$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft File: 4aa1bbde-87c2-49af-9803-d7934d656ff3.mft (raw, json) Hash identifier: yeRTZF91klQMLH5znRvSVICRjr2PtAYUQpv2X2qXn14= Subject key identifier: B1:DE:15:63:4F:07:4C:86:F2:A8:FE:D9:B6:F3:BA:C5:E7:5D:58:8A Authority key identifier: EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB Certificate issuer: /CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Certificate serial: 010D0C9F43285847F38A5A59739F965FDEC3C580 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft Manifest number: 010D0C9F4328584073A84AD0B7C4CF31CF02233F Signing time: Thu 21 Nov 2024 09:00:06 +0000 Manifest this update: Thu 21 Nov 2024 09:00:06 +0000 Manifest next update: Sat 23 Nov 2024 09:00:00 +0000 Files and hashes: 1: 4aa1bbde-87c2-49af-9803-d7934d656ff3.crl (hash: gzxTh8SpaMHMnRaFL5UsptjGpciaT3pAq7Ud+9GYzWo=) 2: fc89a642-5803-37de-88d2-fbe8648bdde9.roa (hash: t8NMLzSdYTlfbtoIFF2cySaYXrGlY+xJzsB51jTAGGo=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f3:8a:5a:59:73:9f:96:5f:de:c3:c5:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=4aa1bbde-87c2-49af-9803-d7934d656ff3 Validity Not Before: Nov 21 09:00:06 2024 GMT Not After : Nov 23 09:00:00 2024 GMT Subject: CN=8d3f8ce1-22d3-45aa-bce4-c4c82810876b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:3d:23:82:1a:cd:d2:03:c9:0a:96:6e:1b:e2: f5:bd:52:ab:ff:36:e7:e0:2c:e0:8a:f5:ac:08:7d: 85:5d:12:55:47:06:76:75:ed:79:b1:e0:0f:69:f8: ca:b9:6b:a1:e8:75:78:22:69:92:52:51:48:a0:b9: 1e:7a:9c:73:00:74:10:b5:e2:15:11:e0:1a:6c:85: ea:17:db:ae:26:10:cb:1c:ae:b5:07:6f:4f:df:f6: a2:34:34:cd:9e:9a:7f:45:83:d2:ff:8e:f3:8e:4e: 70:f3:9c:82:67:88:7a:3b:a3:a2:41:5a:5e:88:e0: 85:79:3e:c8:2f:38:b4:c0:73:c5:65:c1:cd:60:b8: 4f:6b:e7:10:35:0b:72:b0:4b:c8:0a:22:0d:1b:a5: 9c:90:a5:83:8b:73:90:c1:c9:3e:d8:d9:10:4c:78: c1:b9:b9:d9:bf:5d:fa:7b:c0:32:bf:2e:bb:5c:8e: 25:9a:33:c4:c4:76:bc:fa:13:82:6a:7b:60:0c:98: a0:cc:53:49:1b:eb:f9:2b:6b:b1:23:a3:16:20:c1: d6:9c:04:22:86:60:6c:35:14:02:2c:26:c4:90:19: c5:f2:ae:ea:df:e9:5a:7b:4e:b6:84:43:f9:d0:7a: 3e:61:72:ed:d8:1a:fa:7d:85:e9:46:04:09:32:3c: 12:47 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: B1:DE:15:63:4F:07:4C:86:F2:A8:FE:D9:B6:F3:BA:C5:E7:5D:58:8A Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3/4aa1bbde-87c2-49af-9803-d7934d656ff3.crl X509v3 Authority Key Identifier: keyid:EC:8C:03:31:03:DC:6A:88:5B:2B:77:1B:9D:2E:FC:79:9A:DA:90:EB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4aa1bbde-87c2-49af-9803-d7934d656ff3.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 72:99:d5:8b:b4:42:b6:7b:c4:6b:f6:a6:4c:d5:a4:d1:07:3e: 55:cd:85:8c:87:04:ba:cb:f4:ff:9b:36:28:cf:6c:91:1a:ff: 2b:dc:1e:6b:65:38:d2:ee:02:c8:ff:c3:f0:35:5e:d7:08:f4: 28:43:b0:80:b1:91:b2:ec:71:d1:1d:18:8b:b2:1c:5e:fb:7c: 24:35:1e:2c:b8:66:ff:70:85:1b:f1:20:cc:e3:ae:7b:0c:52: 85:98:d2:c3:ff:86:65:ed:0d:8c:c3:28:21:b1:60:64:ba:2a: bc:4a:a8:df:85:83:28:6e:a4:ad:c0:40:d6:32:cb:66:2d:e6: 7d:cd:18:a8:ae:b5:ee:18:b4:46:10:f5:af:69:45:66:ff:2a: db:84:20:f8:26:3b:04:bb:58:b6:fc:b5:bb:54:46:b6:00:4c: 06:14:c3:e5:ea:78:f1:b3:94:fa:4f:ae:72:90:fc:67:72:9b: ac:27:1a:e4:71:da:09:f9:91:8d:e2:3c:b6:72:d6:23:9d:6a: c7:07:3d:e8:91:22:80:08:da:df:c2:97:22:45:3f:68:48:9c: c3:13:62:a1:0c:ca:98:ed:11:ca:b4:52:e3:ec:0c:92:d8:f5: ac:18:f2:7b:e0:cd:9a:22:23:25:da:a5:d4:06:82:63:79:3f: 62:ea:a9:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfzilpZc5+WX97DxYAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNGFhMWJiZGUtODdjMi00OWFmLTk4MDMtZDc5MzRkNjU2 ZmYzMB4XDTI0MTEyMTA5MDAwNloXDTI0MTEyMzA5MDAwMFowLzEtMCsGA1UEAxMk OGQzZjhjZTEtMjJkMy00NWFhLWJjZTQtYzRjODI4MTA4NzZiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzD0jghrN0gPJCpZuG+L1vVKr/zbn4CzgivWs CH2FXRJVRwZ2de15seAPafjKuWuh6HV4ImmSUlFIoLkeepxzAHQQteIVEeAabIXq F9uuJhDLHK61B29P3/aiNDTNnpp/RYPS/47zjk5w85yCZ4h6O6OiQVpeiOCFeT7I Lzi0wHPFZcHNYLhPa+cQNQtysEvICiING6WckKWDi3OQwck+2NkQTHjBubnZv136 e8Ayvy67XI4lmjPExHa8+hOCantgDJigzFNJG+v5K2uxI6MWIMHWnAQihmBsNRQC LCbEkBnF8q7q3+lae062hEP50Ho+YXLt2Br6fYXpRgQJMjwSRwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFLHeFWNPB0yG8qj+2bbzusXnXViKMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80YWEx YmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkzNGQ2NTZmZjMvNGFhMWJiZGUtODdjMi00 OWFmLTk4MDMtZDc5MzRkNjU2ZmYzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGFhMWJiZGUtODdjMi00OWFmLTk4 MDMtZDc5MzRkNjU2ZmYzLzRhYTFiYmRlLTg3YzItNDlhZi05ODAzLWQ3OTM0ZDY1 NmZmMy5jcmwwHwYDVR0jBBgwFoAU7IwDMQPcaohbK3cbnS78eZrakOswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy80YWExYmJkZS04N2MyLTQ5YWYtOTgwMy1kNzkz NGQ2NTZmZjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBymdWLtEK2e8Rr9qZM1aTR Bz5VzYWMhwS6y/T/mzYoz2yRGv8r3B5rZTjS7gLI/8PwNV7XCPQoQ7CAsZGy7HHR HRiLshxe+3wkNR4suGb/cIUb8SDM4657DFKFmNLD/4Zl7Q2MwyghsWBkuiq8Sqjf hYMobqStwEDWMstmLeZ9zRiorrXuGLRGEPWvaUVm/yrbhCD4JjsEu1i2/LW7VEa2 AEwGFMPl6njxs5T6T65ykPxncpusJxrkcdoJ+ZGN4jy2ctYjnWrHBz3okSKACNrf wpciRT9oSJzDE2KhDMqY7RHKtFLj7AyS2PWsGPJ74M2aIiMl2qXUBoJjeT9i6qmj -----END CERTIFICATE-----Generated at Fri Nov 22 04:37:04 2024 by rpki-client on console-ams.rpki-client.org