Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
File:                     2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json)
Hash identifier:          QHOW2Q3nxgSbQwYK7F4wEuASGISH8nNBO8pT6jWdhqQ=
Subject key identifier:   B5:D8:35:EF:F9:5A:E3:A6:01:88:E7:B7:0F:E8:D4:44:D4:E4:D5:72
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       0A6EA7A27562CF822D1FDD8FD89C27BADD2B45B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
Manifest number:          03DF
Signing time:             Thu 07 Aug 2025 00:24:16 +0000
Manifest this update:     Thu 07 Aug 2025 00:24:16 +0000
Manifest next update:     Mon 11 Aug 2025 00:24:16 +0000
Files and hashes:         1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: S0ibXO5U6UNAYN5fI6IuCShW+9HN+irt2qtdU4kVMTg=)
                          2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: fMePxvQlL173ZULlux0BF7HZR1QYYfrJ/+6vIDduh74=)
                          3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: Gm6y4F0bOMXpPMoIwMmMb6YnDK2GVFjWMfQV6qm55Nc=)
                          4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: tz08v+5qiiw13q0wQjkeNZZtr79DjIhb2QujB+230Xg=)
                          5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: y8NlLeHiVJCHUMC558s/rmYdqAVyOa2D3tNOa2mUX2k=)
                          6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: CbBnUWc/9eyuyEN8NhXTAr9BKjsBDi8ALrerOoWw9uc=)
                          7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: k2tszS9HPx+URZdmp9YoNA8TYzOGKi189x8CS49Dq1A=)
                          8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: CD63C2OjZk2bKJ2S/0E+YeQmfHmKbzXVmo5kq+2/ozs=)
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/b4e4fec5-3510-4017-90ef-8391412ecd6c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6e:a7:a2:75:62:cf:82:2d:1f:dd:8f:d8:9c:27:ba:dd:2b:45:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Aug  7 00:24:16 2025 GMT
            Not After : Aug 11 00:24:16 2025 GMT
        Subject: serialNumber=d026a7bff99fe67768ad47050e2b5370b33a774fffc119685b50da11adce98f1, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:1c:12:7c:e5:2f:d9:9d:27:e8:e6:91:a3:4f:
                    3d:02:e6:50:8f:8f:64:25:cb:3d:d7:5b:d5:7b:36:
                    f9:3d:ea:f8:66:23:80:6c:cc:f0:18:f9:c1:09:9d:
                    f8:a9:9f:4b:f9:eb:fa:e1:58:ed:49:01:e4:d5:95:
                    5f:49:f0:41:0e:e7:2f:f4:da:51:77:51:dc:a3:f7:
                    90:75:17:b9:5f:31:e0:9a:67:28:30:18:e3:6c:b2:
                    b3:5b:ba:eb:80:9d:07:91:8f:8e:03:98:66:30:4e:
                    1e:fc:df:5b:08:4a:2a:64:61:43:04:47:22:96:e1:
                    a0:e6:6c:60:3a:d1:b4:59:6e:30:27:3c:64:ed:97:
                    11:d8:7d:2a:e2:b0:c1:8e:ba:3d:45:04:1e:cf:e7:
                    01:a5:21:a7:25:83:26:d9:ff:25:f3:9f:f3:1b:dd:
                    9b:cc:f3:bf:07:37:29:75:eb:fe:a7:5d:70:64:7b:
                    87:3e:ce:f7:63:59:8c:38:c8:21:dc:0c:70:38:49:
                    2e:49:0f:28:29:e7:b1:a8:62:24:81:0c:32:e8:75:
                    ce:a4:63:15:28:6c:c7:38:69:c0:1c:1d:f8:4d:9a:
                    4d:8c:c0:99:85:74:2f:c4:00:02:80:36:88:c0:2a:
                    d9:cf:c7:f2:3a:b0:57:8e:37:c2:7e:dd:a2:1e:13:
                    c3:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D8:35:EF:F9:5A:E3:A6:01:88:E7:B7:0F:E8:D4:44:D4:E4:D5:72
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:13:d3:92:ce:42:98:79:2a:55:4c:43:f4:8e:2f:e6:2d:
         e3:07:00:96:c5:41:b4:56:f0:39:34:f7:8f:14:21:78:c8:0b:
         80:5b:43:d5:7d:ac:b0:3b:06:d9:61:2f:c3:8d:22:f6:4f:c8:
         67:8d:36:28:30:80:0c:88:d7:28:16:c0:f2:31:1c:73:36:ab:
         8e:6c:9f:17:62:b8:e7:bf:2d:a9:d2:58:a8:9c:ef:72:88:aa:
         69:4e:95:53:7b:15:1c:4d:d0:4b:c8:d5:ab:c4:54:cf:86:3b:
         f6:fe:f0:a4:04:17:8a:94:c4:7f:da:c4:a2:ae:6d:60:5f:e8:
         c2:5c:fe:3f:79:9e:c3:62:61:10:22:92:2c:1a:ae:92:69:a0:
         db:53:67:0c:47:e8:54:1b:c2:45:75:b8:09:f4:0a:b0:f1:c6:
         9a:e4:ea:a7:a1:66:83:9b:24:64:f4:9c:ff:f9:bb:a8:61:aa:
         bd:b9:85:21:3e:52:db:38:72:ec:8a:3a:34:1f:60:1c:53:ad:
         82:ab:69:4a:94:7c:89:1b:e2:67:0a:36:12:3a:cb:2c:70:69:
         30:8a:5f:45:37:3f:50:5b:a3:da:f2:7c:f3:f5:fe:fc:c7:ae:
         26:61:69:22:b1:e9:82:89:16:61:d2:8d:77:f9:de:fb:a7:4b:
         40:fc:df:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 03:49:48 2025 by rpki-client