Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
File:                     XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft (raw, json)
Hash identifier:          9+nGsUHIrLj88hpRaJr7EI00GmpUETEIe3hHg7rV7pY=
Subject key identifier:   A0:AA:E7:DB:B9:56:BF:2C:66:AB:2C:0C:CF:36:9B:EA:6E:4B:E3:AA
Authority key identifier: E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1
Certificate issuer:       /CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
Certificate serial:       3E41C6585E9D738513F6629019735838DC4F211F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
Manifest number:          05DD
Signing time:             Sun 04 May 2025 15:23:52 +0000
Manifest this update:     Sun 04 May 2025 15:23:52 +0000
Manifest next update:     Thu 08 May 2025 15:23:52 +0000
Files and hashes:         1: 02e8e3cf-8157-4c2c-8460-90cdfb690289.roa (hash: B1Hku2HL2fwML4yEqHtuZPeQkKpcDKp7L4Rd7uLHSXM=)
                          2: 0356e9e4-d743-4b1d-8b2a-8e60a25c336f.roa (hash: aRvd++mI9lJ6vXnmpzBAuoPwWDYrGKQjuGHqWQvSY0g=)
                          3: 19a3175f-10a7-4207-b0fb-bf04c4c703d7.roa (hash: 8aSKASzOmsIdnqzJnqFEzSQj+FJc+FvaVNBJaugaZQg=)
                          4: 309213e8-3e04-41b5-88c4-b9d8053b7fbe.roa (hash: AalSyScNHUYdjB9waySkcosedsGuEM6oZeC99Mblf5c=)
                          5: 4a25ebeb-a76b-40f0-b54b-f12d9eebbc92.roa (hash: 927XpW6YAUYODLin+rkagBzyr0pfWQyfQ74MpC4h7to=)
                          6: 5b4c2a48-cae3-4922-94cb-8a42decb3adc.roa (hash: ZfPIcnnmbftdBkPVOl3mTtpntWzDXmkbxyuiDYrHewM=)
                          7: 62814b99-92f8-4054-8d21-b418199235c9.roa (hash: Ex8fYm4h2vU0/Tiqj6Jef4sZELFboDKZWCFx3JgxNrs=)
                          8: 67a4e3f2-46be-4e1b-9070-1a8c069df9c9.roa (hash: YvOvww7UoyTUQoWp3yveAbVHh/4dbJxvynX9wTeWa4M=)
                          9: 88d05d2c-791d-492a-9697-f4c4a592c57a.roa (hash: IUCGnVyJVNIfp36Ys/3liukeqKsM7FO+/6RkUCBLef0=)
                          10: 8b4d99c5-89ad-4008-a629-96e00cf5656f.roa (hash: wRZ/ty+AX+5Frd+IyODsPCHliJ+SPQ/MVcyT2+T6iDc=)
                          11: 8baee1a9-210e-46e7-b79f-0fa1e32c70c9.roa (hash: lRrxo4RFcgIhHJf0iRvcgiX2T5ODB44SGRvtmhmmPlU=)
                          12: 8c107e67-3f1b-41c5-8f3c-9a9eccb8ead7.roa (hash: vAtoMsQj4Uk7KCLaKcwI/ysgcpx1GIP55li1KRJKbHw=)
                          13: 90cfe61c-18cf-49e8-b6df-56574149e45f.roa (hash: bEUl/j9/+SHlIMJ/6b3SBqpLB5svcusl10ohHOMT3Dg=)
                          14: 9c668317-9f28-4868-b993-30a89bb71db1.roa (hash: EZORSFd3oTdeGeur45hwnqw1DzHTWBzYR3VfjtYwwzs=)
                          15: 9e6fa574-abc4-4dfa-a43f-81c6ea952b58.roa (hash: zijht/Lg4e2Cw3Sb14BV9ZWEV/buiMCibzQEMmt0V/0=)
                          16: XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl (hash: 9ydSKFRX5zoyKqwYhVB1sfkdVHQI3LiLO0NUFxT66qQ=)
                          17: a10037ab-052c-48f8-ad64-92ed72e76722.roa (hash: PYd8nzLubA8U9vWH8Apno9DPGiovc8lJZNnOVk2zO2I=)
                          18: a1e648bb-cfc9-4252-8342-da6740732696.roa (hash: vZGLFopASSOcUiSS48xmUGJiR1iap74sM2n51tk4QWM=)
                          19: a23f57bf-3947-48c4-91f1-e4364b7d94a1.roa (hash: GtRVvb7BeaGERblJJelZwfSG0yyPnj6HlqmfpPMhflU=)
                          20: a264e569-c898-422e-8778-bb2090bc1056.roa (hash: OHhAvEKzK6SU1KtJq2BSqDBGzk5xqXPL97n7pWosvKs=)
                          21: b0d33020-6ece-4acd-b13b-856d17693653.roa (hash: vyyDrD2jwDx+YD4r0sIGUD47Kq3z11N5mmHffnUZe48=)
                          22: b4696ceb-f833-43c4-af53-9960894ce08d.roa (hash: addw0JCmRJsk2vh7gVbTMsoIISrlisPKISz81Bzlkxo=)
                          23: ce6abe56-76ab-4f7c-943b-5c1aded785ec.roa (hash: YJibF1ev7qeJpFzF5jBAuLz94c3AdWv9ohDXL6y8Wx8=)
                          24: de5759b0-8ae0-4c75-8bc6-1760901356b2.roa (hash: 7CvTlndXpMCb7ZK/B0EK7lfL2+mhAT6DglXnKGuJSEA=)
                          25: e7956dbe-ff3b-4911-9492-89c3cd5a2947.roa (hash: m9sVM9W3Z8a83EN54X27D26kXCnq8p7p8xyx9rZqcCo=)
                          26: ecba0557-c004-41c2-bd5b-63142dbee294.roa (hash: DFc3OwLq/aNvlkQp7Znq5eEtOZhN521L4B+gY71gqR0=)
                          27: eceec9b6-1378-4e42-b82d-a3aa97be056e.roa (hash: Rv87g/leUfQzxLhq/rUAdIPvX+6iiTiWXDsdqynsnL8=)
                          28: f8f3c1ea-ed7d-40e9-9e28-dac36da3ad6d.roa (hash: RG2uCk47fHvuBeYUY4c/fu63ENdM3ZQPxE3jvgS8ewY=)
                          29: feec66e8-f95b-444d-bd4e-917d547d1820.roa (hash: N7iq5wsteiRZIdsSh1lJTcJP0HqjCfG3q7gR4vXJ6lM=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/99f8fed2-292b-4722-b928-fee7bf0a5910.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:41:c6:58:5e:9d:73:85:13:f6:62:90:19:73:58:38:dc:4f:21:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce
        Validity
            Not Before: May  4 15:23:52 2025 GMT
            Not After : May  8 15:23:52 2025 GMT
        Subject: serialNumber=539d65f5ca80f3d28527512d0e42e9c241e5ef98051a333aaba5893013bbeb9f, CN=9f230fa9-aa2f-4020-ae2a-1a60374084b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:b2:da:59:f1:f7:f2:a1:fe:39:21:5c:30:43:
                    60:e4:02:00:3d:5d:fd:9d:eb:cd:cd:a1:fc:c2:dd:
                    54:29:26:a0:46:75:4d:64:58:8a:2c:4f:57:cc:75:
                    b2:c3:8d:2f:cd:bf:92:50:94:45:17:bc:03:70:eb:
                    74:a1:c6:30:3a:04:c9:ea:0c:5c:f5:1b:a9:7e:e8:
                    b2:43:8e:f2:29:5a:7d:66:17:cb:84:08:4a:07:93:
                    34:7e:8c:63:bf:0a:92:8c:88:d7:ad:4d:7b:52:35:
                    3b:f4:5a:95:25:96:a6:c5:60:ea:25:23:4c:d4:ff:
                    84:47:37:f6:8f:2e:00:30:d8:60:06:ee:eb:d4:8f:
                    0e:8f:6e:88:a9:10:be:83:66:aa:0f:54:57:66:a2:
                    e2:ec:85:3d:e0:75:f8:a8:8d:1a:fd:5f:18:db:23:
                    64:7a:a0:79:c8:7d:79:68:b0:fe:cf:0c:bf:42:21:
                    bb:89:01:45:67:71:ab:50:88:2c:c0:e2:4a:ee:c2:
                    1d:4c:16:01:52:74:9a:7a:2b:ca:4c:07:6e:dc:ba:
                    95:6b:96:96:33:bb:a9:00:39:63:99:52:96:ce:1e:
                    cb:1d:93:f5:59:e3:48:ed:53:c0:b0:67:aa:90:c1:
                    2d:b3:62:50:3d:77:1f:f7:02:62:f1:f5:1c:f6:b0:
                    c4:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:AA:E7:DB:B9:56:BF:2C:66:AB:2C:0C:CF:36:9B:EA:6E:4B:E3:AA
            X509v3 Authority Key Identifier:
                keyid:E8:F3:C5:20:E2:0E:F2:5D:3A:B7:A2:16:BB:14:04:31:6A:37:38:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/99f8fed2-292b-4722-b928-fee7bf0a5910/551209027f5e7ad54e04f042e4ac0e9e65c56e55c77478d2ce.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/e7518af5-a343-428d-bf78-f982b6e60505/XnrVTgTwQuSsDp5lxW5Vx3R40s4.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:96:34:91:4a:be:a7:12:5d:68:66:d0:6e:33:aa:03:db:
         aa:43:e6:06:84:39:ae:9b:95:7a:b5:ac:06:15:fc:64:6c:89:
         06:3d:bd:94:64:2e:ba:59:30:9d:67:ff:56:30:78:86:23:13:
         21:1f:e2:64:28:c1:95:55:11:95:41:86:ac:d1:2f:e1:cc:13:
         c4:17:46:63:fc:8d:b4:df:5b:0a:a8:89:1f:c9:0b:7f:46:b4:
         15:50:c4:58:78:df:8e:3f:08:66:e9:44:c7:70:b5:58:cd:35:
         30:4b:4c:9e:11:84:b8:c0:b3:3f:4d:55:41:c2:ca:c1:c2:67:
         e9:23:f4:4f:e8:60:b7:63:07:04:c6:d7:ab:79:03:ff:67:29:
         03:4d:6b:cc:9f:a0:d7:06:cb:05:3a:4c:90:74:d4:2f:40:8b:
         28:6f:cc:64:b3:e0:fe:08:27:96:b3:3b:ec:7b:09:ec:7f:2e:
         d1:56:98:2a:98:f3:96:0f:36:ae:e1:52:7b:aa:4d:14:bb:22:
         90:a5:67:7e:59:bb:1e:c6:e2:be:0f:e4:f7:5c:4a:0d:99:98:
         4b:cc:4c:16:d0:25:08:27:a0:00:4a:41:51:be:3a:16:5e:ee:
         aa:f3:60:9c:56:d4:0d:51:a3:10:d4:91:5a:8a:4a:65:5d:d0:
         bb:e9:fe:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----