Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft
File:                     5cab4920-f916-4f6e-89be-328cbbe66f94.mft (raw, json)
Hash identifier:          auFs4s827QUTh+zWwr97sKExYM4N3umbDFU/0DHKLGk=
Subject key identifier:   CD:D0:5F:C7:8A:3F:BE:C0:51:B9:6E:0C:4D:E0:16:E6:B5:71:1F:01
Authority key identifier: EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16
Certificate issuer:       /CN=5cab4920-f916-4f6e-89be-328cbbe66f94
Certificate serial:       010D0C9F43285848BA380AF7CF6A3BFD6785DD18
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft
Manifest number:          010D0C9F432858449B0A4015E173972293FC8B03
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 13:00:00 +0000
Files and hashes:         1: 41dcca07-860f-381f-8c2a-e453ea6881d3.roa (hash: uUamIhb/MLBQgwV6AeY0OuLx42K6J0QdSkft8diQXlw=)
                          2: 5cab4920-f916-4f6e-89be-328cbbe66f94.crl (hash: /17hw+OppCBiOwhB0kuZJBJ/SpXSVMikATbSUZd9Fgo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:38:0a:f7:cf:6a:3b:fd:67:85:dd:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5cab4920-f916-4f6e-89be-328cbbe66f94
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  3 13:00:00 2025 GMT
        Subject: CN=95bc8cd5-af7c-459b-8679-9e99580b5486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:11:bb:a8:47:b1:0f:5c:f8:be:11:6c:af:23:
                    55:bf:63:35:0d:08:d8:47:73:36:d1:80:be:a2:99:
                    c9:1c:14:43:36:50:6c:98:44:ce:ef:29:cd:27:d2:
                    a6:ee:c5:ab:06:bb:ca:fd:1e:46:e3:5e:87:66:ae:
                    72:de:8b:cd:ea:8a:33:66:4b:22:f9:7c:85:ed:c4:
                    6c:d3:84:44:96:71:1d:7c:3a:4e:1b:b7:ba:81:e9:
                    aa:82:d9:b2:af:13:78:98:dd:b0:60:5e:2e:c2:f5:
                    42:e3:a2:d1:9f:01:4c:59:59:8d:6f:77:dc:d9:48:
                    c4:72:15:43:aa:e5:1a:54:f4:31:b7:f4:97:cd:6b:
                    df:d6:3e:02:0d:6a:61:c9:2b:93:04:c2:66:53:14:
                    0d:ab:99:2c:55:98:10:6b:86:aa:ad:e8:5a:39:61:
                    06:4c:53:5b:b5:bb:a1:82:3d:0a:fc:cf:30:51:3c:
                    93:2b:88:d2:25:f5:a1:7d:36:e5:7a:6e:74:9f:15:
                    ce:db:ca:b8:aa:cd:d6:c6:c2:4c:51:16:12:04:e7:
                    65:63:c4:75:d4:50:1c:78:67:fc:5b:a0:0b:24:80:
                    58:09:fb:81:2a:2f:9d:e4:29:29:58:ea:3a:51:49:
                    b9:82:b9:8c:ab:67:56:82:60:28:1a:82:db:4c:c9:
                    12:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:D0:5F:C7:8A:3F:BE:C0:51:B9:6E:0C:4D:E0:16:E6:B5:71:1F:01
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94/5cab4920-f916-4f6e-89be-328cbbe66f94.crl

            X509v3 Authority Key Identifier:
                keyid:EB:4E:CE:78:D7:DD:70:63:78:BC:C4:57:C4:8B:06:5F:0A:32:66:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5cab4920-f916-4f6e-89be-328cbbe66f94.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:71:33:bf:a5:9b:e9:60:33:34:53:2a:7f:74:8a:25:53:37:
         16:bc:ae:d5:41:3a:96:1f:dd:f7:09:e3:12:3d:87:57:0c:6a:
         87:4f:6c:35:be:6e:34:10:c1:cf:d8:33:a4:c2:12:3a:82:3f:
         14:ff:56:63:1c:64:f6:36:a3:46:25:5d:68:e9:10:d4:44:d7:
         df:a8:4f:39:30:1c:ce:10:d2:db:c1:c4:e3:61:64:36:22:3f:
         2d:44:90:84:c6:92:7f:db:83:81:63:c9:56:ad:e9:cf:f3:92:
         90:4c:2b:8d:79:c0:85:9c:ce:74:44:dc:02:c5:74:9b:ec:d6:
         b2:96:0a:53:2b:e0:c4:12:27:9e:00:5a:cd:36:cc:ce:b5:39:
         0d:66:12:05:ab:3a:4e:28:6f:22:1b:47:0f:18:d7:b1:cd:f0:
         f8:4a:d0:1f:f1:f9:1f:76:3b:b1:c3:18:0d:3c:69:b5:c7:99:
         1b:a1:01:f6:6b:06:75:39:2d:ad:9e:5d:fa:1c:29:5a:3e:22:
         f2:ee:04:c2:e0:7c:37:6c:8c:48:70:a4:a9:40:df:a9:bc:1e:
         d7:6c:58:c7:4c:27:fa:23:7f:38:49:5d:1c:9f:4f:ba:85:2b:
         08:8a:5b:39:f6:e3:f8:7f:11:8e:27:14:13:e8:f4:16:4a:eb:
         c8:bd:7e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:16:37 2025 by rpki-client