Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
File:                     _YzK5b5juSvdyQt6W3TmlEnB6wQ.mft (raw, json)
Hash identifier:          kxP/bz/aIZY/yB2ImxcRA2SC7jYsEPINjNq3Ns2MRVE=
Subject key identifier:   AC:9B:BF:96:D2:0A:1E:08:CB:F5:D4:C9:C0:C4:9C:38:91:98:A8:63
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       0280F27AEF0349F19D9036B85EA5986F1C7DD641
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
Manifest number:          0236
Signing time:             Sat 18 May 2024 15:04:53 +0000
Manifest this update:     Sat 18 May 2024 15:04:53 +0000
Manifest next update:     Wed 22 May 2024 15:04:53 +0000
Files and hashes:         1: 1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (hash: epih1wMRnyPidK7Q8s6o03AG4CBGBOmPA7SIz/hNXu8=)
                          2: 1e269d38-4454-4adc-9773-b958fab1020e.roa (hash: 5oOpMr1TF9JODBE5w5JeAYX+zc1m/Hc3pKbnbvn4wXQ=)
                          3: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (hash: m6MROWBUdz++O31/h18xAo6cZqVGuqjFlZzqZ2etLzQ=)
                          4: 476b6542-f865-4ad9-a41f-dd015bf0089e.roa (hash: XYC9byW0MgPXCfAjE5jVFflEQUoW1AEczaqi9X0S/uE=)
                          5: 784b2b14-cc65-4db8-acbe-c21ac40c5e77.roa (hash: TBfRPBlY7D+ThorFVqQn3YnXkSVs+bQxbHN1aiRQIIM=)
                          6: _YzK5b5juSvdyQt6W3TmlEnB6wQ.crl (hash: pqnJILOwimPuK3xWyY0/dC5/VWlR/2TNeEGSYRqrAts=)
                          7: ad2d8aa0-7d35-4739-9ad2-14ca94b93fe2.roa (hash: rfW43yBJeuRbx1ahaUHy2pLuFrP9VZD7GAi86NUJNdY=)

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 21 May 2024 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:80:f2:7a:ef:03:49:f1:9d:90:36:b8:5e:a5:98:6f:1c:7d:d6:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: May 18 15:04:53 2024 GMT
            Not After : May 22 15:04:53 2024 GMT
        Subject: serialNumber=1a970935b34ecaf17975442faa669887242260371df696e248deb5478fed2b4c, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:84:e3:63:67:5e:27:b3:aa:3a:f2:74:e6:96:
                    fd:42:d6:0d:82:12:bd:1e:f3:1c:a4:5f:05:e3:0d:
                    70:ab:62:06:92:26:17:ca:f0:e0:ce:7a:8d:0b:e8:
                    cf:d9:5c:c1:b2:7f:73:9f:83:2c:77:86:a0:ed:fb:
                    e8:55:3a:1b:e7:02:f1:a8:31:53:08:b0:2d:e8:55:
                    a2:9f:b5:6d:c8:cb:12:57:68:03:0d:28:3b:96:39:
                    db:52:f7:ec:d7:1a:6a:22:c4:5a:08:75:49:f6:bb:
                    c4:9a:da:6b:91:47:ec:cb:7d:f8:63:90:14:3e:33:
                    c7:98:5e:13:7d:e1:a4:fe:c5:09:b6:44:ca:0e:46:
                    3a:2a:4b:15:e2:92:09:df:d1:fd:35:8a:5b:43:83:
                    e0:00:e1:57:87:76:9e:8c:de:88:a6:cb:81:da:0b:
                    54:37:ab:ef:a8:15:63:71:7f:50:ae:3e:96:e9:8c:
                    56:59:6a:cf:ca:aa:d5:8e:f5:f4:05:b5:39:62:35:
                    2a:c2:c3:55:94:b3:1d:a1:ad:37:06:57:65:91:19:
                    6d:ac:9f:57:d5:bb:b0:19:6d:54:bc:5d:5f:4e:3a:
                    65:ce:76:6e:8a:8d:9a:49:1e:29:02:64:1b:40:5f:
                    a4:fb:75:11:68:a4:1f:7e:aa:5f:f0:97:99:bd:5b:
                    d3:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:9B:BF:96:D2:0A:1E:08:CB:F5:D4:C9:C0:C4:9C:38:91:98:A8:63
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:ea:66:2b:e5:6d:a0:6b:4f:b2:be:1b:3e:56:95:c9:44:1f:
         d5:f2:81:8c:c5:41:fc:67:b1:f9:07:53:ee:f0:49:e3:2e:29:
         06:ae:ae:0e:a6:33:fb:dc:e4:a8:c4:04:9c:56:c1:00:09:86:
         45:59:1e:03:57:4d:0f:4c:c2:63:40:7d:ad:af:7c:0f:24:ba:
         b0:0c:0a:ee:15:1e:75:9d:af:4a:77:20:45:1e:79:e4:a3:ff:
         23:d8:9a:46:b5:1c:b5:e2:6f:48:f6:33:9c:b7:30:9b:a9:59:
         2a:01:13:f6:42:c2:bc:4e:ef:b0:29:eb:c3:77:1e:48:4b:ae:
         21:ed:6d:5c:70:91:0a:94:3b:9c:61:02:d9:27:d3:0b:c2:e0:
         67:9a:43:23:75:d1:1c:69:8b:70:7e:75:9f:93:2e:43:cc:2f:
         ad:e6:0f:7d:ff:b0:69:1a:cb:c0:bb:a8:99:3f:6c:b3:44:a5:
         6b:0f:c1:37:d9:9b:76:42:61:e6:d1:f7:db:7d:3b:0d:a1:f5:
         00:7b:f3:a9:6f:28:be:8d:45:62:04:51:aa:43:b1:1a:89:6b:
         3b:1b:90:b7:1a:39:ee:e3:61:f7:7d:a4:7e:ba:c6:71:34:18:
         5c:1e:fe:e5:6a:99:8c:c3:74:b4:28:ba:41:7b:3e:63:a9:4d:
         aa:67:e9:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 15:25:43 2024 by rpki-client on console-fra.rpki-client.org