Manifest

$ rpki-client -vvf rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
File:                     9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft (raw, json)
Hash identifier:          1vqtxnCmqCPDNQdLxQB22cZhJF/7Wfne2cV6Id2LJk4=
Subject key identifier:   9D:4A:2C:8D:87:6F:C1:DF:5C:83:B4:4F:E3:83:CE:A3:E6:71:73:4F
Authority key identifier: 9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC
Certificate issuer:       /CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
Certificate serial:       77AC1EB00DC37C6EBD96A8E85DA7C6DD1541733D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
Subject info access:      rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
Manifest number:          F2
Signing time:             Fri 17 May 2024 14:55:13 +0000
Manifest this update:     Fri 17 May 2024 14:50:13 +0000
Manifest next update:     Sat 18 May 2024 15:13:13 +0000
Files and hashes:         1: 3130332e3137302e3233322e302f32332d3234203d3e203537363935.roa (hash: AVcGIT4Dwb4Sns+O31mpRirTXePBSRm87YTun9F83R0=)
                          2: 323430373a623963303a3a2f33322d3438203d3e20313432363136.roa (hash: +iTfySyrB10us2jGerIU0GpWeXOM4G4A3q2uFWxGi0Q=)
                          3: 3130332e3137302e3233322e302f32332d3234203d3e20393137.roa (hash: sqN9I1+nwf8Y3PXfNCCLA1FhmRVoHJYGtRl91QTOhS8=)
                          4: 323430373a623963303a3a2f33322d3438203d3e203233393631.roa (hash: k2SgfyAQb+LyEUpKb6O73uDId6XNXaROlHHovDNCOBI=)
                          5: 323430373a623963303a3a2f33322d3438203d3e203537363935.roa (hash: u/XnJa9+weKkbBmbGBH1zIspRgFeJx0eVJf/gQ4nW8I=)
                          6: 323430373a623963303a663030303a3a2f33362d3438203d3e203233393631.roa (hash: cmH9G73G6ny4+knXm3WfyF4OQGgxBk2j4MMGVlYsZSU=)
                          7: 3130332e3137302e3233322e302f32332d3234203d3e20313432363136.roa (hash: WgvghLquwSM8GMnRWyCYyvl4hwIInZni8wlFY7q7pK8=)
                          8: 323430373a623963303a3a2f33322d3438203d3e20393137.roa (hash: wQms65uxYZWClMs+PtDfuFviS48pXEOPsERJ/M86/R4=)
                          9: 323430373a623963303a623030303a3a2f33362d3438203d3e203233393631.roa (hash: KY/0Y/i7Hov58kxPVMrVcyZJFd9zJf8v4LLKOOUjE/c=)
                          10: 323430373a623963303a666230303a3a2f34342d3438203d3e20393639.roa (hash: /pj1VM6Znu/7nlB3wkjBi56nYL6AGkE3TblrqG+Pdtk=)
                          11: 9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl (hash: mBc2nebH/E1+AMwJaM9251sI/PvUq7swwOogZhP/s+M=)

Validation:               OK
Signature path:           rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl
                          rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 18 May 2024 15:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ac:1e:b0:0d:c3:7c:6e:bd:96:a8:e8:5d:a7:c6:dd:15:41:73:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9121C330000/serialNumber=9CF05E7024D4A487E0B79E2F57525BF345DB53EC
        Validity
            Not Before: May 17 14:50:13 2024 GMT
            Not After : May 18 15:13:13 2024 GMT
        Subject: CN=9D4A2C8D876FC1DF5C83B44FE383CEA3E671734F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7a:a7:4b:da:6e:c9:29:bc:8b:48:a3:0f:eb:
                    68:13:ee:8e:a7:ca:7c:da:73:4c:18:3a:0a:c2:d7:
                    80:d6:99:09:8c:b6:e3:6a:70:90:97:0b:e7:13:a8:
                    f6:b9:1d:67:d0:fe:87:f5:40:b6:b3:26:a6:8b:b5:
                    3a:04:88:f6:04:24:77:28:4f:e3:6a:f5:bd:d2:15:
                    c8:99:ba:6e:a5:c6:4f:6a:71:71:15:ac:b8:59:82:
                    d6:c1:e6:72:ec:23:b9:42:82:06:56:9e:46:33:47:
                    14:db:ad:4b:b9:65:6e:95:7d:ed:6b:70:1c:73:e1:
                    33:e4:0b:62:30:68:09:7c:3f:13:26:ab:b9:c0:83:
                    b8:8f:9b:6e:04:fd:c6:c5:c5:4f:ce:db:a6:d1:d0:
                    d4:66:d5:68:4a:94:cd:dd:a2:a7:7d:e0:2d:71:cf:
                    7e:c3:ee:b6:21:08:55:f9:f5:48:53:63:8c:38:3b:
                    38:2d:f4:24:36:65:9b:3e:14:cd:0f:0d:7f:33:f5:
                    ec:ab:68:2b:e6:6f:8f:e5:2d:9f:00:45:51:04:79:
                    f2:c1:95:64:00:eb:a2:9a:fd:36:1d:2f:54:0c:44:
                    e4:09:27:8d:15:7f:ee:50:7f:e6:c6:88:d6:7a:b2:
                    a9:bc:0e:13:22:0b:af:8d:ac:cc:ad:f4:d9:cf:14:
                    53:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:4A:2C:8D:87:6F:C1:DF:5C:83:B4:4F:E3:83:CE:A3:E6:71:73:4F
            X509v3 Authority Key Identifier:
                keyid:9C:F0:5E:70:24:D4:A4:87:E0:B7:9E:2F:57:52:5B:F3:45:DB:53:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nPBecCTUpIfgt54vV1Jb80XbU-w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rsync.rp.ki/repo/misakaio/0/9CF05E7024D4A487E0B79E2F57525BF345DB53EC.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:76:bf:75:a2:19:70:c1:f1:e1:01:be:34:52:9e:f5:fe:b9:
         f1:bf:c9:9e:61:ff:2f:0e:ac:f1:02:91:f2:64:c5:33:40:c0:
         a1:3c:f6:5e:ef:18:f4:df:48:7c:ca:6b:66:8b:ff:a0:19:3c:
         9d:b7:d3:22:46:41:63:90:f4:9e:06:88:55:cd:85:f4:f3:cf:
         b7:23:a8:cc:aa:ff:2a:11:89:66:0f:44:1a:74:73:1c:34:ca:
         a6:0b:71:16:4a:18:eb:f1:5a:3f:28:e8:6a:25:09:79:b7:48:
         14:c5:07:4b:70:cf:ba:90:d1:56:f8:eb:8d:84:09:30:75:76:
         ce:f9:2a:3a:39:d7:28:b6:36:34:00:4f:c9:b9:f0:27:e0:86:
         0c:f8:b7:0c:4d:2d:ea:bd:54:66:93:0c:86:f3:89:db:34:24:
         e8:ca:ad:40:cf:7f:fc:2c:e4:fa:ec:23:a2:da:a9:36:41:f3:
         5a:14:48:f2:71:b9:ae:6e:ca:fb:8b:e8:98:17:6e:fe:3e:e8:
         f1:fc:13:12:cd:1b:b3:d0:c2:fb:5b:20:3a:42:2e:7e:ef:be:
         01:54:b1:a3:90:79:1c:87:03:1a:06:11:48:fd:94:78:b7:b7:
         c5:5e:57:e6:23:ea:cb:c0:39:74:96:07:95:89:65:96:81:24:
         e7:73:26:c6
-----BEGIN CERTIFICATE-----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