Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
File:                     9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft (raw, json)
Hash identifier:          oU8sc/ldEBLT17l0SGhJvr0WKiZokDbiyRBJguQYtcw=
Subject key identifier:   71:5C:2C:A9:2C:7C:27:C8:F9:1E:23:9A:1B:9A:A9:7C:43:91:09:B3
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       316A70B766A84FF7346369720D249F2BD59BDC94
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
Manifest number:          06FA
Signing time:             Thu 24 Apr 2025 00:27:13 +0000
Manifest this update:     Thu 24 Apr 2025 00:22:13 +0000
Manifest next update:     Fri 25 Apr 2025 04:22:13 +0000
Files and hashes:         1: 9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl (hash: c2IaCRLAQTIupUUtFJ8lNLZ7T5kJQISapHJ/gCB/M00=)
                          2: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: E1FZLkk5M6GOvm5UnK3G3NWIYJqivBqn8ntAh+WceCc=)
                          3: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: co/JXev1XeNEns368eJzfGNCuCnraLDGBFatvyKS0MU=)
                          4: AS151642.asa (hash: 5TmDKAlnrhUemjI2jwXixvhgYCubE9ZuswWJhVaOtJc=)
                          5: 3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa (hash: g4JId+v3UNbmSA3F2ovECdVzf7QMh+84PzJXxRokrCE=)

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 04:22:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:6a:70:b7:66:a8:4f:f7:34:63:69:72:0d:24:9f:2b:d5:9b:dc:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: Apr 24 00:22:13 2025 GMT
            Not After : Apr 25 04:22:13 2025 GMT
        Subject: CN=715C2CA92C7C27C8F91E239A1B9AA97C439109B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:cd:71:48:2c:6c:3b:f8:5b:95:95:0a:a8:1b:
                    ab:a9:f1:f6:df:c7:7c:7a:47:0f:39:5a:76:e4:61:
                    71:4d:3d:65:41:36:6b:20:53:3b:ca:b2:80:08:55:
                    53:60:31:93:4f:63:62:fc:8b:fb:62:28:2b:dc:e2:
                    ca:69:41:e6:8f:59:24:0c:47:d6:15:9d:5b:de:b5:
                    39:7c:db:21:fc:62:3c:63:a5:0c:50:ae:c7:1c:da:
                    95:cd:0e:63:81:f8:0a:1d:ef:31:2d:69:cf:f9:b1:
                    2f:4b:ef:25:d6:a4:c6:e0:44:54:fc:12:aa:f5:4d:
                    1f:b4:f4:48:72:2c:49:40:94:21:bb:9b:04:5e:28:
                    e8:20:67:f5:de:31:71:61:e9:6c:ec:21:27:f4:5f:
                    42:4b:6a:1c:64:b2:46:8e:b4:87:b4:32:a1:7e:a2:
                    a9:ce:3d:bd:10:12:c7:cc:5d:26:68:28:1f:8e:2c:
                    99:56:87:e4:1d:51:55:24:a9:b9:c3:62:16:f5:8d:
                    f4:62:5e:ef:39:7d:a2:a5:1d:e3:50:2c:48:fb:47:
                    cf:48:c0:e6:9a:cf:99:38:1c:10:91:59:ce:f1:31:
                    63:bc:6d:4f:1d:e5:0f:29:de:d6:ac:4c:30:42:f3:
                    24:2c:2f:85:42:9c:3e:ea:94:4f:a1:6e:a9:51:42:
                    71:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5C:2C:A9:2C:7C:27:C8:F9:1E:23:9A:1B:9A:A9:7C:43:91:09:B3
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:6a:96:c2:d6:55:7a:27:24:2c:67:84:63:ed:fd:20:93:4e:
         69:e7:28:61:93:7d:b2:42:cb:e7:18:f4:54:c1:20:bc:50:07:
         fb:91:42:25:2e:5f:e6:ca:db:b4:3b:e9:ac:cc:2f:8f:02:49:
         95:bc:a3:19:29:ec:eb:00:db:5c:20:31:7b:f2:c9:fe:6d:f2:
         e2:67:4c:e9:44:e2:b3:fe:98:97:6d:8f:2d:a0:0e:e3:f7:5f:
         1d:bb:b1:a1:b7:0c:e9:21:1f:40:64:37:51:36:e5:c6:ab:40:
         41:fe:ba:59:4b:e0:02:42:d6:7f:36:a3:71:3a:27:58:b1:3a:
         2a:05:66:7b:a3:7c:3a:61:e2:f8:4f:04:14:8f:3c:fe:a8:a7:
         4d:0c:2b:8e:88:dd:9b:27:e8:d7:f2:7d:aa:04:ed:b0:e3:ef:
         fc:49:9c:28:94:3b:4d:1d:59:65:ba:78:a7:29:30:e5:50:19:
         10:c9:cb:db:b2:2e:b5:b7:f6:2e:d3:48:ba:c3:b3:75:34:bc:
         77:b0:91:4a:47:ac:71:f6:c3:97:05:04:f0:4b:4e:22:e6:af:
         97:12:6f:73:27:9a:63:61:8c:b4:15:ef:a6:d1:fb:57:9e:85:
         e1:12:64:e4:d3:54:6e:cb:23:20:bf:eb:5a:78:ac:5c:6d:fc:
         13:0f:96:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 24 04:33:40 2025 by rpki-client on console.sobornost.net