Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft
File:                     f0ba84c0-5d44-4547-a368-e574b20611e4.mft (raw, json)
Hash identifier:          m3BJwC6KaVXMAh1kSxr98H0U08grka4SljseClGvYT8=
Subject key identifier:   92:1A:BE:A4:FF:DE:C1:E0:AD:72:CB:9D:76:36:98:0B:65:2D:09:47
Authority key identifier: A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23
Certificate issuer:       /CN=f0ba84c0-5d44-4547-a368-e574b20611e4
Certificate serial:       010D0C9F43285848B9C0EE4C7C3544DE33A20200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft
Manifest number:          010D0C9F4328584073A84A8F170EC439FD54A177
Signing time:             Fri 31 Jan 2025 09:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 09:00:00 +0000
Files and hashes:         1: f0ba84c0-5d44-4547-a368-e574b20611e4.crl (hash: TaZQrjo22l56aqv+Ii0ovWHA579Ufsd8q7jc+uMi03Y=)
                          2: f3849e8a-379a-30e7-aaef-8d8746b99eac.roa (hash: 2RVwhrZiC9JW83P3tX/8ElqH3gucmhaXmAHCpVrehY0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:c0:ee:4c:7c:35:44:de:33:a2:02:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0ba84c0-5d44-4547-a368-e574b20611e4
        Validity
            Not Before: Jan 31 09:00:07 2025 GMT
            Not After : Feb  3 09:00:00 2025 GMT
        Subject: CN=4f860c82-bac4-4f99-ab4b-3a7c952c4501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:df:c4:b3:44:39:9f:c3:ae:c6:d5:6d:d3:34:
                    e6:41:23:7e:88:3b:9c:15:2e:ad:0e:4d:90:9c:2a:
                    d0:cb:89:95:2c:91:91:35:4c:5e:e6:a6:58:8d:7f:
                    a8:80:e8:eb:24:58:09:c8:d9:8b:ff:cc:11:10:ee:
                    53:41:16:84:53:47:d0:4c:57:40:5d:e9:52:1f:d1:
                    b4:4d:6a:83:e9:32:5b:43:36:89:ce:83:43:d9:c3:
                    c5:26:4e:6e:62:07:8b:4f:8f:6b:37:73:5e:bf:bc:
                    19:c8:87:2d:64:cd:b2:47:06:07:06:ad:4b:cd:15:
                    49:b0:97:2e:00:84:98:17:87:e7:fb:3c:fb:72:23:
                    8f:73:7d:aa:ee:17:42:c0:5e:5e:e3:eb:7c:d0:86:
                    b5:55:b8:51:07:b8:44:bb:29:3a:60:fc:68:3f:ae:
                    54:59:fc:86:c6:7d:21:d1:b0:e9:ba:3b:47:a2:b6:
                    bf:7d:87:34:f8:7d:cc:6b:00:1d:a2:55:36:3f:1f:
                    18:09:ac:77:cf:48:32:c1:8d:c7:7b:1b:5e:5c:2d:
                    d6:62:48:a7:a4:14:d0:33:4a:57:6e:84:5d:65:8f:
                    1c:98:2b:66:60:cd:b3:c4:96:9d:82:1f:c0:f5:c7:
                    36:45:2c:bc:6d:b4:1d:35:b9:d3:3f:c2:e6:c9:69:
                    1e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:1A:BE:A4:FF:DE:C1:E0:AD:72:CB:9D:76:36:98:0B:65:2D:09:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4/f0ba84c0-5d44-4547-a368-e574b20611e4.crl

            X509v3 Authority Key Identifier:
                keyid:A0:BB:19:CE:E7:D8:D7:AA:4D:7C:E5:90:38:0F:4A:19:D8:7B:7A:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f0ba84c0-5d44-4547-a368-e574b20611e4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:0d:95:a2:07:59:6b:af:b9:90:44:da:d2:28:d8:eb:02:54:
         a9:ff:a2:95:b2:a4:70:aa:02:3b:5a:7c:32:16:45:78:a1:39:
         da:f6:b2:28:a3:50:2e:6e:91:97:72:7f:a1:1f:46:d8:13:11:
         e5:1e:73:ca:e6:04:c9:e4:5f:12:95:66:7b:50:fb:f1:c2:6a:
         28:6a:d4:65:ac:8c:c9:17:ac:fb:b4:24:a5:71:6d:85:62:64:
         ed:7b:8a:d6:ec:a8:28:1e:1b:31:75:54:65:bf:3d:28:21:90:
         61:2f:2a:ac:a5:f2:59:9b:e4:d1:84:54:3c:e0:ec:47:e3:c8:
         fa:28:50:1c:a5:16:25:1a:5e:24:bd:2e:e3:9b:c7:ec:ec:23:
         3b:02:12:c2:bd:73:29:59:cd:c8:5a:58:aa:3c:a8:d7:48:12:
         7d:17:f7:9d:6e:e2:df:48:1d:02:8b:88:df:34:d9:75:38:04:
         9a:e7:20:f7:8d:d8:eb:ed:ff:80:33:a4:17:64:a2:b7:9c:72:
         e3:22:38:03:03:34:c7:30:3d:43:c7:49:c5:03:63:49:25:01:
         3f:8a:aa:06:14:5f:3b:fa:cb:83:76:4d:39:05:f8:d3:18:b8:
         98:41:8a:43:9d:57:72:40:88:20:d6:c7:2a:ff:99:48:9e:34:
         29:d8:22:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 11:14:20 2025 by rpki-client