$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft File: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft (raw, json) Hash identifier: FCiLjuHX7yzsa0mMxLWMcDNxCehrjsBZAU/CHb/oOIc= Subject key identifier: 5D:F4:0C:08:21:79:4F:46:B2:2C:C5:2C:A5:09:6F:14:87:50:4F:27 Authority key identifier: CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A Certificate issuer: /CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Certificate serial: 010D0C9F432858460F4B6E1AAC7B5C7F9161A610 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft Manifest number: 010D0C9F43285842C17DF555B8C50D6E9612E5B6 Signing time: Fri 31 May 2024 22:02:05 +0000 Manifest this update: Fri 31 May 2024 22:02:05 +0000 Manifest next update: Sun 02 Jun 2024 22:00:00 +0000 Files and hashes: 1: 07afdb5b-f339-3a1f-908a-2b5c92044eaa.roa (hash: Gf362Sp4+2HLlf5XlBLWnGBmeO3FsChoH32zBjg6/zU=) 2: 2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl (hash: 9cpyMgQn6NqUAr065ljy3Sy8PPKCGQXjonXOP1Y4IFM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 02 Jun 2024 22:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:46:0f:4b:6e:1a:ac:7b:5c:7f:91:61:a6:10 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=2a53849c-6f77-4e69-8b39-bcb85da90f4b Validity Not Before: May 31 22:02:05 2024 GMT Not After : Jun 2 22:00:00 2024 GMT Subject: CN=96c9b6d5-68f2-4cc5-baad-316f4d7a373a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ac:a7:db:0b:8b:30:3c:6a:ac:d4:20:81:56:54: 0a:ce:bd:80:ad:4b:b1:12:b6:90:42:34:c2:21:80: cf:dd:0f:47:54:16:10:d0:90:5d:22:fb:a5:16:e8: f7:29:df:ff:32:27:31:c9:28:12:1b:ab:38:b5:73: ae:45:7d:3e:c3:bb:8a:30:ed:63:85:69:0a:39:f0: e3:57:b9:a9:64:e8:a7:9c:3e:18:82:5a:1d:97:42: b7:62:ff:cf:40:9f:06:53:1b:2c:b3:bf:36:2a:23: 85:a2:f9:d1:3c:78:35:ac:ed:7b:35:5a:59:88:38: 7c:52:3d:2d:a3:fd:4a:42:6c:97:a9:ee:de:26:e5: 0d:13:06:ed:4c:2b:b2:ef:6e:b8:30:a7:e6:fd:5f: f2:7e:62:cf:f9:41:ad:9b:bd:0b:6d:9c:13:c9:55: 4b:5b:e2:63:29:aa:16:8a:5f:63:d5:c8:8c:43:53: 6a:93:c5:79:02:ea:f9:a8:a6:2e:31:59:58:03:bd: 2f:3f:d8:b7:d2:01:5d:32:ec:08:2f:3a:64:97:c1: 16:0d:b9:f2:3a:c5:92:15:14:76:1b:16:4c:f7:df: 17:2d:95:1c:a6:37:76:38:f0:6d:c8:7a:a8:72:4b: a7:1c:4c:ca:44:a1:a8:f9:38:df:cc:2f:d0:fd:24: e0:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 5D:F4:0C:08:21:79:4F:46:B2:2C:C5:2C:A5:09:6F:14:87:50:4F:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.crl X509v3 Authority Key Identifier: keyid:CF:F8:2E:AA:A7:19:5B:0F:01:8A:DD:DA:D0:9F:51:BA:3D:49:D5:6A X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2a53849c-6f77-4e69-8b39-bcb85da90f4b.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 09:99:7b:c0:18:40:1f:9d:e7:ab:18:59:6c:56:90:51:0e:91: 07:25:95:da:1d:78:90:2e:66:7d:9a:2f:59:48:73:7b:c9:9b: 06:d3:d0:c1:b1:83:15:17:0e:ca:c1:04:18:1a:91:33:72:c1: 7b:0f:89:86:3d:85:2c:09:37:02:f0:7b:4e:a4:00:58:44:3f: 59:73:fb:14:ca:2e:bf:0e:e7:db:2a:69:8c:6c:fb:84:db:6c: 36:3f:f2:57:99:c8:64:9b:10:77:29:80:9c:d8:bf:ab:5b:d2: 29:d4:68:93:76:a5:88:12:9b:1a:f1:41:05:43:39:54:ed:19: 46:56:ca:2d:e2:95:c4:06:68:11:ce:b3:bb:e4:0a:c3:7f:34: d9:2b:09:aa:a4:29:2f:43:24:de:fd:62:73:b0:44:01:dd:ca: 7b:f6:3e:fd:42:8c:36:18:6c:2d:f3:67:d0:48:a3:1a:59:af: bd:a5:66:80:c2:e4:f8:c4:70:c7:a5:5a:8a:57:26:c2:06:68: f1:78:8e:73:60:61:72:21:de:52:34:19:a6:33:95:b6:c0:54: b2:59:5b:1f:45:d6:48:21:c2:d5:bd:99:73:6d:8e:14:41:13: 43:c9:33:61:7b:65:c8:41:ff:a5:7e:3c:1a:db:0f:dc:19:47: 4e:43:bf:f5 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEYPS24arHtcf5FhphAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMmE1Mzg0OWMtNmY3Ny00ZTY5LThiMzktYmNiODVkYTkw ZjRiMB4XDTI0MDUzMTIyMDIwNVoXDTI0MDYwMjIyMDAwMFowLzEtMCsGA1UEAxMk OTZjOWI2ZDUtNjhmMi00Y2M1LWJhYWQtMzE2ZjRkN2EzNzNhMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEArKfbC4swPGqs1CCBVlQKzr2ArUuxEraQQjTC IYDP3Q9HVBYQ0JBdIvulFuj3Kd//MicxySgSG6s4tXOuRX0+w7uKMO1jhWkKOfDj V7mpZOinnD4Yglodl0K3Yv/PQJ8GUxsss782KiOFovnRPHg1rO17NVpZiDh8Uj0t o/1KQmyXqe7eJuUNEwbtTCuy7264MKfm/V/yfmLP+UGtm70LbZwTyVVLW+JjKaoW il9j1ciMQ1Nqk8V5Aur5qKYuMVlYA70vP9i30gFdMuwILzpkl8EWDbnyOsWSFRR2 GxZM998XLZUcpjd2OPBtyHqockunHEzKRKGo+TjfzC/Q/STgAwIDAQABo4IDbjCC A2owHQYDVR0OBBYEFF30DAgheU9GsizFLKUJbxSHUE8nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUz ODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4NWRhOTBmNGIvMmE1Mzg0OWMtNmY3Ny00 ZTY5LThiMzktYmNiODVkYTkwZjRiLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMmE1Mzg0OWMtNmY3Ny00ZTY5LThi MzktYmNiODVkYTkwZjRiLzJhNTM4NDljLTZmNzctNGU2OS04YjM5LWJjYjg1ZGE5 MGY0Yi5jcmwwHwYDVR0jBBgwFoAUz/guqqcZWw8Bit3a0J9Ruj1J1WowDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw Yy1iOTBkLTNiYzdhNWZlYjgyYi8yYTUzODQ5Yy02Zjc3LTRlNjktOGIzOS1iY2I4 NWRhOTBmNGIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAJmXvAGEAfneerGFlsVpBR DpEHJZXaHXiQLmZ9mi9ZSHN7yZsG09DBsYMVFw7KwQQYGpEzcsF7D4mGPYUsCTcC 8HtOpABYRD9Zc/sUyi6/DufbKmmMbPuE22w2P/JXmchkmxB3KYCc2L+rW9Ip1GiT dqWIEpsa8UEFQzlU7RlGVsot4pXEBmgRzrO75ArDfzTZKwmqpCkvQyTe/WJzsEQB 3cp79j79Qow2GGwt82fQSKMaWa+9pWaAwuT4xHDHpVqKVybCBmjxeI5zYGFyId5S NBmmM5W2wFSyWVsfRdZIIcLVvZlzbY4UQRNDyTNhe2XIQf+lfjwa2w/cGUdOQ7/1 -----END CERTIFICATE-----Generated at Sat Jun 1 14:59:38 2024 by rpki-client on console-fra.rpki-client.org