$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft File: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft (raw, json) Hash identifier: zwXAzhbhewjVRYO+Mrosi9PXwytRnSiZ2sq+5chYyhM= Subject key identifier: C7:E6:AE:F2:49:44:1E:33:4B:6B:05:0A:D6:9E:9A:78:38:64:EE:E8 Authority key identifier: 4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB Certificate issuer: /CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Certificate serial: 010D0C9F43285847F6374264510DB185E7C22900 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft Manifest number: 010D0C9F4328584073A848110A4299D6DF1F1752 Signing time: Fri 22 Nov 2024 08:00:06 +0000 Manifest this update: Fri 22 Nov 2024 08:00:06 +0000 Manifest next update: Mon 25 Nov 2024 08:00:00 +0000 Files and hashes: 1: 7955ed0f-1153-3896-a51e-5d367bf0cc64.roa (hash: x5mYumWKTUJJqOlXdVKghiIN/GtGCRsfG5hFwbiH0bM=) 2: b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl (hash: kDOXYYiko1QH3B57GgYLrYA3qP8gJFBqGJ3NpR+lVPw=) 3: ee1a4e04-68da-38e4-9471-1d40d048b137.roa (hash: TI1+UL8oNuJMr34YPTFaZOoSwMQ378lr73K1KAQWGiA=) 4: ffd9f8d6-0f97-3fc2-87fc-63cc08d4488f.roa (hash: W9jqLkWKPFB7j0A0voi4P8TkQJd5jrLKlHKiWx2vLRc=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f6:37:42:64:51:0d:b1:85:e7:c2:29:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6 Validity Not Before: Nov 22 08:00:06 2024 GMT Not After : Nov 25 08:00:00 2024 GMT Subject: CN=a7eb75b3-351c-46e8-bcbb-d7b59125cb1b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c4:dc:a3:90:d7:58:50:83:29:67:b4:82:c2:30: f3:35:10:11:83:9b:e9:f9:7b:49:1f:1c:09:7c:b5: 89:df:0f:80:70:da:7b:37:aa:5f:b2:d7:40:24:52: 04:6a:30:f1:4e:3c:44:2d:ef:44:8b:f9:fe:04:53: bb:38:63:49:f6:c8:e2:68:6f:56:47:20:52:11:6f: 9d:b3:e9:76:3a:32:00:53:3f:44:57:86:c8:d4:3c: 0b:da:f7:3c:1a:39:85:ec:31:34:28:a5:9f:50:ce: 03:80:f0:7e:bb:04:3c:b9:23:a1:89:8c:ff:2f:0a: 8c:cc:ad:56:9f:82:ed:0f:ac:60:c1:ab:6f:4b:1d: 64:67:f0:39:76:f3:cc:3d:f2:52:54:38:21:59:5a: f5:fd:9b:1a:6c:e8:06:25:18:ca:ad:b6:ff:c9:25: e8:3d:f8:5e:9f:4a:7f:38:79:b3:68:92:e0:74:a4: 66:fd:3f:92:88:96:96:c7:b4:c1:78:74:f1:73:cc: 68:43:0d:a2:f3:c1:a2:69:ba:30:cf:c9:54:bc:75: bf:5f:24:fe:9f:a8:f8:6c:b3:74:1f:19:9e:28:8b: fa:19:9a:98:7f:95:65:cd:5d:ca:94:a5:7e:ee:0a: 57:17:59:ad:e4:64:cd:a2:5a:68:37:e9:55:72:3a: aa:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C7:E6:AE:F2:49:44:1E:33:4B:6B:05:0A:D6:9E:9A:78:38:64:EE:E8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.crl X509v3 Authority Key Identifier: keyid:4F:84:29:20:F1:6A:65:B2:5E:48:CA:51:3F:B5:25:8B:50:8A:F5:FB X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b4d71da9-6ff1-49ab-a1e5-6c48f8f0c1d6.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 7e:98:f4:c2:bb:66:a5:6d:98:2c:d6:44:d2:d7:26:47:da:da: 7a:7e:85:3e:0a:c3:1f:d5:99:11:9e:07:1f:ac:49:d4:ef:d9: 50:9a:b2:8d:1e:cb:fc:0c:4b:e8:ed:73:3a:c9:8b:5e:e5:84: f2:a4:9c:34:0e:0c:8c:c4:44:6c:3f:a7:70:60:f7:b1:d0:91: c9:ff:5f:87:e1:7e:3d:b9:04:8e:e1:56:b0:2b:84:6a:0e:2f: 68:7b:6a:2e:c4:a0:e9:ff:f8:ce:74:07:4c:89:cc:08:0f:67: ab:74:2f:21:ef:b1:a6:cb:86:6b:8b:69:2d:3f:10:40:45:60: 00:18:b3:b0:f7:9d:0f:1b:9e:34:cd:50:89:fd:d6:fe:54:21: 6b:d2:76:26:a4:c1:4b:ef:df:76:5e:ad:a1:71:4b:85:41:39: 8b:20:23:71:53:54:d8:6b:3c:81:23:64:84:fd:c8:a4:1c:bd: 5b:16:a5:41:86:09:be:01:0b:df:20:fe:7f:49:8d:2a:88:1e: bb:0b:ff:a9:57:81:d1:6f:00:b4:17:b6:e5:4f:bc:8c:31:0a: 05:fc:da:55:4d:b3:9b:5a:6f:90:2a:01:50:b6:c9:c4:1c:0d: 83:a6:4b:99:74:73:d3:a7:ad:4a:55:b8:47:5b:ba:07:9f:d0: 19:39:af:e4 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf2N0JkUQ2xhefCKQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjRkNzFkYTktNmZmMS00OWFiLWExZTUtNmM0OGY4ZjBj MWQ2MB4XDTI0MTEyMjA4MDAwNloXDTI0MTEyNTA4MDAwMFowLzEtMCsGA1UEAxMk YTdlYjc1YjMtMzUxYy00NmU4LWJjYmItZDdiNTkxMjVjYjFiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxNyjkNdYUIMpZ7SCwjDzNRARg5vp+XtJHxwJ fLWJ3w+AcNp7N6pfstdAJFIEajDxTjxELe9Ei/n+BFO7OGNJ9sjiaG9WRyBSEW+d s+l2OjIAUz9EV4bI1DwL2vc8GjmF7DE0KKWfUM4DgPB+uwQ8uSOhiYz/LwqMzK1W n4LtD6xgwatvSx1kZ/A5dvPMPfJSVDghWVr1/ZsabOgGJRjKrbb/ySXoPfhen0p/ OHmzaJLgdKRm/T+SiJaWx7TBeHTxc8xoQw2i88Giabowz8lUvHW/XyT+n6j4bLN0 HxmeKIv6GZqYf5VlzV3KlKV+7gpXF1mt5GTNolpoN+lVcjqqAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFMfmrvJJRB4zS2sFCtaemng4ZO7oMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3 MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4ZjhmMGMxZDYvYjRkNzFkYTktNmZmMS00 OWFiLWExZTUtNmM0OGY4ZjBjMWQ2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjRkNzFkYTktNmZmMS00OWFiLWEx ZTUtNmM0OGY4ZjBjMWQ2L2I0ZDcxZGE5LTZmZjEtNDlhYi1hMWU1LTZjNDhmOGYw YzFkNi5jcmwwHwYDVR0jBBgwFoAUT4QpIPFqZbJeSMpRP7Uli1CK9fswDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNGQ3MWRhOS02ZmYxLTQ5YWItYTFlNS02YzQ4 ZjhmMGMxZDYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB+mPTCu2albZgs1kTS1yZH 2tp6foU+CsMf1ZkRngcfrEnU79lQmrKNHsv8DEvo7XM6yYte5YTypJw0DgyMxERs P6dwYPex0JHJ/1+H4X49uQSO4VawK4RqDi9oe2ouxKDp//jOdAdMicwID2erdC8h 77Gmy4Zri2ktPxBARWAAGLOw950PG540zVCJ/db+VCFr0nYmpMFL7992Xq2hcUuF QTmLICNxU1TYazyBI2SE/cikHL1bFqVBhgm+AQvfIP5/SY0qiB67C/+pV4HRbwC0 F7blT7yMMQoF/NpVTbObWm+QKgFQtsnEHA2DpkuZdHPTp61KVbhHW7oHn9AZOa/k -----END CERTIFICATE-----Generated at Fri Nov 22 09:32:29 2024 by rpki-client on console-fra.rpki-client.org