$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft File: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft (raw, json) Hash identifier: 6yDS1Mvub4hXYGnBDvk/80ldCYD+ouLC4j9COZ9AWNc= Subject key identifier: 3F:8D:6D:B0:30:AE:A5:2C:93:BB:64:06:C6:67:FD:1F:14:AD:18:95 Authority key identifier: 60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C Certificate issuer: /CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Certificate serial: 010D0C9F43285847F6197E46114160AC7AFCF600 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft Manifest number: 010D0C9F4328584073A846314C8AB161C39A3240 Signing time: Fri 22 Nov 2024 07:00:07 +0000 Manifest this update: Fri 22 Nov 2024 07:00:07 +0000 Manifest next update: Mon 25 Nov 2024 07:00:00 +0000 Files and hashes: 1: 95cbce52-a0f0-382c-8b81-d23c70ca3529.roa (hash: MFXhLDBoAF3GoXPwNKQTRd8zqghT427XHAAFGziXqJ4=) 2: b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl (hash: Btv7fdsNxzi62/ypKbG401wADJN4g+BoCch7GfD5KEI=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sat 23 Nov 2024 13:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f6:19:7e:46:11:41:60:ac:7a:fc:f6:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b5c2fe78-a447-40d9-8e11-9c9e6f81d082 Validity Not Before: Nov 22 07:00:07 2024 GMT Not After : Nov 25 07:00:00 2024 GMT Subject: CN=061e2513-b9b7-48db-a27f-ea4a53646629 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a6:62:06:50:a2:74:ed:d7:06:f8:79:4b:eb:66: bd:b3:93:1b:c8:68:e7:9e:19:2f:0a:5e:6c:12:3c: 78:d5:4a:79:0f:fe:b6:59:e9:38:72:94:99:3c:9f: 93:b7:de:65:72:38:da:4a:95:b4:0b:26:9e:54:f8: 04:fe:50:24:31:09:a6:f0:b2:98:c4:e7:aa:07:16: 51:8f:c9:bd:4b:5a:ce:1a:0f:b7:1f:e8:38:f2:f2: 5f:c3:f4:64:36:55:13:9f:aa:02:fd:d9:3c:fa:01: c3:1a:6d:b4:6c:5f:12:3c:5f:e1:fa:9e:cf:44:f9: d7:9d:09:ef:96:30:84:5b:26:7a:ed:a6:3a:8d:ae: 5b:c1:e6:67:92:1a:3b:ac:d5:26:5d:9d:e6:93:f2: b3:60:80:56:fa:4a:f3:45:0f:39:f8:2a:e5:b4:5e: d0:44:2c:93:80:b1:de:c7:02:bb:68:45:0a:45:d9: e8:72:cd:b9:0d:38:83:c9:71:42:15:61:29:da:77: 99:13:a5:de:38:3a:ae:83:4d:7b:98:1d:ca:78:0f: 39:d9:c1:db:08:fc:b0:14:c6:4c:d7:38:66:34:be: a5:08:70:4d:03:94:c1:31:59:19:93:22:b8:c2:35: 3e:6c:7e:09:58:68:ba:19:58:92:28:a9:ca:97:ee: e4:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3F:8D:6D:B0:30:AE:A5:2C:93:BB:64:06:C6:67:FD:1F:14:AD:18:95 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.crl X509v3 Authority Key Identifier: keyid:60:43:F6:F3:6A:ED:68:82:B1:F2:00:6E:DA:49:2B:6B:0F:63:55:9C X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5c2fe78-a447-40d9-8e11-9c9e6f81d082.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption b2:d1:eb:f0:e7:9f:7a:62:c6:b1:be:cd:c3:1f:6d:61:56:5d: 31:6b:91:89:85:69:f2:c3:b8:82:95:3a:dc:14:62:ed:c9:96: e0:81:e9:d6:9f:30:71:f6:71:25:88:f0:ad:b7:68:1e:6b:38: 70:d4:26:d2:16:29:9d:80:ac:62:cc:20:db:bb:b0:99:23:9f: 00:fb:d4:34:37:66:66:69:44:f5:c7:09:8a:16:c6:54:62:23: 9c:13:85:96:66:5c:d3:9c:65:80:1d:30:a3:27:69:8f:8b:e4: b3:83:af:59:15:a6:c0:06:57:32:03:7b:03:93:be:a7:c5:0f: 65:b6:fc:8f:e9:91:01:bc:fe:51:9d:fe:55:10:1a:af:14:ef: 46:d4:9c:8a:c1:8c:24:b2:cc:1c:35:23:b7:94:a3:86:32:61: 49:f1:a8:84:22:d6:1e:23:68:26:a4:5e:91:d1:50:37:8f:80: d8:bb:9a:67:1b:1d:1e:18:12:65:3f:d1:0c:2f:a1:59:7f:50: cf:d1:b1:f8:d1:58:64:fe:3d:55:eb:7c:15:e8:82:8c:2b:31: 75:53:7a:7f:82:f5:01:64:e6:b9:43:c1:41:67:25:22:14:ad: e6:02:39:78:2a:67:75:ef:cd:0b:27:5c:6e:9e:e6:c2:57:92: 39:90:0b:a3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf2GX5GEUFgrHr89gAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjVjMmZlNzgtYTQ0Ny00MGQ5LThlMTEtOWM5ZTZmODFk MDgyMB4XDTI0MTEyMjA3MDAwN1oXDTI0MTEyNTA3MDAwMFowLzEtMCsGA1UEAxMk MDYxZTI1MTMtYjliNy00OGRiLWEyN2YtZWE0YTUzNjQ2NjI5MIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmIGUKJ07dcG+HlL62a9s5MbyGjnnhkvCl5s Ejx41Up5D/62Wek4cpSZPJ+Tt95lcjjaSpW0CyaeVPgE/lAkMQmm8LKYxOeqBxZR j8m9S1rOGg+3H+g48vJfw/RkNlUTn6oC/dk8+gHDGm20bF8SPF/h+p7PRPnXnQnv ljCEWyZ67aY6ja5bweZnkho7rNUmXZ3mk/KzYIBW+krzRQ85+CrltF7QRCyTgLHe xwK7aEUKRdnocs25DTiDyXFCFWEp2neZE6XeODqug017mB3KeA852cHbCPywFMZM 1zhmNL6lCHBNA5TBMVkZkyK4wjU+bH4JWGi6GViSKKnKl+7krwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFD+NbbAwrqUsk7tkBsZn/R8UrRiVMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMy ZmU3OC1hNDQ3LTQwZDktOGUxMS05YzllNmY4MWQwODIvYjVjMmZlNzgtYTQ0Ny00 MGQ5LThlMTEtOWM5ZTZmODFkMDgyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05 NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjVjMmZlNzgtYTQ0Ny00MGQ5LThl MTEtOWM5ZTZmODFkMDgyL2I1YzJmZTc4LWE0NDctNDBkOS04ZTExLTljOWU2Zjgx ZDA4Mi5jcmwwHwYDVR0jBBgwFoAUYEP282rtaIKx8gBu2kkraw9jVZwwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk OS1hY2NlLTEzNzIyN2U5NzFhYy9iNWMyZmU3OC1hNDQ3LTQwZDktOGUxMS05Yzll NmY4MWQwODIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCy0evw5596Ysaxvs3DH21h Vl0xa5GJhWnyw7iClTrcFGLtyZbggenWnzBx9nEliPCtt2geazhw1CbSFimdgKxi zCDbu7CZI58A+9Q0N2ZmaUT1xwmKFsZUYiOcE4WWZlzTnGWAHTCjJ2mPi+Szg69Z FabABlcyA3sDk76nxQ9ltvyP6ZEBvP5Rnf5VEBqvFO9G1JyKwYwksswcNSO3lKOG MmFJ8aiEItYeI2gmpF6R0VA3j4DYu5pnGx0eGBJlP9EML6FZf1DP0bH40Vhk/j1V 63wV6IKMKzF1U3p/gvUBZOa5Q8FBZyUiFK3mAjl4Kmd1780LJ1xunubCV5I5kAuj -----END CERTIFICATE-----Generated at Fri Nov 22 08:14:12 2024 by rpki-client on console-fra.rpki-client.org