Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft
File:                     d3878a5b-a112-41cb-867c-f6fae3f22d52.mft (raw, json)
Hash identifier:          5rMpo4vofFn9D55Vk0sXiEz6akL3qdV2Ncorq7Vhmew=
Subject key identifier:   DF:88:81:46:EF:0F:39:89:95:4C:B2:47:79:67:54:09:24:90:4D:03
Authority key identifier: 7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1
Certificate issuer:       /CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
Certificate serial:       010D0C9F43285848BA380C838E891AFE48CB5740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft
Manifest number:          010D0C9F43285844A8F7BB0BA335BF211A19EB20
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 13:00:00 +0000
Files and hashes:         1: 245383de-2b92-3248-956a-5516c43e64a9.roa (hash: XM28o2iuWnRS1FFelyKroWHKf8QNKUKP4EuLlkZdsPU=)
                          2: 56888ec3-91ad-304f-a1c5-2db34a218a54.roa (hash: 8kWpgnk86CsPtEX/b9KQ6xGpDMP2swWWeyl3RIoEvWc=)
                          3: d3878a5b-a112-41cb-867c-f6fae3f22d52.crl (hash: NKvvwOou4SmANUwWe8/f5zolkldPhxsj2zKAhJuOxCo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:38:0c:83:8e:89:1a:fe:48:cb:57:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3878a5b-a112-41cb-867c-f6fae3f22d52
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  2 13:00:00 2025 GMT
        Subject: CN=9e4d3327-4512-457b-9bd5-09ada1cb9c2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:83:75:0b:4b:be:a6:bf:23:9f:26:a7:85:95:
                    ee:e0:28:42:ff:69:c7:8d:11:f4:ec:64:f7:a0:c6:
                    fd:c9:9c:90:5f:3b:c7:82:c5:49:f4:85:33:80:55:
                    a3:b8:f5:59:ba:2d:0d:19:47:a4:60:90:f1:e9:3a:
                    92:29:d3:fe:c6:d6:fd:df:f6:84:db:cc:e2:82:c1:
                    b8:1f:56:7d:7b:aa:94:da:75:6f:33:9b:b8:75:24:
                    57:f4:fd:d4:1a:62:7e:98:aa:da:42:35:d9:6e:11:
                    3a:e7:cf:cb:96:64:8d:1d:64:0c:de:24:f2:10:a1:
                    3e:c9:f7:0f:c9:c3:d9:32:70:9f:47:ed:67:06:67:
                    cd:68:f4:a7:e8:18:81:6b:9e:26:47:c3:fa:1f:01:
                    93:df:09:a9:bb:cc:d5:51:60:f4:12:c1:44:3d:12:
                    9d:cf:b6:94:3a:8e:30:a6:3c:e7:ab:59:ec:33:6c:
                    0b:41:4d:56:2f:f6:b8:ed:de:c9:d0:a2:0e:ce:1f:
                    74:8a:bf:14:ec:1a:14:52:3d:fa:de:e8:03:43:49:
                    dd:ae:bd:8a:43:c6:fb:dd:74:c2:61:d4:02:ae:9b:
                    0a:3a:05:39:33:7b:b3:25:aa:75:a5:49:15:d4:16:
                    2e:d3:e2:a9:c2:eb:5c:32:dd:48:4a:5f:bf:e8:27:
                    1a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:88:81:46:EF:0F:39:89:95:4C:B2:47:79:67:54:09:24:90:4D:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52/d3878a5b-a112-41cb-867c-f6fae3f22d52.crl

            X509v3 Authority Key Identifier:
                keyid:7B:F3:AB:50:8E:44:E2:FC:50:F2:84:43:29:C6:66:F0:82:EA:4E:A1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d3878a5b-a112-41cb-867c-f6fae3f22d52.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:c9:4d:51:98:54:8c:ea:08:d3:2f:f5:12:04:69:a5:43:79:
         7d:fa:76:0f:c2:d5:5e:ab:fd:18:a0:0a:e5:a5:d1:61:8e:f3:
         c4:64:ea:e6:ac:6c:25:47:36:13:56:98:95:15:62:b3:48:67:
         10:fc:d0:34:d2:cb:d6:32:a2:1b:bb:a8:61:41:9c:66:8c:01:
         81:4b:e4:b5:59:d2:fd:ed:89:cc:23:e8:9b:84:21:c6:b8:fb:
         5c:ef:1f:d2:3a:12:08:87:4a:e1:d2:fb:eb:ba:3a:dc:c6:3f:
         05:84:9b:a1:98:7c:27:20:24:7d:d9:c6:42:8d:b2:c7:e6:ce:
         c6:f5:9b:42:c0:12:e8:4c:99:26:1a:af:1b:28:95:84:15:45:
         00:5d:5a:ac:32:b7:53:35:6e:be:62:57:dd:d3:2c:20:6e:1f:
         ee:35:51:22:57:c2:25:53:91:7f:2f:c2:ec:be:11:a9:77:37:
         fb:2a:e3:f6:a6:e5:cf:f5:ef:74:e7:7f:3c:d2:d5:ac:7f:8c:
         27:9f:ed:c2:ce:be:a4:f5:78:50:61:1f:c8:ad:3d:a2:f3:bf:
         16:55:ab:e6:34:e9:57:04:62:9e:50:d3:17:4c:eb:d3:f9:4a:
         0a:42:88:dc:5d:7a:e4:fd:34:73:52:0d:9d:77:a2:d2:89:3d:
         6e:c2:73:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 14:13:09 2025 by rpki-client