Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft
File:                     96fbd019-e8e1-4204-844b-f1654a891e0d.mft (raw, json)
Hash identifier:          6TpWR6FSry0qVbX4FlhRKnUDJyE65iW60eyifFwF9jU=
Subject key identifier:   BC:D4:5D:6D:79:70:55:F2:D6:3F:74:74:3E:DF:14:D4:C5:28:60:92
Authority key identifier: 5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93
Certificate issuer:       /CN=96fbd019-e8e1-4204-844b-f1654a891e0d
Certificate serial:       010D0C9F43285848B83DD12948881E98AAFE8B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft
Manifest number:          010D0C9F432858448827373EFF380022AF60A069
Signing time:             Thu 30 Jan 2025 20:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 20:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 20:00:00 +0000
Files and hashes:         1: 95ba1ae1-7080-38af-84e0-b79e7484f667.roa (hash: LN3qX7K+7N2rge/NalL++zctLvHcVXuTaEGnI4QcEv4=)
                          2: 96fbd019-e8e1-4204-844b-f1654a891e0d.crl (hash: SxIS55QIH8wHGOA1M+2eN6vg4v9TGr+HL6PLRKoh8zk=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:3d:d1:29:48:88:1e:98:aa:fe:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96fbd019-e8e1-4204-844b-f1654a891e0d
        Validity
            Not Before: Jan 30 20:00:07 2025 GMT
            Not After : Feb  2 20:00:00 2025 GMT
        Subject: CN=6c94b75d-f2c9-4102-9b21-43876e9d02db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:20:d7:b9:f2:c6:5f:02:47:fa:76:29:13:e3:
                    e1:ef:9f:36:a9:96:6c:21:b7:7e:4a:ff:3b:43:f6:
                    ae:ed:c8:4f:e9:e3:8b:bd:2a:40:a0:40:00:99:07:
                    de:a8:5b:c8:94:78:b6:9e:f3:ef:0b:60:39:bf:69:
                    6d:6d:f6:21:a0:0b:04:cb:f7:69:fb:e9:8b:ae:c2:
                    5d:9c:2a:f1:b9:19:3e:59:78:55:a3:8c:c6:cf:70:
                    77:97:73:f9:be:e1:98:4b:f5:05:75:c0:77:24:bd:
                    b1:2e:c1:9b:44:1e:fc:46:74:51:e7:7a:06:7a:2b:
                    1a:6d:3a:f1:c2:44:2c:eb:3e:1b:9f:94:da:e1:dd:
                    ae:1a:c2:f6:4c:00:3f:e7:4c:bd:ad:98:20:2e:c6:
                    01:4e:ad:64:ee:d7:7d:09:65:27:51:4b:3a:a3:2e:
                    ba:08:b3:01:b9:51:84:8c:04:0e:f2:79:69:4d:1c:
                    be:f5:6d:8d:f4:35:b3:8c:01:41:4d:4e:6a:3d:1c:
                    e9:dd:8d:c8:d0:74:b7:fb:70:ac:8a:96:8b:3f:55:
                    89:55:39:4c:0f:69:bd:6b:de:d1:58:8a:28:f2:e9:
                    f6:7e:fb:fa:10:a8:74:7e:b8:cb:b7:3e:0f:b0:93:
                    38:8e:5e:37:40:60:70:e4:5c:d8:5f:8a:9d:0a:99:
                    92:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:D4:5D:6D:79:70:55:F2:D6:3F:74:74:3E:DF:14:D4:C5:28:60:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d/96fbd019-e8e1-4204-844b-f1654a891e0d.crl

            X509v3 Authority Key Identifier:
                keyid:5B:33:1B:14:36:ED:C2:56:D2:5D:29:91:9F:C0:EB:60:51:4D:8F:93

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/96fbd019-e8e1-4204-844b-f1654a891e0d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:cc:59:9f:94:84:92:a9:66:87:a8:df:85:d0:4d:e1:5f:47:
         c6:6a:ed:d9:ab:36:dd:46:d3:47:a7:d9:cc:be:5b:67:1f:68:
         7a:7c:11:8d:72:bb:0b:f6:a9:b1:f3:5f:1d:7d:57:29:63:71:
         11:85:81:78:6a:98:27:cc:eb:fa:ee:29:3c:7c:a9:4d:34:04:
         17:83:ac:d6:1c:b3:3f:26:a0:4c:d8:39:9e:48:19:df:5e:d1:
         ee:b3:94:0a:20:5c:54:05:2d:49:f9:b0:90:b7:0e:bf:d7:04:
         0b:6d:96:cd:5f:3f:2f:77:82:ed:35:fe:82:bf:79:dd:42:ef:
         06:77:eb:34:55:06:f5:12:24:11:4a:3a:70:06:54:3f:f8:d5:
         37:39:a5:f2:3c:3e:5a:e4:f6:ac:f6:a8:a2:69:9b:71:cb:3b:
         58:2c:85:cd:90:a0:35:ec:6e:6a:f1:fb:ef:b1:dd:84:66:70:
         39:8f:7f:92:83:e1:4e:fd:71:75:f4:4b:f1:81:4f:83:6b:f8:
         86:d2:25:d5:0b:40:2c:31:0f:fe:19:a1:18:3d:9e:9f:bd:c1:
         ed:34:55:bd:eb:99:73:2e:b7:ec:dd:1d:6e:68:da:8a:fd:dc:
         ee:e2:59:31:47:c8:60:4d:49:88:70:48:c3:f2:fd:82:5d:d0:
         27:6e:59:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 15:30:53 2025 by rpki-client