$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft File: 21e56d69-549c-4d92-8866-0c8dd1d9e171.mft (raw, json) Hash identifier: Drlcd6PtTEngTVVWYuy1ogEzXaOnOmBz7kMIJr6M5Rs= Subject key identifier: 40:DD:64:6E:B3:D1:16:E0:F2:67:C8:D7:62:DC:3B:E1:81:17:AE:74 Authority key identifier: BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 Certificate issuer: /CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Certificate serial: 010D0C9F43285845E76469CF26E06ECB8E7D61E0 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft Manifest number: 010D0C9F43285840DD9F52EE154566D9081DF4E0 Signing time: Fri 17 May 2024 15:00:04 +0000 Manifest this update: Fri 17 May 2024 15:00:04 +0000 Manifest next update: Mon 20 May 2024 15:00:00 +0000 Files and hashes: 1: 21e56d69-549c-4d92-8866-0c8dd1d9e171.crl (hash: GmriwqacWaDYkfSETP3skriWHsqHLWTtu1my8CEHBNk=) 2: 97b8c640-fb2c-369e-90d7-90ade1142479.roa (hash: 0NtTLx/syqfIDYW88n8B/Lo1PnuQo0P/7V4m/3l6/uM=) Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Sun 19 May 2024 06:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:45:e7:64:69:cf:26:e0:6e:cb:8e:7d:61:e0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=21e56d69-549c-4d92-8866-0c8dd1d9e171 Validity Not Before: May 17 15:00:04 2024 GMT Not After : May 20 15:00:00 2024 GMT Subject: CN=0e972a3e-caa1-44c8-94b9-c51d6fd2808e Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:83:89:8d:16:03:6c:55:6e:2d:b3:4d:2c:92:2e: 7f:5a:2b:85:87:eb:0e:46:3e:20:2e:fe:18:b7:5a: 8c:4b:bc:94:0a:fe:e2:f6:5e:86:21:93:38:9d:34: 62:56:64:9a:dc:85:40:95:ba:0f:5a:c1:da:31:9b: 7f:a8:d7:6b:4c:24:7a:e1:c9:67:00:8c:12:6f:ee: 3c:fa:eb:c9:f9:5b:ab:59:ba:24:2d:92:38:d9:68: 2a:e8:01:c7:5d:26:b0:96:48:5b:6e:f6:6b:d7:00: 7b:dc:ff:93:31:b0:88:7b:27:e0:e9:71:aa:14:c4: 64:c9:0d:06:44:9b:f7:8f:2d:2b:67:33:5b:33:35: d6:c1:b4:a6:12:b9:10:58:cb:ef:f4:2c:4b:6b:ec: 7d:f4:02:8b:d9:5a:69:a3:13:c4:28:52:03:bf:46: 6c:f2:d9:e3:80:85:03:80:13:51:3b:f3:5d:65:0a: b7:f9:a5:d4:11:18:43:d0:75:8f:ef:02:88:c9:f4: 01:66:19:c5:18:f2:a8:b4:26:04:82:8e:6f:d4:56: a7:41:27:a9:cf:c3:48:06:87:2c:a1:19:5f:15:22: 97:00:10:62:73:e7:f6:27:10:d9:cc:fc:09:33:c3: 48:63:70:4f:6e:5b:61:60:74:4b:b3:2e:a8:23:dd: a9:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 40:DD:64:6E:B3:D1:16:E0:F2:67:C8:D7:62:DC:3B:E1:81:17:AE:74 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171/21e56d69-549c-4d92-8866-0c8dd1d9e171.crl X509v3 Authority Key Identifier: keyid:BC:0F:BB:2E:3C:05:34:0F:24:DC:09:37:89:BE:DC:29:4B:21:64:08 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21e56d69-549c-4d92-8866-0c8dd1d9e171.cer sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 4e:89:d5:06:89:29:ce:65:c5:73:8e:0e:e4:61:01:88:67:86: 71:f6:da:75:69:01:22:5a:da:54:4e:ec:ce:d3:12:0a:53:92: 99:19:4f:2d:fd:1f:98:5f:bd:47:f7:20:62:2e:fb:3b:2a:d7: bb:ea:44:fa:91:f0:88:13:ad:81:af:b9:8c:51:20:84:7e:27: bd:35:44:b1:26:3c:51:54:d6:f0:49:5a:e7:c9:88:01:67:0c: 90:2a:aa:32:09:e3:8e:9d:6f:e6:ad:04:fb:20:6a:7a:5c:39: b5:74:23:55:2f:14:ef:f5:89:62:d3:9b:0f:15:75:89:62:28: 10:b2:e2:a8:e9:dc:97:60:b8:08:db:09:a1:7a:2e:f0:df:dc: 56:87:79:e1:a4:fa:01:8a:dd:1e:f9:e5:ee:ef:ce:1b:71:b7: e5:e6:4a:07:27:06:68:33:2b:22:8c:36:df:ff:ff:a6:65:3c: 64:f6:42:bd:d1:2d:5d:e8:40:a5:d6:f1:2e:6b:d3:2e:ca:4b: fa:6a:2e:ff:1f:b6:22:87:a5:2f:61:8a:79:ae:75:3c:40:df: a1:61:51:91:93:7b:c8:93:15:a8:e2:99:66:2b:20:2f:34:cc: 22:b4:ce:fd:5a:96:d5:22:10:55:a2:b1:71:49:5c:ec:49:e0: c6:33:73:d6 -----BEGIN CERTIFICATE----- MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEXnZGnPJuBuy459YeAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkMjFlNTZkNjktNTQ5Yy00ZDkyLTg4NjYtMGM4ZGQxZDll MTcxMB4XDTI0MDUxNzE1MDAwNFoXDTI0MDUyMDE1MDAwMFowLzEtMCsGA1UEAxMk MGU5NzJhM2UtY2FhMS00NGM4LTk0YjktYzUxZDZmZDI4MDhlMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4mNFgNsVW4ts00ski5/WiuFh+sORj4gLv4Y t1qMS7yUCv7i9l6GIZM4nTRiVmSa3IVAlboPWsHaMZt/qNdrTCR64clnAIwSb+48 +uvJ+VurWbokLZI42Wgq6AHHXSawlkhbbvZr1wB73P+TMbCIeyfg6XGqFMRkyQ0G RJv3jy0rZzNbMzXWwbSmErkQWMvv9CxLa+x99AKL2VppoxPEKFIDv0Zs8tnjgIUD gBNRO/NdZQq3+aXUERhD0HWP7wKIyfQBZhnFGPKotCYEgo5v1FanQSepz8NIBocs oRlfFSKXABBic+f2JxDZzPwJM8NIY3BPblthYHRLsy6oI92pfQIDAQABo4IDbjCC A2owHQYDVR0OBBYEFEDdZG6z0Rbg8mfI12LcO+GBF650MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1 NmQ2OS01NDljLTRkOTItODg2Ni0wYzhkZDFkOWUxNzEvMjFlNTZkNjktNTQ5Yy00 ZDkyLTg4NjYtMGM4ZGQxZDllMTcxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjFlNTZkNjktNTQ5Yy00ZDkyLTg4 NjYtMGM4ZGQxZDllMTcxLzIxZTU2ZDY5LTU0OWMtNGQ5Mi04ODY2LTBjOGRkMWQ5 ZTE3MS5jcmwwHwYDVR0jBBgwFoAUvA+7LjwFNA8k3Ak3ib7cKUshZAgwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw My1iZGE3LTFiZTIwNDkzM2FlNS8yMWU1NmQ2OS01NDljLTRkOTItODg2Ni0wYzhk ZDFkOWUxNzEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBOidUGiSnOZcVzjg7kYQGI Z4Zx9tp1aQEiWtpUTuzO0xIKU5KZGU8t/R+YX71H9yBiLvs7Kte76kT6kfCIE62B r7mMUSCEfie9NUSxJjxRVNbwSVrnyYgBZwyQKqoyCeOOnW/mrQT7IGp6XDm1dCNV LxTv9Yli05sPFXWJYigQsuKo6dyXYLgI2wmhei7w39xWh3nhpPoBit0e+eXu784b cbfl5koHJwZoMysijDbf//+mZTxk9kK90S1d6ECl1vEua9Muykv6ai7/H7Yih6Uv YYp5rnU8QN+hYVGRk3vIkxWo4plmKyAvNMwitM79WpbVIhBVorFxSVzsSeDGM3PW -----END CERTIFICATE-----Generated at Fri May 17 16:16:23 2024 by rpki-client on console-fra.rpki-client.org