Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/85c974cf-758f-410e-af74-d203a4baf516.mft
File:                     85c974cf-758f-410e-af74-d203a4baf516.mft (raw, json)
Hash identifier:          sYbrYiK8qxNOhz6EkVwgV7L64/aEHfaCJnVHGGgAQlE=
Subject key identifier:   C1:4E:54:92:CE:2A:49:66:60:D4:D3:DF:2C:84:B3:D2:04:F3:C8:3C
Authority key identifier: FE:C3:FB:3A:7F:79:36:30:A7:37:06:EC:C8:A5:50:FD:AF:EC:E8:B3
Certificate issuer:       /CN=85c974cf-758f-410e-af74-d203a4baf516
Certificate serial:       010D0C9F43285848B85B96BF28DA6987B91473C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/85c974cf-758f-410e-af74-d203a4baf516.mft
Manifest number:          010D0C9F43285844D0EEA2F5376F117E5B57FEFF
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:00 +0000
Files and hashes:         1: 85c974cf-758f-410e-af74-d203a4baf516.crl (hash: PblN8+3MyV+Qg8ZfVC3d75RdcOkOimA05Sy7e2yj1kY=)
                          2: c18bc40a-8930-344e-b80c-33c58f0e6a50.roa (hash: yDLvH39XnZ/sd5gVc4Yhkey6jrDyAZ1kw8KY6NXZTd4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:96:bf:28:da:69:87:b9:14:73:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85c974cf-758f-410e-af74-d203a4baf516
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  2 21:00:00 2025 GMT
        Subject: CN=44ad4d69-b495-4689-a10f-dfcd33e3c200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:fb:50:49:aa:90:a7:01:7f:6e:b0:5e:b2:
                    d0:71:00:8e:9e:d9:20:e4:78:f8:16:55:98:11:2a:
                    9d:40:f4:f1:8e:03:03:5d:aa:cc:f0:18:76:98:b8:
                    fa:1a:d1:52:83:b7:15:bf:4d:8a:d1:5f:87:65:09:
                    b2:fb:66:d6:ac:df:a6:a9:8f:4c:6a:ed:4c:2d:1d:
                    e4:62:4e:e7:a6:ce:5e:4c:09:96:ae:fd:e5:10:8b:
                    ce:98:7b:9a:ba:d3:1d:be:08:47:e5:71:9a:7e:6b:
                    ee:df:64:e4:be:d7:8b:4b:21:a9:9d:87:7e:b6:cc:
                    13:9c:13:68:bf:1c:f0:57:b8:da:75:4e:cd:db:ad:
                    a0:af:86:3e:89:b0:9a:06:0d:39:d0:cb:66:48:ca:
                    65:cf:59:76:4f:5b:d7:17:b3:b7:41:52:9f:71:0c:
                    6e:cd:4c:68:7b:f0:bc:c2:bf:95:e2:2d:a1:b4:e6:
                    e9:2b:b0:d7:28:48:98:5d:1f:a8:7a:fc:b4:2a:48:
                    93:23:ca:1d:bd:eb:a7:f6:a0:71:1a:5c:b0:cc:66:
                    57:c4:5c:32:f9:95:18:a4:fc:8b:46:36:50:e0:c6:
                    72:13:17:e3:32:d0:7e:fe:a6:28:19:a0:ac:48:38:
                    10:a5:89:44:44:30:d1:1e:e2:7d:b1:b1:a2:79:e5:
                    90:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:4E:54:92:CE:2A:49:66:60:D4:D3:DF:2C:84:B3:D2:04:F3:C8:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/85c974cf-758f-410e-af74-d203a4baf516.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516/85c974cf-758f-410e-af74-d203a4baf516.crl

            X509v3 Authority Key Identifier:
                keyid:FE:C3:FB:3A:7F:79:36:30:A7:37:06:EC:C8:A5:50:FD:AF:EC:E8:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/85c974cf-758f-410e-af74-d203a4baf516.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:e6:81:2b:c3:29:31:e8:0f:99:ea:82:b5:05:14:65:7a:7a:
         94:08:3d:32:55:7f:8c:ea:c8:ed:b8:ce:d8:93:86:c1:77:6f:
         ec:37:38:9e:75:8c:4c:49:0e:02:84:e3:d0:18:28:07:60:3c:
         22:da:d7:40:a9:15:da:d7:28:73:78:4a:7a:5e:46:b1:27:73:
         4f:f8:ce:c5:32:a4:73:a0:34:22:e7:34:91:cb:ff:13:d2:40:
         61:01:d4:23:07:c5:83:00:2f:8e:dd:4d:24:90:f2:7f:21:00:
         d8:9c:56:cf:d7:0c:70:b6:d0:4b:ec:d4:85:2b:7f:e2:95:9d:
         49:d7:ae:a1:89:4f:f7:da:86:48:35:5d:c5:0f:89:f6:2b:14:
         28:b8:83:d9:53:55:33:05:a8:a8:f5:a4:77:ba:92:e1:37:d2:
         4d:11:2b:ba:0d:0c:a9:fa:93:33:a9:a0:e4:e3:73:3d:28:16:
         c3:73:ab:f4:d8:67:62:4e:da:c1:53:95:5f:06:1b:c6:e3:10:
         8f:b1:bc:90:82:7c:ea:ab:d5:f2:19:db:01:78:e9:7e:6a:75:
         02:e4:68:df:3a:6b:a6:05:b8:76:9d:e7:b5:8c:31:b2:c9:94:
         09:22:1f:7a:70:1f:eb:2b:83:ff:b9:38:bd:0b:ed:66:e8:b8:
         7a:44:8f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:36:05 2025 by rpki-client