Manifest

$ rpki-client -vvf rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
File:                     34071A863A3C6EF2DD36795F45540E2FB68950A0.mft (raw, json)
Hash identifier:          pD1NCt2oW2T0XufxRCNBPTa3s/HaGHRMWnuSNqEu2LE=
Subject key identifier:   9A:D7:14:DF:D4:E6:95:8D:91:1D:83:76:2E:B1:3D:B9:0B:61:5E:25
Authority key identifier: 34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0
Certificate issuer:       /CN=A91FA6830000/serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
Certificate serial:       06F664F56F03F4A6B82E50F2D6484100B2CF76F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
Subject info access:      rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
Manifest number:          06DF
Signing time:             Sun 08 Jun 2025 02:45:15 +0000
Manifest this update:     Sun 08 Jun 2025 02:40:15 +0000
Manifest next update:     Mon 09 Jun 2025 05:50:15 +0000
Files and hashes:         1: 323430333a666263303a613030323a3a2f34382d3438203d3e20323132353132.roa (hash: enaySFUpt7HUACHfd9TuXH57K0gEe6gPHzhcz9XFJXs=)
                          2: 323430333a666263303a3a2f33322d3438203d3e2033323538.roa (hash: tXrN0zoKF82QapDtfGgfQ/sKCgpFN3PcfxbF24KevGM=)
                          3: 3130332e3132352e3233322e302f32322d3234203d3e2033323538.roa (hash: cLW/biMRwR7zRrRPFacawZTNPUq9jmMexiFzyeHhVJ4=)
                          4: 323430333a666263303a3a2f33322d3438203d3e203233393539.roa (hash: Ajs11kbN11P2XWfoIJiRn6ZOdr7R8IeCxJs9fIcXO2M=)
                          5: 323430333a666263303a3a2f33322d3438203d3e203433333537.roa (hash: f6TUhFqS3isV+/cNk8PgUfCkyR1D652ScYlagjbFUVg=)
                          6: 3130332e3132352e3233322e302f32342d3234203d3e2039333132.roa (hash: JFgikoosW77rCCGiBkowQ97xtUQuU8MrNrAShHYoknM=)
                          7: 3130332e3132352e3233322e302f32322d3234203d3e203233393539.roa (hash: DN/E6aOFiV8KoFntSlnkk78fDXrIalkTpGLDVfdtSoM=)
                          8: 323430333a666263303a613030303a3a2f34382d3438203d3e20323132353132.roa (hash: hJxx3nr/lfwP0kEgV9nZ8LhD9nuKvmRGXnwzZAzg9w0=)
                          9: 3130332e3132352e3233322e302f32322d3234203d3e203433333537.roa (hash: gleXammGNco3AiF4159jPajnO5VNN8RX+h5bhpaHj2c=)
                          10: 323430333a666263303a363030303a3a2f34382d3438203d3e20323132353132.roa (hash: SPVnXgzc6DdCcPNaKseycoy7ZTTw0qv3w3c7rqopVw0=)
                          11: 3130332e3132352e3233332e302f32342d3234203d3e2039333132.roa (hash: YBcj0Y7Hb7dgFTi+rZqUgqhjt4rx48fgaI0O88QVy6s=)
                          12: 34071A863A3C6EF2DD36795F45540E2FB68950A0.crl (hash: OixmSPhIxvWa+3lar7Ihp3QgauXtqp8VLCEMkeBjYhg=)
                          13: 323430333a666263303a613030313a3a2f34382d3438203d3e20323132353132.roa (hash: DNK4vnrgAUMBFTQF62of1cSQgwMSTE8r5u7W1r1aQzI=)
Validation:               OK
Signature path:           rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl
                          rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Jun 2025 05:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:64:f5:6f:03:f4:a6:b8:2e:50:f2:d6:48:41:00:b2:cf:76:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA6830000, serialNumber=34071A863A3C6EF2DD36795F45540E2FB68950A0
        Validity
            Not Before: Jun  8 02:40:15 2025 GMT
            Not After : Jun  9 05:50:15 2025 GMT
        Subject: CN=9AD714DFD4E6958D911D83762EB13DB90B615E25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:38:b5:54:de:df:43:62:37:af:c8:db:a4:69:
                    6f:4b:aa:13:87:c7:a4:fc:60:2b:28:fa:bb:2c:f7:
                    c7:fe:51:ae:24:85:3f:0c:1c:3c:90:55:78:34:58:
                    48:b7:9f:1a:e4:73:00:e7:13:15:94:1c:d3:bc:ba:
                    53:fc:a1:e2:18:f5:fb:e6:95:42:1d:24:e6:cf:95:
                    85:28:85:63:05:05:6e:e2:05:8c:ae:c8:c9:e7:86:
                    53:4c:0c:1c:b7:30:13:3f:5c:65:b2:2b:a8:5c:69:
                    da:5d:e7:9b:b0:52:e2:f4:69:6b:c9:5d:d4:87:ed:
                    53:ad:44:79:1c:a9:35:22:bd:9f:05:f2:ef:89:51:
                    b1:89:34:6d:8f:8b:a9:ef:e7:ee:ed:1f:e0:d8:e3:
                    dc:22:32:e1:f0:54:a4:4d:8d:c1:85:b7:b3:89:11:
                    72:bc:8f:9f:77:cc:6c:39:dc:dd:48:04:5a:fd:f6:
                    99:b3:e8:e3:8f:a7:65:a3:90:90:97:eb:25:11:9e:
                    de:98:86:bf:92:f8:c8:dd:03:1e:65:16:a4:fb:cb:
                    93:53:da:ff:6f:43:10:ce:19:55:5d:ad:4d:8e:09:
                    09:d5:60:81:ea:4a:0e:f3:41:8e:f9:36:a0:0c:0a:
                    12:a3:6c:d1:5d:03:91:19:15:5a:14:4c:6a:0e:60:
                    3a:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D7:14:DF:D4:E6:95:8D:91:1D:83:76:2E:B1:3D:B9:0B:61:5E:25
            X509v3 Authority Key Identifier:
                keyid:34:07:1A:86:3A:3C:6E:F2:DD:36:79:5F:45:54:0E:2F:B6:89:50:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NAcahjo8bvLdNnlfRVQOL7aJUKA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.owl.net/rrdp/owl/0/34071A863A3C6EF2DD36795F45540E2FB68950A0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:af:c8:1c:89:ef:c6:4a:a3:aa:83:dd:86:2e:db:17:ce:53:
         c8:c2:5e:86:4b:d3:53:d4:60:e2:ce:31:b9:dd:0b:0a:e7:96:
         f7:7b:6d:87:c7:7b:2f:f7:a9:74:fd:f7:2a:03:64:c0:0a:39:
         3e:27:3a:dc:e4:fd:3f:78:ee:18:aa:cf:2f:8c:69:72:3c:03:
         0b:40:d1:c1:54:77:00:15:ad:c4:d2:9c:90:f8:13:fe:a3:03:
         70:50:72:c0:fc:67:23:b6:b8:ce:91:58:20:c6:ec:8c:bf:3a:
         c3:0b:85:d7:10:b3:9d:80:a6:91:82:54:55:d9:10:13:5b:8c:
         ab:c6:d3:95:a0:8b:11:53:d6:13:0d:38:dd:24:4b:0d:ba:58:
         d6:bf:f1:b2:fc:50:16:d9:e7:13:d7:d8:84:55:63:48:6a:9d:
         e1:12:7a:4e:96:cd:4f:da:2e:0b:8d:66:76:7c:29:2f:68:8e:
         bc:15:ec:3c:7d:db:0b:56:44:71:01:7d:cc:20:2d:69:31:5b:
         09:36:f8:e3:06:f3:f5:96:a8:62:12:bc:81:10:72:91:cb:6b:
         e0:7c:0c:76:6a:bb:2c:7d:0b:04:58:b5:92:e6:33:e8:34:23:
         cd:c5:ba:a9:a9:8f:83:7a:86:93:25:34:64:82:3e:93:db:04:
         c4:61:c3:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 8 06:30:36 2025 by rpki-client