Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
File:                     E13D7744B2156E4150A1AF5D732E2A10994D8729.mft (raw, json)
Hash identifier:          OMbxkwZ/DIEHrX0lzIeevO3ZNEyzIz8M0kG5UV3ruHk=
Subject key identifier:   B4:40:C2:BB:F1:EF:2B:C9:4F:70:86:05:BE:B4:B6:F8:3B:7D:B8:89
Authority key identifier: E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29
Certificate issuer:       /CN=A9181FC40000/serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
Certificate serial:       754155E717AB47FC2212B07B0AF117033AB8F595
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
Manifest number:          069A
Signing time:             Sat 10 May 2025 23:43:12 +0000
Manifest this update:     Sat 10 May 2025 23:38:12 +0000
Manifest next update:     Mon 12 May 2025 03:00:12 +0000
Files and hashes:         1: 3130332e3139332e3133302e302f32342d3234203d3e2034373835.roa (hash: beAYsCRxqlE19Pd1+dyNigMnD/N60WKXUOqwwXx7mfY=)
                          2: 323430303a646463303a3a2f33322d3438203d3e2034373835.roa (hash: PZcihi+tKuobULExyy+RldrR5ZxGFpEQTkOgUfpHPaE=)
                          3: 323430303a646463303a613030623a3a2f34382d3438203d3e203233393539.roa (hash: 9uecxpl+8zhYNM/VLSzIYQFtoaNZNiKX2oWXwwGgZ5I=)
                          4: 3130332e3139332e3132382e302f32322d3234203d3e2038383838.roa (hash: 3RvOojTUPwF4d8qBqGw2gAMzpFPU6TFes0RVjDjJJ+A=)
                          5: 3130332e3139332e3132382e302f32342d3234203d3e2036313334.roa (hash: Gkk3pjPcBn1ydDwbDsy1KlefEvRWum7WwjI0/dDLNr0=)
                          6: E13D7744B2156E4150A1AF5D732E2A10994D8729.crl (hash: ABjkLuFVwLTFJfbY1sC+uwR+6FHkA74s27d0gD+hOj8=)
                          7: 3130332e38382e34342e302f32322d3234203d3e2034373835.roa (hash: +eDM5ZsnYy/K8Vcs+UsJ0vBbFc9QK/+4cHvdTH8CcFY=)
                          8: 3130332e31392e312e302f32342d3234203d3e203433393539.roa (hash: qBNNAhrcYn7+7C6H5Usnl0BSwa+8x/tgu9RF6Ut6QGA=)
                          9: 3130332e3139332e3132382e302f32322d3234203d3e2033323538.roa (hash: QKdp+97/jBscT8ua2qqpOoD5458W90JnJCIl2/HTZ9w=)
                          10: 3130332e31392e312e302f32342d3234203d3e2033323538.roa (hash: i9ybobFTVbul9ZCc+OUaPc0OosdiMUtEFehiPPURvCM=)
                          11: 3130332e31392e302e302f32322d3234203d3e2034373835.roa (hash: Urm4fJQNtDp6SIxaK4P3H3Ws3eyWvAIY2xosgFCtd8I=)
                          12: 323430303a646463303a613030623a3a2f34382d3438203d3e2034373835.roa (hash: KP+NlcSqft+qPsfGGaWPNqLBJUv6Pfgnek0QNbjnhPs=)
                          13: 3230332e39362e3233362e302f32322d3234203d3e2034373835.roa (hash: ymAOwS4PLKpnSnnV8/IOAQp6MUyltwBjY+QUE6aswIU=)
                          14: 3130332e31392e312e302f32342d3234203d3e203233393539.roa (hash: oAvLVEZUCqPZSKjbNm78EONoYmzYyZ6cmVQyo3qOyXU=)
                          15: 3130332e3139332e3133312e302f32342d3234203d3e2039333132.roa (hash: tWRnU+tdEJIxCaDFfPwNfAoTd6uvr3uzZ5QAJ9M+Zng=)
                          16: 3130332e3139332e3132382e302f32342d3234203d3e20313337343433.roa (hash: 7Wq2I+eG+i0crt18gB8fjrpeNgtc2h87eRDDsvP4ByQ=)
                          17: 3130332e3139332e3132392e302f32342d3234203d3e2034373835.roa (hash: z33pDE1uVCQz/+rMUZxr2CrKllnXqcBIx2p2sSpgt1w=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl
                          rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 12 May 2025 03:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:41:55:e7:17:ab:47:fc:22:12:b0:7b:0a:f1:17:03:3a:b8:f5:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9181FC40000, serialNumber=E13D7744B2156E4150A1AF5D732E2A10994D8729
        Validity
            Not Before: May 10 23:38:12 2025 GMT
            Not After : May 12 03:00:12 2025 GMT
        Subject: CN=B440C2BBF1EF2BC94F708605BEB4B6F83B7DB889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:12:a9:23:97:18:ed:fc:84:ad:17:0b:fe:de:
                    71:6a:67:00:6f:8f:e9:b4:8b:3c:a3:c1:72:03:12:
                    67:45:c0:b2:27:ba:86:1b:4d:de:f0:f3:b3:f4:5c:
                    b8:80:23:e0:7c:bf:66:6e:02:2b:6f:43:16:23:da:
                    03:84:b1:d8:b3:6c:8b:f0:7c:39:38:b3:a9:61:0f:
                    4e:38:ba:e1:59:38:19:76:74:a0:8d:06:52:d0:b3:
                    74:38:79:9e:21:0d:07:51:b0:94:4b:25:a8:44:e0:
                    b0:c1:54:f3:9c:13:01:0a:2e:af:be:a6:cd:84:b2:
                    73:44:8b:98:19:83:15:47:5c:99:69:cb:fc:a9:0c:
                    1b:40:37:93:4b:69:02:d9:22:7d:8b:fc:70:2c:cd:
                    11:60:b3:0c:b6:18:f7:e6:fd:1c:f0:25:d6:0a:4c:
                    a8:9a:f9:2a:05:ff:4d:b9:93:9f:a5:31:b8:8c:98:
                    eb:b7:d4:4b:34:ee:ea:ac:9a:0c:08:ab:78:f4:2a:
                    ee:75:4d:13:eb:b4:e8:82:47:48:12:9b:40:26:dd:
                    ad:2f:d8:34:65:7e:30:78:43:22:f3:57:c1:e1:bf:
                    ec:fe:0d:fc:49:e3:c9:53:91:f6:f0:b4:93:96:09:
                    b4:e7:a3:ee:bd:ea:ba:62:e9:d5:e5:ee:91:9d:02:
                    95:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:40:C2:BB:F1:EF:2B:C9:4F:70:86:05:BE:B4:B6:F8:3B:7D:B8:89
            X509v3 Authority Key Identifier:
                keyid:E1:3D:77:44:B2:15:6E:41:50:A1:AF:5D:73:2E:2A:10:99:4D:87:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4T13RLIVbkFQoa9dcy4qEJlNhyk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/56/E13D7744B2156E4150A1AF5D732E2A10994D8729.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:ed:71:3c:13:9c:b9:02:da:27:b9:8e:7f:3d:c1:b7:8c:
         f6:fd:23:88:88:1c:d2:11:a2:07:63:25:c0:92:5f:d8:97:01:
         3a:d5:dd:b9:15:74:a9:46:b5:f0:cf:6c:ce:1a:f0:bb:4f:fb:
         37:5a:1f:bf:1b:3e:83:f8:1c:ee:56:fc:62:d6:50:1b:26:d9:
         35:3b:52:ff:a9:d9:f4:2c:39:35:70:bf:91:b7:af:bc:c0:1e:
         d6:ec:f6:54:58:43:85:38:b2:a0:95:37:e0:22:79:5b:62:de:
         02:1b:41:51:72:05:6d:ea:69:f6:eb:44:c1:d3:49:17:d3:f8:
         ab:82:c3:36:4c:39:81:17:14:58:84:a2:5f:78:96:1f:8b:68:
         cd:85:e1:15:e5:23:fe:20:72:56:45:61:37:3c:eb:7c:6d:32:
         6e:ca:e0:7c:ee:be:61:98:2a:00:80:52:ec:cc:52:c6:60:3b:
         ce:c7:8b:a8:81:e8:c4:46:ea:01:86:69:22:88:49:a1:6e:5d:
         47:0c:58:da:7e:94:f2:c9:3c:65:92:f5:22:d0:1d:ae:7a:b8:
         10:2c:57:4b:74:0d:6a:ce:91:21:34:e0:9d:b8:10:49:7e:ae:
         6a:d1:82:8c:66:b5:89:dd:b4:fa:29:5d:28:b6:da:b8:0d:bd:
         a5:de:44:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 11 16:35:15 2025 by rpki-client