Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          f4GBLcZD1waOC/2tprsB3qv8Mu5nKv+Kuq4wSyYG2H4=
Subject key identifier:   36:D2:63:16:1B:2F:CF:92:1A:17:8A:71:3A:B9:39:44:D2:7D:A9:5C
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       19866E9B5D696758E99CF45048FB6630F5BDAB92
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          073F
Signing time:             Thu 05 Jun 2025 00:21:40 +0000
Manifest this update:     Thu 05 Jun 2025 00:16:40 +0000
Manifest next update:     Fri 06 Jun 2025 03:39:40 +0000
Files and hashes:         1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
                          2: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
                          3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
                          4: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
                          5: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: IxPyvX3F7VpTwS2Q7VLwkaLMAYL3jEvrJo3qTXooaZ0=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 06 Jun 2025 03:39:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:86:6e:9b:5d:69:67:58:e9:9c:f4:50:48:fb:66:30:f5:bd:ab:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: Jun  5 00:16:40 2025 GMT
            Not After : Jun  6 03:39:40 2025 GMT
        Subject: CN=36D263161B2FCF921A178A713AB93944D27DA95C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:2e:f7:71:88:8f:b5:74:48:8e:97:73:2b:84:
                    8f:ea:7c:1c:df:a1:f1:b7:b1:02:29:bc:0b:a0:b4:
                    e5:c6:f7:0a:0f:ae:51:c3:69:6d:57:33:51:7e:7a:
                    3a:ac:0d:c6:c9:3e:ff:0d:d1:94:4b:50:ba:fe:53:
                    68:ca:58:90:0e:a8:05:23:a9:4d:c8:4d:9f:71:c9:
                    7d:aa:c6:13:79:5d:d3:8f:57:bb:d4:3a:d6:c2:79:
                    9b:20:8f:a0:e0:4a:8f:bd:a1:2f:94:70:dd:bc:a8:
                    73:5b:e1:59:47:1a:20:46:07:a3:de:ef:69:ec:c9:
                    8c:ca:37:f5:bb:cb:3e:b7:4b:8a:51:57:28:89:3a:
                    3d:e6:b0:86:c1:7e:5e:0d:70:39:f2:b5:84:8f:59:
                    18:12:c1:b2:d2:11:53:e4:36:73:4a:f8:f9:17:16:
                    7d:49:34:2c:66:61:47:34:16:60:04:24:29:66:86:
                    0c:10:49:2d:f7:c0:25:88:a1:fa:46:d6:6f:a8:fe:
                    42:c6:89:4b:71:7b:37:a7:9c:ca:8f:5d:f5:95:da:
                    56:19:21:0e:f1:ff:34:bc:a8:dd:09:bf:61:f1:83:
                    dd:8e:7f:76:d4:2d:be:53:dc:0e:58:cd:f0:7f:e9:
                    f6:ec:cd:ea:e7:1e:29:ad:e4:ec:47:85:b3:65:a0:
                    80:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D2:63:16:1B:2F:CF:92:1A:17:8A:71:3A:B9:39:44:D2:7D:A9:5C
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:be:a4:d3:a9:18:4d:40:c1:c9:6b:f2:37:be:fb:55:6f:37:
         90:0d:6e:39:87:23:77:71:b4:8d:b6:f5:ab:d9:4b:33:9c:02:
         1f:cc:6e:97:16:a2:44:96:88:d0:59:9d:87:47:64:23:1c:cd:
         55:89:34:e9:94:ed:f0:84:6c:62:0c:fe:2a:58:79:8b:af:54:
         99:99:0e:e2:66:39:ff:58:5a:90:be:e6:2b:e6:e8:fa:2c:0a:
         24:8e:44:c2:35:b9:c4:69:e0:c7:4f:06:1b:0c:79:59:82:eb:
         24:6e:6e:3a:78:4f:d0:28:0b:01:7a:54:bc:e1:a5:07:26:9b:
         42:8d:98:00:3a:e9:c3:4c:38:df:20:cd:05:1c:bb:db:f7:5a:
         83:b8:68:2c:68:0d:4d:bf:70:93:9e:2f:b8:38:23:5e:c9:4d:
         7b:f1:47:11:1d:ab:73:df:40:02:c3:69:e8:53:ab:cd:39:21:
         37:68:25:35:17:a1:51:ab:8f:e6:f9:1a:cc:39:12:ce:5b:41:
         87:16:9f:9a:5c:df:ef:88:d1:bc:a7:bb:78:b1:d0:cb:c3:da:
         24:1c:30:c1:26:c2:73:11:64:c0:a1:42:c4:cb:bd:c8:8f:ed:
         7f:28:a1:9b:88:5c:27:bc:29:e5:66:b7:d7:d3:60:47:d3:a5:
         cc:01:5c:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 5 18:37:34 2025 by rpki-client