Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft
File:                     53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft (raw, json)
Hash identifier:          JqE6dw51mNrqFsypwTcN3FJOQ93lH7cN3PDNOA1WHoU=
Subject key identifier:   27:5B:C3:EB:E5:CC:55:27:C3:14:9A:27:2D:00:4C:D3:EB:4D:8F:DE
Authority key identifier: 77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17
Certificate issuer:       /CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
Certificate serial:       010D0C9F43285848B82006CC6B78468B63AA0280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft
Manifest number:          010D0C9F43285844D64970624BE5EEE4391622B6
Signing time:             Thu 30 Jan 2025 19:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 19:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 19:00:00 +0000
Files and hashes:         1: 065e7f06-26ac-3eff-801a-523af75e2cf5.roa (hash: kAEJNWw351mFN5d5sd5xu9A25xfi0g2XUAvb2Kc6c8A=)
                          2: 53c2cca8-3817-42e5-a92f-da9eff96d7a7.crl (hash: gi9RerUE9A5vnlVbJ9ol0AYRWSB4lm/pB4sdn4wROy8=)
                          3: baa9a522-ca80-3aaf-b1cc-71248470ed3f.roa (hash: SCYyUmdb9Vs7MXuLxsPDV1gwzTI9E0vxoIWUNnQzZO8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:20:06:cc:6b:78:46:8b:63:aa:02:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53c2cca8-3817-42e5-a92f-da9eff96d7a7
        Validity
            Not Before: Jan 30 19:00:07 2025 GMT
            Not After : Feb  2 19:00:00 2025 GMT
        Subject: CN=17e19560-32fa-4a41-aaa2-0e021dd53e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5b:20:89:62:c4:26:c8:c1:01:98:2e:d8:b9:
                    38:44:0e:c5:58:c9:a8:af:09:5e:ca:08:35:c0:b8:
                    15:75:98:08:cb:48:85:d9:d9:30:80:fd:76:e1:2a:
                    eb:87:11:ca:a0:9c:30:a2:3e:28:de:f6:f8:32:1b:
                    80:58:c3:1f:d9:11:0e:b7:53:c4:fa:0b:c3:67:d3:
                    1d:88:d1:e3:a1:da:fb:28:a8:8a:89:07:7d:6c:29:
                    e7:57:b9:29:1e:d4:c9:27:bc:9e:5b:e3:c6:03:07:
                    26:71:5d:6b:5e:9f:94:73:a2:86:54:4c:e2:f0:c6:
                    d4:4c:dc:dd:3f:5c:ca:2d:49:98:89:98:d9:99:8c:
                    57:71:73:1b:84:7a:48:4f:42:5c:8b:98:fc:0c:59:
                    aa:ad:1a:b7:f2:8e:32:52:60:1e:ed:a2:a2:41:11:
                    de:4e:0f:ff:48:65:8e:7a:bc:db:22:28:21:65:2b:
                    09:bc:dc:b7:e5:2c:83:ec:c3:98:0c:97:db:57:1b:
                    ed:7f:46:9d:9e:a5:a6:c2:0a:96:41:27:cc:df:3e:
                    ac:f8:29:66:e9:a8:e7:01:90:5d:78:a9:1d:c3:3c:
                    2a:df:c8:1e:16:88:7f:b9:a9:cd:fe:b1:cb:76:5c:
                    e1:42:9a:5d:c7:66:ab:a4:26:ac:0f:0a:f0:96:57:
                    42:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:C3:EB:E5:CC:55:27:C3:14:9A:27:2D:00:4C:D3:EB:4D:8F:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7/53c2cca8-3817-42e5-a92f-da9eff96d7a7.crl

            X509v3 Authority Key Identifier:
                keyid:77:AC:E4:87:D1:CC:2C:04:32:06:65:33:BA:E0:F6:ED:0B:45:FC:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/53c2cca8-3817-42e5-a92f-da9eff96d7a7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:80:88:1f:1b:d2:67:32:dc:d4:ed:ce:e7:7f:82:52:cb:e2:
         31:63:b9:b1:e5:84:39:f5:6a:de:95:22:89:ee:9c:68:14:fc:
         e9:58:70:e7:8e:27:d5:1f:9d:aa:8c:02:dc:68:56:9b:b4:b0:
         cc:49:49:57:9e:13:cb:7f:ef:58:db:b0:ab:00:0d:d4:0e:01:
         23:96:fd:86:16:6a:35:66:49:30:26:c0:ab:ad:aa:f9:cf:d2:
         ab:a9:53:99:07:7b:ef:0c:2c:68:ad:6d:c3:01:70:f4:50:c5:
         41:30:ec:df:99:e0:0d:0a:17:64:1e:5b:9f:57:48:92:ae:17:
         c0:7d:27:aa:68:38:bf:24:07:24:fa:a4:ea:72:67:2b:8f:12:
         3d:2a:b9:19:f9:46:54:31:9f:6d:63:7e:4f:ba:0c:8c:76:c2:
         29:64:6d:90:19:a7:27:9d:b2:aa:fe:46:0d:2a:33:3b:a9:29:
         e3:c9:92:a5:e3:94:57:c2:07:d6:93:e6:34:82:02:0b:bb:5b:
         ce:bf:60:3e:04:f2:a1:75:18:8a:36:e6:9f:1d:83:59:63:42:
         8f:aa:c2:75:af:2a:24:0e:fd:bc:82:9d:03:e9:17:b3:5e:ee:
         35:ff:21:29:36:38:c9:e3:e2:19:e7:a6:61:ba:dc:b2:39:9b:
         b1:f4:39:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:35:09 2025 by rpki-client