Manifest
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
File: arin-rpki-ta.mft (raw, json)
Hash identifier: RonH+/u4lEq3FsSDTjdPZpCclCiAuGHzVrXT5N4MiQk=
Subject key identifier: ED:D7:74:5F:02:82:CF:D7:37:57:D3:C8:3E:89:9C:60:DB:D8:58:50
Authority key identifier: 13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Certificate issuer: /CN=arin-rpki-ta
Certificate serial: 010D0C9F43285846C9E1DA3841076E684AADD100
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
Manifest number: 010D0C9F43285846C9E1DA430D1A8443760FFB60
Signing time: Tue 06 Aug 2024 18:05:33 +0000
Manifest this update: Tue 06 Aug 2024 18:05:33 +0000
Manifest next update: Sun 06 Apr 2025 18:05:33 +0000
Files and hashes: 1: 5e4a23ea-e80a-403e-b08c-2171da2157d3.cer (hash: 5lRB1t33RlU/GcL1DQ8/CWOqIsFfZhYgR86zdqYmGHk=)
2: arin-rpki-ta.crl (hash: MnTIB1WQgNrFEF/HSJGtoJuFASOGL2rYBQo63x+duaA=)
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Apr 2025 18:05:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:46:c9:e1:da:38:41:07:6e:68:4a:ad:d1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=arin-rpki-ta
Validity
Not Before: Aug 6 18:05:33 2024 GMT
Not After : Apr 6 18:05:33 2025 GMT
Subject: CN=38c5b3a5-8969-4aba-93b6-13289e9677e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:56:52:10:3d:77:a7:66:50:fd:fa:77:fa:13:
99:25:80:01:27:b9:24:6f:d7:b1:8b:3c:7b:0c:e7:
f3:80:6c:da:31:21:1a:ad:83:26:d6:76:f8:95:63:
0c:93:d1:0d:fb:7c:17:fa:63:64:1d:35:9e:19:cc:
3d:7a:47:a2:27:d9:99:5f:3b:4b:f6:61:cf:af:c2:
48:90:b2:2c:49:ff:eb:c2:4a:c5:53:ef:a0:71:15:
e0:e2:02:9a:5d:cb:0a:6b:df:39:30:52:00:96:95:
0c:f6:21:f3:cd:f9:f6:95:e4:ed:a6:a3:10:7f:60:
30:f6:8e:a7:84:1b:79:61:7b:11:0a:b7:13:2d:18:
72:52:a6:f9:da:ef:fe:14:9b:7e:21:55:5f:0c:f8:
50:4f:34:b1:fb:88:f3:4a:09:d8:d3:02:56:63:9c:
33:5d:fb:0e:65:66:9a:7b:4e:4b:26:e1:d0:4a:a1:
28:2f:42:fb:25:e8:82:48:fb:ec:29:a6:99:b1:e3:
22:ea:81:13:48:e4:5f:c4:42:f0:73:05:99:70:cc:
23:09:ab:f0:33:80:a8:13:27:32:f8:90:ff:20:36:
2f:c3:46:57:78:c6:75:9b:1a:55:13:39:91:48:2d:
65:75:21:84:b3:de:bd:6b:7b:3b:8b:aa:ec:d4:0e:
a0:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:D7:74:5F:02:82:CF:D7:37:57:D3:C8:3E:89:9C:60:DB:D8:58:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
X509v3 Authority Key Identifier:
keyid:13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta.cer
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
19:ad:55:a5:07:5a:3d:87:3a:53:25:c4:de:bb:32:5e:63:a0:
c3:0f:c8:49:11:bd:fc:f8:f3:4f:39:d7:99:bc:ee:f0:7c:69:
4a:4d:e7:d9:bf:fa:9d:d6:9c:00:e2:ca:12:ac:e5:3b:f9:43:
66:c2:b5:2a:b7:82:e4:21:7c:50:d9:3c:51:cf:38:19:a2:eb:
22:65:96:38:0d:43:3b:77:c9:69:56:d9:c1:74:c6:ef:bc:29:
c8:42:8f:96:a7:27:f7:6e:fa:aa:5b:9b:0c:9d:d5:b5:13:cc:
87:a3:0f:c9:c3:17:46:e2:52:2b:a1:97:a6:2e:81:f1:ca:3d:
16:06:00:b2:2d:c2:4e:0e:bb:bb:49:6d:c5:04:f3:e3:f7:7c:
70:06:02:08:68:5c:8d:f4:33:8d:a6:28:3b:62:4e:d3:d3:f8:
65:be:ea:d0:2d:86:11:59:05:99:91:44:a7:bb:fa:a7:72:ae:
43:07:0d:8f:58:6b:33:b1:0f:d0:04:ee:fc:75:59:d1:cc:57:
a7:8d:63:98:e1:3d:77:b7:91:31:56:93:73:c2:93:ec:ae:70:
b5:c8:db:e9:e5:c9:2b:4a:d4:de:79:f3:6b:4a:1b:ce:39:6c:
75:29:c0:d8:cd:f2:1f:df:c9:1a:34:33:d1:67:9e:cc:5e:5a:
33:11:96:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 6 21:08:57 2024 by rpki-client on console-ams.rpki-client.org