Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
File:                     8938CDF8AEC624089C1D95310FAC37474C0E8906.mft (raw, json)
Hash identifier:          XS8eqDF3QzAyiTbVjP6QyLqpoTxaApo9x2kAU+mq6Ho=
Subject key identifier:   EF:FC:24:6E:EE:33:17:33:69:AF:2E:4D:7E:5A:45:1F:8C:72:68:C9
Authority key identifier: 89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06
Certificate issuer:       /CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
Certificate serial:       5CB967BD76C503BE49CEF3C42B123B4DBB9DEB3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
Manifest number:          07B5
Signing time:             Fri 18 Apr 2025 20:47:18 +0000
Manifest this update:     Fri 18 Apr 2025 20:42:18 +0000
Manifest next update:     Sat 19 Apr 2025 22:35:18 +0000
Files and hashes:         1: 8938CDF8AEC624089C1D95310FAC37474C0E8906.crl (hash: 5bNLpi50OBM5UMzu87JwYOFwhTbW2dbPEoidAgVALLg=)
                          2: 323630343a653863303a3a2f33322d3438203d3e203632383035.roa (hash: lVeD0OBryZIFs0Dh4RJF4WX10ZAtCz7OAri6R4+uMEg=)
                          3: 32332e3134322e3232342e302f32342d3234203d3e2036323333.roa (hash: s3Qd6QYfZyPsKMKHxXE+bYRSLAPZDVcjPG+u+09d/7Q=)
                          4: 323630343a653863303a3a2f33322d3438203d3e20393439.roa (hash: 0cNTecmkjnUfzOo0lDUBgluK59dvsGew1EUUhyFgyIw=)
                          5: 323630343a653863303a3a2f33322d3438203d3e2036323333.roa (hash: QrnHZykAkLaEYzc9j8o4DQEPsMhsr4WPYjqADvWGf40=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl
                          rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/42c9e997-747a-4107-89fb-7cab8903a586.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 22:35:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:b9:67:bd:76:c5:03:be:49:ce:f3:c4:2b:12:3b:4d:bb:9d:eb:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4
        Validity
            Not Before: Apr 18 20:42:18 2025 GMT
            Not After : Apr 19 22:35:18 2025 GMT
        Subject: CN=EFFC246EEE33173369AF2E4D7E5A451F8C7268C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2f:f5:01:12:88:cf:95:cd:4b:49:4b:06:98:
                    02:b6:f9:bc:f1:68:64:2b:1b:f4:1e:0d:9f:1b:0a:
                    ad:48:3b:d3:b8:22:b4:69:57:b2:7a:d1:80:03:db:
                    79:78:47:e7:06:f9:34:6b:d9:37:88:35:26:47:42:
                    29:e7:da:1a:ba:2f:bd:fb:2f:ba:a4:65:93:bb:83:
                    95:d7:50:d1:e6:22:2f:4f:60:00:d3:dd:96:ee:80:
                    1e:ce:e5:81:4d:12:38:ea:39:82:09:f3:cc:9e:c8:
                    88:3a:15:9d:98:2d:5c:6e:cf:fb:22:68:c8:59:82:
                    41:cd:c4:a5:cd:dc:99:8c:c6:d6:08:7a:8d:70:e9:
                    1f:e8:57:d1:d7:ad:62:1f:46:f3:5e:b2:46:7e:84:
                    d0:66:3e:77:69:f7:16:05:25:6e:34:95:a8:cf:3b:
                    b9:b5:84:19:ab:c1:e5:f3:cd:ab:02:4a:fa:03:83:
                    e7:4d:b8:3e:ab:72:50:92:86:d7:3a:e2:1e:58:32:
                    40:9b:d0:c8:ed:34:b0:25:7f:60:f7:33:6c:d3:03:
                    23:90:a7:bb:37:f5:cf:27:75:9c:5e:7d:04:15:aa:
                    75:2c:52:06:0a:dc:c9:dd:19:12:0e:06:df:c5:8e:
                    52:b5:a9:29:97:dc:15:13:d8:68:e1:53:38:02:b6:
                    8f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FC:24:6E:EE:33:17:33:69:AF:2E:4D:7E:5A:45:1F:8C:72:68:C9
            X509v3 Authority Key Identifier:
                keyid:89:38:CD:F8:AE:C6:24:08:9C:1D:95:31:0F:AC:37:47:4C:0E:89:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/42c9e997-747a-4107-89fb-7cab8903a586/4263a08b9a0463d60ffb9144d1c2cb956e39c6c68c833d64e4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/45/8938CDF8AEC624089C1D95310FAC37474C0E8906.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:6e:74:9b:8d:79:a7:77:0c:aa:72:5d:d5:42:9b:a2:08:00:
         68:7f:a8:49:19:89:9d:b8:bb:85:7c:9b:0e:b3:d3:60:85:84:
         d1:d0:6f:03:ec:be:ca:a3:d6:ac:d7:cf:84:70:30:6d:74:0c:
         fb:04:83:d6:b6:75:28:22:49:14:c8:86:8d:7e:51:90:b6:42:
         84:5d:9a:d0:00:3a:69:a2:dc:08:9d:14:ff:fa:a8:74:ee:ad:
         f1:93:65:21:6a:17:87:52:08:4b:da:df:c7:26:57:3b:23:89:
         95:d0:e5:af:08:c7:7b:99:e2:e3:c7:ea:c3:9b:7b:71:6f:d4:
         ea:17:5e:de:0f:04:96:a9:aa:a7:73:19:b4:a3:80:6e:56:98:
         5c:70:20:8e:8d:03:8a:6e:5c:2b:5e:81:37:94:bb:3b:7b:4e:
         78:2e:b2:bd:6a:88:41:63:62:f4:fc:5c:9c:8c:0f:54:e2:7d:
         70:a2:ce:53:73:6b:90:0b:d7:c7:e8:64:5e:ed:ce:2e:5e:88:
         73:7f:4d:3d:04:0f:f7:83:88:6a:a6:70:d5:c5:e6:2d:4f:8f:
         35:51:fb:f6:ef:31:53:3e:5e:cd:f8:7a:b1:7b:d8:0c:5f:fa:
         17:f5:66:6a:9b:f1:83:23:b2:c5:14:7f:31:27:c8:7d:90:cd:
         8c:e3:08:37
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 19 01:59:14 2025 by rpki-client