Manifest

$ rpki-client -vvf rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
File:                     90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft (raw, json)
Hash identifier:          zzcdi6knLkMyD3iC26gwtYK1B5jpELodWa3Ig6EWwHU=
Subject key identifier:   61:26:93:16:B2:B4:B4:DF:82:7F:59:4A:E1:C7:52:76:2D:52:4E:1E
Authority key identifier: 90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF
Certificate issuer:       /CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
Certificate serial:       1C948124EE55BE443114B199B610F4C8A0EE9E22
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
Subject info access:      rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
Manifest number:          05AB
Signing time:             Sun 28 Apr 2024 02:40:00 +0000
Manifest this update:     Sun 28 Apr 2024 02:35:00 +0000
Manifest next update:     Mon 29 Apr 2024 02:40:00 +0000
Files and hashes:         1: 323430373a636463303a656666663a3a2f34382d3438203d3e20313339323939.roa (hash: B5NEWkwR0yS/6298bmWpvkhprAyXeahKdOoffRebZLg=)
                          2: 90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl (hash: B0SKiBM2HU3INChJ5Oq1hyPzu8pHchqG3m1IU5qp82w=)
                          3: 3130332e3137322e34302e302f32332d3234203d3e20393833.roa (hash: 3rBSRh2NOrtjVIKHLwdEcFx9QwwTXPYDSz1yGacqJZI=)
                          4: 323430373a636463303a3a2f33322d3438203d3e203338313336.roa (hash: 0/KlX6t9hwoIHUyKnJX/v0U9NMrynFZmZ1/n+MFour0=)
                          5: 323430373a636463303a3a2f33322d3438203d3e20393833.roa (hash: WsdslUaes+g/PgIY7lW4EAnfFqttb2cZORHQnhet+5g=)
                          6: 323430373a636463303a633031303a3a2f34342d3438203d3e20313438393832.roa (hash: MqebpH/qL4mH8tyyEEmBXD6OqEOYyGelu1HtSh13Ulw=)
                          7: 3130332e3137322e34302e302f32332d3234203d3e203338313336.roa (hash: FUVKsMCJl3ocOz6Dz/uCI4VUDqInotrLV40crKncjh4=)

Validation:               OK
Signature path:           rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl
                          rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Apr 2024 02:40:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:94:81:24:ee:55:be:44:31:14:b1:99:b6:10:f4:c8:a0:ee:9e:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916C75D0000/serialNumber=90884A3F57AC46FA63A71BD993E4E8AD788187AF
        Validity
            Not Before: Apr 28 02:35:00 2024 GMT
            Not After : May  5 02:40:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:b5:0a:e2:99:5b:94:65:47:db:76:6d:d1:79:
                    5b:80:b4:28:5d:8a:99:93:20:c6:2b:d0:c0:94:20:
                    51:a6:a8:a8:24:bd:7a:0f:47:35:bf:be:f1:c7:91:
                    ab:35:a1:ee:eb:50:ea:b3:e2:f5:62:73:87:3f:1c:
                    f5:95:97:d5:33:30:64:63:38:b1:b2:c5:ed:cb:67:
                    7b:e1:c5:bf:ca:48:00:38:95:25:76:99:f4:44:b2:
                    49:a5:da:c2:de:4b:2a:aa:7a:c7:35:b5:ed:23:b7:
                    12:ee:8f:49:ab:3f:ab:2c:a5:c1:0a:5c:fb:fa:6e:
                    53:8e:92:c7:e0:3f:9b:4d:03:7e:1e:03:c7:e9:5c:
                    6f:37:f9:72:f6:db:02:53:61:60:06:25:9b:9e:06:
                    99:66:54:84:65:f7:ab:3b:ec:47:0a:a3:7c:65:da:
                    ef:7a:1a:f4:af:da:c1:d5:ab:dc:43:cb:63:62:f2:
                    e2:e2:01:e8:9d:12:0d:65:6e:f0:93:25:d5:ec:db:
                    58:e1:46:7b:96:72:ef:b5:95:c1:2d:f4:9e:b7:db:
                    35:c2:ca:85:0c:9e:9c:5c:0f:c2:db:ef:11:e5:56:
                    c2:b5:ae:74:79:82:60:19:7d:27:6f:f1:eb:95:ba:
                    aa:be:8b:a9:fe:23:e0:dd:80:6a:9c:ea:96:9c:69:
                    50:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:26:93:16:B2:B4:B4:DF:82:7F:59:4A:E1:C7:52:76:2D:52:4E:1E
            X509v3 Authority Key Identifier:
                keyid:90:88:4A:3F:57:AC:46:FA:63:A7:1B:D9:93:E4:E8:AD:78:81:87:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIhKP1esRvpjpxvZk-TorXiBh68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.akrn.net/repo/AKRN/0/90884A3F57AC46FA63A71BD993E4E8AD788187AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:dd:38:58:39:1c:27:69:91:73:b3:84:22:3c:a8:5d:ee:fd:
         9b:3c:38:b3:8d:5f:5b:63:80:80:d2:f6:25:20:bc:b5:9f:91:
         19:bb:80:4f:35:62:a6:6e:da:8e:2c:04:8f:d7:48:63:8b:c6:
         cc:4c:bc:3d:5e:22:54:ae:7b:23:c7:e0:a4:e9:85:ad:f8:65:
         5d:bf:0c:9f:1c:f2:5f:b5:b1:36:4f:64:f1:70:54:00:e6:c4:
         c5:a9:d2:a3:2d:6f:5b:b5:79:fc:1f:f5:b0:c7:fb:f5:5e:42:
         76:9e:bf:b6:76:6b:bc:4d:b1:bf:4b:4b:42:db:0d:89:d0:94:
         26:1d:47:d9:26:d5:c2:61:61:f1:ac:26:de:cd:70:89:a3:19:
         08:cd:94:0f:43:dd:05:8d:88:c7:d4:9e:89:d7:33:b4:c1:7d:
         de:dc:98:4e:94:46:4b:e9:a7:36:d9:8f:37:0e:81:6e:d2:e8:
         e6:df:de:5c:59:07:da:0d:fa:13:80:5d:6d:03:43:23:83:f3:
         ed:83:57:7f:52:c9:e3:51:9a:be:ba:be:a7:13:ff:ab:12:7b:
         6c:fe:97:9a:09:6e:b0:02:da:09:35:90:67:5b:dc:8b:bd:de:
         5d:62:d0:84:92:5e:ff:07:0b:72:a5:b0:2c:8a:0a:81:ac:05:
         58:eb:cc:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 28 15:50:02 2024 by rpki-client on console-fra.rpki-client.org