Manifest

$ rpki-client -vvf rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
File:                     211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft (raw, json)
Hash identifier:          tHbRsg8a566cyMYRtWuwzYspwTHltaq8PG96cE1cxyM=
Subject key identifier:   5F:E9:BA:A3:DC:BA:93:1F:19:B2:4B:4B:16:59:93:E2:E9:06:AE:64
Authority key identifier: 21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5
Certificate issuer:       /CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
Certificate serial:       39B324FF516D4A1722C62AFAB2F99BD203B33642
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
Subject info access:      rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
Manifest number:          0715
Signing time:             Sun 04 May 2025 23:02:48 +0000
Manifest this update:     Sun 04 May 2025 22:57:48 +0000
Manifest next update:     Tue 06 May 2025 02:17:48 +0000
Files and hashes:         1: 3139332e372e3230342e302f32342d3234203d3e203432343237.roa (hash: 3ovpGOt8Z/loW4U3gJMJXsm91mVTK7y0fkPalfGS0w8=)
                          2: 211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl (hash: /YXR3sUjtfK7WH0xr5Fsr35kkrtOshGqWLOQByqQnNk=)
                          3: 3139332e372e3230362e302f32342d3234203d3e203630343932.roa (hash: ldJu5L3FZrq+v5EO0j3Bgz2Qf3cW0RGCFf99rYq9lJs=)
                          4: 3139332e372e3230352e302f32342d3234203d3e203432343237.roa (hash: T7P+TKqF1EydfF+/Was8vNpPhZ1s6n4jZQLCiw8GLVU=)
                          5: 3139332e372e3230372e302f32342d3234203d3e203630343932.roa (hash: pI40+jjdEUJPL2otpp8VOvK6iMqeW7apPFhhhkUq2lM=)
Validation:               OK
Signature path:           rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl
                          rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Mon 05 May 2025 22:00:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:b3:24:ff:51:6d:4a:17:22:c6:2a:fa:b2:f9:9b:d2:03:b3:36:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211a048890969fa7d4b6aef8c020cda4444ec2e5
        Validity
            Not Before: May  4 22:57:48 2025 GMT
            Not After : May  6 02:17:48 2025 GMT
        Subject: CN=5FE9BAA3DCBA931F19B24B4B165993E2E906AE64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:89:6c:ac:13:b2:87:d4:55:a0:7b:e2:e6:3f:
                    6e:d1:25:7d:ad:9e:31:ef:f6:e4:de:e8:c0:3c:e7:
                    97:17:a3:4f:8e:e0:da:14:af:b6:77:ef:ee:af:a9:
                    60:ff:73:bb:04:6f:ad:7e:bf:9a:13:99:be:f7:36:
                    ec:1b:d7:52:a4:93:44:0a:c1:7d:f7:3d:88:7d:6e:
                    41:88:cf:b7:4d:be:4f:ea:b7:13:81:da:96:26:3d:
                    a4:cf:70:69:fa:f2:0c:90:ee:18:f5:4a:7a:c1:34:
                    db:9a:68:95:62:b5:ab:cd:c4:ba:69:1a:49:3e:4d:
                    4e:55:62:de:0f:9e:21:02:99:19:53:c6:19:1d:bc:
                    d1:0f:82:0a:4c:e0:1b:ac:5f:77:13:c0:e9:49:38:
                    51:dc:27:0b:73:de:c2:79:a3:35:71:76:0d:53:6f:
                    c3:06:4b:19:d3:67:b3:6c:99:00:89:de:2c:cf:c2:
                    ff:fc:e0:e3:ac:0f:ce:53:3c:a5:32:e3:1f:99:f4:
                    dc:66:7c:cd:14:8a:97:f9:d1:06:40:a0:b6:9e:4a:
                    ef:20:c5:00:df:f5:ed:e2:fa:bc:30:65:a4:99:53:
                    94:25:2c:7f:4a:5e:64:77:6a:5c:d8:3c:ee:c2:83:
                    dd:68:a3:17:b4:e2:a4:a0:30:45:c6:13:9d:d6:80:
                    45:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E9:BA:A3:DC:BA:93:1F:19:B2:4B:4B:16:59:93:E2:E9:06:AE:64
            X509v3 Authority Key Identifier:
                keyid:21:1A:04:88:90:96:9F:A7:D4:B6:AE:F8:C0:20:CD:A4:44:4E:C2:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IRoEiJCWn6fUtq74wCDNpEROwuU.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.sub.apnic.net/repository/A9192A980000/2/211A048890969FA7D4B6AEF8C020CDA4444EC2E5.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:a2:72:7b:49:48:c5:56:c2:bf:8a:98:ee:84:e3:c2:8d:dc:
         1b:4f:42:e9:98:d1:85:1d:29:24:1c:2f:27:42:e6:0f:b5:c8:
         b4:b7:b7:54:30:b2:4e:74:c0:79:c9:77:6c:07:14:bd:fb:19:
         cf:d8:74:ff:31:7a:73:a1:f1:a2:b1:62:56:8f:f3:f0:27:23:
         17:23:88:70:4a:7e:f5:e5:d6:a7:6f:c7:ca:ab:f0:92:d7:03:
         1c:cc:f0:2f:25:7c:3f:03:f4:21:f1:8a:93:0a:6a:f0:0e:48:
         43:89:cb:80:6d:52:b3:c1:ef:3e:31:05:e9:b2:d4:76:ba:22:
         33:11:9a:c6:be:4b:26:ff:1e:8d:11:83:ab:e9:53:26:02:27:
         5f:30:fc:b7:33:03:64:14:e9:2a:37:b1:74:66:d0:4c:62:19:
         f4:36:d4:d6:e8:ec:2b:8f:80:79:a2:2f:f3:bb:23:5d:49:17:
         c1:2d:66:b4:68:ec:1c:f5:b4:8a:c8:1e:10:56:77:89:b0:28:
         85:00:9d:ad:5a:17:e0:15:c0:24:30:af:a3:66:81:aa:fc:ba:
         97:ba:42:37:17:0c:ef:8c:3c:60:12:39:1b:83:92:29:d2:89:
         22:34:18:17:fb:df:76:5b:e0:0c:36:96:81:74:e8:05:97:20:
         69:94:4e:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 05:09:50 2025 by rpki-client