Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
File:                     A28D273309C9FC76554249545D29D3880680EA7F.mft (raw, json)
Hash identifier:          RR9RcviikqGtdZTUEX4snDnfcU6wdnW1R20Zmc/OWBw=
Subject key identifier:   67:93:9F:72:80:A7:3A:9D:1B:43:EA:C5:84:48:EC:13:DE:35:F2:0B
Authority key identifier: A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F
Certificate issuer:       /CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
Certificate serial:       33058F2926CDA34BDB23DA56959E1C64DAC10A8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft
Manifest number:          0398
Signing time:             Fri 31 Jan 2025 15:24:00 +0000
Manifest this update:     Fri 31 Jan 2025 15:19:00 +0000
Manifest next update:     Sat 01 Feb 2025 19:11:00 +0000
Files and hashes:         1: A28D273309C9FC76554249545D29D3880680EA7F.crl (hash: MJRWzuVOLGAa9CLRq7sJQr4CAvvARyosQgaiTdoYaQk=)
                          2: 3230342e36392e3231372e302f32342d3234203d3e203238343539.roa (hash: mdC5eZr88Pgdc/hYHxwpu5EULiV0YhMbRqB19KoWZLQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:05:8f:29:26:cd:a3:4b:db:23:da:56:95:9e:1c:64:da:c1:0a:8b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220
        Validity
            Not Before: Jan 31 15:19:00 2025 GMT
            Not After : Feb  1 19:11:00 2025 GMT
        Subject: CN=67939F7280A73A9D1B43EAC58448EC13DE35F20B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5b:8a:d9:3a:72:e2:3c:e2:aa:c9:7e:a1:3f:
                    a4:3f:86:33:f0:fd:55:92:aa:f7:68:82:db:2f:9d:
                    e2:a6:6d:33:c9:e9:68:a5:0a:f8:49:61:44:7a:89:
                    c7:2e:f4:8c:1c:07:a9:58:37:60:3f:76:06:d4:41:
                    2d:f8:b8:e0:d2:71:63:27:f4:03:9b:88:15:af:2b:
                    5f:3c:62:1b:08:3d:28:42:94:9b:54:37:f6:53:e6:
                    f4:fe:12:38:ce:eb:c8:aa:f1:d7:bc:6a:fe:8d:a2:
                    b8:9e:fa:b8:a2:73:de:52:4a:39:39:1f:58:cc:44:
                    e4:82:1b:cd:5b:ec:79:47:ad:f6:24:3d:e7:cf:6e:
                    00:44:4d:b6:54:2b:49:a6:50:14:45:9e:ab:ec:ca:
                    1c:4f:b8:7a:0e:ee:c4:60:9c:15:a5:30:c9:3d:83:
                    4c:d1:c5:ff:77:31:1a:16:95:5e:04:f3:ba:f6:43:
                    52:28:88:86:70:36:62:4c:f1:c6:e5:71:f9:0b:14:
                    aa:af:02:de:7d:20:a1:5b:eb:e2:dd:e8:0f:85:b6:
                    4d:24:41:b2:f5:86:d2:24:aa:1b:d8:27:37:61:e7:
                    a1:df:e1:4c:4b:1c:f0:45:51:bf:b7:f7:92:83:91:
                    0d:df:2f:0b:3f:ca:d0:26:b7:35:51:42:92:2e:41:
                    a2:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:93:9F:72:80:A7:3A:9D:1B:43:EA:C5:84:48:EC:13:DE:35:F2:0B
            X509v3 Authority Key Identifier:
                keyid:A2:8D:27:33:09:C9:FC:76:55:42:49:54:5D:29:D3:88:06:80:EA:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d96df2c4-2bba-40e2-841d-8c7c0a8dee13/6f2db144ae1c8ae5b8619a5e09b4d9b5794d37e90612087220.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf86941d5c0186cd7a883142e0/1/A28D273309C9FC76554249545D29D3880680EA7F.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d1:8a:60:6c:bd:d9:42:00:05:d7:8d:53:9a:52:b9:b5:37:
         ad:b5:10:f2:55:5a:b8:f6:46:74:3d:30:ba:6f:17:e2:40:b1:
         e3:8e:45:85:3f:f3:7b:15:5f:d4:73:74:57:41:6c:8c:a1:cc:
         2e:89:9f:22:b5:76:84:2a:76:46:7b:9e:0f:11:04:87:f2:53:
         4e:ee:3c:90:d7:dc:f9:f5:05:a9:c9:de:b2:da:a2:1d:9c:0d:
         4a:3e:b7:c6:c5:95:13:8e:1c:90:b5:f7:2a:aa:14:29:cd:61:
         cf:64:0e:68:cf:fe:b9:9b:55:30:c9:7c:ea:b1:0c:b1:a6:ef:
         2b:44:0c:83:45:cd:36:99:9d:cc:2a:0a:b6:b6:86:10:28:f8:
         fc:a5:92:8d:47:ed:57:0d:7a:89:cd:af:7e:95:6d:76:d3:ca:
         e8:ae:36:4a:9d:ab:72:6a:ba:a6:de:da:36:3b:60:a5:f1:c0:
         f2:ff:43:b4:b2:df:d4:09:cd:cc:83:e2:c6:c9:d5:00:d0:d1:
         c6:ca:37:2a:83:c0:d9:b1:38:49:e4:5f:aa:29:5a:26:81:d6:
         51:60:5f:4b:59:67:c6:c3:7b:b6:ec:42:07:f0:ec:b0:c9:b3:
         02:9c:4d:85:f4:7a:64:51:eb:62:fb:1d:07:f6:05:5c:24:f6:
         b0:2c:a5:ba
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUMwWPKSbNo0vbI9pWlZ4cZNrBCoswDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNmYyZGIxNDRhZTFjOGFlNWI4NjE5YTVlMDliNGQ5YjU3
OTRkMzdlOTA2MTIwODcyMjAwHhcNMjUwMTMxMTUxOTAwWhcNMjUwMjAxMTkxMTAw
WjAzMTEwLwYDVQQDEyg2NzkzOUY3MjgwQTczQTlEMUI0M0VBQzU4NDQ4RUMxM0RF
MzVGMjBCMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzluK2Tpy4jzi
qsl+oT+kP4Yz8P1Vkqr3aILbL53ipm0zyelopQr4SWFEeonHLvSMHAepWDdgP3YG
1EEt+Ljg0nFjJ/QDm4gVrytfPGIbCD0oQpSbVDf2U+b0/hI4zuvIqvHXvGr+jaK4
nvq4onPeUko5OR9YzETkghvNW+x5R632JD3nz24ARE22VCtJplAURZ6r7MocT7h6
Du7EYJwVpTDJPYNM0cX/dzEaFpVeBPO69kNSKIiGcDZiTPHG5XH5CxSqrwLefSCh
W+vi3egPhbZNJEGy9YbSJKob2Cc3Yeeh3+FMSxzwRVG/t/eSg5EN3y8LP8rQJrc1
UUKSLkGi0wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFGeTn3KApzqdG0PqxYRI7BPe
NfILMB8GA1UdIwQYMBaAFKKNJzMJyfx2VUJJVF0p04gGgOp/MA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3YTg4MzE0MmUwLzEv
QTI4RDI3MzMwOUM5RkM3NjU1NDI0OTU0NUQyOUQzODgwNjgwRUE3Ri5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvYTczNDIwY2ItYjNjYy00YjAzLWJkYTctMWJlMjA0
OTMzYWU1L2Q5NmRmMmM0LTJiYmEtNDBlMi04NDFkLThjN2MwYThkZWUxMy82ZjJk
YjE0NGFlMWM4YWU1Yjg2MTlhNWUwOWI0ZDliNTc5NGQzN2U5MDYxMjA4NzIyMC5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODY5NDFkNWMwMTg2Y2Q3
YTg4MzE0MmUwLzEvQTI4RDI3MzMwOUM5RkM3NjU1NDI0OTU0NUQyOUQzODgwNjgw
RUE3Ri5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAKDRimBsvdlCAAXXjVOaUrm1N621EPJVWrj2RnQ9MLpv
F+JAseOORYU/83sVX9RzdFdBbIyhzC6JnyK1doQqdkZ7ng8RBIfyU07uPJDX3Pn1
BanJ3rLaoh2cDUo+t8bFlROOHJC19yqqFCnNYc9kDmjP/rmbVTDJfOqxDLGm7ytE
DINFzTaZncwqCra2hhAo+Pylko1H7VcNeonNr36VbXbTyuiuNkqdq3Jquqbe2jY7
YKXxwPL/Q7Sy39QJzcyD4sbJ1QDQ0cbKNyqDwNmxOEnkX6opWiaB1lFgX0tZZ8bD
e7bsQgfw7LDJswKcTYX0emRR62L7HQf2BVwk9rAspbo=
-----END CERTIFICATE-----