Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
File:                     2cb23841-08c5-41c8-81c9-076b288743e8.mft (raw, json)
Hash identifier:          gfO3PBeJtlaM+WW90AfS+lKbpq8mzvO7UOhVZqEfDJs=
Subject key identifier:   61:EF:11:A7:32:1F:24:37:54:CB:EC:0F:97:EE:81:69:F5:D1:C6:0B
Authority key identifier: 69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18
Certificate issuer:       /CN=2cb23841-08c5-41c8-81c9-076b288743e8
Certificate serial:       010D0C9F43285848BAAF2A7176C49A258B943230
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft
Manifest number:          010D0C9F4328584073A81F986B74B9D7B91A6271
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 17:00:00 +0000
Files and hashes:         1: 00f0462c-a442-31ab-8df4-efac62bb8166.roa (hash: H0cavYPNa2GgIkMh/fnm7C08YR8g+N61l06ILgg0zc4=)
                          2: 1208c61d-795d-39aa-83bd-93a914e71179.roa (hash: FuYGGH4aoYOKU6KTzJxVWZmq+ScV65RnNuxqOwGyWZE=)
                          3: 21f399c4-9b55-39ef-bed5-884b07932f9f.roa (hash: aoyY+UvCcNj0QphpAVdCxcuUi5OEq2mbbRgwuIjXIRo=)
                          4: 2cb23841-08c5-41c8-81c9-076b288743e8.crl (hash: xHtkqke4Vb3v7VXWIBnNWmM0BjKw3ydojGN0S0+3oGI=)
                          5: 3b0adfcb-841b-360d-b808-c58d891a93d9.roa (hash: nWw5fFYDSkd2zUczAncD2PPRusHw/AVVAHm/o6h/ZY8=)
                          6: 4305d133-1886-3cea-8f72-7f6bc4e75a43.roa (hash: 6YArVJAnOinICV+CyDsQuf7xRee9yEC0SRA+cDFnq84=)
                          7: 5b7a743b-ad2f-3ba7-b440-851ab9575dfa.roa (hash: rZCNxc3EaQ1wOr7u8XmG8bPP9QNpdDTddGhzN8hTBGU=)
                          8: 93e74dba-3278-3588-9c20-148b3cd3190c.roa (hash: WTnQC/uGUP+trEwfiSV1dRk3/td65Cn1ZKgejN+RDUY=)
                          9: 9c3fab74-0b0d-31ce-9e60-48382ddab243.roa (hash: Ef5/TqSYk8vUgOU1eInd+UkYHouLCDHpdwwKK1GWy5w=)
                          10: b2801328-0ae2-37ae-8299-e11c2e4c5d13.roa (hash: p0QXRF7zs3DeNMr2WhF7tQ8uoqhyqokVusK3pI+Pi28=)
                          11: ce38122d-5a2c-3c90-91f7-4c9c3326741e.roa (hash: 8xotPFkw96/4XBM7jSnZBQwbAAe5pQyHyStOnRXXpr4=)
                          12: df4b0eea-74dc-3b3e-8bd2-22fbe6bfe6c4.roa (hash: mwblzsKXr4xa071fBhUOKz3qdFIzFkuJBOuIr1C5qoQ=)
                          13: ef72f3dd-4d0c-3459-a054-577ef0c2b3b8.roa (hash: kqSJFnFGNY6wHzeqpZLDV/UlOgUvmWiF1B6bVu42Qv4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:af:2a:71:76:c4:9a:25:8b:94:32:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cb23841-08c5-41c8-81c9-076b288743e8
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  2 17:00:00 2025 GMT
        Subject: CN=c4a20507-f2ef-4d7e-a886-f36423744e1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b4:5d:8f:27:af:e1:f0:5a:6f:7c:5d:15:3a:
                    46:12:12:e0:97:6b:ea:bf:68:13:17:22:cd:bb:39:
                    8c:6e:ce:9d:02:ee:24:d2:ea:53:d7:59:de:e2:fe:
                    29:65:c0:0d:d7:3f:c3:8d:2e:78:07:b0:77:d1:6f:
                    fb:a5:6f:98:6c:dc:c4:28:03:28:7d:78:75:0f:89:
                    35:49:70:70:c1:3c:15:2c:d5:d4:77:53:90:b3:4e:
                    26:60:45:36:e7:93:34:64:f5:3f:03:e2:36:2e:67:
                    66:f2:7d:53:67:36:cd:1e:af:19:63:45:c7:f9:92:
                    b6:01:47:61:df:a2:ed:90:91:87:68:dd:86:01:fa:
                    7b:2f:ad:70:55:23:b0:6d:56:19:db:4c:68:57:55:
                    7a:37:b7:86:ea:41:69:e0:b3:b9:b3:ac:9d:14:50:
                    b4:af:9c:09:a6:9d:75:97:df:74:c3:6f:38:9e:5f:
                    61:d4:c7:aa:3d:a2:6f:14:ef:87:2c:f6:31:08:44:
                    0b:7f:fc:95:47:59:18:87:63:b3:f3:2f:50:20:51:
                    10:a6:4d:72:3f:6b:78:70:fe:cf:42:74:85:64:97:
                    2c:68:e8:89:cd:35:dc:b6:5b:41:7d:3a:8b:7d:99:
                    00:46:2e:d3:c1:c9:f5:14:eb:26:24:4a:b6:51:3b:
                    82:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EF:11:A7:32:1F:24:37:54:CB:EC:0F:97:EE:81:69:F5:D1:C6:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8/2cb23841-08c5-41c8-81c9-076b288743e8.crl

            X509v3 Authority Key Identifier:
                keyid:69:AE:27:24:08:0E:AD:FA:6E:0A:AE:89:79:30:5B:C1:1D:96:5F:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cb23841-08c5-41c8-81c9-076b288743e8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:84:3a:73:4c:f5:38:86:9f:e0:e3:7c:88:aa:50:e4:6a:fa:
         dd:7b:53:7f:ce:aa:ee:43:ca:63:d4:89:48:05:e5:4f:06:75:
         35:f5:84:d8:78:46:b8:12:68:33:83:84:d5:64:8b:81:f3:83:
         ef:0f:af:fa:c1:58:91:29:bf:03:c1:5f:4a:7b:8b:ac:8f:54:
         fa:0c:c8:61:5c:d1:72:cd:8b:71:89:e7:53:06:ab:1f:11:4d:
         4c:bf:69:8c:38:5e:e4:31:e4:91:c9:8c:2e:95:2c:8e:7f:ed:
         ef:fe:b1:18:e2:c1:a1:52:32:44:37:fd:71:84:fa:20:50:bd:
         f5:c5:39:e0:53:7a:30:f2:38:7e:d2:41:15:19:f2:82:5b:a1:
         e6:41:d2:c7:f9:81:01:bd:ba:32:a9:f0:6b:eb:34:a1:1b:3b:
         e2:b0:ea:79:a2:11:09:86:c0:73:2e:4b:a7:8b:1e:9f:d4:68:
         89:37:c5:d2:12:35:72:5f:7f:ea:dd:ed:35:03:80:2a:be:ec:
         18:2b:f9:2a:28:16:1a:50:e6:cc:3e:6f:0c:6e:0b:cf:a3:32:
         ba:41:e4:65:69:88:06:30:59:54:c7:82:1f:78:48:b8:71:bf:
         87:ed:da:e3:fc:15:e2:6a:28:c7:b1:b1:d1:84:a9:bb:86:1e:
         4c:79:11:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 01:30:18 2025 by rpki-client