Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft
File:                     a57f543d-54f7-4dd6-a478-95849cb77e5e.mft (raw, json)
Hash identifier:          ShfUPjeZBzVeNqdBdtwxEoffc1bABKOZ0IgXnIdJ+W8=
Subject key identifier:   4A:F6:BE:C6:AD:EA:84:09:B3:E6:38:9F:4E:3E:D7:99:F0:B6:FA:24
Authority key identifier: CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A
Certificate issuer:       /CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
Certificate serial:       010D0C9F43285848B8B4EBF82136F3755BF02C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft
Manifest number:          010D0C9F4328584485E6811458181A060C46068A
Signing time:             Fri 31 Jan 2025 00:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 00:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 00:00:00 +0000
Files and hashes:         1: 295d7e62-9ba8-30e9-976f-7b86d221816e.roa (hash: h936n1/8EtEsxcJeGGdSICd4IlgGIFTBZwkhErvpNVw=)
                          2: a57f543d-54f7-4dd6-a478-95849cb77e5e.crl (hash: tkrZJMwQxCzF2rSRQxoWvoUX6Jfye8ltvMkwn/Bhvxs=)
                          3: f1adbd29-319d-377f-910e-3fd95df8a73b.roa (hash: Ax0QYR1qTyKGefcaeif+1HvhBjTfeywa+LggzA/Qw9s=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:b4:eb:f8:21:36:f3:75:5b:f0:2c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a57f543d-54f7-4dd6-a478-95849cb77e5e
        Validity
            Not Before: Jan 31 00:00:07 2025 GMT
            Not After : Feb  2 00:00:00 2025 GMT
        Subject: CN=feac003b-785b-408a-83a2-aefc5cefe217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1b:a0:11:8f:dc:05:87:a4:ad:f0:18:ef:cf:
                    e0:29:c9:a9:5f:47:ff:a2:e9:c9:7e:29:08:9a:98:
                    1d:ed:c9:1a:d0:5a:91:76:3e:81:1d:46:36:80:95:
                    bb:65:81:5a:58:11:b5:25:66:15:ba:51:21:1f:65:
                    d4:0b:90:f1:ad:d0:df:3f:88:78:36:74:5a:5e:ea:
                    28:c7:52:d3:b4:12:50:d9:80:a7:89:7f:e5:31:4a:
                    ce:70:f0:f7:17:f7:10:0b:ce:17:08:0d:91:fe:ae:
                    c0:55:75:2b:39:82:2f:5c:03:66:e7:cb:17:bc:32:
                    9b:22:6a:5f:79:f5:9c:13:3e:7b:81:ca:59:fb:ca:
                    95:9b:53:4a:b1:96:40:6a:01:14:0c:5d:37:01:b3:
                    d2:99:21:cc:e5:a9:78:89:25:1d:4b:6a:94:9c:db:
                    30:e9:46:c9:54:9d:47:e9:47:12:97:ae:d8:99:7c:
                    79:f3:72:8a:a2:80:26:87:89:bc:29:fe:de:f8:d3:
                    2a:58:a5:03:1b:24:e5:03:45:60:89:8e:6a:af:07:
                    0b:91:1b:1c:27:1d:5f:79:d8:e7:c0:6f:54:b9:36:
                    8b:9e:8b:80:f5:ce:06:7f:74:4e:02:48:31:3f:4d:
                    98:52:34:c1:f3:cf:f0:c4:5d:ac:2f:0f:bf:53:78:
                    2a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F6:BE:C6:AD:EA:84:09:B3:E6:38:9F:4E:3E:D7:99:F0:B6:FA:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e/a57f543d-54f7-4dd6-a478-95849cb77e5e.crl

            X509v3 Authority Key Identifier:
                keyid:CD:02:D8:4E:6E:D1:32:04:CA:3F:38:D8:21:96:7D:BB:E0:34:9D:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a57f543d-54f7-4dd6-a478-95849cb77e5e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8e:0e:7e:36:be:99:1f:f9:87:2b:c9:b6:70:c2:ad:f2:02:18:
         e8:71:f3:16:f2:de:c8:c1:1d:d4:18:4a:ca:01:43:a9:f9:13:
         0e:eb:a4:7d:e3:c4:b6:2b:d7:b1:55:23:48:f9:61:95:a4:fc:
         10:02:92:56:c0:a3:37:72:12:68:40:45:7e:6c:e9:0e:27:ee:
         26:64:cd:b5:25:b1:cb:9a:0c:eb:ec:4e:f7:57:65:3b:c3:08:
         e6:00:1a:fe:d3:a5:8c:a1:56:21:94:30:94:1b:12:14:1e:b9:
         48:e6:f1:75:99:d3:8f:ac:58:38:65:af:85:d7:1c:82:39:69:
         32:f5:22:77:b6:cf:ee:7e:69:7d:a6:42:4e:f5:6d:d0:fd:57:
         7a:4e:55:0e:df:c3:96:83:03:e3:97:4f:9a:c7:89:3e:4f:d3:
         f9:9e:aa:fd:7a:74:08:c6:0f:8a:d2:ef:c1:76:f0:67:f8:55:
         1e:8a:cc:d4:7b:32:06:a9:b5:cc:76:b1:84:9b:a4:24:74:28:
         ce:34:19:a9:af:73:e5:bd:3f:d3:88:9f:d6:2d:ea:77:9e:47:
         0b:e1:7a:ce:d0:1c:ac:b5:ca:b5:03:ae:d3:72:96:99:60:35:
         c1:cd:59:7e:15:68:55:1f:e5:a3:0b:f3:f5:c6:fa:ec:7c:a9:
         bd:77:44:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 4 19:26:43 2025 by rpki-client