Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft
File:                     874e86b5-586f-43d7-be6f-cf21e434b31a.mft (raw, json)
Hash identifier:          nLRZXShllNk3x3UA4+c3Znam1MfodfcS39Lbgv4QlSM=
Subject key identifier:   AC:CB:00:B2:0B:57:C6:95:50:6B:07:38:EE:A3:97:F2:8E:B7:EA:D1
Authority key identifier: 79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED
Certificate issuer:       /CN=874e86b5-586f-43d7-be6f-cf21e434b31a
Certificate serial:       010D0C9F43285848BA380C71AD399290DF4F8D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft
Manifest number:          010D0C9F43285844D01540CB33CB58C9C7BA2674
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 13:00:00 +0000
Files and hashes:         1: 2ba3069e-b8c1-3ef2-b28d-66c86bd4ff58.roa (hash: E8mBXlkKhdEmVBMuS1Dhj+xDfYCHxvSrebS/0lQ7pIg=)
                          2: 7281ae23-867a-34c7-a504-aa8437b8e969.roa (hash: vLQ2VccHeFbTF0R8IeFrF4N449z9oC2pSSNo8jbgFIs=)
                          3: 874e86b5-586f-43d7-be6f-cf21e434b31a.crl (hash: 69t91k9JUPv+tKyVUtULATKEmuBXyPOD/OfEb+Zamus=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:38:0c:71:ad:39:92:90:df:4f:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=874e86b5-586f-43d7-be6f-cf21e434b31a
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  2 13:00:00 2025 GMT
        Subject: CN=e534f02b-9cd5-4e5e-8b2e-52f8ba15e66d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e3:85:56:ef:cb:2d:08:08:9c:da:64:a1:ff:
                    43:f7:7c:94:8e:6c:15:a2:c8:4e:5f:c0:e6:92:08:
                    7a:1e:dd:b3:89:fc:17:04:79:88:0e:87:0b:f7:02:
                    13:b5:de:96:bd:b6:b1:1e:00:da:b6:56:1c:8d:54:
                    7b:e4:67:2f:df:b6:8f:d9:0a:9b:ec:d8:2f:26:93:
                    74:a5:38:05:b5:9a:23:e1:72:d5:15:6c:d3:a9:d9:
                    83:df:8b:50:a0:05:c7:3c:26:a3:bb:d6:73:98:09:
                    ac:ab:3d:dc:72:2d:79:b4:52:03:75:b0:4f:30:c0:
                    90:54:db:a8:c4:9c:bb:cb:ca:44:93:b8:a8:52:b1:
                    7b:99:13:17:04:1a:07:d3:16:eb:ea:a0:f1:3b:f7:
                    31:0e:2d:5f:63:26:79:44:8e:9a:89:e7:b2:5a:cf:
                    84:7d:46:48:a1:fa:a3:aa:a7:14:2b:e7:8a:fd:36:
                    95:11:81:13:66:21:11:58:28:b1:13:6b:d4:d1:9d:
                    a5:81:9e:b0:a5:a9:1c:73:99:07:29:ee:e6:2a:e2:
                    c6:fd:ac:4a:3a:44:9d:c3:b4:d6:57:52:70:64:d6:
                    ff:8e:1f:ab:9e:4f:d5:ea:34:d8:56:25:91:0e:4d:
                    57:b5:ea:26:27:74:07:27:5b:26:e0:a2:2f:8b:d1:
                    86:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:CB:00:B2:0B:57:C6:95:50:6B:07:38:EE:A3:97:F2:8E:B7:EA:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a/874e86b5-586f-43d7-be6f-cf21e434b31a.crl

            X509v3 Authority Key Identifier:
                keyid:79:4D:42:84:C9:BB:D7:67:10:53:9F:15:75:82:DC:D4:12:C4:FE:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/874e86b5-586f-43d7-be6f-cf21e434b31a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:0e:fe:a0:2f:47:08:16:da:f6:e3:bb:1e:d1:2b:a7:de:0e:
         80:78:30:88:44:96:04:15:a1:32:28:f6:ff:6a:85:79:d0:36:
         38:56:52:c1:c8:0f:10:b6:2f:c0:d1:3e:ae:18:0d:64:a4:da:
         f9:09:f8:c9:4a:d8:10:64:3b:cf:5b:57:9c:a2:3d:bb:19:d4:
         e5:2a:3a:5e:a8:eb:02:03:2e:48:4b:82:ff:0b:0e:95:52:6f:
         0a:9a:51:3f:e9:05:61:7c:c6:3e:3e:f1:48:a1:09:b8:eb:52:
         5e:6c:28:22:58:77:2f:09:73:2f:c0:05:15:2f:e4:ad:52:a2:
         5c:c7:70:c2:e4:be:d1:ca:51:58:06:91:ca:80:d9:27:2c:b6:
         b0:21:79:aa:57:45:2c:d3:de:56:19:b4:a9:30:b2:51:b7:34:
         bc:fe:8a:57:58:f9:ee:c0:98:d7:df:7c:98:50:6b:ea:48:68:
         32:55:07:4c:a7:16:b8:a1:79:a7:1e:e2:c5:63:95:e7:ee:b8:
         be:86:c6:ad:a6:28:6b:03:97:08:9e:de:95:2d:9a:44:b5:ba:
         92:25:4e:0a:8f:28:d1:89:64:9f:2a:e8:94:3b:02:70:ea:b7:
         60:75:d0:68:6d:08:4f:83:cf:d3:29:59:d6:b8:1a:c2:78:a5:
         e1:e3:86:bf
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi6OAxxrTmSkN9PjQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODc0ZTg2YjUtNTg2Zi00M2Q3LWJlNmYtY2YyMWU0MzRi
MzFhMB4XDTI1MDEzMTEzMDAwN1oXDTI1MDIwMjEzMDAwMFowLzEtMCsGA1UEAxMk
ZTUzNGYwMmItOWNkNS00ZTVlLThiMmUtNTJmOGJhMTVlNjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm+OFVu/LLQgInNpkof9D93yUjmwVoshOX8Dm
kgh6Ht2zifwXBHmIDocL9wITtd6WvbaxHgDatlYcjVR75Gcv37aP2Qqb7NgvJpN0
pTgFtZoj4XLVFWzTqdmD34tQoAXHPCaju9ZzmAmsqz3cci15tFIDdbBPMMCQVNuo
xJy7y8pEk7ioUrF7mRMXBBoH0xbr6qDxO/cxDi1fYyZ5RI6aieeyWs+EfUZIofqj
qqcUK+eK/TaVEYETZiERWCixE2vU0Z2lgZ6wpakcc5kHKe7mKuLG/axKOkSdw7TW
V1JwZNb/jh+rnk/V6jTYViWRDk1XteomJ3QHJ1sm4KIvi9GGowIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFKzLALILV8aVUGsHOO6jl/KOt+rRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84NzRl
ODZiNS01ODZmLTQzZDctYmU2Zi1jZjIxZTQzNGIzMWEvODc0ZTg2YjUtNTg2Zi00
M2Q3LWJlNmYtY2YyMWU0MzRiMzFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvODc0ZTg2YjUtNTg2Zi00M2Q3LWJl
NmYtY2YyMWU0MzRiMzFhLzg3NGU4NmI1LTU4NmYtNDNkNy1iZTZmLWNmMjFlNDM0
YjMxYS5jcmwwHwYDVR0jBBgwFoAUeU1ChMm712cQU58VdYLc1BLE/u0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84NzRlODZiNS01ODZmLTQzZDctYmU2Zi1jZjIx
ZTQzNGIzMWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrDv6gL0cIFtr247se0Sun
3g6AeDCIRJYEFaEyKPb/aoV50DY4VlLByA8Qti/A0T6uGA1kpNr5CfjJStgQZDvP
W1ecoj27GdTlKjpeqOsCAy5IS4L/Cw6VUm8KmlE/6QVhfMY+PvFIoQm461JebCgi
WHcvCXMvwAUVL+StUqJcx3DC5L7RylFYBpHKgNknLLawIXmqV0Us095WGbSpMLJR
tzS8/opXWPnuwJjX33yYUGvqSGgyVQdMpxa4oXmnHuLFY5Xn7ri+hsatpihrA5cI
nt6VLZpEtbqSJU4KjyjRiWSfKuiUOwJw6rdgddBobQhPg8/TKVnWuBrCeKXh44a/
-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:30 2025 by rpki-client