Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft
File:                     2522458f-db94-4ba6-8127-005675e4eea9.mft (raw, json)
Hash identifier:          Iab3kQiNS2Qcpx4+zugHSNrVlkz/m1PvgHQMdsu1KIQ=
Subject key identifier:   4D:7E:B4:9A:3E:D3:A5:AE:51:45:BC:05:46:85:2A:22:CE:BF:E5:E8
Authority key identifier: 59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01
Certificate issuer:       /CN=2522458f-db94-4ba6-8127-005675e4eea9
Certificate serial:       010D0C9F43285848B8795D3D990FB110710F0F40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft
Manifest number:          010D0C9F43285844E1D27932CB1C753288C13669
Signing time:             Thu 30 Jan 2025 22:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 22:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:00 +0000
Files and hashes:         1: 2522458f-db94-4ba6-8127-005675e4eea9.crl (hash: I43GnkQFr7xTYr3Nb57/xiI5hs5yt9JMlWmPRAvpuJQ=)
                          2: eb861998-933b-39d8-b4de-a7fcd97f739e.roa (hash: hc6RODZFGpGSz+dKChdCbnqII/KgXGm8goDdUlP+Dio=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:79:5d:3d:99:0f:b1:10:71:0f:0f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2522458f-db94-4ba6-8127-005675e4eea9
        Validity
            Not Before: Jan 30 22:00:07 2025 GMT
            Not After : Feb  2 22:00:00 2025 GMT
        Subject: CN=529200e3-e18b-46b1-8e68-65e69d8663f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:57:f7:6d:9a:ac:0f:46:74:cd:ed:53:82:19:
                    6d:b8:17:4b:bd:8e:50:e7:30:52:30:98:fe:8a:87:
                    14:08:df:bc:6a:44:3f:9f:39:52:45:50:c0:0f:38:
                    dc:b5:f9:c7:5d:5c:33:51:78:7f:da:fd:2d:70:aa:
                    d3:c2:e7:5e:5e:05:18:a2:b2:1d:ff:ab:70:04:74:
                    2c:a5:d2:94:88:ef:19:70:11:d4:ef:83:92:a9:88:
                    4c:c5:22:d7:06:6a:af:dd:5d:07:2f:d5:9d:c3:b0:
                    61:9c:39:92:1a:c7:65:27:a8:7c:66:79:7d:d3:bd:
                    88:c5:a1:8f:7f:b5:5b:2d:d5:43:46:96:28:fb:cc:
                    bb:52:ad:35:64:31:56:a1:70:ba:a8:93:b6:be:09:
                    e6:c6:12:48:90:31:1a:6c:62:ee:62:2a:44:97:38:
                    df:12:46:87:70:31:d3:29:a6:b0:6d:80:37:e6:b0:
                    30:08:17:9b:e7:fe:9f:56:89:4a:1e:54:93:15:5b:
                    ab:81:3a:e0:da:bb:a0:7f:3f:58:49:de:94:3a:fe:
                    59:dd:2a:93:be:14:73:eb:ef:ba:a5:8e:91:1c:45:
                    a0:98:b7:0f:c7:e3:44:a4:b0:86:19:4e:90:3b:fd:
                    72:97:08:36:1b:64:8e:45:a6:11:65:da:98:37:3b:
                    d3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:7E:B4:9A:3E:D3:A5:AE:51:45:BC:05:46:85:2A:22:CE:BF:E5:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9/2522458f-db94-4ba6-8127-005675e4eea9.crl

            X509v3 Authority Key Identifier:
                keyid:59:C1:DC:2B:5E:1E:97:A2:55:CA:3E:43:44:49:99:23:E8:26:E5:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2522458f-db94-4ba6-8127-005675e4eea9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:da:78:e4:ea:ff:39:a9:22:1d:3d:c8:ed:da:9e:b9:94:
         19:8d:79:99:e7:67:f5:0f:e1:94:69:38:d6:84:0f:6b:a1:61:
         64:26:be:7b:65:1c:58:a8:5d:07:7a:3e:11:b6:65:04:d2:aa:
         19:56:61:de:98:6c:e5:f2:7b:0e:57:ac:9c:82:95:1b:6d:f1:
         47:9e:a9:1c:41:7e:d1:56:64:24:2c:0f:f9:bc:a7:20:08:74:
         cf:53:92:86:00:e6:1b:98:0c:b8:0d:25:df:60:4e:7c:5c:89:
         b7:ba:f4:49:15:08:eb:ed:c7:b7:98:11:2f:7b:5a:95:dc:9c:
         2f:98:d7:fd:69:d8:8e:6c:ab:71:99:1c:34:75:19:df:9f:44:
         ab:37:84:17:f4:61:49:e4:a7:5c:ca:24:44:7d:79:3a:82:4d:
         3c:5c:84:49:a9:ea:b3:e0:1c:b4:fe:70:d9:bf:40:19:ba:09:
         34:f7:83:5b:6c:0e:88:d3:d3:56:73:ef:26:31:00:34:f2:e9:
         86:94:bf:30:4d:1f:82:4a:50:6b:7a:8e:b7:a0:e2:1c:31:75:
         37:8c:0a:d4:60:83:85:9f:65:f5:2a:f3:45:0f:95:65:53:49:
         f6:90:ed:0e:0b:82:67:1d:fc:f2:d8:52:ca:7a:ff:1a:54:5f:
         db:45:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:16 2025 by rpki-client