Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
File:                     9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft (raw, json)
Hash identifier:          J6FHz77kVF7gTYAiuIbRfkQDPWQTSa8NctJzQ7W/ZN0=
Subject key identifier:   97:D7:6C:7A:92:A1:B9:55:B6:BD:8F:4F:2D:F5:D7:97:BE:52:EA:92
Authority key identifier: 9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB
Certificate issuer:       /CN=A91A9C1E0000/serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
Certificate serial:       686F0BB2596AC6BA27B8B4346721A587A69A912E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
Manifest number:          0712
Signing time:             Mon 05 May 2025 11:31:45 +0000
Manifest this update:     Mon 05 May 2025 11:26:45 +0000
Manifest next update:     Tue 06 May 2025 14:48:45 +0000
Files and hashes:         1: 3130332e3234342e3232362e302f32342d3234203d3e20323134343531.roa (hash: g4JId+v3UNbmSA3F2ovECdVzf7QMh+84PzJXxRokrCE=)
                          2: 323030313a6466323a633163303a3a2f34382d3438203d3e20313531363432.roa (hash: co/JXev1XeNEns368eJzfGNCuCnraLDGBFatvyKS0MU=)
                          3: 9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl (hash: H052GxFyA9/nOWauYW2lm1j9cA0ohR6W7811g2dnR7Q=)
                          4: AS151642.asa (hash: 5TmDKAlnrhUemjI2jwXixvhgYCubE9ZuswWJhVaOtJc=)
                          5: 3130332e3234342e3232372e302f32342d3234203d3e203432383331.roa (hash: E1FZLkk5M6GOvm5UnK3G3NWIYJqivBqn8ntAh+WceCc=)
Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 06 May 2025 14:48:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6f:0b:b2:59:6a:c6:ba:27:b8:b4:34:67:21:a5:87:a6:9a:91:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9C1E0000, serialNumber=9E978E0F77E61BAECD0391B0734D62C72A8139FB
        Validity
            Not Before: May  5 11:26:45 2025 GMT
            Not After : May  6 14:48:45 2025 GMT
        Subject: CN=97D76C7A92A1B955B6BD8F4F2DF5D797BE52EA92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e6:6f:00:e4:19:aa:2c:a3:9a:1e:5c:b3:59:
                    2d:0b:12:29:e5:92:23:cb:43:6f:69:08:7c:86:eb:
                    39:ee:4b:2b:6a:e3:9e:47:e2:a6:87:2e:0b:07:97:
                    b9:4c:54:dc:b4:6d:a1:d1:80:4c:0e:8b:db:37:e9:
                    18:b0:a7:f0:0f:ab:04:65:df:7b:15:7a:40:54:a6:
                    2b:51:1f:fb:60:23:84:4c:39:80:3d:2e:14:1a:55:
                    6d:18:ac:2d:20:1e:30:3c:75:78:fc:1c:89:94:a4:
                    10:ab:a7:eb:a0:1b:14:60:7f:1d:31:89:58:70:ea:
                    4c:ad:85:43:41:e4:e2:be:6f:33:7d:5c:fe:18:d6:
                    81:b9:82:f9:ce:ff:8a:a9:86:5b:65:af:58:05:56:
                    e3:60:5b:ef:f9:d1:c3:09:94:5c:77:5b:ae:37:11:
                    ce:9f:b0:51:ec:81:4b:4e:0a:61:ed:c8:99:6f:bf:
                    f5:6e:55:9f:07:11:54:82:b2:99:10:66:b0:71:a3:
                    7a:bf:9f:d2:9b:b6:cd:51:e1:58:12:3d:a3:d5:4f:
                    8d:5e:82:c6:af:ae:9e:82:c2:a5:a5:9c:62:52:82:
                    aa:bd:2e:ab:ab:71:b0:45:68:a3:51:55:54:5b:0f:
                    8e:1f:20:85:51:15:6c:a5:e9:82:01:43:bc:7c:4c:
                    97:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:D7:6C:7A:92:A1:B9:55:B6:BD:8F:4F:2D:F5:D7:97:BE:52:EA:92
            X509v3 Authority Key Identifier:
                keyid:9E:97:8E:0F:77:E6:1B:AE:CD:03:91:B0:73:4D:62:C7:2A:81:39:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/npeOD3fmG67NA5Gwc01ixyqBOfs.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/4/9E978E0F77E61BAECD0391B0734D62C72A8139FB.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:1c:ff:a6:21:ac:34:e0:0a:62:35:22:1e:5b:b9:35:08:72:
         5d:6c:31:3f:b1:2d:f0:4f:ac:a8:1a:d0:08:b8:1b:0a:49:12:
         da:f6:06:b2:fe:28:93:69:42:8c:5f:6d:58:e8:34:34:db:f6:
         1d:e7:9f:18:5c:61:c9:65:8b:51:b2:fc:99:96:9b:69:71:bd:
         67:49:51:e8:60:04:dc:e9:51:56:f8:5e:a9:cc:15:ca:39:66:
         72:80:b5:d4:94:a1:b3:87:cd:5a:ee:ba:8d:c9:91:e3:3f:2a:
         6c:cc:de:72:f3:e3:fd:08:b1:14:cd:52:47:70:e2:2c:e5:1b:
         74:e2:bb:c0:a4:8d:31:21:7e:7d:c0:17:fb:23:85:00:86:c2:
         da:b3:50:1c:82:e9:1a:9c:ab:68:ae:f1:f0:de:6c:45:ff:58:
         62:73:6f:e7:20:be:44:0d:0a:ad:86:ae:f0:3f:3a:26:3a:72:
         17:70:52:25:60:3f:32:96:b7:43:44:94:3a:3c:1c:42:7f:47:
         e7:22:73:ab:14:0c:59:ef:0b:f0:c0:79:78:7a:f8:84:73:a6:
         95:bd:73:58:66:b4:ab:2f:85:cc:4e:2b:f2:3a:5a:93:cf:e8:
         d7:c9:b4:0f:fc:f6:af:53:a5:c7:fa:21:7c:eb:b8:4d:66:64:
         84:f1:97:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 15:36:25 2025 by rpki-client