Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft
File:                     8d3868d4-1e91-4773-9cef-51b84f43c20e.mft (raw, json)
Hash identifier:          5580m4LuKY45Q6QCGoR1rtHFTAmQ4Xda8H+a70eIxwI=
Subject key identifier:   37:34:2E:B4:64:07:8F:F9:84:E3:D2:F0:93:EB:D7:D7:81:C8:0F:36
Authority key identifier: C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A
Certificate issuer:       /CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
Certificate serial:       010D0C9F43285848BAAF295E9F56B3BDCEF63E20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft
Manifest number:          010D0C9F4328584073A81F5B29C8A372777F4D09
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 17:00:00 +0000
Files and hashes:         1: 542db07c-1ce5-3496-a24b-1970b9d4bceb.roa (hash: 0wNy/KAvbnC6SMlbMpQSKntBOs6OELHa8WNpMGy2Z1I=)
                          2: 8c44cdbd-722b-311a-aa4d-0c79c7e4acd9.roa (hash: xiqOS1DAfWYrNqfo/MPv0OZzn1Al5yBnJSEHGXTrcUE=)
                          3: 8d3868d4-1e91-4773-9cef-51b84f43c20e.crl (hash: ZML2ueKbekiuBkk1+SWWCMH6m8MbqGqJgHb3hGX5wuw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:af:29:5e:9f:56:b3:bd:ce:f6:3e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8d3868d4-1e91-4773-9cef-51b84f43c20e
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  2 17:00:00 2025 GMT
        Subject: CN=e68abdee-84f0-4bed-a242-c42301c393e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bb:2e:a2:2c:40:a7:6c:17:d5:04:79:e4:ab:
                    66:53:9b:5f:4a:0f:00:4b:e7:9a:b4:f0:d0:77:a5:
                    bb:ef:e9:30:54:08:1f:12:38:c8:dd:30:00:10:ab:
                    f5:2e:ed:9f:1d:4d:c0:48:23:4f:0f:7b:8c:fb:43:
                    3a:8c:dd:e4:47:4b:26:9d:2f:8a:6e:d5:de:4e:1a:
                    d9:03:fd:41:a7:85:eb:65:d0:68:6d:32:2b:56:db:
                    ef:77:b0:db:89:b2:5c:51:b7:ac:2a:8a:94:c9:45:
                    46:39:e3:a4:70:e7:62:23:6f:f0:7a:62:69:a6:1b:
                    b1:21:01:be:c3:4a:ef:12:25:ec:3d:10:27:ca:1e:
                    fc:fa:7e:50:a1:80:a4:67:53:eb:a3:84:6c:00:c3:
                    9f:31:56:a0:5f:ff:bb:f7:a8:6e:0c:7c:2b:d1:84:
                    44:33:de:70:a2:ca:8e:f9:49:b4:55:d6:7b:e0:e1:
                    a1:90:92:e1:70:18:26:95:20:70:e7:2e:c3:54:d5:
                    20:5e:27:3e:aa:9a:5d:db:0f:06:7a:04:31:24:a7:
                    fc:0f:87:ef:b1:e0:72:60:94:32:df:59:9f:e0:e6:
                    ec:71:ea:ae:0e:e3:1c:37:da:9e:05:81:cd:06:8c:
                    58:91:2b:f5:43:35:3e:64:3b:11:58:8a:bb:59:a7:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:34:2E:B4:64:07:8F:F9:84:E3:D2:F0:93:EB:D7:D7:81:C8:0F:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e/8d3868d4-1e91-4773-9cef-51b84f43c20e.crl

            X509v3 Authority Key Identifier:
                keyid:C3:DF:6F:43:BC:75:17:4F:09:0C:CD:BE:AF:B3:84:F4:AD:CD:F6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8d3868d4-1e91-4773-9cef-51b84f43c20e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:a5:61:86:9b:06:20:d7:1c:84:95:be:32:58:1b:d8:24:53:
         31:98:6b:f0:0e:ad:87:e4:a7:71:12:2f:ef:58:84:90:2b:99:
         dc:fc:c0:37:9e:85:7e:74:09:96:b9:2d:2b:62:44:ee:32:03:
         26:5b:b7:88:af:91:97:4e:f0:d3:dd:98:2f:05:5c:7d:b5:d9:
         75:7a:5a:b8:00:fc:c6:52:84:aa:4b:45:a9:b8:17:c9:16:e1:
         e9:d3:07:1f:0c:d1:ce:b7:b8:df:c1:9f:95:7a:fd:b8:5a:63:
         6f:41:35:21:3a:7d:77:1e:10:35:87:12:d1:83:6c:45:f0:d9:
         9c:d4:72:f2:5f:d0:44:de:1b:88:ed:84:1c:fc:8f:77:42:e1:
         a7:ad:46:2d:4d:df:00:ed:57:b5:c4:50:41:8e:c8:6f:e4:08:
         bd:1e:60:41:c5:ae:14:ec:89:b4:96:17:9a:98:4b:6b:25:93:
         bd:e6:ba:3c:c0:b9:3d:8e:4c:32:65:81:86:6d:d3:c3:64:d1:
         5a:20:be:71:8a:77:68:19:a8:90:f4:d5:d5:66:6f:e3:78:0a:
         f2:12:b9:dc:b5:2a:ee:39:fa:11:97:61:50:27:5f:a1:cf:8a:
         f3:d8:c5:67:71:cb:f6:bc:91:04:07:56:02:f7:f5:43:22:e2:
         e5:80:bc:b2
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi6rylen1azvc72PiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGQzODY4ZDQtMWU5MS00NzczLTljZWYtNTFiODRmNDNj
MjBlMB4XDTI1MDEzMTE3MDAwN1oXDTI1MDIwMjE3MDAwMFowLzEtMCsGA1UEAxMk
ZTY4YWJkZWUtODRmMC00YmVkLWEyNDItYzQyMzAxYzM5M2UwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLsuoixAp2wX1QR55KtmU5tfSg8AS+eatPDQ
d6W77+kwVAgfEjjI3TAAEKv1Lu2fHU3ASCNPD3uM+0M6jN3kR0smnS+KbtXeThrZ
A/1Bp4XrZdBobTIrVtvvd7DbibJcUbesKoqUyUVGOeOkcOdiI2/wemJpphuxIQG+
w0rvEiXsPRAnyh78+n5QoYCkZ1Pro4RsAMOfMVagX/+796huDHwr0YREM95wosqO
+Um0VdZ74OGhkJLhcBgmlSBw5y7DVNUgXic+qppd2w8GegQxJKf8D4fvseByYJQy
31mf4ObscequDuMcN9qeBYHNBoxYkSv1QzU+ZDsRWIq7WadPDwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFDc0LrRkB4/5hOPS8JPr19eByA82MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4
NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4NGY0M2MyMGUvOGQzODY4ZDQtMWU5MS00
NzczLTljZWYtNTFiODRmNDNjMjBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGQzODY4ZDQtMWU5MS00NzczLTlj
ZWYtNTFiODRmNDNjMjBlLzhkMzg2OGQ0LTFlOTEtNDc3My05Y2VmLTUxYjg0ZjQz
YzIwZS5jcmwwHwYDVR0jBBgwFoAUw99vQ7x1F08JDM2+r7OE9K3N9gowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZDM4NjhkNC0xZTkxLTQ3NzMtOWNlZi01MWI4
NGY0M2MyMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAPpWGGmwYg1xyElb4yWBvY
JFMxmGvwDq2H5KdxEi/vWISQK5nc/MA3noV+dAmWuS0rYkTuMgMmW7eIr5GXTvDT
3ZgvBVx9tdl1elq4APzGUoSqS0WpuBfJFuHp0wcfDNHOt7jfwZ+Vev24WmNvQTUh
On13HhA1hxLRg2xF8Nmc1HLyX9BE3huI7YQc/I93QuGnrUYtTd8A7Ve1xFBBjshv
5Ai9HmBBxa4U7Im0lheamEtrJZO95ro8wLk9jkwyZYGGbdPDZNFaIL5xindoGaiQ
9NXVZm/jeAryErnctSruOfoRl2FQJ1+hz4rz2MVnccv2vJEEB1YC9/VDIuLlgLyy
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:26:16 2025 by rpki-client