Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
File:                     _YzK5b5juSvdyQt6W3TmlEnB6wQ.mft (raw, json)
Hash identifier:          VgY7c0uOQRHPohS4T0islRuYM1r6HlXnjGu76KEfG/g=
Subject key identifier:   54:34:AD:72:60:46:F0:6F:93:EC:F2:86:3C:73:2E:92:7E:A2:DF:35
Authority key identifier: 99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77
Certificate issuer:       /CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
Certificate serial:       0A8F35F98F1833CE6E9C3D69BC0BDDF822DB58F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
Manifest number:          03A0
Signing time:             Fri 25 Apr 2025 15:20:33 +0000
Manifest this update:     Fri 25 Apr 2025 15:20:33 +0000
Manifest next update:     Tue 29 Apr 2025 15:20:33 +0000
Files and hashes:         1: 01f936e1-60a2-4d7f-a949-786fa3430156.roa (hash: JzkND4wieY/oBHMPFh6RzH01R8Pzbdow+o0Aw4LTJsM=)
                          2: 07653354-62e0-4912-98f0-2c22354ec38a.roa (hash: lRjOA5YkG1iBLPKH+Atq/2wkXfj31p9VMKN4D1/Gb04=)
                          3: 1307ad8e-df0e-4abe-8f37-494ddc3554ec.roa (hash: RFswkoVF5qP/z8Eo2sUFlWQeVeCOjfBT4a4IPCO045E=)
                          4: 1fecfeb1-6716-4dba-8f93-41774a220829.roa (hash: HUMrCTowWjVjljYVfA+DkN/QgClqfcjWFj9a3dGS/4U=)
                          5: 20cde4dc-81ed-4d96-a8e5-159a6cdc0767.roa (hash: 1garhxxnjHf9jr0+jM79lxgPwQxb+/O42OhmZPpfZPM=)
                          6: 254b4192-a38e-41eb-a28b-d01a7ee37964.roa (hash: 6ygf6rWCeTjl4bnKJL1v8VyLQZ7+HP4kxkGOEyKWnCk=)
                          7: 2f44b632-2720-4ef0-917c-4b1813ed903f.roa (hash: a4YqNso2VnzVgcj7PzAL7fIqcLTGtZN0xTfK/CVwTjw=)
                          8: 3fd6117b-5f6b-43fe-bf0a-b66f8d35e456.roa (hash: O24cgE827O7bH09A7losHHA8i3lkWxeE+gGza5wViT0=)
                          9: 59b3a7d6-26d4-4809-9bb6-54d8eaf87cf1.roa (hash: TP8/M4jlUTeN1/NtX9MsWI/ZXTQkSHiGCqzTrXouH98=)
                          10: 5ed51049-d347-4dd0-bf4f-e1cb4adc80ca.roa (hash: eQzVt7tHrNxtxnF/YBU0Sm+ES0LeUE3lcNoPOWSJv9E=)
                          11: 5fa46662-88d2-4fa9-9076-26587048b3d0.roa (hash: 6l9sLRerbMcqutHbga7PkT5jCYVRIGSNMk22dusK6Sg=)
                          12: 661f32c0-f8f7-4621-8aaf-7a270e451918.roa (hash: 4HaoWdzExA82SUKiOmYxerMjNl/q1+ewkWdBVOjRong=)
                          13: 83b18734-ee3d-465a-8a60-c10fbb2c821d.roa (hash: pi7GpPeCzsk/pE4fZvHC0NBLRfVEpI9zy6AK7ExydAM=)
                          14: 85ecd0ef-6924-4522-bd48-1e263001901c.roa (hash: pbfC9zX18fbBjKLv66xSCQ6kIyviCatqAcXQPb/swNk=)
                          15: 9a6ace54-f231-4e25-8a36-c461d49dfa6b.roa (hash: LaBRqgVGebbIBxK32zH4Lryf7rzmEnCzxJElVkEQQNU=)
                          16: 9bfde94a-1d95-4dce-b0b2-727172f5e49d.roa (hash: mIk/uiTlrEL2grDXZ4pyyz/OjPrNHUUrqW7oJt6lHiw=)
                          17: 9e1e47e0-3b2f-41ac-80ad-9b08d4353fd1.roa (hash: 50pguR8HbONikNaukxUWg1T5IPF5dgeA26PVmDSeDEU=)
                          18: _YzK5b5juSvdyQt6W3TmlEnB6wQ.crl (hash: U30Gofl3Z46q9VAA4E1sRuS0zQvgj8ckZMbsTzPTUd4=)
                          19: a07adeae-538f-4d56-bebe-87d1a4b9c3b3.roa (hash: 8oNYU/ydiKqlq5mLljxDRmsCgBdnG0VKM3pgy71OAuY=)
                          20: b510b9db-75b1-4957-bf7f-f05c972c0bfd.roa (hash: Opi/ms1j7+mruf2N1QDshHxy0736xhL6InZ9gtXozhg=)
                          21: ccaa88c7-054b-4ce1-92e8-62dd941718e7.roa (hash: AtFU0+xhZ7RbQXOMDoolZ06upFdgWWQSKNANBxs3WQw=)
                          22: eac518ed-0e11-4fe5-9a9e-53a05de60f7e.roa (hash: +I7XwmRA5SbABQrVU08YF30fP9jzP6z4k+AsBniwsWw=)
                          23: ec0e3b70-66be-4cb5-bc14-953f4d2f5fc5.roa (hash: AkLHM47Mo5VjrPjLEysvg/R4L6wqKLZjQiAH0hY9jqg=)
                          24: f2e5e11c-f4e0-4f91-8ed1-a6cba6c5e288.roa (hash: mTcVo0OSO6hk6DTLewbuO5MJwNKnj8PnVaEVH8TqXtI=)
                          25: f3e78c9d-caff-4237-aaba-b40f901e3c8a.roa (hash: vX00B9Y1ogGD39/m+541fj2Tf74glw0CPViu7bncXJ0=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/77b56428-9b52-416f-b279-bbae14422de2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:8f:35:f9:8f:18:33:ce:6e:9c:3d:69:bc:0b:dd:f8:22:db:58:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04
        Validity
            Not Before: Apr 25 15:20:33 2025 GMT
            Not After : Apr 29 15:20:33 2025 GMT
        Subject: serialNumber=5f74417dd37fe143bbd4832eb74aa8b5fe194ee9e3e87fccba51d1a1b1db4a67, CN=0099a7ea-794a-4a28-b164-49547626eb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:54:34:ee:be:c8:6b:0d:85:7a:d5:54:2c:c7:
                    f2:00:26:91:ae:e1:28:25:a0:41:30:ba:03:61:1e:
                    51:89:5c:ee:53:96:3f:e6:b1:df:6e:47:72:24:df:
                    43:a4:0a:6c:33:d6:1e:97:ad:40:07:9b:fd:b8:35:
                    7e:91:0d:9b:b6:84:8c:52:d0:b4:ec:40:da:c7:ee:
                    b7:f6:ff:be:f4:2b:05:c4:86:6c:ff:c3:43:09:f6:
                    68:6c:30:75:7a:f9:24:48:99:76:5f:0b:32:de:90:
                    4c:a3:01:61:0a:35:7e:c7:60:86:ae:12:04:57:1a:
                    60:a2:79:14:71:7d:09:93:28:41:74:14:33:52:5f:
                    b9:de:27:f1:42:b6:4a:79:45:76:de:cc:a4:88:5a:
                    b3:b3:61:c4:e5:17:fd:97:92:ef:72:62:fc:53:55:
                    81:9f:eb:b5:1d:b3:f0:ac:7c:71:ff:fb:1a:ec:86:
                    e9:4c:78:12:eb:49:fb:87:80:d3:f3:07:9c:8b:49:
                    55:09:b5:c3:03:f3:c3:b1:bd:35:a1:64:65:e7:b1:
                    69:16:4c:b9:e1:f5:26:0d:cc:3a:7e:99:fc:e1:b0:
                    40:29:36:f9:9d:1a:2e:5a:0e:3f:22:7c:0c:24:3c:
                    6c:35:34:20:ee:ad:5d:c2:11:3f:f7:01:a0:d3:81:
                    64:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:34:AD:72:60:46:F0:6F:93:EC:F2:86:3C:73:2E:92:7E:A2:DF:35
            X509v3 Authority Key Identifier:
                keyid:99:C3:54:4C:08:C9:94:54:B8:79:95:1E:FF:A4:7A:8F:63:C8:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/77b56428-9b52-416f-b279-bbae14422de2/c05676c733fd8ccae5be63b92bddc90b7a5b74e69449c1eb04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/42582c67-dd3f-4bc5-ba60-e97e552c6e35/_YzK5b5juSvdyQt6W3TmlEnB6wQ.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:21:14:82:a1:37:ae:88:fc:1a:b9:4d:02:24:57:ec:19:2e:
         1b:56:42:d0:73:c3:3a:d4:b6:82:f4:5f:7f:d4:79:63:a0:8b:
         65:59:8a:52:ef:ac:40:6f:bb:8d:c8:36:ae:71:d7:6c:39:38:
         53:ed:5c:89:b0:e4:8a:89:86:81:d0:c4:ca:85:b0:97:58:f3:
         c6:99:1f:d3:ec:d0:0f:2b:87:4e:db:75:33:2e:76:ac:a8:e4:
         55:cb:71:71:e4:fa:df:32:b4:1c:11:26:1d:4d:40:c2:68:b4:
         10:e1:5f:1e:53:73:13:66:5e:15:10:5a:9c:f1:7b:db:ec:56:
         cd:67:c4:fb:4a:70:66:8a:cd:3d:f3:a5:27:cb:62:f8:33:0f:
         ff:ec:5b:01:b1:c1:73:1e:1f:3a:47:e4:5c:a4:a5:f6:c3:d3:
         05:be:9e:99:cd:e7:cb:49:10:95:10:da:32:68:40:b1:ab:8e:
         fc:ff:54:9e:0a:64:08:8b:ca:cb:b5:70:37:71:16:6e:a6:13:
         95:8b:52:d8:15:9b:a5:1a:e4:f3:b4:a7:86:e0:9e:c5:78:a3:
         19:90:c9:03:45:8b:a9:3b:c5:28:2b:87:2c:36:aa:54:cf:b4:
         76:a3:80:50:ac:ac:ed:66:4c:1b:e8:28:83:67:e8:97:3d:40:
         87:53:24:fd
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIUCo81+Y8YM85unD1pvAvd+CLbWPIwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyYzA1Njc2YzczM2ZkOGNjYWU1YmU2M2I5MmJkZGM5MGI3
YTViNzRlNjk0NDljMWViMDQwHhcNMjUwNDI1MTUyMDMzWhcNMjUwNDI5MTUyMDMz
WjB6MUkwRwYDVQQFE0A1Zjc0NDE3ZGQzN2ZlMTQzYmJkNDgzMmViNzRhYThiNWZl
MTk0ZWU5ZTNlODdmY2NiYTUxZDFhMWIxZGI0YTY3MS0wKwYDVQQDEyQwMDk5YTdl
YS03OTRhLTRhMjgtYjE2NC00OTU0NzYyNmViMTEwggEiMA0GCSqGSIb3DQEBAQUA
A4IBDwAwggEKAoIBAQCfVDTuvshrDYV61VQsx/IAJpGu4SgloEEwugNhHlGJXO5T
lj/msd9uR3Ik30OkCmwz1h6XrUAHm/24NX6RDZu2hIxS0LTsQNrH7rf2/770KwXE
hmz/w0MJ9mhsMHV6+SRImXZfCzLekEyjAWEKNX7HYIauEgRXGmCieRRxfQmTKEF0
FDNSX7neJ/FCtkp5RXbezKSIWrOzYcTlF/2Xku9yYvxTVYGf67Uds/CsfHH/+xrs
hulMeBLrSfuHgNPzB5yLSVUJtcMD88OxvTWhZGXnsWkWTLnh9SYNzDp+mfzhsEAp
NvmdGi5aDj8ifAwkPGw1NCDurV3CET/3AaDTgWR1AgMBAAGjggLBMIICvTAdBgNV
HQ4EFgQUVDStcmBG8G+T7PKGPHMukn6i3zUwHwYDVR0jBBgwFoAUmcNUTAjJlFS4
eZUe/6R6j2PIp3cwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB
4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h
cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz
LzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83N2I1NjQyOC05
YjUyLTQxNmYtYjI3OS1iYmFlMTQ0MjJkZTIvYzA1Njc2YzczM2ZkOGNjYWU1YmU2
M2I5MmJkZGM5MGI3YTViNzRlNjk0NDljMWViMDQuY2VyMIGVBggrBgEFBQcBCwSB
iDCBhTCBggYIKwYBBQUHMAuGdnJzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu
YW1hem9uYXdzLmNvbS92b2x1bWUvNDI1ODJjNjctZGQzZi00YmM1LWJhNjAtZTk3
ZTU1MmM2ZTM1L19Zeks1YjVqdVN2ZHlRdDZXM1RtbEVuQjZ3US5tZnQwgYgGA1Ud
HwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFzdC0yLmFtYXpv
bmF3cy5jb20vdm9sdW1lLzQyNTgyYzY3LWRkM2YtNGJjNS1iYTYwLWU5N2U1NTJj
NmUzNS9fWXpLNWI1anVTdmR5UXQ2VzNUbWxFbkI2d1EuY3JsMBgGA1UdIAEB/wQO
MAwwCgYIKwYBBQUHDgIwIQYIKwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIF
ADAVBggrBgEFBQcBCAEB/wQGMASgAgUAMA0GCSqGSIb3DQEBCwUAA4IBAQAQIRSC
oTeuiPwauU0CJFfsGS4bVkLQc8M61LaC9F9/1HljoItlWYpS76xAb7uNyDaucdds
OThT7VyJsOSKiYaB0MTKhbCXWPPGmR/T7NAPK4dO23UzLnasqORVy3Fx5PrfMrQc
ESYdTUDCaLQQ4V8eU3MTZl4VEFqc8Xvb7FbNZ8T7SnBmis0986Uny2L4Mw//7FsB
scFzHh86R+RcpKX2w9MFvp6ZzefLSRCVENoyaECxq478/1SeCmQIi8rLtXA3cRZu
phOVi1LYFZulGuTztKeG4J7FeKMZkMkDRYupO8UoK4csNqpUz7R2o4BQrKztZkwb
6CiDZ+iXPUCHUyT9
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:15:29 2025 by rpki-client