Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
File:                     manifest.mft (raw, json)
Hash identifier:          E17101gjKz2iHrCpm2X9d5+eESlqdGgK6gJUqSe/+Ws=
Subject key identifier:   8C:A4:94:1C:14:35:8A:F7:3D:DB:BD:1D:6E:66:57:BD:CA:92:2F:4D
Authority key identifier: E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08
Certificate issuer:       /CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
Certificate serial:       4ECF584C8C5789B5CCBBE7AC463CBAAE9FF36D6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
Manifest number:          030E
Signing time:             Mon 27 May 2024 00:10:16 +0000
Manifest this update:     Mon 27 May 2024 00:10:16 +0000
Manifest next update:     Fri 31 May 2024 00:10:16 +0000
Files and hashes:         1: 037679cc-778a-417e-add9-45a9bf4f8fbc.roa (hash: U1zsDE6DycCSGnPYf7g0UCbnryaBE1qPXWlIV9An1cA=)
                          2: 0b0c2d18-2b42-4e53-9e6a-d6f7d5dc2334.roa (hash: ZBOOEm7Wo5bvno2RRSOaKXq+8ee46hMlrx6kb0EZ21w=)
                          3: 0b839f01-283b-4c23-b8a7-3697b9583ee1.roa (hash: ydKcdXZu8slhSw3il7EmH251NAPZYgX7DA/ugC//2Cg=)
                          4: 0dfd6e20-2823-4f68-ae48-725fe4ee2f81.roa (hash: bv/8hKn9TZe6dCYwueHWAdyFI/nss/kwT9B5yGPoO0c=)
                          5: 12e59001-35ac-4abf-858f-37b955a24b3f.crl (hash: 2F6JMnrdsqrpN9X1zMaml6lPFhsWGyV+/e1q/66p8B0=)
                          6: 1738e1ca-e725-4f75-8dfb-04b89ee349d9.roa (hash: nzDFaIQsjCHzqNBdV1mh0AIgQU+1sFG4HdFQanxCQ4E=)
                          7: 22941216-14be-40e9-a7d3-c3720399ee20.roa (hash: QjO2CC61qywVdtoer2Xk+NyToxEKBeGxvTOI+LiYVRc=)
                          8: 22fa329b-ec37-40dd-997f-24f4559e0eff.roa (hash: 5xWx2rgL4O4m9qTGatNbGrGE8biQMguD837insmBNiE=)
                          9: 2430eb67-8d2b-4d5d-979e-b7427ddfa348.roa (hash: mFTfTqKqwkXfTX4boZ/2MJ30aljrDB9ThrcC7GvAIAc=)
                          10: 2d2af952-35e6-43e7-b07a-74956b69b4a0.roa (hash: TZ4Yjpif1b/+PJn7tlrQ61cdgQh4ci0OAeJQsm3rW90=)
                          11: 2f35c729-72a9-490b-b37f-984abc13307d.roa (hash: 6G3CyXMcq+nytf3QAFJ7im5KCdRlFnVtOKd6/5QY66k=)
                          12: 41ea98ba-f4ea-45c4-8f0a-438a367705db.roa (hash: ukgyOqGw2vz5REAUnaqWhDzWHPQHFC32X06Xc9TQVzg=)
                          13: 49119734-9dbc-4bd4-98be-57e4ce078928.roa (hash: hGDj1OXeSsSXdqpX2ynpk+VvuqkGXOtRkMEJ/v4pAGc=)
                          14: 5663bf34-10ed-4309-a236-7466afd6f02f.roa (hash: 9pJOn0gjWwB5gj+Ru7RNjC39ftCzGuGvzTz7JGte7HE=)
                          15: 578a19af-8138-49ac-8a51-a2bd148210a1.roa (hash: u+iY/Lv3NUijEKjHIVrq4pJJL3Y4OO0ZtuwuipB6JDc=)
                          16: 58ba68d3-9488-476b-8d44-5ecf1f0018e8.roa (hash: PyCRHO3NYMNp70pGOx9wHLouBpMJ7Hb3zXr7fTl83QM=)
                          17: 59860ec1-5f08-4648-8fa9-79f2bbf2ec8d.roa (hash: 8sC2djS/sywb9kQG2WMPRopxU5QpW1q/QMpG9gaXd1A=)
                          18: 68fe3037-b87b-4379-a014-213012da3a11.roa (hash: Cgb73Stj21qLTk9gx27NhNh3KFpVBGrsHaCujYs6tRM=)
                          19: 7ec71d95-427c-491b-a7cc-55afd17c6f55.roa (hash: 8PiI8H0vGlMcVFxddDXCJ5oLGZrAPgrRt33eZBZTpqI=)
                          20: 90e88caa-70b7-406a-a161-a6118790ffdb.roa (hash: RaCApW044fL45HqhUju0/a4Pv8H9waqfTwxYMcr3ZeI=)
                          21: 92acb65d-8ed6-47b8-8b87-8cec3f14df45.roa (hash: IMm3BBuJBJAj02anXFXWFvhNSfEQBGb05zbLGod2gmE=)
                          22: 9ecc0bd6-104c-43e2-9db8-92afcb871843.roa (hash: UUW76a61R0q6TaUl85etEuTlmAYkfILfGB98q/FIjcg=)
                          23: b3d57ffd-cfff-4f0f-9a34-bd001a900e9e.roa (hash: iTkpkR0ogObcpDz+70UvFR3KME85/KgT1THr4u+JFFM=)
                          24: e1c8ca39-fe1f-44c7-802a-b0dc7fdb5616.roa (hash: Fm+/uumlSLoN6+H2KCwttheVb+JyS57QmAMoO07aVt4=)
                          25: ea1d02aa-6d25-4b36-b42e-ba837d49e261.roa (hash: /gYX0AtRTjtIwv8TNQsYPXPp/aoSagubbbd4+2y4H/I=)
                          26: f88f0730-b125-42e8-9451-f0a369a3bbc1.roa (hash: 5J2NNyqSrFvYzjNsIEsSyKzScoTeubVTxya1v701C+w=)
                          27: fda62ac0-bc2c-4d57-a69e-8a7c469cd2d8.roa (hash: OwwS/zqEyb7NyyG3PWGLLeUdGcszZMtLmKfJQoSMgiQ=)

Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 31 May 2024 00:10:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:cf:58:4c:8c:57:89:b5:cc:bb:e7:ac:46:3c:ba:ae:9f:f3:6d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918806F0000/serialNumber=E7CADA5F0881D77BEA48B0768A3766B50065AF08
        Validity
            Not Before: May 27 00:10:16 2024 GMT
            Not After : May 31 00:10:16 2024 GMT
        Subject: serialNumber=f274fb16eeaeab829b290ba54e19a91d14d03bc62730097573c36b2625afc535, CN=bb9a9116-f615-462e-a680-5266b327e0fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:24:e8:2f:25:78:be:f5:1a:a8:93:9b:9a:82:
                    aa:27:06:bd:73:f6:90:d0:c4:d2:9b:e4:79:cc:b6:
                    bc:cf:50:68:03:5e:59:d9:cf:a2:49:fd:e8:78:99:
                    be:e7:bc:09:fa:da:ae:08:f8:6e:96:24:f0:dd:cf:
                    35:6a:7c:26:b1:fe:0a:7a:df:69:74:17:6d:6a:67:
                    a5:ee:0a:99:1c:be:0a:49:8d:c6:01:31:5a:95:67:
                    39:ef:98:cf:1c:9c:2d:cb:36:33:9b:86:51:bb:51:
                    e0:15:36:ee:bc:44:b2:cd:c8:fd:90:6e:86:03:3a:
                    48:d8:f8:85:00:f9:71:07:79:c5:93:9c:ee:a7:3d:
                    0e:e7:37:99:fc:fc:84:95:b6:5b:de:96:80:5e:6d:
                    ff:65:36:89:09:ce:ed:6a:f4:fe:d9:0f:2c:28:8e:
                    1b:03:27:ef:55:a2:25:53:f4:19:bd:77:33:ef:63:
                    4c:d7:ca:78:20:bc:11:fe:ad:58:ae:93:4d:1c:d6:
                    e0:b9:79:15:4c:dc:ba:a0:1c:68:71:c0:fc:c6:e2:
                    fc:74:5b:91:c9:24:f1:02:2e:1e:6b:ad:6f:4e:7b:
                    22:8b:97:ff:63:dd:5f:85:9a:69:93:56:74:e4:aa:
                    de:ce:99:0a:73:dc:9b:07:bd:2b:53:d2:c7:d3:eb:
                    bd:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:A4:94:1C:14:35:8A:F7:3D:DB:BD:1D:6E:66:57:BD:CA:92:2F:4D
            X509v3 Authority Key Identifier:
                keyid:E7:CA:DA:5F:08:81:D7:7B:EA:48:B0:76:8A:37:66:B5:00:65:AF:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/58raXwiB13vqSLB2ijdmtQBlrwg.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/manifest.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/708aafaf-00b4-485b-854c-0b32ca30f57b/12e59001-35ac-4abf-858f-37b955a24b3f.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:c2:11:02:77:8b:8b:01:59:50:d5:54:a5:17:45:72:64:25:
         28:64:3b:95:89:2c:c5:31:76:51:79:b2:b1:09:3e:a7:ee:65:
         80:46:35:75:cb:31:09:fa:fa:82:48:fd:79:93:ca:68:39:09:
         e5:ab:2b:9f:8f:cd:a7:21:29:3d:64:1e:e4:23:15:7c:b3:63:
         6c:8e:8f:01:08:a9:b4:75:c4:b3:42:47:6b:51:f2:4a:09:b7:
         b0:6c:a3:02:01:f0:38:ed:c6:21:46:71:37:7d:a1:1c:f3:52:
         b5:f8:dc:ac:03:38:c7:67:94:d6:84:0a:89:f5:b3:f4:8e:1d:
         d8:21:00:dc:60:60:06:2e:33:e5:7a:1c:6f:eb:5a:29:5c:5e:
         9c:29:86:c5:32:01:4a:e4:3d:24:6d:f4:bb:08:70:06:10:f9:
         62:31:f3:bc:a5:40:a1:e6:15:90:40:cc:b8:6d:e7:63:57:79:
         b9:94:78:a9:ca:45:c8:fd:78:a8:a1:a6:c0:ee:5e:04:51:b5:
         de:99:64:0a:00:52:68:be:24:6c:b3:6f:67:13:02:ce:72:8e:
         68:3c:b4:c5:6b:11:6f:26:1c:06:6d:69:5e:3b:69:fc:23:df:
         a6:e0:ec:f2:fa:19:d0:b3:19:bb:ba:66:b8:25:58:1e:dd:33:
         8b:b0:f1:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 27 00:32:47 2024 by rpki-client on console-fra.rpki-client.org