Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft
File:                     bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft (raw, json)
Hash identifier:          JZ6ri4Bl7asxWHUSFwyTS2oZkiL2RWENWOxCEDVczGU=
Subject key identifier:   36:32:05:E2:0B:C7:22:08:3A:1D:3D:73:0F:22:49:3C:07:E9:84:26
Authority key identifier: BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F
Certificate issuer:       /CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494
Certificate serial:       010D0C9F43285848BA55D3AC37C0A4A96A7797E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft
Manifest number:          010D0C9F4328584073A8581DA0CBF23298DB1DD7
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 14:00:00 +0000
Files and hashes:         1: 8b5b3f60-d94d-3b96-bd51-7ecef919a034.roa (hash: msbkZXZwslP2LfztBoZIkr/RqbNfPMRspp9Xcs334TM=)
                          2: bb760eff-5d50-348f-809c-0dc1a1c253a5.roa (hash: wao7zsC7XSmRzOYJfcTvmJK6gFTpyPCIE3wwc8iFf2s=)
                          3: bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl (hash: pNhhoJz52OOL5YF/fZUyZ+s1BPB9hS0pNe2bVLr7x40=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:55:d3:ac:37:c0:a4:a9:6a:77:97:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bf3c3bd5-3b94-47e2-81fc-f4900814e494
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  3 14:00:00 2025 GMT
        Subject: CN=128b5d9d-a36d-4090-9e78-4eb3fa2aa2aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:28:88:d1:8b:ea:6a:7e:4a:24:79:42:e9:bf:
                    fc:d6:c9:ce:6a:5a:ac:bd:fa:95:6e:ae:40:f1:aa:
                    99:52:db:2c:04:ce:33:d9:68:0a:50:2d:2a:86:59:
                    fe:ae:31:57:33:b8:4c:5c:fb:70:a0:84:15:63:67:
                    aa:a4:a1:48:ed:40:87:a7:ef:1a:39:60:94:d6:e8:
                    30:ce:6d:73:e1:3b:5c:c3:c9:cb:2b:b4:86:6e:7a:
                    86:fa:5f:bc:e0:30:16:f4:38:5d:d2:02:89:03:bb:
                    e2:04:ce:32:c9:81:01:cd:72:65:07:96:95:13:24:
                    71:a3:e3:ef:75:83:75:e0:41:7e:e2:94:13:19:9e:
                    5f:59:af:24:69:a8:9f:35:e6:b7:14:54:94:22:12:
                    3a:37:64:f8:47:7a:b1:6d:6e:85:28:5a:1d:7c:cb:
                    07:f3:62:ff:8d:fa:33:93:dc:54:5f:29:af:cb:16:
                    bf:b6:7e:b1:80:2e:d0:0c:ee:a6:fd:07:87:30:a4:
                    a8:00:7b:10:ef:5f:75:79:d0:49:8f:02:24:73:b4:
                    a2:64:40:88:b1:4f:3b:3b:2a:c8:f0:79:a8:3d:fe:
                    8f:a9:0f:f3:72:2f:33:92:31:83:e1:2d:bb:16:62:
                    74:99:62:42:81:56:12:ef:50:bf:a4:cc:95:7a:54:
                    02:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:32:05:E2:0B:C7:22:08:3A:1D:3D:73:0F:22:49:3C:07:E9:84:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494/bf3c3bd5-3b94-47e2-81fc-f4900814e494.crl

            X509v3 Authority Key Identifier:
                keyid:BF:6E:E0:CD:B4:2F:74:96:46:0C:2E:CD:76:0C:7F:16:5A:5C:81:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/bf3c3bd5-3b94-47e2-81fc-f4900814e494.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:74:f0:fa:55:9e:b0:0f:29:74:e3:b5:44:d0:ef:7d:1c:f4:
         31:69:b5:00:87:55:a4:70:72:7c:7e:02:1d:2f:c0:f0:9b:8c:
         f4:2e:7d:f9:20:09:a7:99:5d:b9:e4:d8:57:86:b1:c4:fc:73:
         2e:b4:5f:e2:b9:01:84:03:4d:be:7a:ed:60:ce:94:fe:4b:68:
         96:6d:ea:43:52:01:a8:61:de:c1:01:27:eb:4b:d1:ab:7c:5a:
         f8:42:bb:05:fd:a9:93:40:31:69:28:59:88:11:a9:2e:e7:c2:
         d7:e9:55:67:43:33:4d:67:40:d4:06:7e:e3:10:94:43:0a:6a:
         bb:c6:f7:32:81:d9:78:c8:7d:0d:54:14:bd:e5:8a:fd:88:d7:
         b1:39:7b:97:c8:9c:e3:45:ec:68:38:28:6a:a4:fc:bb:06:b8:
         94:90:ed:08:ed:3e:4b:ae:b4:8a:d3:be:b2:bf:af:1e:22:c9:
         a1:48:d0:54:1d:3c:bf:7d:b0:9b:3c:ba:e5:89:20:47:f7:b6:
         05:b0:4c:bc:7a:6e:be:6d:30:91:52:55:4d:02:63:c3:cc:a6:
         1e:69:c7:04:f1:51:f7:96:e8:81:4b:ab:c3:1b:01:e7:53:b6:
         4a:93:61:3f:2b:e9:30:7e:4d:25:a0:4b:a3:c2:7e:3b:54:67:
         32:ee:0c:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 07:02:17 2025 by rpki-client