-03ff-3b5a-adfd-574a34670068.roa (hash: 1y3kk8P8gHDM4tO7Q0pyNYkvNUOU/VRWMo3zF8/IjFs=) 2: 8e52f155-d56d-401a-89c5-76d2d44d8b68.crl (hash: 2HMzmuHVrGQvDg1UsalxzkCTPBb69prb+NudWBMlVE4=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 22 Nov 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f2:42:cb:a2:1f:d8:25:77:e0:c3:14:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=8e52f155-d56d-401a-89c5-76d2d44d8b68 Validity Not Before: Nov 20 22:00:07 2024 GMT Not After : Nov 22 22:00:00 2024 GMT Subject: CN=657e351a-01b5-4ac8-b857-ea83d5d06f18 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:72:0a:bb:23:5f:f2:b1:ba:40:9f:06:10:43: 8a:9c:6c:5e:eb:e6:6a:d7:74:cc:95:33:41:8b:12: f9:cd:fb:5b:b8:68:cc:6c:b1:2f:73:06:6f:c6:a1: 04:6f:a4:9f:41:64:be:1b:d2:8f:49:d2:d0:ca:a9: a7:3d:62:3b:ce:53:bd:c8:c6:33:60:c7:b0:f7:7c: 57:32:85:2b:de:1a:d1:f0:1f:ca:12:e8:94:53:34: 87:1b:b9:b3:b2:ac:0f:ad:7f:d7:ac:a4:ef:fc:d9: 26:d3:ec:bd:1a:09:29:6f:d3:4f:2c:29:da:ac:a5: d1:61:cd:5c:92:e8:f4:13:84:2c:9d:f9:a4:ba:9f: 5b:0d:32:55:a2:27:da:dd:b3:6e:8b:57:7f:41:f0: 41:e4:02:2f:68:61:84:26:28:b9:7b:12:46:7d:be: b6:01:06:52:86:71:e1:83:23:34:39:12:0c:ae:e6: 00:7a:0a:f8:8a:92:ab:55:bb:15:2d:b9:01:cf:42: 41:4c:9d:dc:9c:e0:c7:c9:9a:a9:05:f4:59:ab:64: d7:c7:58:05:bd:d8:80:cd:f0:a6:77:dd:0b:38:1b: 04:8b:84:0c:e1:39:b6:92:7a:10:c1:e2:cb:3f:14: eb:72:f8:a3:ee:d4:78:15:34:b8:16:b7:83:4f:74: 28:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 03:73:59:C5:55:E6:A5:5C:37:75:90:56:47:8F:65:8C:C0:6B:8A:2B Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68/8e52f155-d56d-401a-89c5-76d2d44d8b68.crl X509v3 Authority Key Identifier: keyid:D4:45:7B:41:32:EA:A0:62:00:8F:E3:39:BC:47:EF:91:9A:02:BB:4B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8e52f155-d56d-401a-89c5-76d2d44d8b68.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption c9:07:41:a4:61:b7:b5:41:2a:5a:7e:88:2a:66:b9:7f:5c:dd: 02:04:c2:3c:f4:bc:d1:df:6c:f6:7d:cf:ad:64:32:f2:8c:e9: 3e:70:89:24:a0:d5:02:da:9a:1c:01:06:b0:41:c4:e9:48:62: 97:12:7b:b4:9e:50:bc:83:87:e5:08:43:52:6d:ea:be:e8:bd: 64:8a:b2:59:99:49:b2:c4:da:4c:9e:4e:60:7d:40:24:ed:eb: 0c:80:87:15:45:b1:c8:34:31:c3:7a:24:5a:d1:f3:02:d0:53: a3:2e:02:63:54:b7:7d:5f:2b:8d:f4:f5:51:d9:9e:32:4f:5e: 6a:ed:eb:14:3a:c5:44:75:3b:4d:21:7c:e9:dc:14:f1:e5:ca: 82:71:ee:90:94:32:b8:cd:83:6d:10:c5:2f:6c:98:4a:8a:ed: f4:7a:10:10:da:99:f6:60:2a:0f:ee:6d:90:33:d1:9f:93:6d: 68:61:0b:af:f1:d6:da:5a:90:4e:04:8b:d5:88:d5:12:20:6b: 58:fb:43:36:86:e3:b8:21:a0:ea:f9:29:60:9d:ec:d0:e8:57: 36:da:1b:e8:a1:55:96:ba:79:ca:ef:36:66:3e:ab:34:28:d7: 7b:90:17:3d:a2:c7:f2:ec:07:94:d6:be:9a:3f:2c:81:ae:a5: 89:cf:36:4d -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfyQsuiH9gld+DDFBAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkOGU1MmYxNTUtZDU2ZC00MDFhLTg5YzUtNzZkMmQ0NGQ4 YjY4MB4XDTI0MTEyMDIyMDAwN1oXDTI0MTEyMjIyMDAwMFowLzEtMCsGA1UEAxMk NjU3ZTM1MWEtMDFiNS00YWM4LWI4NTctZWE4M2Q1ZDA2ZjE4MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6XIKuyNf8rG6QJ8GEEOKnGxe6+Zq13TMlTNB ixL5zftbuGjMbLEvcwZvxqEEb6SfQWS+G9KPSdLQyqmnPWI7zlO9yMYzYMew93xX MoUr3hrR8B/KEuiUUzSHG7mzsqwPrX/XrKTv/Nkm0+y9Ggkpb9NPLCnarKXRYc1c kuj0E4Qsnfmkup9bDTJVoifa3bNui1d/QfBB5AIvaGGEJii5exJGfb62AQZShnHh gyM0ORIMruYAegr4ipKrVbsVLbkBz0JBTJ3cnODHyZqpBfRZq2TXx1gFvdiAzfCm d90LOBsEi4QM4Tm2knoQweLLPxTrcvij7tR4FTS4FreDT3QoAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFANzWcVV5qVcN3WQVkePZYzAa4orMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84ZTUy ZjE1NS1kNTZkLTQwMWEtODljNS03NmQyZDQ0ZDhiNjgvOGU1MmYxNTUtZDU2ZC00 MDFhLTg5YzUtNzZkMmQ0NGQ4YjY4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGU1MmYxNTUtZDU2ZC00MDFhLTg5 YzUtNzZkMmQ0NGQ4YjY4LzhlNTJmMTU1LWQ1NmQtNDAxYS04OWM1LTc2ZDJkNDRk OGI2OC5jcmwwHwYDVR0jBBgwFoAU1EV7QTLqoGIAj+M5vEfvkZoCu0swDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz My05YTg4LTViMjJkMmE4MzM3ZC84ZTUyZjE1NS1kNTZkLTQwMWEtODljNS03NmQy ZDQ0ZDhiNjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDJB0GkYbe1QSpafogqZrl/ XN0CBMI89LzR32z2fc+tZDLyjOk+cIkkoNUC2pocAQawQcTpSGKXEnu0nlC8g4fl CENSbeq+6L1kirJZmUmyxNpMnk5gfUAk7esMgIcVRbHINDHDeiRa0fMC0FOjLgJj VLd9XyuN9PVR2Z4yT15q7esUOsVEdTtNIXzp3BTx5cqCce6QlDK4zYNtEMUvbJhK iu30ehAQ2pn2YCoP7m2QM9Gfk21oYQuv8dbaWpBOBIvViNUSIGtY+0M2huO4IaDq +SlgnezQ6Fc22hvooVWWunnK7zZmPqs0KNd7kBc9osfy7AeU1r6aPyyBrqWJzzZN -----END CERTIFICATE-----Generated at Thu Nov 21 18:54:46 2024 by rpki-client on console-ams.rpki-client.org