Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          Dq9XtS5DCuIBZxo5eK+XApdNKznOJjcUx0UXvogU1Js=
Subject key identifier:   1E:1C:18:84:BC:6A:9E:5D:6B:40:82:6E:98:ED:C0:02:19:A2:65:6E
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       1AAD507E76C22A9A7E1C999CE644E7CCEF05D8ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          03AC
Signing time:             Tue 03 Jun 2025 17:55:53 +0000
Manifest this update:     Tue 03 Jun 2025 17:55:53 +0000
Manifest next update:     Sat 07 Jun 2025 17:55:53 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 4umRChvd3BlgzdrKB13rCAYnbyF+p5KQOIluwMzFGKk=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: EAzyY2NvcBpEIKD/JOL7uxNdt0nNv0q1TFA3mqJuQKY=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: Zb+/NNAz3RJPZQWg0IgoesiHjPMnz13+zEbpvaFgqeU=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: Hzt3XNB5uE29gQy24g9oM2efQhgT9rAodamhl8pG0vA=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/7276b2fa-548d-4970-8314-8d73945c34d8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 05 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:ad:50:7e:76:c2:2a:9a:7e:1c:99:9c:e6:44:e7:cc:ef:05:d8:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Jun  3 17:55:53 2025 GMT
            Not After : Jun  7 17:55:53 2025 GMT
        Subject: serialNumber=235a63a0b1dc5fa3900c43707f3f0fe4e76d00dd0bac52c48382ca0abbb4e450, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:b9:9d:5a:6f:1b:15:20:35:ef:d0:86:85:
                    58:d7:45:2c:09:57:dd:2c:d7:18:c5:c9:59:6e:62:
                    52:17:52:51:1d:03:ae:19:3e:6a:32:09:2f:09:18:
                    7b:42:2a:74:2e:68:b8:60:73:b8:fb:65:40:2b:68:
                    ac:13:f8:da:70:e5:c4:9d:74:88:e0:a8:c8:29:dc:
                    51:64:77:9b:58:92:42:f7:e5:dd:c0:29:7d:d2:70:
                    52:c7:da:2c:79:34:ef:09:4d:a3:c7:c3:34:91:12:
                    0e:30:33:2b:98:7d:0c:a5:5c:57:71:b9:6c:b6:85:
                    0d:43:7e:60:0a:74:66:a9:bc:49:d3:c8:6a:9b:c0:
                    f7:29:05:a0:b1:f9:72:13:c0:76:1e:8e:7a:20:18:
                    01:9d:f8:86:f8:c3:69:94:58:60:ca:11:2e:ee:47:
                    37:90:d9:ce:67:86:9f:c4:86:75:8c:62:fd:c3:d7:
                    d4:c9:3f:16:3e:65:15:ec:c7:df:f7:c3:a8:23:9d:
                    2f:b9:4e:7f:46:f9:f4:23:9d:51:ee:aa:e0:e5:b0:
                    45:81:fb:72:e0:2d:59:99:a0:36:a0:c8:86:31:88:
                    e4:c6:2d:3d:9f:d9:23:35:f3:1f:4a:b0:56:7d:cc:
                    59:dd:7c:f5:d0:84:b2:c4:38:87:33:f1:9e:50:09:
                    36:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:1C:18:84:BC:6A:9E:5D:6B:40:82:6E:98:ED:C0:02:19:A2:65:6E
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:bd:1f:b7:f2:1f:f8:11:f3:3c:49:2c:61:eb:2c:fb:db:5e:
         e4:d1:a3:4e:85:94:4f:1a:f2:04:5c:54:96:42:6d:c3:b5:9c:
         c9:3c:ce:42:6f:d1:8e:9f:8b:d0:81:c4:fb:d8:55:d1:d9:6e:
         7e:83:2a:01:b6:0a:82:7d:02:1f:fc:1b:16:1d:7f:0a:90:d4:
         1f:04:ae:75:9a:22:49:6b:ae:87:f4:54:01:31:0a:bf:5f:3f:
         c5:fe:1a:91:83:ce:d8:32:45:cc:8f:a4:6d:3c:4e:54:af:2b:
         2c:48:56:38:03:8d:e6:36:88:1a:4d:d3:14:1d:af:5a:6b:1c:
         9f:e0:98:d4:91:54:34:11:b2:33:66:ab:5f:4c:0d:0a:0d:8d:
         bf:78:24:e6:57:6f:27:80:33:5b:51:ed:ec:b9:b8:74:fc:f2:
         77:49:d3:07:e8:35:fa:b7:f4:fb:fc:f5:d9:14:1c:9a:b1:ea:
         54:e2:c4:15:10:3d:0e:95:4c:bf:41:4f:45:90:53:44:03:ae:
         65:81:21:e8:c4:ba:27:b9:67:44:2e:09:88:a0:28:0c:f3:20:
         ee:c2:14:bc:c8:5b:02:47:03:fa:a8:6c:8a:18:ee:67:26:bd:
         3b:25:92:d6:ad:e2:3d:2d:10:05:64:ae:9a:f3:ac:1d:eb:93:
         4b:ef:a0:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 4 11:36:16 2025 by rpki-client