Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft
File:                     70a424d3-35bd-43df-8245-3fb08ea7af5a.mft (raw, json)
Hash identifier:          deS/1ivTvtn1AfVm3W6bdN3CMEqVfzXSFn23NCSR8Kw=
Subject key identifier:   40:4E:F2:97:81:C0:99:41:30:40:7D:DB:BF:D8:DD:D9:44:06:CC:8B
Authority key identifier: F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96
Certificate issuer:       /CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
Certificate serial:       010D0C9F43285848B9C0ED8B80B16DB0A344D880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft
Manifest number:          010D0C9F4328584073A849CF36D5F7E9DECAFD7E
Signing time:             Fri 31 Jan 2025 09:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 09:00:00 +0000
Files and hashes:         1: 439ee44d-2f63-3c0e-80de-7ad7f7cb69f7.roa (hash: jXisFqR3yfgbju6GDf+gBbxjpfWxJ4HhbibX328AiOo=)
                          2: 70a424d3-35bd-43df-8245-3fb08ea7af5a.crl (hash: AArg9ksAuwpUGSiiTykddJTNmyuuw5fgvyULq+owCPM=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:c0:ed:8b:80:b1:6d:b0:a3:44:d8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70a424d3-35bd-43df-8245-3fb08ea7af5a
        Validity
            Not Before: Jan 31 09:00:07 2025 GMT
            Not After : Feb  3 09:00:00 2025 GMT
        Subject: CN=927a2462-c1c2-44a0-8312-9d0372a51b5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:0a:a0:36:04:7c:2e:f9:3f:dc:71:4d:fa:0d:
                    e4:5b:40:b0:77:cc:02:24:8f:96:70:d6:12:f3:0b:
                    33:c9:07:d2:93:17:e6:6b:4b:06:44:f3:e4:07:1e:
                    b3:71:49:95:bc:40:a6:4b:da:85:91:8a:e9:8b:a4:
                    db:21:68:c9:34:2d:3f:88:07:23:bc:39:70:43:52:
                    ff:2d:55:7d:f7:97:d2:66:89:34:27:8b:cf:f2:9c:
                    98:e5:eb:4e:7e:c8:8f:92:96:90:b5:75:c3:0e:dd:
                    c4:19:7b:2b:c2:2e:b5:09:a4:2f:b6:78:8f:2d:4b:
                    25:fd:5c:5b:5c:27:ae:86:00:a2:92:8c:3e:61:d5:
                    36:76:39:be:3a:18:35:9f:8e:9f:45:2e:3a:66:6f:
                    e2:a4:78:7b:1f:10:32:08:4f:60:6e:16:5c:1d:33:
                    14:83:07:84:43:b9:6e:89:2f:e3:48:b9:dc:24:2a:
                    7b:6d:ca:3d:10:8b:5e:cb:cd:27:df:b1:d1:9a:7e:
                    35:c0:90:7d:61:f5:0a:a2:d1:d7:8b:b0:f0:b7:6c:
                    7a:cd:c4:2e:e6:d3:32:31:4f:de:44:bf:10:e8:4c:
                    63:e6:08:3f:5f:65:7c:33:f0:f8:95:11:d7:ab:c8:
                    38:d5:5c:86:79:12:28:50:79:dd:16:66:0f:c2:f5:
                    01:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:4E:F2:97:81:C0:99:41:30:40:7D:DB:BF:D8:DD:D9:44:06:CC:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a/70a424d3-35bd-43df-8245-3fb08ea7af5a.crl

            X509v3 Authority Key Identifier:
                keyid:F2:5A:07:ED:D8:B7:BD:AD:2C:76:F0:5E:9C:50:2A:EA:83:E4:B1:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/70a424d3-35bd-43df-8245-3fb08ea7af5a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:34:75:f4:17:c9:f7:d2:02:54:8f:ea:ff:b3:d6:96:35:c2:
         f1:3a:7f:c0:0f:75:af:e1:f3:f9:a2:ea:64:76:6e:2a:5f:ac:
         15:61:39:b7:93:4a:d9:e9:d4:0d:fc:a0:98:09:04:0b:d8:6b:
         d7:39:9e:7f:67:17:f8:13:56:72:fc:94:cd:3e:38:6c:c1:49:
         c9:a6:ec:48:61:b4:a6:34:8f:dc:7e:52:a3:6d:75:85:57:16:
         49:93:7c:ac:69:25:c0:bb:79:2b:8b:65:1c:a6:4e:2c:71:71:
         4f:fb:90:85:16:cd:ef:d3:00:5b:51:ef:9c:5b:a5:b1:96:65:
         25:14:ff:1f:48:a9:3e:86:61:87:b5:5f:62:f7:be:dc:7c:d3:
         6c:16:86:83:6e:69:89:e4:e4:88:b1:17:77:46:16:59:b9:3d:
         69:b3:3b:aa:04:cd:d8:8c:40:ab:f8:54:62:eb:1e:17:1e:a5:
         11:a9:e5:f8:b2:bb:65:0d:af:0e:df:a1:42:da:f2:c5:b5:6e:
         99:ea:d8:fb:06:15:c7:bd:67:9a:a3:16:23:3e:03:07:65:de:
         01:11:18:fa:d4:b8:b8:b7:a2:53:f1:7b:cb:ad:5d:a8:be:91:
         bf:70:88:b7:1e:ac:c5:da:26:84:87:08:8d:e9:7c:25:5c:a8:
         fa:39:60:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 06:19:03 2025 by rpki-client