Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.mft
File:                     6894a134-317a-427f-a84c-d649114fbe11.mft (raw, json)
Hash identifier:          RSYczRA7j+ZMYuyI1O2wFqg2UClCNZcRSG4i0DXH+74=
Subject key identifier:   4F:CE:34:A3:E1:F5:52:83:26:6C:27:97:8D:D8:C1:CF:3A:9A:CA:E2
Authority key identifier: 0A:A8:27:4D:D7:34:CB:81:9D:78:CF:9C:DA:BF:9B:BC:57:0F:CB:78
Certificate issuer:       /CN=6894a134-317a-427f-a84c-d649114fbe11
Certificate serial:       010D0C9F43285848BA1A45EBA2399DC5E183E340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.mft
Manifest number:          010D0C9F4328584250A7D0F30F81BEDFED964C5B
Signing time:             Fri 31 Jan 2025 12:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 12:00:00 +0000
Files and hashes:         1: 49d93974-f2b8-3879-80b2-bd70a7cbfee0.roa (hash: R1EYwnJAYbnQiVRV6j+IBHHK2gPiT6GgkRetssr8T10=)
                          2: 6894a134-317a-427f-a84c-d649114fbe11.crl (hash: tBWQGurXJq/TFbBWm4N/JVhJmRjEDlH07e5A3mn5KBw=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:1a:45:eb:a2:39:9d:c5:e1:83:e3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6894a134-317a-427f-a84c-d649114fbe11
        Validity
            Not Before: Jan 31 12:00:07 2025 GMT
            Not After : Feb  3 12:00:00 2025 GMT
        Subject: CN=52cd5c13-eb26-4afa-aa9d-1c92c7c2e347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:6a:f3:76:e5:1f:79:89:c5:f6:d3:65:cd:
                    a9:22:1a:9a:86:7c:e4:7a:61:11:5a:2b:1a:fe:ba:
                    cd:92:b1:d5:53:31:d1:c2:9a:01:1b:59:34:77:91:
                    67:d7:54:c6:4c:f4:84:98:87:6b:4a:ac:ac:9a:72:
                    3c:a7:d0:54:4f:2d:71:89:7b:8d:ce:3e:4b:f7:18:
                    ed:63:6e:c7:67:09:44:66:65:60:84:06:52:2d:d0:
                    f8:4f:fe:a8:74:35:b1:6e:88:8a:68:8e:77:f2:40:
                    c6:0c:28:df:d2:9d:f6:37:1e:14:d0:06:bd:00:c8:
                    97:40:15:6a:ec:10:23:5f:22:62:7a:cd:ed:2b:72:
                    ac:46:b9:33:de:6e:56:4d:0a:1f:d6:d2:91:64:bb:
                    34:66:ac:0e:e4:88:e9:91:2d:ab:d2:0f:ab:e2:13:
                    67:a1:05:9c:17:12:50:b5:8b:7a:8f:55:c2:31:a1:
                    0e:07:16:86:10:74:a3:4c:32:15:26:ea:c6:f4:b1:
                    55:c9:5b:99:8a:9f:e9:7c:3e:f9:d2:ff:61:c5:5b:
                    60:da:5d:ce:87:03:d2:2a:54:f0:b1:65:e1:9a:07:
                    de:65:88:29:6e:23:83:3b:f9:bd:69:3f:a3:15:5f:
                    80:5e:80:38:c4:96:49:26:d0:44:4f:28:d7:0a:66:
                    9e:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:CE:34:A3:E1:F5:52:83:26:6C:27:97:8D:D8:C1:CF:3A:9A:CA:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11/6894a134-317a-427f-a84c-d649114fbe11.crl

            X509v3 Authority Key Identifier:
                keyid:0A:A8:27:4D:D7:34:CB:81:9D:78:CF:9C:DA:BF:9B:BC:57:0F:CB:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6894a134-317a-427f-a84c-d649114fbe11.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:70:10:4a:72:86:8e:34:6b:5b:cd:ce:b8:f6:0c:b0:4a:3d:
         e6:2f:42:3d:5c:65:36:b7:9b:6e:be:7b:fd:f9:98:f2:ee:6b:
         0c:c4:57:ac:d5:50:70:db:12:ad:96:98:6c:e4:b8:cf:9f:33:
         19:3f:be:7b:1e:79:8e:c4:a8:7d:6a:8f:c4:2d:03:56:51:bd:
         98:b9:94:f0:6a:f3:b9:02:d0:2c:f5:f2:a9:aa:76:6e:84:ed:
         03:c3:8b:b0:07:7a:95:45:9c:e7:d4:c7:bf:0d:e9:7f:00:85:
         29:2c:f6:19:06:ee:ad:c0:12:a7:f4:2b:b0:15:05:7c:1e:94:
         ed:f8:da:6b:77:0f:8e:ad:f2:7f:c9:e2:da:06:9b:86:76:64:
         66:db:68:fb:d7:87:a4:95:a9:11:c6:5e:e0:4f:e9:97:89:c2:
         00:47:00:4a:c2:74:81:38:c6:43:f2:d6:ff:29:a8:3d:c7:09:
         83:6d:24:14:f6:e4:83:a8:10:cc:6b:1d:31:a5:8e:25:36:4d:
         33:f1:da:c5:24:04:9c:ed:fd:c9:e8:3e:55:54:ad:f3:43:a9:
         a2:e2:df:7c:1a:39:0b:29:72:c8:ed:a3:21:bc:60:b2:4d:39:
         7e:08:5d:5f:77:f4:1c:6f:fa:7a:a7:4f:a5:a3:da:ba:2c:ba:
         1b:3a:8e:48
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi6GkXrojmdxeGD40AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg5NGExMzQtMzE3YS00MjdmLWE4NGMtZDY0OTExNGZi
ZTExMB4XDTI1MDEzMTEyMDAwN1oXDTI1MDIwMzEyMDAwMFowLzEtMCsGA1UEAxMk
NTJjZDVjMTMtZWIyNi00YWZhLWFhOWQtMWM5MmM3YzJlMzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiwJq83blH3mJxfbTZc2pIhqahnzkemERWisa
/rrNkrHVUzHRwpoBG1k0d5Fn11TGTPSEmIdrSqysmnI8p9BUTy1xiXuNzj5L9xjt
Y27HZwlEZmVghAZSLdD4T/6odDWxboiKaI538kDGDCjf0p32Nx4U0Aa9AMiXQBVq
7BAjXyJies3tK3KsRrkz3m5WTQof1tKRZLs0ZqwO5IjpkS2r0g+r4hNnoQWcFxJQ
tYt6j1XCMaEOBxaGEHSjTDIVJurG9LFVyVuZip/pfD750v9hxVtg2l3OhwPSKlTw
sWXhmgfeZYgpbiODO/m9aT+jFV+AXoA4xJZJJtBETyjXCmaeSwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFE/ONKPh9VKDJmwnl43Ywc86msriMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82ODk0
YTEzNC0zMTdhLTQyN2YtYTg0Yy1kNjQ5MTE0ZmJlMTEvNjg5NGExMzQtMzE3YS00
MjdmLWE4NGMtZDY0OTExNGZiZTExLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjg5NGExMzQtMzE3YS00MjdmLWE4
NGMtZDY0OTExNGZiZTExLzY4OTRhMTM0LTMxN2EtNDI3Zi1hODRjLWQ2NDkxMTRm
YmUxMS5jcmwwHwYDVR0jBBgwFoAUCqgnTdc0y4GdeM+c2r+bvFcPy3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82ODk0YTEzNC0zMTdhLTQyN2YtYTg0Yy1kNjQ5
MTE0ZmJlMTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBrcBBKcoaONGtbzc649gyw
Sj3mL0I9XGU2t5tuvnv9+Zjy7msMxFes1VBw2xKtlphs5LjPnzMZP757HnmOxKh9
ao/ELQNWUb2YuZTwavO5AtAs9fKpqnZuhO0Dw4uwB3qVRZzn1Me/Del/AIUpLPYZ
Bu6twBKn9CuwFQV8HpTt+Nprdw+OrfJ/yeLaBpuGdmRm22j714eklakRxl7gT+mX
icIARwBKwnSBOMZD8tb/Kag9xwmDbSQU9uSDqBDMax0xpY4lNk0z8drFJASc7f3J
6D5VVK3zQ6mi4t98GjkLKXLI7aMhvGCyTTl+CF1fd/Qcb/p6p0+lo9q6LLobOo5I
-----END CERTIFICATE-----
Generated at Mon May 12 09:46:46 2025 by rpki-client