Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft
File:                     a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft (raw, json)
Hash identifier:          J1Unqxscp+UWk71wlNlM7EQiRdVNsSGE9PfqZHTIoEc=
Subject key identifier:   A7:D4:5F:C0:2E:D7:5D:0C:67:98:16:07:5E:74:3B:2F:81:19:7C:9A
Authority key identifier: 71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A
Certificate issuer:       /CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
Certificate serial:       010D0C9F43285848B8200B8DF500BFEBAE5D71C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft
Manifest number:          010D0C9F4328584275C3287562D696985B325CCD
Signing time:             Thu 30 Jan 2025 19:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 19:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 19:00:00 +0000
Files and hashes:         1: a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl (hash: ra9YSYR6hLmA2du6s2awJ40/o3Kd/VQVlhHBjrUh+zc=)
                          2: e8844bc8-e9bc-3604-ae4a-f636578cdb46.roa (hash: iL1+gxybmpUSwu17A03Q9u1v8I8rThiTrH9EPL8sg2I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:20:0b:8d:f5:00:bf:eb:ae:5d:71:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a554cc91-a2cc-4a0d-9989-f24a5c18db99
        Validity
            Not Before: Jan 30 19:00:07 2025 GMT
            Not After : Feb  2 19:00:00 2025 GMT
        Subject: CN=f7ed78b0-4d85-4e4e-ad65-03d009b346c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:20:67:76:26:75:f7:a2:0c:59:64:61:c8:4b:
                    df:8c:8f:cd:25:46:85:1b:3b:63:57:69:7f:ef:08:
                    47:6f:79:9a:fc:05:0c:7b:20:b3:44:b7:d2:7f:2a:
                    0a:53:ba:62:f2:c4:d5:07:42:fb:7e:f9:aa:44:52:
                    b9:ff:f9:c8:07:de:83:47:ed:c5:5a:86:fd:e2:aa:
                    4c:bb:0c:a2:aa:50:4e:c6:18:48:b0:3e:19:67:33:
                    f0:78:ef:77:8c:0c:6f:e9:79:fb:7e:2c:1a:2a:b0:
                    9d:cc:9c:40:66:04:25:22:30:f0:84:ec:50:3a:82:
                    33:d4:f6:93:15:48:e1:c9:dd:b6:c1:f0:30:4a:a2:
                    e5:7d:02:73:22:00:eb:ee:c1:04:56:bb:a8:5d:12:
                    96:d5:47:de:0e:1f:34:41:c9:4c:74:a4:6b:a0:b6:
                    b5:8c:49:69:9c:f5:78:93:a6:c0:50:7c:76:bb:bb:
                    12:55:f1:08:cf:15:d0:6b:7c:03:ea:c2:df:ea:9e:
                    3c:27:7a:4d:60:28:ce:8b:9f:d0:83:01:9a:12:cd:
                    fd:83:21:1b:ab:7a:65:b2:dd:36:2b:8c:a9:be:42:
                    20:f5:ac:c8:29:35:93:92:ed:07:89:6c:57:52:d6:
                    ba:4b:ee:6c:e3:b7:f3:52:a7:26:ef:38:34:70:e5:
                    ba:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:D4:5F:C0:2E:D7:5D:0C:67:98:16:07:5E:74:3B:2F:81:19:7C:9A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99/a554cc91-a2cc-4a0d-9989-f24a5c18db99.crl

            X509v3 Authority Key Identifier:
                keyid:71:3D:20:E8:7A:89:2A:3D:F5:18:3D:0F:04:20:FC:2C:F0:4C:BE:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a554cc91-a2cc-4a0d-9989-f24a5c18db99.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:f0:f2:89:34:0d:64:ce:60:0e:65:99:02:85:85:0a:67:18:
         35:1d:7f:80:5c:82:83:fd:46:ea:4d:50:72:8d:5c:d6:39:71:
         4e:47:f1:c3:e6:5f:0f:4b:62:e9:17:d2:2c:32:6f:d9:c4:7e:
         3a:45:d0:64:94:dc:d5:37:37:a0:4c:01:46:76:03:82:e1:1e:
         43:c4:74:5d:61:e4:09:d1:cf:2e:7f:c5:f3:48:72:53:e6:3b:
         e6:3c:b1:f8:5e:44:f8:62:1e:0a:19:83:07:2a:64:e6:af:af:
         99:26:15:8b:77:0e:fb:14:33:1e:28:30:d5:ab:70:83:31:57:
         d8:05:3a:38:14:d3:93:ed:da:1f:20:f4:05:9e:9f:ba:54:2f:
         bc:ee:58:d1:9c:26:d1:b4:cf:21:9e:e4:fb:bc:a0:3a:87:b2:
         a4:7b:8a:95:b4:1b:4e:1f:3d:80:5d:df:20:d2:0f:2c:a9:48:
         55:d8:bb:99:14:8b:b5:24:c4:c6:73:50:e5:bd:64:64:04:da:
         d1:07:9a:77:7f:01:4a:49:01:c6:05:e0:1e:2a:2d:80:e4:f2:
         4e:4c:d2:57:9b:87:bc:c7:26:79:42:a9:b3:ec:4b:79:d9:25:
         fd:91:ad:06:26:d0:90:a8:6e:c4:3b:0b:b9:af:d2:16:97:ef:
         f2:df:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 12:17:39 2025 by rpki-client