Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
File:                     3EE8725ABAB4B822156C9E328C7A188A6681E749.mft (raw, json)
Hash identifier:          Jtr++Z/WOjIFmkN6SLTwGKVHwc4TU+BtJZNR5BUJ59I=
Subject key identifier:   53:DC:61:92:F2:3D:80:28:62:8A:7A:C5:5B:5B:87:9E:FC:9E:17:81
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       2EB50324CE21D54B341094012A3ED66F5F0AFA61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
Manifest number:          0305
Signing time:             Fri 31 Jan 2025 11:39:00 +0000
Manifest this update:     Fri 31 Jan 2025 11:34:00 +0000
Manifest next update:     Sat 01 Feb 2025 12:30:00 +0000
Files and hashes:         1: 3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa (hash: F9Gsdmmfk/WkkRg+aQ27rbAtnAITLUdx51qHrCfwsxs=)
                          2: 3139392e34382e3234342e302f32342d3234203d3e20313530363938.roa (hash: 3eqDnMJNeOh8+7LhPNuhSwZM+K7LDiS0fP+vs7c7R7M=)
                          3: 3139392e34382e3234322e302f32342d3234203d3e203630313137.roa (hash: AJrieBjtoFCUzoRygnrUTpKphMCSiJhhz0plHTFmiLc=)
                          4: 3EE8725ABAB4B822156C9E328C7A188A6681E749.crl (hash: y2kNlQsxDVjkb+irhhffaDhbKsm0mbRDjh0YM26ZSHg=)
                          5: 3139392e34382e3234332e302f32342d3234203d3e203130313033.roa (hash: ar+1QPI0ytQe9vpJqTTwhTWwtFGjtRUIKCsnONCwWzU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b5:03:24:ce:21:d5:4b:34:10:94:01:2a:3e:d6:6f:5f:0a:fa:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Jan 31 11:34:00 2025 GMT
            Not After : Feb  1 12:30:00 2025 GMT
        Subject: CN=53DC6192F23D8028628A7AC55B5B879EFC9E1781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:c0:bb:98:d7:77:b0:85:a2:f1:3a:7c:11:
                    24:2b:7a:2c:58:fb:fb:b1:50:b8:51:47:e3:5e:20:
                    6a:c8:66:02:86:00:0e:74:6f:e8:73:be:2b:dd:7d:
                    7f:ac:26:77:58:46:b6:ef:43:c0:70:6b:44:ac:22:
                    a1:14:36:0e:73:25:9d:ad:08:3c:48:65:d3:58:47:
                    53:c4:f6:e7:00:55:66:e5:f8:ad:3b:50:f6:30:2e:
                    94:12:84:60:92:9c:aa:17:c2:fd:1f:6f:70:46:62:
                    a4:29:f6:8f:09:66:2e:35:2e:aa:68:4a:05:7d:a5:
                    ca:33:6e:00:ba:8a:b8:7b:9d:e7:6f:3e:70:2a:0f:
                    47:c3:b2:35:eb:dc:14:bf:3c:02:3a:08:0a:c8:e9:
                    ab:15:6d:95:e8:7b:4e:41:a9:96:fc:7d:4d:eb:2d:
                    f9:84:66:d9:a9:ca:07:a5:a7:33:aa:c0:35:92:1c:
                    1d:ca:18:93:96:75:12:b3:77:1c:45:c8:c0:cc:63:
                    e4:1d:0d:19:00:50:71:18:8e:67:60:d9:ca:06:31:
                    c3:7e:05:0f:e8:9e:38:a3:93:40:7a:73:d2:99:1b:
                    04:3c:c7:38:30:5f:47:85:88:2a:30:bc:65:71:13:
                    99:48:af:1e:ac:d9:b6:f7:17:46:c4:8c:01:8a:8b:
                    41:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:DC:61:92:F2:3D:80:28:62:8A:7A:C5:5B:5B:87:9E:FC:9E:17:81
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:e8:5a:bf:a6:1b:4e:01:dc:7b:e8:c3:d8:94:a8:45:75:a0:
         91:8e:43:98:3d:9e:04:cd:4b:c6:49:f7:e5:da:32:17:04:05:
         8b:f1:ef:cc:03:4f:57:de:7d:43:6a:4d:b6:7c:6b:72:3f:8e:
         6c:51:63:a4:0f:c7:8e:8f:79:88:a7:b8:7c:da:74:7f:8e:c6:
         2b:84:ba:bb:ee:ba:01:34:39:3b:ce:9d:ef:1f:c6:c2:c7:e6:
         6a:e6:a4:76:38:71:81:5b:38:ed:8d:6e:c0:0a:f8:2a:ea:0b:
         6b:4c:91:9f:89:24:f6:8f:10:20:59:19:be:a8:2e:cb:6e:b1:
         ab:8f:91:56:92:40:a0:54:48:ef:0b:0b:dc:4e:50:82:1b:c8:
         81:4e:79:60:3a:e2:15:09:1f:d2:d9:64:93:e6:9c:e7:15:63:
         65:06:d2:a1:40:e2:b7:09:7f:b7:d8:33:73:4c:8a:40:8c:7a:
         3e:9e:4a:ef:91:8b:94:92:5a:39:b3:a2:00:79:85:81:7e:d8:
         aa:e6:04:79:9f:35:91:16:98:0e:0a:6b:b3:8b:af:6d:8f:ba:
         d3:7f:c2:16:b3:2b:6c:59:12:79:20:48:30:10:17:be:2a:8d:
         0c:bb:78:d4:1b:0a:e0:2d:92:6f:0b:3e:2e:09:88:50:f8:c1:
         e2:87:b5:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:40:08 2025 by rpki-client