Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          j+yQnAPr4w4OpL08g/NllMsDoXXXmIXpMQjrqbwXnIA=
Subject key identifier:   0A:F2:D8:10:08:61:E8:2D:83:68:27:D8:AF:75:9F:E8:5E:C9:1F:F5
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       637559340A531C06F01EA69804367961670408B8
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          0523
Signing time:             Sat 04 May 2024 14:46:00 +0000
Manifest this update:     Sat 04 May 2024 14:41:00 +0000
Manifest next update:     Sun 05 May 2024 17:02:00 +0000
Files and hashes:         1: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: zVASvqVyMDytylIqPVP7DsBgbWwYXluD1/EFwCFPV98=)
                          2: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: FNqrnceU3iwVod2WSMXQFQeJdYf+AyNGsDarmParqg0=)
                          3: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: Q+P7neWxD0FfwlN2n/euR+B2AFXcCaUa87jjdfkibTY=)
                          4: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: ZUM1cbZMmBdIkiUKSucM9Rjq4hdiAWqwgzoQbBrlIUU=)
                          5: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: DYSJ3CJ5blReH3/TSVJqGgdR+QegAaMYJXfNE5qYoDE=)

Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Sun 05 May 2024 08:00:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:75:59:34:0a:53:1c:06:f0:1e:a6:98:04:36:79:61:67:04:08:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: May  4 14:41:00 2024 GMT
            Not After : May  5 17:02:00 2024 GMT
        Subject: CN=0AF2D8100861E82D836827D8AF759FE85EC91FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:75:09:55:20:5d:32:a2:6c:8f:06:f7:c7:c3:
                    71:de:ee:3d:82:32:8a:c6:bd:b4:96:0a:6f:e5:bf:
                    56:01:23:c7:56:14:b3:23:9d:89:9c:f3:10:b4:f3:
                    58:f0:c9:0b:00:22:bb:42:f1:74:d7:00:00:5f:58:
                    e6:e9:e6:3c:cc:74:46:1c:9c:ba:4a:2e:25:5a:67:
                    a2:9d:65:2f:c8:11:39:de:e2:65:7b:5a:6d:ce:2d:
                    2a:6f:0e:93:47:94:2f:2d:df:ce:46:1c:94:06:fc:
                    af:9e:fd:1e:59:1a:8d:83:bf:ab:d2:e2:9a:ef:2e:
                    b8:68:b4:43:3f:30:d9:5e:f2:35:4b:9b:c4:41:b6:
                    e6:74:3c:14:28:f4:e9:62:62:2d:2d:da:27:e2:93:
                    4d:94:29:2a:21:f2:ee:b8:2f:50:23:dd:57:37:cb:
                    95:14:c8:53:6f:8c:48:da:72:d5:0d:cb:38:d9:a3:
                    cc:76:e0:52:24:ea:45:17:c5:25:1f:5c:da:ed:9f:
                    66:ae:47:40:21:16:02:c6:29:22:95:bb:77:f2:4b:
                    e6:7b:67:13:19:54:8e:66:17:9c:67:af:a5:7e:8d:
                    1a:63:9d:f3:1e:da:27:ba:5e:0a:0d:96:ef:76:51:
                    2e:3e:38:2b:af:68:f0:85:17:3b:6d:53:a4:ea:28:
                    6c:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:F2:D8:10:08:61:E8:2D:83:68:27:D8:AF:75:9F:E8:5E:C9:1F:F5
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:33:57:ae:b0:6e:1f:ac:9f:60:1f:9e:c7:87:53:2e:3b:2b:
         ed:83:fc:cd:b6:18:2c:43:18:68:76:0c:53:18:ff:b9:d2:71:
         45:e6:d7:53:2a:1f:4f:57:46:3c:29:d5:f3:89:88:b6:6d:9c:
         30:32:60:98:27:ff:13:f8:f8:98:b6:3b:b9:8b:38:f4:d5:3c:
         da:a1:58:8f:b2:2e:fe:d0:be:1e:ab:9c:f9:aa:ba:57:45:33:
         cd:48:76:f1:da:79:cc:1f:55:40:e3:b9:a8:c7:5d:b5:54:50:
         ce:de:6f:c2:ed:b2:93:89:77:a3:21:94:b2:77:d3:e4:96:b3:
         94:f9:28:de:b5:dc:b0:8a:2a:bc:cd:e2:ba:44:ef:31:0b:7b:
         eb:b4:db:dd:82:1f:c4:62:e1:d2:84:59:08:54:f9:96:ed:34:
         ba:1c:d3:43:e3:fe:b5:87:61:47:5e:a5:e9:1f:0a:4b:af:6f:
         1c:b7:ac:b0:c4:41:9e:6c:d5:ab:96:97:52:f5:58:81:7e:38:
         82:49:70:25:1b:00:75:15:7b:bb:a8:90:21:02:1d:40:a2:c4:
         5c:a4:02:64:6a:67:b8:28:71:21:81:55:71:56:2a:a6:12:4e:
         68:b7:b9:1e:95:84:c0:61:95:a4:55:3f:db:c7:c1:8e:9f:1b:
         90:90:b9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 4 16:01:53 2024 by rpki-client on console-ams.rpki-client.org