Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
File:                     5A19D2FDC8392727696F70449B8B32AF772091A8.mft (raw, json)
Hash identifier:          +cCsUprUG92Pr4NXW4qC8wbvFMLYLyavjwPnKbD3OeA=
Subject key identifier:   A2:7B:D0:02:1F:8B:B0:4B:65:02:F7:6D:3B:71:E3:56:54:6F:38:8E
Authority key identifier: 5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8
Certificate issuer:       /CN=A91FA37D0000/serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
Certificate serial:       7081C9BEDD745819FDC7250D492CF06A697FA74C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
Manifest number:          0662
Signing time:             Sat 14 Jun 2025 00:45:24 +0000
Manifest this update:     Sat 14 Jun 2025 00:40:24 +0000
Manifest next update:     Sun 15 Jun 2025 03:55:24 +0000
Files and hashes:         1: 34352e3131372e3130312e302f32342d3234203d3e2034373835.roa (hash: RoPjCRMghwCK+9v8LueB1XO0CyHUDX9hongUtmgU4JA=)
                          2: 3130332e35372e3136342e302f32322d3234203d3e203233383538.roa (hash: KI2kjcb07IKesGZMinnaOEsz6/06bdA9BT5qaeeOZmU=)
                          3: 34352e3131372e3130302e302f32342d3234203d3e2038383838.roa (hash: aBdDS6GrqBz2pYvAehQXWgBWcDDBIaKdKK9Nym5jFLQ=)
                          4: 3130332e35372e3136342e302f32322d3234203d3e2038383838.roa (hash: /Wmkfbw/QLEaUfwznC2lEulj1F/OKW4GZn9Xm/KPUG0=)
                          5: 34352e3131372e3130302e302f32342d3234203d3e203233383538.roa (hash: 4yKK7RQLbJBx+gt7T7QZgKRPOxG5R1dHZfrXztWXnbY=)
                          6: 323430333a326538303a3a2f33322d3438203d3e2038383838.roa (hash: BXr190YMJHQxmWlxeRnUrhn/SSQploVAKewTY5AAwas=)
                          7: 3130332e35372e3136352e302f32342d3234203d3e203336333531.roa (hash: f2FBviAJM9nDrbOq27nSeNTQJT9zRNj0KswKLgIhEgE=)
                          8: 323430333a326538303a3a2f33322d3438203d3e203233383538.roa (hash: 8WGGny+jtgmSnuXipWNSY1ESLZ/IHyh7iVF3qoveYM0=)
                          9: 5A19D2FDC8392727696F70449B8B32AF772091A8.crl (hash: RdypkuDX6KB8m+USytI6u8wwH9QrjKD1kF1W8zswp7M=)
                          10: 34352e3131372e3130322e302f32342d3234203d3e2034373835.roa (hash: sjhpTTvgo1FU3FaH8+zye7CEY4XTySIpONdDjAMSaqY=)
                          11: 34352e3131372e3130332e302f32342d3234203d3e2034373835.roa (hash: OAx44UBQtqTx/sf7Ypb1JySuUeicgRwCGdCfYQjlgWk=)
Validation:               OK
Signature path:           rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl
                          rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 15 Jun 2025 03:55:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:81:c9:be:dd:74:58:19:fd:c7:25:0d:49:2c:f0:6a:69:7f:a7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA37D0000, serialNumber=5A19D2FDC8392727696F70449B8B32AF772091A8
        Validity
            Not Before: Jun 14 00:40:24 2025 GMT
            Not After : Jun 15 03:55:24 2025 GMT
        Subject: CN=A27BD0021F8BB04B6502F76D3B71E356546F388E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:6b:7f:b9:c9:69:f4:f9:8e:e4:a0:3a:ba:7e:
                    fc:de:34:23:af:2e:e3:a2:0b:f2:a6:b2:11:f9:4d:
                    8b:aa:a6:d9:24:d8:f2:77:1d:06:45:b1:01:ac:e1:
                    68:2a:f8:ce:19:79:a2:d4:e6:33:d4:8c:7d:6f:e4:
                    b0:25:6d:ab:ba:ac:56:12:73:54:01:f0:c5:f8:28:
                    e5:59:94:77:17:76:c7:6c:58:f6:51:f3:19:39:72:
                    4e:38:05:c1:7a:da:a2:2d:36:e1:d7:eb:84:27:b4:
                    f1:e4:4f:dd:9a:5a:1f:b4:58:9a:ee:9d:b7:95:f1:
                    ee:9a:f3:d0:78:5a:b7:dc:d0:be:3a:6a:6e:9e:b9:
                    cd:d6:6b:aa:66:55:0f:ea:86:a1:e1:ec:fc:a4:0c:
                    aa:24:46:55:1e:e1:24:16:5f:95:b8:41:7f:f2:c7:
                    bd:93:06:7a:4b:c7:92:62:c6:01:c1:db:01:04:24:
                    43:83:a6:49:80:9f:d8:9a:c9:74:0f:b4:da:d5:2d:
                    f4:9a:69:2c:9b:79:fe:cd:46:75:99:dd:93:24:01:
                    9a:90:ab:3d:20:56:1b:2b:a9:2b:1a:77:51:7a:f5:
                    95:e9:49:15:4c:55:6f:a2:f6:20:41:b3:25:55:0f:
                    37:96:18:4b:93:2e:07:f3:94:9c:15:79:bf:6d:81:
                    8f:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:7B:D0:02:1F:8B:B0:4B:65:02:F7:6D:3B:71:E3:56:54:6F:38:8E
            X509v3 Authority Key Identifier:
                keyid:5A:19:D2:FD:C8:39:27:27:69:6F:70:44:9B:8B:32:AF:77:20:91:A8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/WhnS_cg5Jydpb3BEm4syr3cgkag.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/57/5A19D2FDC8392727696F70449B8B32AF772091A8.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:eb:31:10:d2:19:62:f1:41:e4:73:1a:ab:9e:6e:db:57:f0:
         b1:29:6e:f3:54:a2:b8:3c:1c:5b:70:44:ab:cd:e7:1a:50:9f:
         db:eb:3d:8e:a7:16:93:87:35:ef:e1:3d:4f:8a:6e:79:72:00:
         89:4d:7b:10:5f:ef:98:2e:8d:67:e4:f0:c4:79:cf:e0:3b:26:
         45:c7:3f:46:de:b6:f6:20:e1:2d:ee:37:96:95:50:ad:40:64:
         df:86:d9:05:05:01:f7:03:f2:7d:b1:9a:a7:5d:17:b4:72:68:
         76:0c:ed:74:2f:49:90:6e:e6:15:6c:5e:00:7d:6a:47:37:00:
         30:78:10:d3:8c:6d:03:1a:a2:bd:c8:8a:1a:d4:a9:dd:90:45:
         0f:d6:1a:3a:a1:e2:3b:b8:a2:ad:54:1a:b7:03:66:e5:7d:44:
         bb:06:15:0a:fd:c5:1e:08:29:8d:7b:a7:1c:8a:ac:0f:0c:4c:
         6f:b9:9c:8a:00:a6:70:39:74:55:41:87:e1:8a:13:53:68:b1:
         97:d9:5c:b3:e2:18:81:2c:e6:f1:00:00:d4:26:76:ea:8b:4f:
         fc:59:59:81:e0:40:58:c0:35:80:16:7c:06:30:90:3c:98:1f:
         b4:c3:c0:2c:2b:a8:4f:6b:cc:fc:1e:bb:96:22:98:00:b6:61:
         fc:6a:04:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 14 18:55:13 2025 by rpki-client