Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
File:                     5953AC0A64BF9656B442D3C32313435ECB495F68.mft (raw, json)
Hash identifier:          dBErBtPUuv4VMfMxiOjLhPskM9mU4OrvdYoaBv6qz90=
Subject key identifier:   44:4E:28:8A:D4:EF:4A:3E:CD:BC:7D:1E:38:4C:31:EC:37:3D:09:C6
Authority key identifier: 59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68
Certificate issuer:       /CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
Certificate serial:       0CC498067828C363B98F92DD268CE063669FA410
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
Manifest number:          0908
Signing time:             Thu 25 Apr 2024 21:47:11 +0000
Manifest this update:     Thu 25 Apr 2024 21:42:11 +0000
Manifest next update:     Fri 26 Apr 2024 22:17:11 +0000
Files and hashes:         1: 080766112B096ABD4E830FA9891E6D744A394E71.cer (hash: kxI4DqpvneRvnMrP1E3dXEFk2SpWSpexyetFQUuIyhI=)
                          2: 3130332e3230382e38362e302f32342d3234203d3e203631313338.roa (hash: CmATqLv/uzsVHW5Fu8oV7TQhu5HJ6xVzpnl3pI7n640=)
                          3: 3130332e36382e3131302e302f32342d3234203d3e20313333343438.roa (hash: F3ECKlP6xdBEZ7JfKrzGg1lgPgw5MfNd8aqVG+epag8=)
                          4: 323430343a336438303a623030623a3a2f34382d3438203d3e20323132313439.roa (hash: Jt4dL08el8wc7gQx8jkuZjw2R4YNXa84Al8IvEbKe0U=)
                          5: 3130332e3230382e38372e302f32342d3234203d3e20313338393935.roa (hash: lLRFmWYloEeKAiAgzgtzZEL7KN1kfCnY0vnSXIF+f6k=)
                          6: 3130332e36382e3130382e302f32342d3234203d3e203631313338.roa (hash: d0xznYTe1Mc16mNQbI30L3lRW3QGyCPyoeLu+JhOPc8=)
                          7: 3130332e36382e3130382e302f32322d3234203d3e203631313338.roa (hash: 0HIvLpr3wPQYmWvvxmNljBSmMiGbLSB3IMw560CtJVg=)
                          8: 323430343a336438303a3230303a3a2f34302d3438203d3e20313437323937.roa (hash: E+YRkEOREi4zUVd1y2ikGJBtAWWu7mZEpqr0Ah+uAUo=)
                          9: 3130332e3230382e38342e302f32322d3234203d3e203631313338.roa (hash: odAiEnKvDEzN+Lczvl5Ho4MMb2AzwndlpXwtnt1hVwY=)
                          10: EE962658B1226680140B4EA86F7D68CF498158D9.cer (hash: MD+pwIKK0AXg/Fs6iaMJ52DGNwhi3wJaakWf2EEpGEE=)
                          11: 323430343a336438303a3a2f33322d3438203d3e20313531383137.roa (hash: ZeFnsUSplgml61anmcPZ0FoMDaTFOJ05jOtt9auLVEU=)
                          12: 3130332e36382e3131312e302f32342d3234203d3e20313338393935.roa (hash: EUrL2hU8HqWeVv/pfA+TyhGZSWMVatv7eyVhKzpB5+A=)
                          13: 3130332e3230382e38352e302f32342d3234203d3e203631313338.roa (hash: iOFEGAiwABiQD1I1mMQZvMLz7QZSzX2/T5WaQIRYXmU=)
                          14: 5953AC0A64BF9656B442D3C32313435ECB495F68.crl (hash: EWhGVQeOnt3mCzHj4dpXFEaLMZXLrZ6zTOrUe61PmdI=)
                          15: 3130332e36382e3130392e302f32342d3234203d3e20313336353537.roa (hash: tTXwkNxmoWQtvUnwN/M2xM4PdzZ4vwwupy5Di9xiHs8=)
                          16: 3130332e3230382e38342e302f32342d3234203d3e203438323937.roa (hash: PhVjc3ONtbvV5Qu9cLEt5fnW3kzzQln2bXSIv9yEnys=)

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 26 Apr 2024 22:17:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:c4:98:06:78:28:c3:63:b9:8f:92:dd:26:8c:e0:63:66:9f:a4:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91115900000/serialNumber=5953AC0A64BF9656B442D3C32313435ECB495F68
        Validity
            Not Before: Apr 25 21:42:11 2024 GMT
            Not After : Apr 26 22:17:11 2024 GMT
        Subject: CN=444E288AD4EF4A3ECDBC7D1E384C31EC373D09C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:52:2e:a9:cf:d9:c0:0d:f1:41:08:20:d4:99:
                    33:5e:cc:49:22:e5:d3:49:ed:ad:3a:a6:ac:48:b6:
                    7b:4d:df:79:00:07:e3:f0:79:f3:6a:31:9d:c5:60:
                    4b:64:9b:2a:53:e8:eb:4c:07:5e:34:f9:63:ee:62:
                    47:5b:9d:bc:22:70:4c:09:9f:21:47:d0:76:3a:31:
                    0e:c8:ea:e6:0b:01:47:0b:68:4c:61:e2:e0:8f:8f:
                    11:12:39:2c:7f:9d:c1:d1:bc:06:bf:4a:f2:c7:9f:
                    e2:27:b9:41:89:55:8f:da:c3:23:b9:d6:af:6b:0b:
                    56:41:c3:82:3e:05:8f:5a:27:32:19:4e:6f:d3:18:
                    6b:6f:03:54:54:42:0a:a2:34:25:1f:a3:9d:1c:a0:
                    e0:43:32:23:b8:09:d2:e3:31:1d:6a:44:96:55:b1:
                    df:05:f6:3e:40:88:ce:f0:f3:68:a4:db:30:85:50:
                    f3:d1:12:54:60:f5:cf:54:85:ae:b0:69:f6:1a:81:
                    11:22:c2:9e:d0:e9:d0:86:e7:a1:9d:f3:72:ee:fb:
                    3c:df:9a:77:27:43:47:0c:4b:a3:70:89:d3:81:ce:
                    90:01:f6:8a:49:21:fb:be:69:3d:1b:4e:c2:26:ea:
                    01:26:4f:17:e5:b7:5e:64:96:3d:df:3d:df:6d:c1:
                    14:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:4E:28:8A:D4:EF:4A:3E:CD:BC:7D:1E:38:4C:31:EC:37:3D:09:C6
            X509v3 Authority Key Identifier:
                keyid:59:53:AC:0A:64:BF:96:56:B4:42:D3:C3:23:13:43:5E:CB:49:5F:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WVOsCmS_lla0QtPDIxNDXstJX2g.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/3/5953AC0A64BF9656B442D3C32313435ECB495F68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:16:02:0c:5b:79:62:47:5c:d8:40:af:5a:97:4c:ff:12:ab:
         cf:95:2f:f7:53:44:69:f1:3d:76:42:84:e2:3b:09:9b:5c:fe:
         be:e4:79:9a:4f:17:fc:bd:19:34:83:75:42:7d:2e:b0:de:e9:
         52:76:03:49:06:3a:1f:49:e1:f0:17:7c:37:1c:a5:14:cc:cf:
         c2:ea:ad:f2:52:f6:70:ba:1b:bf:a5:e8:aa:23:7b:ad:7a:6a:
         42:6c:2f:28:76:89:15:c0:6e:a9:59:c7:b4:c0:4f:32:b0:6f:
         49:c6:0c:a2:32:fc:8f:43:36:b3:63:1a:d7:0e:c5:40:4b:d5:
         6f:de:4f:6f:9a:82:cc:3f:36:f4:13:f4:24:1e:15:e2:a9:8d:
         cf:84:67:22:e3:30:74:93:79:5f:2f:a6:08:95:63:a5:dc:3e:
         e5:33:72:eb:31:ea:94:eb:2e:b5:18:c9:5c:61:e3:3e:f1:ec:
         d4:8a:a2:fb:1d:70:c1:f9:b1:b4:b4:48:af:d1:8e:0f:db:3b:
         61:82:8f:b7:a1:29:fb:9b:2f:87:21:ce:56:37:a9:b8:5f:99:
         ab:5a:eb:30:7a:b2:55:f2:9f:10:75:43:14:fc:72:de:30:90:
         63:a8:c8:30:c0:6d:2a:1d:13:34:f2:e5:51:aa:ed:be:8a:a7:
         67:c9:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 25 23:29:41 2024 by rpki-client on console-ams.rpki-client.org