Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft
File:                     71d08692-7de1-4973-b7ae-5a0397e6b60c.mft (raw, json)
Hash identifier:          +iY4u6/YS0VTUMTok284gmQlWsD+DFu+Z6kKAcShldc=
Subject key identifier:   3B:21:8D:39:CB:BB:03:37:86:98:1D:8E:A2:A8:51:70:0F:84:B4:87
Authority key identifier: B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB
Certificate issuer:       /CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
Certificate serial:       010D0C9F43285848BACCF2234E62AD3AC44E4EC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft
Manifest number:          010D0C9F43285845A2057E87AFA592F9B1B53722
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 18:00:00 +0000
Files and hashes:         1: 71d08692-7de1-4973-b7ae-5a0397e6b60c.crl (hash: l8KgYYpCNjncjzJMP0UAjX/tF/C/ZqO+B5a2sXSjNWg=)
                          2: c3cfbabb-4055-3d8f-87e9-339a22f4631c.roa (hash: /al1Fje5+U64mkDamuW9S38/FFJTcRPiy0lsU0voOTE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:f2:23:4e:62:ad:3a:c4:4e:4e:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71d08692-7de1-4973-b7ae-5a0397e6b60c
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  3 18:00:00 2025 GMT
        Subject: CN=b4d7cfce-2a8e-4241-beda-da9e83be085c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:f7:a8:7a:84:d0:a7:fd:cf:87:79:50:11:
                    05:e4:e0:b0:8d:a8:18:c7:5a:2a:7a:44:44:3f:8a:
                    44:6c:5a:64:9a:db:14:02:ec:81:d1:70:6b:2d:fd:
                    d3:d4:2e:f3:c7:b4:9d:65:1f:bd:9d:c5:c6:bb:ca:
                    38:cb:d4:fd:7c:f6:35:c4:32:44:49:17:21:cf:aa:
                    4d:6c:15:75:6c:45:8e:74:b1:18:bd:ae:6f:d0:f6:
                    fa:72:56:95:82:67:3e:d3:a0:79:57:89:52:31:1b:
                    63:37:08:45:fc:a6:e0:15:78:dc:77:75:ae:49:1f:
                    4c:0a:e7:6a:f3:83:a0:b1:7a:20:86:44:7e:d5:94:
                    65:0a:d0:1e:c3:25:44:00:6c:e7:67:b2:72:b0:60:
                    90:e7:2e:b7:29:28:46:37:b7:b9:c6:1e:51:f7:f5:
                    9d:ec:09:24:97:7b:79:69:16:42:3d:0a:0b:8f:60:
                    1f:87:cd:9c:e1:d9:c5:36:6a:86:d8:29:5a:01:f0:
                    cb:14:42:fa:fe:01:85:65:99:d0:3e:02:02:5f:23:
                    a6:e0:92:ad:31:92:f8:47:fe:7a:c9:9e:b5:e9:79:
                    fe:d0:af:de:13:a6:92:1c:95:b7:7b:6d:b4:76:8b:
                    8e:40:95:5f:f1:59:03:cb:91:cd:0b:9a:33:0b:7d:
                    be:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:21:8D:39:CB:BB:03:37:86:98:1D:8E:A2:A8:51:70:0F:84:B4:87
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c/71d08692-7de1-4973-b7ae-5a0397e6b60c.crl

            X509v3 Authority Key Identifier:
                keyid:B1:8E:91:C4:9C:F2:47:68:BE:22:AA:7E:ED:92:C0:91:4E:BD:F7:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/71d08692-7de1-4973-b7ae-5a0397e6b60c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:cb:0d:b1:21:41:25:f7:74:2c:df:a0:70:70:29:49:3f:b8:
         94:5b:ee:50:c1:1e:05:c2:94:d0:75:f9:91:55:db:d4:f1:94:
         84:b0:87:5d:31:49:f2:58:88:81:8a:38:46:23:0d:89:db:32:
         cd:e7:03:ba:bb:95:d9:c9:6b:74:30:36:0a:e6:10:5e:79:9d:
         2e:ae:00:21:24:29:cb:3b:ef:8f:2b:65:f7:7a:cc:4a:f3:5b:
         3b:6b:29:75:9b:a8:9a:d1:75:22:b4:85:70:b9:b8:a1:c9:43:
         00:88:b0:0f:1f:14:02:af:4f:d1:15:d3:58:5e:73:f6:fb:a4:
         6c:30:57:45:e4:ae:17:4c:9e:0a:e5:67:17:9a:40:cc:07:c6:
         66:9f:50:e0:9a:2e:79:9e:7f:df:1e:36:94:c0:2b:29:29:ab:
         bc:77:ce:e3:21:2d:89:77:01:29:21:8b:74:a1:5e:50:6a:dc:
         b1:37:46:f0:53:c6:e2:28:96:1e:65:45:77:0f:6e:07:17:61:
         c3:e9:51:7a:d4:04:5e:aa:46:e1:41:10:ff:bd:54:7b:34:f5:
         ff:ad:dd:cf:79:5c:27:35:a6:2a:f1:aa:67:94:8d:c9:26:4c:
         40:7a:45:61:f8:a1:9c:6d:83:cd:37:cd:0d:5a:62:78:ee:54:
         78:c0:1e:3a
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi6zPIjTmKtOsROTsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzFkMDg2OTItN2RlMS00OTczLWI3YWUtNWEwMzk3ZTZi
NjBjMB4XDTI1MDEzMTE4MDAwN1oXDTI1MDIwMzE4MDAwMFowLzEtMCsGA1UEAxMk
YjRkN2NmY2UtMmE4ZS00MjQxLWJlZGEtZGE5ZTgzYmUwODVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvX3qHqE0Kf9z4d5UBEF5OCwjagYx1oqekRE
P4pEbFpkmtsUAuyB0XBrLf3T1C7zx7SdZR+9ncXGu8o4y9T9fPY1xDJESRchz6pN
bBV1bEWOdLEYva5v0Pb6claVgmc+06B5V4lSMRtjNwhF/KbgFXjcd3WuSR9MCudq
84OgsXoghkR+1ZRlCtAewyVEAGznZ7JysGCQ5y63KShGN7e5xh5R9/Wd7Akkl3t5
aRZCPQoLj2Afh82c4dnFNmqG2ClaAfDLFEL6/gGFZZnQPgICXyOm4JKtMZL4R/56
yZ616Xn+0K/eE6aSHJW3e220douOQJVf8VkDy5HNC5ozC32+iQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFDshjTnLuwM3hpgdjqKoUXAPhLSHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC83MWQw
ODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAzOTdlNmI2MGMvNzFkMDg2OTItN2RlMS00
OTczLWI3YWUtNWEwMzk3ZTZiNjBjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNzFkMDg2OTItN2RlMS00OTczLWI3
YWUtNWEwMzk3ZTZiNjBjLzcxZDA4NjkyLTdkZTEtNDk3My1iN2FlLTVhMDM5N2U2
YjYwYy5jcmwwHwYDVR0jBBgwFoAUsY6RxJzyR2i+Iqp+7ZLAkU6999swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC83MWQwODY5Mi03ZGUxLTQ5NzMtYjdhZS01YTAz
OTdlNmI2MGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAHyw2xIUEl93Qs36BwcClJ
P7iUW+5QwR4FwpTQdfmRVdvU8ZSEsIddMUnyWIiBijhGIw2J2zLN5wO6u5XZyWt0
MDYK5hBeeZ0urgAhJCnLO++PK2X3esxK81s7ayl1m6ia0XUitIVwubihyUMAiLAP
HxQCr0/RFdNYXnP2+6RsMFdF5K4XTJ4K5WcXmkDMB8Zmn1Dgmi55nn/fHjaUwCsp
Kau8d87jIS2JdwEpIYt0oV5QatyxN0bwU8biKJYeZUV3D24HF2HD6VF61AReqkbh
QRD/vVR7NPX/rd3PeVwnNaYq8apnlI3JJkxAekVh+KGcbYPNN80NWmJ47lR4wB46
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:39:05 2025 by rpki-client