Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
File:                     28591b95-39d7-4e54-90f3-1339338b842c.mft (raw, json)
Hash identifier:          m/c0A/ZygBRSi/4LUtrlBAjrbqZUk10OIjG8DuG3Sxs=
Subject key identifier:   1E:85:B3:59:90:E9:15:74:EC:D6:27:F0:E4:65:AA:C4:82:CF:F4:14
Authority key identifier: FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A
Certificate issuer:       /CN=28591b95-39d7-4e54-90f3-1339338b842c
Certificate serial:       010D0C9F43285848B9A32A5770AD4F36E11EDE40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft
Manifest number:          010D0C9F4328584073A84793D8858966B571629D
Signing time:             Fri 31 Jan 2025 08:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 08:00:00 +0000
Files and hashes:         1: 139652f7-af23-334e-a7f9-9e08d724d62f.roa (hash: NAxEYIh/8pkned50F5wKSxzsAy4dHMVFfmYBRh++mWg=)
                          2: 27626520-245c-33fb-bb99-5dc7d0821da1.roa (hash: Kumzl3WP82Sokfe51G1Ymku1TrdYomMI40aK4CFEldA=)
                          3: 28591b95-39d7-4e54-90f3-1339338b842c.crl (hash: KhyrTBatgQlkm9dWyqfPcBuJjYZ6rgLMZFlLm7b7SzE=)
                          4: 486cf596-6ac5-320c-b437-e9c1fdb89e8b.roa (hash: h0pdjoixjWZH1ybgyDKtD8d5i0LMOUkvjl+gqRivpwM=)
                          5: a6469a75-3af9-39ef-ae2f-0b913de50d29.roa (hash: lT65poY2Y86bpzP+VrQw/5grbdaeJtb2Yt3PlExFu6U=)
                          6: dd3fa1ff-a409-32d9-ba4c-da83c3e47e6a.roa (hash: QvTOnuYuPde+EgIjilaT0c7lMliCDeyuerLlYsxKoHw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:a3:2a:57:70:ad:4f:36:e1:1e:de:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28591b95-39d7-4e54-90f3-1339338b842c
        Validity
            Not Before: Jan 31 08:00:07 2025 GMT
            Not After : Feb  3 08:00:00 2025 GMT
        Subject: CN=58e6e3fa-14d0-447d-87b4-24d6d6176ac4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ff:49:44:6b:15:d6:c7:70:ce:b1:cd:4d:bd:
                    2a:af:bc:eb:30:f2:8e:76:da:73:83:0f:b4:a3:d6:
                    a5:4a:a8:9e:bd:8d:95:d7:26:bf:30:b9:bd:8a:bb:
                    41:64:25:34:4a:b2:08:18:74:f0:0f:e5:af:13:d9:
                    00:be:e4:f5:60:ba:85:33:29:de:cf:ce:c9:17:75:
                    f1:83:76:39:3f:98:5a:c8:f4:b4:2b:39:08:9f:de:
                    53:18:42:3f:60:1e:54:36:f2:2a:4e:b9:42:12:0a:
                    2c:d5:da:68:cf:8f:63:29:f8:04:78:7a:8d:8d:64:
                    2a:9e:d1:19:fe:db:21:8b:cd:bf:af:f1:23:94:07:
                    81:9f:10:de:1c:fc:10:bb:ab:46:ce:1c:26:1b:6b:
                    81:51:ac:0e:1e:de:5e:88:59:34:74:b3:53:d2:d6:
                    11:2b:d0:10:8c:57:a6:72:84:3f:22:72:60:09:91:
                    6f:ee:3b:64:3e:a1:73:45:5b:02:48:77:e1:b2:ea:
                    ac:9f:59:6f:f9:78:4e:5a:28:c0:d0:f0:c5:85:e6:
                    e1:45:b2:95:0f:5e:6f:1e:5f:ce:ef:97:12:55:52:
                    d5:db:8f:29:00:fb:5f:cd:b6:c1:96:51:fe:2a:f2:
                    e9:a7:52:43:ac:ef:45:d0:91:13:c2:52:ba:08:2f:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:85:B3:59:90:E9:15:74:EC:D6:27:F0:E4:65:AA:C4:82:CF:F4:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c/28591b95-39d7-4e54-90f3-1339338b842c.crl

            X509v3 Authority Key Identifier:
                keyid:FE:10:F7:7E:39:6D:C9:D4:37:CF:0F:D1:47:5F:B2:FD:14:C6:C5:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/28591b95-39d7-4e54-90f3-1339338b842c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cc:6d:31:26:5a:a2:e6:40:b0:f4:ad:e2:62:2b:ff:35:3c:
         5b:af:2f:48:3a:90:b5:8d:c3:07:6c:6b:fa:ea:da:56:43:ab:
         91:7e:6d:f3:0c:ac:27:6e:19:e5:45:d1:38:0f:e0:38:f3:fb:
         44:70:87:52:59:39:2e:b0:b7:dc:c2:fa:4e:9a:d4:d9:f4:2c:
         ca:8c:e2:cf:f0:2d:50:cf:bd:64:95:82:15:45:c8:f5:be:ef:
         44:ef:bd:ba:9e:ea:17:a0:a7:70:3e:72:fb:a5:ca:cc:04:11:
         56:04:ed:a0:77:c2:19:42:08:1b:64:75:1d:0c:28:93:82:84:
         03:93:7f:32:df:29:ac:12:88:7b:34:a5:c1:74:61:79:e7:09:
         0e:6c:ac:25:50:61:99:25:55:a8:a3:26:8d:d8:c6:c0:2b:93:
         12:4a:18:5f:c6:8e:f8:88:48:da:73:5a:64:98:e8:10:f6:7d:
         3d:c8:8c:3f:40:bc:e2:52:61:a4:57:f9:49:ba:4b:8a:b9:98:
         0d:df:ca:36:5f:66:ca:05:7e:90:79:20:e7:01:1b:6d:a1:37:
         b4:0d:a9:74:33:2d:d9:cf:30:ea:18:40:49:1b:58:8b:9f:c0:
         2b:98:05:b8:98:be:80:01:81:31:5b:b6:8d:7a:77:d7:2f:f3:
         c1:e2:72:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 10:00:12 2025 by rpki-client