Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft
File:                     a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft (raw, json)
Hash identifier:          lGzjKDhomQzZFjAH9lgx4fncJS0I5SG/uComju0c7KM=
Subject key identifier:   0D:85:87:DB:A7:52:BE:22:B1:A5:A5:DF:6D:B1:50:00:52:C2:6A:15
Authority key identifier: A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB
Certificate issuer:       /CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf
Certificate serial:       010D0C9F43285848B85B9A0DEF0CDF612AC95000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft
Manifest number:          010D0C9F43285844FAD3DB048A502E5AEFBB5760
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 21:00:00 +0000
Files and hashes:         1: 5d145b87-618b-39b9-97aa-e4fae7498f78.roa (hash: rDh53R/NQ+GqGpZNvHI9jj2uTRp8tRyA8ualHx0q018=)
                          2: a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl (hash: h79kozaixnj2f4NJ+rxQje+fCxaYXe+9hXD/yUpnv3o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:9a:0d:ef:0c:df:61:2a:c9:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a58b4d13-3bf0-4acc-bfd4-aedce2f866bf
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  1 21:00:00 2025 GMT
        Subject: CN=1df0167b-0c38-4c25-8cb4-56b6e21530ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:7a:55:3f:8a:e5:cf:00:18:c8:7b:42:eb:
                    0a:1b:8c:cf:4d:82:39:4f:87:94:ba:de:ec:8c:bc:
                    f1:3d:7a:a7:8a:31:43:b3:d1:ef:05:9b:7b:c9:be:
                    5f:e9:8a:f7:4e:90:42:a6:eb:d5:c0:1d:81:c3:11:
                    e7:69:36:28:83:b0:38:1c:fe:f6:f6:cd:28:b3:65:
                    97:9a:bc:b3:44:ad:b0:4d:12:58:75:2d:78:19:f7:
                    a5:70:d4:3b:c9:37:47:8b:af:9f:69:e8:d7:0c:a1:
                    ea:06:3a:05:6e:84:67:8b:b3:df:87:d1:26:6d:0a:
                    2f:9f:e6:dc:78:32:03:c6:72:6c:de:c0:7d:a5:55:
                    53:9e:7a:c7:22:0e:7d:17:59:93:f9:a7:88:1a:b0:
                    c9:fa:0b:c5:ad:64:69:9c:9c:c4:0d:b1:71:d5:ce:
                    03:7f:a7:88:83:31:6c:8d:ec:0e:e0:29:23:d2:22:
                    d2:ab:3c:58:91:02:11:da:92:9d:63:c0:3c:4a:ab:
                    b0:f4:f3:3b:0f:66:18:dd:3c:61:63:57:67:b2:f0:
                    a5:79:0b:2f:43:77:1c:82:bf:af:b1:b3:78:ea:46:
                    46:20:8b:39:6e:2e:aa:21:a8:cd:18:3b:a7:81:8b:
                    48:d3:8b:02:c4:89:75:e1:e5:f6:da:ff:84:32:e3:
                    ed:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:85:87:DB:A7:52:BE:22:B1:A5:A5:DF:6D:B1:50:00:52:C2:6A:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.crl

            X509v3 Authority Key Identifier:
                keyid:A6:5D:16:ED:E4:20:78:B1:26:C4:2B:81:88:3C:D8:02:96:14:7C:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a58b4d13-3bf0-4acc-bfd4-aedce2f866bf.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:eb:1e:ab:d2:a0:ba:10:f6:6c:1b:0b:24:c6:66:b9:0a:18:
         cd:f1:19:f5:1e:f7:de:66:58:2c:88:40:fe:33:c4:f9:1f:9f:
         da:b2:18:60:36:74:72:eb:08:38:2b:61:39:fc:2b:b3:d2:dd:
         96:10:ee:bc:e4:33:71:0e:fe:56:b0:2d:d9:e1:e5:3a:8c:2c:
         61:37:4c:3a:d7:5a:c3:43:7c:a5:50:f6:61:92:f2:72:be:a2:
         bf:f1:ad:a0:66:ac:96:d2:b2:4f:d6:71:94:e0:23:b3:b2:c4:
         89:fd:88:7f:2c:5f:95:29:60:88:d4:06:b5:24:0e:16:ba:5f:
         1a:70:38:08:e7:54:3c:e6:bb:58:84:bd:7d:3b:d8:6f:20:93:
         01:e6:8b:6e:b3:70:a9:6e:10:ba:31:36:37:53:88:8b:8d:98:
         9f:6c:54:49:58:40:40:5e:c8:b6:63:80:fe:38:c0:19:ae:0b:
         5d:58:a2:d1:00:6e:e7:9c:3f:2b:59:45:7c:d8:14:d1:2b:b9:
         07:53:78:e7:e9:4a:08:f6:f1:d9:34:13:f5:cf:0d:eb:3f:9c:
         d2:fb:fe:98:1a:ea:4b:72:b3:44:50:86:e2:57:18:59:97:1d:
         c3:38:00:b6:91:e8:0f:e1:84:93:48:71:c2:da:8f:35:25:16:
         70:99:ef:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:20 2025 by rpki-client