Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft
File:                     2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft (raw, json)
Hash identifier:          Kl2rshF8AM9RXLJ+xTOKRYxIYYJbY60As7r6Ed/82f8=
Subject key identifier:   FD:DD:4B:7C:8E:A2:B8:89:E2:34:4A:8E:F9:25:A5:AF:89:DE:98:24
Authority key identifier: 0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED
Certificate issuer:       /CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
Certificate serial:       010D0C9F43285848BA916449C0A541C6898E42C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft
Manifest number:          010D0C9F432858427553FBDD9267A29A3CDE61AC
Signing time:             Fri 31 Jan 2025 16:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 16:00:00 +0000
Files and hashes:         1: 2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl (hash: jCAbrzzAUMR+5CmUKL/T/8Rvwmj/0pobOBQTiygAbKc=)
                          2: 3b3af7e2-11c3-3e13-92cd-19c2d291b483.roa (hash: LoKlbJ6+BvBMjkc/9eC2F6kQ+9l9FffZUtf6tKc37RY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:91:64:49:c0:a5:41:c6:89:8e:42:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2e3e6646-7c99-49c0-9cb0-54b8e45788b8
        Validity
            Not Before: Jan 31 16:00:07 2025 GMT
            Not After : Feb  2 16:00:00 2025 GMT
        Subject: CN=1ae1b59c-4157-41b0-a046-56e8cca1ce62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:be:97:43:f1:d4:37:b1:29:ef:66:84:cf:29:
                    d0:ec:ab:c8:74:6e:b8:7b:ea:3a:9c:86:d4:18:10:
                    c4:9a:f2:5e:0a:d3:68:bd:8d:c8:d0:58:1a:98:09:
                    3a:ca:8e:4d:04:1c:1b:ad:ae:7c:b5:bb:68:7f:ab:
                    d4:60:fb:1e:ef:62:65:d3:f3:f6:cf:ae:f1:1c:34:
                    aa:25:62:d5:ae:d0:06:74:a1:4c:bf:3b:ea:eb:a6:
                    ef:56:7b:a2:1e:4a:e7:6e:29:21:a4:12:2e:70:ad:
                    94:73:c5:4c:f5:d1:4e:42:01:f5:d6:66:d8:82:06:
                    dc:d3:80:3b:60:b4:03:b3:34:96:a8:ec:4a:8a:f1:
                    65:37:0e:18:54:d3:e4:4c:96:56:d4:1a:7b:94:cc:
                    76:45:f2:7d:ea:e2:38:4d:cd:c2:78:aa:29:f2:78:
                    d4:5a:cb:c8:58:d4:85:22:b4:3d:67:03:ac:39:9e:
                    75:7a:97:ef:63:cc:60:56:8d:7c:ad:eb:27:9d:ac:
                    43:47:40:44:1c:5c:f2:be:fb:3c:9c:b6:28:7e:db:
                    4e:6e:c2:4d:a4:cd:94:05:f9:a8:fe:13:f3:af:91:
                    b1:4f:d9:38:92:82:60:f9:af:83:0a:c2:94:20:13:
                    1e:dc:94:1e:e4:ba:fb:b0:65:54:1f:64:ba:4d:0d:
                    73:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DD:4B:7C:8E:A2:B8:89:E2:34:4A:8E:F9:25:A5:AF:89:DE:98:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:C6:8F:60:53:31:AF:29:57:A9:ED:F1:D6:09:06:5D:47:66:84:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/2e3e6646-7c99-49c0-9cb0-54b8e45788b8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:0b:df:eb:0a:08:c9:62:c6:0f:58:0e:d9:db:aa:c2:5a:80:
         59:0c:01:e2:db:78:50:6a:44:53:45:6b:ff:77:62:4d:fc:90:
         5a:6d:e0:99:4f:55:b2:ff:c2:ba:b3:02:33:f3:c2:c2:1c:57:
         3e:0b:e5:07:7a:2f:54:33:71:5f:85:cb:d9:69:f7:59:78:f0:
         de:3e:98:14:59:54:0f:d6:7a:10:49:3a:9a:f3:8e:12:8b:98:
         21:0d:a0:aa:92:88:b4:ad:5f:29:85:3a:8b:84:15:81:71:f0:
         5d:d5:f1:78:f8:eb:70:da:5f:e0:7a:16:ed:14:cd:81:d3:65:
         dd:4d:7f:90:be:50:98:23:a2:2e:3f:14:ee:e8:a7:de:fd:eb:
         53:3f:67:21:63:11:e4:e3:44:b8:2a:34:7d:1d:db:5f:d8:2f:
         36:57:78:c8:9d:2f:00:62:93:c6:97:08:38:f7:84:8c:5b:4c:
         af:c6:77:da:b9:e0:ab:41:1f:5d:10:a7:13:b1:7c:29:71:72:
         c1:17:a5:43:87:b8:af:45:f4:21:21:be:d0:34:5e:d2:51:95:
         27:a7:e3:68:d1:33:5d:eb:a0:af:28:ec:8b:79:35:31:1c:81:
         2a:eb:48:b7:e5:3f:de:e6:95:45:cb:b8:52:7d:8b:38:c9:6f:
         32:c7:67:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 11:42:58 2025 by rpki-client