Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft
File:                     b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft (raw, json)
Hash identifier:          qNyOtVLOJf4jVjnXiwab7DxBMAqCAU4nwqzZ5rsC/3I=
Subject key identifier:   1F:7F:C9:3A:45:1F:56:6B:B3:16:0C:6A:B9:B6:A4:37:13:69:62:69
Authority key identifier: 67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B
Certificate issuer:       /CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
Certificate serial:       010D0C9F43285848B82008944C23EA626CBED140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft
Manifest number:          010D0C9F43285844D386B234247D5CFE5E7D37F8
Signing time:             Thu 30 Jan 2025 19:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 19:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 19:00:00 +0000
Files and hashes:         1: 14f63f23-4dd6-39b4-bee1-1cf1a112b843.roa (hash: CdOBTJSX4PlWEH6T7VrMj87ah/mxvBpwVdTa3bX1zwY=)
                          2: 86cfd56a-8ef0-3f13-bf58-fc3d519c472d.roa (hash: FFfv+Jrd3soqmzYM8q06JieFQHrobbwO8IYt9puZw8w=)
                          3: b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl (hash: ITZoJqsFWMcvL2PxQDHo6rRVZJ7IPYkV7NAuB2WXE3Q=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:20:08:94:4c:23:ea:62:6c:be:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b87434-00de-4d2f-a45d-abe1efe5ecfd
        Validity
            Not Before: Jan 30 19:00:07 2025 GMT
            Not After : Feb  1 19:00:00 2025 GMT
        Subject: CN=a860d900-5f8d-4a27-aa57-f556fc951e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f9:a2:2f:2c:58:1c:cd:d3:bb:d4:41:f4:32:
                    13:71:f9:43:0f:d0:bd:4c:74:0a:ea:47:25:a2:8f:
                    99:b7:56:46:ae:20:4f:59:8d:05:86:82:bb:c6:96:
                    7b:df:7c:2b:16:3f:2c:9f:b1:47:e5:76:ea:8a:2c:
                    d1:2f:d2:cb:fc:81:d7:16:6b:0c:5f:17:ab:2b:8e:
                    f7:e2:83:2a:72:18:5e:4a:d0:f4:4b:ac:37:59:d1:
                    5a:a0:8d:50:62:b3:33:76:26:95:05:5e:e0:8a:32:
                    3c:b8:25:50:f3:a2:5b:04:92:d8:54:21:24:a8:da:
                    eb:a5:1a:8d:46:04:c6:ea:3b:69:58:ea:29:ff:74:
                    0b:1e:14:4c:b3:56:d9:30:b3:db:4a:96:65:cd:5e:
                    dc:65:46:1c:80:15:f6:c4:29:4d:59:01:ac:33:64:
                    d3:25:83:66:4d:c6:ce:3a:79:bc:7a:65:0b:cc:90:
                    dc:f5:79:56:1a:4d:ca:bd:6a:54:7d:e1:68:c8:dc:
                    ef:10:72:ae:78:60:d0:36:90:03:72:15:a6:c2:7a:
                    f6:ac:53:83:3a:98:fd:3a:16:74:20:35:0b:76:78:
                    e8:07:4c:ba:82:07:ed:75:0e:15:59:82:df:3c:6d:
                    7d:bf:8f:fc:c9:b8:d6:93:ab:18:7c:a6:67:d0:9c:
                    ce:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:7F:C9:3A:45:1F:56:6B:B3:16:0C:6A:B9:B6:A4:37:13:69:62:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.crl

            X509v3 Authority Key Identifier:
                keyid:67:BA:AB:82:D5:25:B6:AD:DE:AC:2E:FF:27:E5:85:9C:97:CE:3C:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b9b87434-00de-4d2f-a45d-abe1efe5ecfd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:a3:7a:cc:c5:72:76:84:6a:1f:4e:da:52:54:f8:69:6f:e4:
         b7:f8:5d:62:0a:6b:b0:09:4b:aa:bd:52:26:d3:3f:44:ab:7c:
         b7:36:67:5f:bd:32:ff:d0:7e:03:6a:41:35:d5:13:2f:d7:ea:
         c0:fe:de:c1:12:f1:4e:3b:a7:7e:a3:19:3e:fe:81:bf:02:8d:
         6e:ee:63:fd:37:4c:71:f7:55:21:5d:ea:02:5a:58:e9:8c:68:
         b6:bf:7b:45:81:ea:cf:42:4e:ab:2d:6e:c7:18:9c:2f:e6:02:
         6d:0f:91:20:33:42:b9:b3:53:b0:0f:2f:be:40:3f:00:2c:48:
         37:2c:f4:a9:0a:31:37:0f:cc:89:55:c9:74:1c:c7:ef:e8:20:
         06:24:cd:a3:ee:e0:ee:f4:45:fa:45:8b:c1:e3:02:88:9a:91:
         57:e2:64:3a:c4:f8:26:d6:70:87:72:b8:51:cb:03:c0:a1:82:
         44:93:5f:18:df:a4:33:6c:d3:1a:c9:7f:5c:ed:63:fe:4b:aa:
         8d:1d:15:b8:e2:73:79:88:b1:52:23:f6:ce:2d:5c:e5:7b:48:
         7a:72:82:d7:f6:e8:13:e3:19:14:59:27:95:25:03:d2:d9:b7:
         64:2c:c1:64:f3:c6:26:d5:8d:1e:09:d4:2a:eb:27:38:8c:b6:
         24:ef:25:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:12:29 2025 by rpki-client