$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft File: 581a8b49-a06e-4497-972f-fd8792bfe9dd.mft (raw, json) Hash identifier: mdGV9uYi4vQQiABGQvCAOjXeWBliyYhNbKu1qpkfSoY= Subject key identifier: A8:B0:C9:9C:2B:06:6F:59:96:D6:DB:5D:48:3A:26:63:3C:C6:63:B0 Authority key identifier: 70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 Certificate issuer: /CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Certificate serial: 010D0C9F43285845BCD1786625870CD5D77C8900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft Manifest number: 010D0C9F4328584073A84969DC27396999B67C71 Signing time: Thu 02 May 2024 09:00:04 +0000 Manifest this update: Thu 02 May 2024 09:00:04 +0000 Manifest next update: Sun 05 May 2024 09:00:00 +0000 Files and hashes: 1: 0c3f5430-239f-317b-b59b-582d1725d1e6.roa (hash: Uk+ulXOW9JzjHLg3WYTaGmfYGsjdgpdnAkVRfUiIxJE=) 2: 350a606d-940e-30c5-834b-195460eb8f61.roa (hash: wSmY7jJHUckOCWgus7xPXAB64tK4avvkx0S5hQthyDg=) 3: 567679c0-162f-3c85-87b9-979c57a46579.roa (hash: g8+kUrBy55U/sEmBgoYlQviWe1ZkCKoIoj1AMurv6ac=) 4: 581a8b49-a06e-4497-972f-fd8792bfe9dd.crl (hash: 93QGjpQedzEDzLIRR9e8B1AdN9kOpWZPwmKJWOh/aL4=) 5: 6284af02-d42e-3b40-8748-6bee172ebf9c.roa (hash: 5qRfz0saKX9wqfGHSdLB0cFoYVp1+m6YaC4SZlk2g9o=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 05 May 2024 09:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:bc:d1:78:66:25:87:0c:d5:d7:7c:89:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=581a8b49-a06e-4497-972f-fd8792bfe9dd Validity Not Before: May 2 09:00:04 2024 GMT Not After : May 5 09:00:00 2024 GMT Subject: CN=8a6bfbd4-5ad6-4bb1-9b7c-91a323217f24 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cd:d5:18:c5:35:87:b9:2e:62:21:5c:39:68:45: c5:dc:8f:ec:5c:c3:bb:27:bc:d2:3b:d5:2e:3e:ea: 93:b8:7d:81:be:10:78:cd:a3:d4:5e:d3:f4:ee:5a: 5d:11:9f:ab:c3:65:48:e8:0c:fc:76:0b:b5:50:b7: b3:4f:e9:78:30:27:07:7b:38:2d:1e:29:9b:62:65: 3b:29:6f:37:bb:8f:74:fe:8a:f9:0b:eb:cf:1a:63: d8:45:f2:6f:7d:da:b7:cf:a2:1e:21:cb:ba:79:6f: 4f:16:be:67:39:92:74:78:16:b8:45:66:20:54:e8: f2:a2:c9:b3:6d:99:28:bf:46:15:4b:77:cc:e6:4f: 51:e7:5e:bf:43:93:1f:08:ca:c8:8b:12:97:51:a2: c4:32:c0:1e:9e:44:ef:20:35:ee:97:75:fa:d7:28: 38:a7:94:b5:7e:b9:5a:6f:31:d0:d1:77:ba:3f:ce: 2e:9e:37:9f:dc:06:d2:7d:92:ff:f5:d7:97:b0:8b: 7f:87:2a:c1:42:8d:24:6c:e1:fa:10:3d:22:31:36: ee:b3:6e:55:d2:fa:0a:fd:50:2f:3a:22:eb:57:89: b1:ed:6b:25:e4:1a:5b:7e:6f:fc:fd:7d:e4:7e:ea: 17:e0:e6:5b:b4:7c:f6:42:bd:55:e2:04:44:40:0c: 03:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A8:B0:C9:9C:2B:06:6F:59:96:D6:DB:5D:48:3A:26:63:3C:C6:63:B0 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd/581a8b49-a06e-4497-972f-fd8792bfe9dd.crl X509v3 Authority Key Identifier: keyid:70:5F:04:3F:F0:07:01:E7:30:D4:3C:E7:1B:F9:84:EB:62:53:4A:46 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/581a8b49-a06e-4497-972f-fd8792bfe9dd.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:46:08:64:7a:f0:b1:9a:4e:4f:4a:10:26:8c:01:cd:3c:fb: 5d:6c:6e:78:c7:7b:43:5d:5c:73:fd:07:59:4c:09:f7:e5:ab: 93:42:69:b0:65:f8:5b:b2:29:63:97:cb:80:5e:46:ca:ee:6b: c3:82:6c:2f:79:af:97:55:4c:07:69:61:f8:a6:fd:59:8d:5a: c7:34:94:53:12:14:b5:28:7b:ee:0a:50:a2:7b:79:97:3b:d1: a2:7b:16:fc:ed:b5:54:ad:e9:8f:19:c8:13:ac:5d:6f:9c:d8: cd:aa:b1:d7:8b:63:e2:c8:21:12:44:49:db:08:d9:c6:c1:8f: a3:5c:5f:19:d8:d5:54:26:ea:ab:cb:78:ea:c4:4c:b6:e1:78: 6d:35:ac:3f:68:aa:b7:7d:f0:15:b9:c8:b6:65:7a:7c:7f:be: c5:b2:a1:c0:c6:56:ae:86:f9:51:e4:ad:b0:29:5f:eb:69:4f: 58:bc:bc:b7:d3:9a:67:3e:fc:c9:b0:39:67:98:2b:dc:49:f2: b1:9b:50:42:13:7a:b8:c5:95:e3:f5:4c:5f:3b:1b:75:b3:e1: 97:08:57:dd:e2:2b:1a:64:a6:c7:21:e1:23:38:45:a1:9e:ab: 44:33:32:72:e6:dd:6b:4a:ac:a3:99:f0:97:7b:78:b7:75:52: d9:b3:77:82 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEW80XhmJYcM1dd8iQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNTgxYThiNDktYTA2ZS00NDk3LTk3MmYtZmQ4NzkyYmZl OWRkMB4XDTI0MDUwMjA5MDAwNFoXDTI0MDUwNTA5MDAwMFowLzEtMCsGA1UEAxMk OGE2YmZiZDQtNWFkNi00YmIxLTliN2MtOTFhMzIzMjE3ZjI0MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzdUYxTWHuS5iIVw5aEXF3I/sXMO7J7zSO9Uu PuqTuH2BvhB4zaPUXtP07lpdEZ+rw2VI6Az8dgu1ULezT+l4MCcHezgtHimbYmU7 KW83u490/or5C+vPGmPYRfJvfdq3z6IeIcu6eW9PFr5nOZJ0eBa4RWYgVOjyosmz bZkov0YVS3fM5k9R516/Q5MfCMrIixKXUaLEMsAenkTvIDXul3X61yg4p5S1frla bzHQ0Xe6P84unjef3AbSfZL/9deXsIt/hyrBQo0kbOH6ED0iMTbus25V0voK/VAv OiLrV4mx7Wsl5Bpbfm/8/X3kfuoX4OZbtHz2Qr1V4gREQAwDfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFKiwyZwrBm9ZltbbXUg6JmM8xmOwMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ODFh OGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3OTJiZmU5ZGQvNTgxYThiNDktYTA2ZS00 NDk3LTk3MmYtZmQ4NzkyYmZlOWRkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTgxYThiNDktYTA2ZS00NDk3LTk3 MmYtZmQ4NzkyYmZlOWRkLzU4MWE4YjQ5LWEwNmUtNDQ5Ny05NzJmLWZkODc5MmJm ZTlkZC5jcmwwHwYDVR0jBBgwFoAUcF8EP/AHAecw1DznG/mE62JTSkYwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy81ODFhOGI0OS1hMDZlLTQ0OTctOTcyZi1mZDg3 OTJiZmU5ZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQABRghkevCxmk5PShAmjAHN PPtdbG54x3tDXVxz/QdZTAn35auTQmmwZfhbsiljl8uAXkbK7mvDgmwvea+XVUwH aWH4pv1ZjVrHNJRTEhS1KHvuClCie3mXO9Giexb87bVUremPGcgTrF1vnNjNqrHX i2PiyCESREnbCNnGwY+jXF8Z2NVUJuqry3jqxEy24XhtNaw/aKq3ffAVuci2ZXp8 f77FsqHAxlauhvlR5K2wKV/raU9YvLy305pnPvzJsDlnmCvcSfKxm1BCE3q4xZXj 9UxfOxt1s+GXCFfd4isaZKbHIeEjOEWhnqtEMzJy5t1rSqyjmfCXe3i3dVLZs3eC -----END CERTIFICATE-----Generated at Thu May 2 14:53:57 2024 by rpki-client on console-fra.rpki-client.org