$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft File: 628d865a-2d19-4af1-984a-6c443304d9f0.mft (raw, json) Hash identifier: ENeEtXukYqA5YROZtS8Htcp/oW6OIVfhw6FAZp4nr70= Subject key identifier: 31:60:B2:8D:90:6C:40:58:B0:35:1A:F2:8A:B2:D6:A7:61:81:EE:01 Authority key identifier: 25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 Certificate issuer: /CN=628d865a-2d19-4af1-984a-6c443304d9f0 Certificate serial: 010D0C9F43285847F42E259DCBDCF925F3999080 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft Manifest number: 010D0C9F43285847F42C26C6F2A071B9C6A014C3 Signing time: Thu 21 Nov 2024 14:30:07 +0000 Manifest this update: Thu 21 Nov 2024 14:30:07 +0000 Manifest next update: Sun 24 Nov 2024 14:00:00 +0000 Files and hashes: 1: 0242e3bb-d361-314e-9397-022ca2fba7a8.roa (hash: dA8uRKSN2dry6UZvKDQYX9bURdr8KrhuA1xvPkk4Zlc=) 2: 1a9639da-a216-3ece-b327-c09a057856a3.roa (hash: AaYTFMNSyOJ/TBbwhF+EBOcocl1xK7U9s/75tJQzlSY=) 3: 349d3b72-a194-37a3-95c4-97b0c3e9f593.roa (hash: Bp21ajOFSlEEBX9xbhQK/jzJ51zl7542wq+RDd0EU8c=) 4: 3611eb1d-586a-3087-8c7c-45e34fe9b737.roa (hash: quLvGUeGXtXTr+GLxNQ1VC4TokxUCBgdCyLuKEeAPN8=) 5: 628d865a-2d19-4af1-984a-6c443304d9f0.crl (hash: qE8QYyDuL584QEKqbCKRig4ziMNEl3U0Lq+ctTnko5A=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 24 Nov 2024 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:47:f4:2e:25:9d:cb:dc:f9:25:f3:99:90:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=628d865a-2d19-4af1-984a-6c443304d9f0 Validity Not Before: Nov 21 14:30:07 2024 GMT Not After : Nov 24 14:00:00 2024 GMT Subject: CN=6f8fbabe-c8e5-4d62-9d64-c9c97df7d22b Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:73:b3:36:50:7d:39:c2:f1:74:5e:4f:bf:92: ae:5d:4e:d4:cd:5d:1a:29:02:e5:11:7f:94:4b:dd: e3:5c:b4:bc:1d:bb:4b:4e:86:64:84:42:63:d8:6e: df:64:6e:a8:45:e6:f4:55:9b:5c:f6:c4:7b:6f:7d: a0:be:5f:0c:56:e4:3b:21:fd:c5:63:47:54:ef:ba: f7:4f:89:ab:84:3a:5b:6a:7f:25:fe:5e:ea:24:ce: cd:a2:50:46:43:de:1a:bd:c8:ba:7c:2d:c6:de:1b: 3d:59:a3:88:bd:f8:bb:96:da:d3:30:de:4d:d5:70: 32:dc:d8:a1:a9:0b:d8:ae:9d:d1:27:5e:77:80:ba: 3d:74:01:8f:59:4f:4d:08:a7:ae:67:43:44:18:b4: 52:6b:fd:dd:92:72:1d:06:7b:d2:70:a8:35:0a:6b: 45:5f:d3:a7:5f:66:7c:9f:07:31:f5:bd:a2:86:89: f7:11:6f:cc:08:15:57:c7:21:5a:b8:21:ad:c4:a7: 69:2d:e4:9c:a6:29:af:1b:6c:5d:f6:00:4d:05:05: 9a:3a:f3:2d:41:45:9f:b3:1e:6e:b6:0e:8f:f1:74: 11:19:aa:83:b2:c0:18:79:4b:9a:82:4e:b4:8d:20: 02:32:38:c8:bd:b7:b2:f4:a6:28:91:ea:1f:d0:6e: e6:09 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 31:60:B2:8D:90:6C:40:58:B0:35:1A:F2:8A:B2:D6:A7:61:81:EE:01 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0/628d865a-2d19-4af1-984a-6c443304d9f0.crl X509v3 Authority Key Identifier: keyid:25:8B:BC:FC:CC:F8:56:36:9E:6B:8D:EE:95:D3:D1:0F:49:98:08:24 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/628d865a-2d19-4af1-984a-6c443304d9f0.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 62:da:7e:cd:de:b9:ca:01:f9:ed:02:6e:d5:b1:d1:f1:b6:23: a8:d9:dd:51:3a:d7:38:2b:2f:bc:32:30:49:9c:87:3d:74:0b: fc:9b:a5:f7:82:17:f2:29:ba:67:44:ff:d7:a9:a4:b2:f0:54: e5:50:cf:da:1e:95:25:1d:41:52:e8:43:37:37:3a:2c:77:a4: 16:2a:88:02:dd:d3:29:28:67:8e:4a:82:c0:a2:47:21:e6:3a: 76:53:52:90:50:83:e7:71:f1:1c:65:e1:67:6d:6d:f3:2b:61: 1d:5d:90:1b:38:6b:f8:52:a5:fd:88:9e:ef:21:43:3c:13:29: a8:26:97:b2:56:10:67:87:b9:4f:25:7d:5d:85:80:95:2f:b8: bc:e2:04:f7:4a:14:04:38:c1:33:95:e6:33:8a:74:4a:82:9b: 25:69:50:76:06:1b:da:c5:8c:9a:63:4d:83:06:9c:73:79:41: 56:73:8a:85:c6:7d:26:b7:31:bc:56:04:c3:75:a3:55:45:35: ae:2f:6c:fb:6b:a2:c2:ca:60:21:fd:01:0b:bf:67:be:43:8d: 46:b4:f4:ea:c0:28:a9:89:15:17:44:f6:16:1c:9b:bb:63:c6: 5d:eb:73:e8:d1:3b:6e:c5:dc:03:a8:da:3f:6c:c1:93:46:c6: 33:cb:6b:e3 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf0LiWdy9z5JfOZkIAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkNjI4ZDg2NWEtMmQxOS00YWYxLTk4NGEtNmM0NDMzMDRk OWYwMB4XDTI0MTEyMTE0MzAwN1oXDTI0MTEyNDE0MDAwMFowLzEtMCsGA1UEAxMk NmY4ZmJhYmUtYzhlNS00ZDYyLTlkNjQtYzljOTdkZjdkMjJiMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3XOzNlB9OcLxdF5Pv5KuXU7UzV0aKQLlEX+U S93jXLS8HbtLToZkhEJj2G7fZG6oReb0VZtc9sR7b32gvl8MVuQ7If3FY0dU77r3 T4mrhDpban8l/l7qJM7NolBGQ94avci6fC3G3hs9WaOIvfi7ltrTMN5N1XAy3Nih qQvYrp3RJ153gLo9dAGPWU9NCKeuZ0NEGLRSa/3dknIdBnvScKg1CmtFX9OnX2Z8 nwcx9b2ihon3EW/MCBVXxyFauCGtxKdpLeScpimvG2xd9gBNBQWaOvMtQUWfsx5u tg6P8XQRGaqDssAYeUuagk60jSACMjjIvbey9KYokeof0G7mCQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFDFgso2QbEBYsDUa8oqy1qdhge4BMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Mjhk ODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0MzMwNGQ5ZjAvNjI4ZDg2NWEtMmQxOS00 YWYxLTk4NGEtNmM0NDMzMDRkOWYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjI4ZDg2NWEtMmQxOS00YWYxLTk4 NGEtNmM0NDMzMDRkOWYwLzYyOGQ4NjVhLTJkMTktNGFmMS05ODRhLTZjNDQzMzA0 ZDlmMC5jcmwwHwYDVR0jBBgwFoAUJYu8/Mz4Vjaea43uldPRD0mYCCQwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MjhkODY1YS0yZDE5LTRhZjEtOTg0YS02YzQ0 MzMwNGQ5ZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBi2n7N3rnKAfntAm7VsdHx tiOo2d1ROtc4Ky+8MjBJnIc9dAv8m6X3ghfyKbpnRP/XqaSy8FTlUM/aHpUlHUFS 6EM3Nzosd6QWKogC3dMpKGeOSoLAokch5jp2U1KQUIPncfEcZeFnbW3zK2EdXZAb OGv4UqX9iJ7vIUM8EymoJpeyVhBnh7lPJX1dhYCVL7i84gT3ShQEOMEzleYzinRK gpslaVB2BhvaxYyaY02DBpxzeUFWc4qFxn0mtzG8VgTDdaNVRTWuL2z7a6LCymAh /QELv2e+Q41GtPTqwCipiRUXRPYWHJu7Y8Zd63Po0TtuxdwDqNo/bMGTRsYzy2vj -----END CERTIFICATE-----Generated at Fri Nov 22 18:00:10 2024 by rpki-client on console-fra.rpki-client.org