Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft
File:                     a3398dc1-de03-4844-957b-e882d7878ae2.mft (raw, json)
Hash identifier:          meiB5x4vOC3R46je+5+Nu7DYx8eo1AxwbyiYwIvXf0w=
Subject key identifier:   97:C3:21:EA:22:E6:DB:56:FC:60:A5:44:7E:84:73:13:24:1F:68:07
Authority key identifier: 42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52
Certificate issuer:       /CN=a3398dc1-de03-4844-957b-e882d7878ae2
Certificate serial:       010D0C9F43285848B9A328BAEB528D877F6B8F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft
Manifest number:          010D0C9F4328584073A8471614A6B3775D4E4488
Signing time:             Fri 31 Jan 2025 08:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 08:00:00 +0000
Files and hashes:         1: 74fe514f-f282-3fdf-b82d-5a7c858132a2.roa (hash: 0BIGR4zsxxMQ3AYi96YHTtIXdsYEE7X6w4D+bPoiYSU=)
                          2: a3398dc1-de03-4844-957b-e882d7878ae2.crl (hash: RlOS7dM5CJoQjeYTnYR6ta02G7oqCSkxJYmGtPf1Shw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:a3:28:ba:eb:52:8d:87:7f:6b:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3398dc1-de03-4844-957b-e882d7878ae2
        Validity
            Not Before: Jan 31 08:00:07 2025 GMT
            Not After : Feb  3 08:00:00 2025 GMT
        Subject: CN=caa29c7b-d31b-4bb5-b0a3-bb9c528c8889
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:25:40:a7:6a:bc:87:1c:0c:9e:72:37:ae:8a:
                    98:31:e6:a8:f9:7c:af:ac:9f:ac:5e:a2:cd:0c:58:
                    d3:a3:17:b0:49:b2:ad:bf:8f:b6:0a:a7:b4:ae:6f:
                    f6:20:ae:0d:22:d0:9c:1b:ff:e7:8c:02:5f:60:66:
                    a7:12:0d:c3:70:df:9d:81:9c:dd:79:54:b0:9a:80:
                    34:9d:71:a0:bf:06:3e:75:b4:57:ff:fa:5f:e1:21:
                    c3:78:b0:a6:f1:15:ca:63:5a:09:ae:74:25:2c:ef:
                    71:7b:9c:76:11:21:b0:fc:8f:eb:b8:c4:05:d4:d1:
                    e6:bc:a4:2e:9c:05:80:5e:21:2b:65:b5:09:31:2b:
                    be:d4:8a:b6:e2:04:22:ba:bf:1c:22:55:8d:f6:0a:
                    3b:3a:3e:a0:1b:75:9e:78:ee:4b:c2:6d:13:f5:03:
                    90:50:f8:ca:cd:8a:17:69:86:d2:3f:54:c6:94:cc:
                    e9:96:34:5f:ca:86:f6:06:46:f4:6a:56:83:0e:0e:
                    03:06:e3:64:53:2c:9a:ff:04:e4:e2:71:61:8f:ba:
                    3e:26:cf:65:c9:45:08:0f:7b:2f:a9:81:38:75:67:
                    41:f7:ba:ff:a3:76:71:e7:c9:b0:23:32:7e:42:5f:
                    f3:bb:62:64:27:38:54:af:cd:b5:a4:d2:01:41:85:
                    b0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C3:21:EA:22:E6:DB:56:FC:60:A5:44:7E:84:73:13:24:1F:68:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2/a3398dc1-de03-4844-957b-e882d7878ae2.crl

            X509v3 Authority Key Identifier:
                keyid:42:C5:92:1E:2A:8A:06:BD:75:6A:02:22:DD:CE:30:A6:AB:D9:5D:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/a3398dc1-de03-4844-957b-e882d7878ae2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:62:9d:ca:f0:81:30:45:56:e7:f1:38:c9:72:49:6b:a5:52:
         3e:64:46:91:e8:ae:d5:87:45:76:1f:b2:28:a5:c9:9d:d8:09:
         53:6b:e9:3c:8b:ce:76:99:5c:2d:4b:c0:65:2b:ba:ff:5d:e8:
         ea:e4:96:d7:70:65:71:b5:f5:47:19:24:13:c0:68:b8:80:8f:
         92:94:71:7d:c6:44:7d:4e:b3:0c:e0:d3:77:b3:ec:88:e0:7b:
         89:18:81:17:db:ee:9a:47:fe:ae:26:a2:22:d5:01:65:cd:9f:
         94:c8:fd:0b:da:27:d9:1a:1f:68:0b:48:27:5c:bf:25:69:6d:
         80:13:46:27:8d:19:f2:46:47:38:21:fd:92:49:c5:03:41:b0:
         0d:4b:6d:36:9a:7c:e5:dd:cc:5c:3f:26:8c:d5:e3:36:a9:48:
         31:ef:b2:95:5c:b6:60:79:8e:76:5b:8b:c9:a1:d4:41:ba:59:
         31:c8:0b:ec:b3:8a:26:ec:b9:df:2f:fd:b5:ad:e7:66:fc:29:
         77:6f:f8:53:b0:cc:f9:9c:49:87:8f:16:d6:9e:6e:6e:87:6f:
         d1:ba:13:94:58:fb:16:a9:89:12:e6:11:7f:5f:70:e2:37:a5:
         8d:ac:a4:11:1c:20:2e:35:e4:58:a3:4e:14:74:28:b7:4e:c8:
         a5:a1:ac:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 15:35:14 2025 by rpki-client