Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft
File:                     e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft (raw, json)
Hash identifier:          3LxZlQhgQ2gu3mNKxmeVBuEvk7a5LHLthMwhRWvJWyE=
Subject key identifier:   00:C8:14:62:84:5D:E6:72:45:81:A4:E8:ED:59:C0:31:0F:DD:F6:30
Authority key identifier: 7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F
Certificate issuer:       /CN=e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e
Certificate serial:       010D0C9F43285848B9FC7BD4B4FBA118FECFCB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft
Manifest number:          010D0C9F432858456C31FDB4DDCAD76F5F9F4CB6
Signing time:             Fri 31 Jan 2025 11:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 11:00:00 +0000
Files and hashes:         1: e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.crl (hash: tjslAXkbzKTOI743RTbBiFWseaHEsFgzwqjsD9fYFu4=)
                          2: f5b5374b-9522-3466-896d-1f2a47048537.roa (hash: v/L7vsh85mistqsVrlmo6yH4QaNtuhDcu8gr7qm7/r8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:fc:7b:d4:b4:fb:a1:18:fe:cf:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e
        Validity
            Not Before: Jan 31 11:00:07 2025 GMT
            Not After : Feb  2 11:00:00 2025 GMT
        Subject: CN=d5f7ed99-dc74-43ac-85c2-9461ab6bbc32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:4e:bd:d1:54:ec:9a:68:e7:f1:1d:fb:75:09:
                    d9:a0:6a:e6:e0:80:f6:b7:cc:a6:d7:c1:57:0d:00:
                    09:3c:c1:84:8a:77:0f:08:ef:76:44:ba:2b:70:97:
                    bb:b0:19:d1:bd:84:17:6d:09:d6:87:aa:ef:17:76:
                    7b:96:e3:3a:14:14:64:01:cb:1d:6e:87:c2:f9:ae:
                    cb:dd:9a:79:45:28:0c:8e:a1:2b:79:8c:08:17:0c:
                    a4:53:c1:ee:ef:e8:b0:5d:4d:8e:f1:65:36:11:0f:
                    5b:d5:51:60:74:82:b4:c4:72:f8:5b:f7:ea:1f:f4:
                    08:e4:67:70:74:36:22:02:04:fd:01:0e:24:15:d9:
                    63:32:b9:df:10:8b:95:e6:1d:eb:cd:dd:b2:a0:46:
                    4d:a2:bb:4f:58:4d:ef:65:21:ec:75:4c:21:4c:ed:
                    72:92:1c:21:e0:b6:f8:81:10:e8:2f:ac:8d:19:38:
                    13:a6:cf:33:6d:ed:68:f8:9d:ac:82:ef:a8:a0:49:
                    bc:1b:88:eb:2d:7e:94:8f:bd:3d:ac:81:5b:de:52:
                    b7:6e:3d:0d:b0:ac:4b:88:66:23:4a:d6:cf:53:14:
                    a4:45:7c:d8:9d:5c:73:7a:21:f3:71:9d:3b:81:71:
                    55:9c:54:2b:b4:88:23:70:56:06:bc:33:29:e7:7d:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:C8:14:62:84:5D:E6:72:45:81:A4:E8:ED:59:C0:31:0F:DD:F6:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B9:C6:31:68:6D:8C:71:50:01:58:AA:52:57:17:8C:27:F2:0B:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e8fbfc84-5c6f-400c-b7a6-1ae4e1623d1e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:8e:db:c1:82:84:f7:ea:81:c0:0c:f9:d3:2d:9e:d8:ff:88:
         18:b1:d2:6d:29:23:23:b7:49:ec:bb:28:9a:b4:91:57:56:9b:
         b4:28:44:0d:0a:8c:b5:96:01:10:e0:71:ac:93:c2:a7:ac:98:
         33:52:09:ea:1d:16:a1:cc:f6:ed:82:e5:0f:09:20:49:fd:ce:
         8b:ed:a5:0b:13:29:c2:f9:ff:b8:be:e6:ea:07:c1:74:0e:19:
         f8:f5:4e:cc:d3:24:e9:8a:04:fd:51:70:7f:6e:b0:39:19:35:
         dc:38:9c:c3:ef:81:c3:4d:6a:7e:24:30:0b:1b:67:6e:84:ed:
         16:e2:03:95:8a:5c:f2:60:3f:88:2e:0b:cb:23:35:24:ac:6e:
         7f:ef:b7:30:26:43:cb:c9:7b:c8:5b:d1:1c:1e:5a:f9:b3:ba:
         74:d5:28:73:35:ec:33:d7:ff:f8:f5:f9:4d:84:7f:14:70:26:
         d7:ad:80:94:67:93:38:c2:f6:dc:45:11:a7:95:c5:92:30:a7:
         6a:e3:fd:fb:69:12:e2:6d:27:e1:4b:64:59:d9:a5:af:7e:fb:
         9c:23:f2:c6:23:6d:64:5e:6b:bc:79:74:2b:2f:69:93:3a:24:
         91:a5:ee:97:b5:eb:d2:87:ad:63:5f:ba:31:31:d9:e3:b6:89:
         b7:da:c0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 09:23:15 2025 by rpki-client