Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft
File:                     a854a4c3-e5e0-49a9-a110-947d91107e15.mft (raw, json)
Hash identifier:          l3WDEYE4UC+pyr4I4au9ma1Ca/crdix+0Zp947Eh0Iw=
Subject key identifier:   A9:E7:0F:DD:25:0B:A4:A2:70:78:31:24:4F:30:56:F4:83:8E:23:B7
Authority key identifier: 71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19
Certificate issuer:       /CN=a854a4c3-e5e0-49a9-a110-947d91107e15
Certificate serial:       010D0C9F43285848B8F17B4E79BE7BE486650400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft
Manifest number:          010D0C9F432858428F0B0519A5A2D5FB11136B63
Signing time:             Fri 31 Jan 2025 02:02:07 +0000
Manifest this update:     Fri 31 Jan 2025 02:02:07 +0000
Manifest next update:     Sat 01 Feb 2025 21:00:00 +0000
Files and hashes:         1: 87e6252e-c36a-3d81-9d7c-d9435b189ae0.roa (hash: DkqEgMiLYGGeeAMYaH64p78Z8R5ISBfSOfmjROz28gg=)
                          2: a854a4c3-e5e0-49a9-a110-947d91107e15.crl (hash: htkCsB/GDk8Y7IoZtVm1Eo0LRuXnAilK6y7IetxIfho=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f1:7b:4e:79:be:7b:e4:86:65:04:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a854a4c3-e5e0-49a9-a110-947d91107e15
        Validity
            Not Before: Jan 31 02:02:07 2025 GMT
            Not After : Feb  1 21:00:00 2025 GMT
        Subject: CN=1ce04841-44b1-4c7e-9e7f-9e297b2d57ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:48:5c:e7:68:ad:dd:f3:1c:cd:47:cf:d3:f7:
                    89:69:51:1b:0a:cf:af:87:d6:50:87:99:fd:59:84:
                    be:b3:23:9e:3e:c6:4d:8d:2b:14:69:e8:03:60:48:
                    44:f5:07:f0:f1:63:4f:6d:b7:3b:49:c7:9b:83:1a:
                    84:b1:53:4d:bf:20:cf:97:3f:d4:e8:9e:a0:62:a6:
                    10:22:5f:c1:5d:57:ea:f6:ea:8f:76:2a:c0:f2:56:
                    3c:0e:c2:a9:3f:68:82:52:e6:09:c2:da:80:f8:cc:
                    9b:8c:a3:2e:d2:51:8f:8b:02:0e:ab:4e:75:d0:da:
                    0f:e2:72:e3:54:90:db:ed:0d:d1:48:6c:3a:e0:2a:
                    58:a4:1d:47:1b:82:4e:86:91:00:ab:85:d5:eb:46:
                    2a:48:a7:ef:20:2c:70:46:25:33:6e:ef:db:87:9e:
                    c1:8e:a6:06:7f:a9:94:17:8a:75:ca:a9:6f:33:cc:
                    14:10:b3:2b:d9:bd:19:30:ce:54:c6:7b:7f:4a:06:
                    c8:70:b9:af:a4:8d:a6:23:51:45:1f:ad:42:3a:35:
                    0b:d0:4b:80:21:5d:9f:5c:a1:6e:6b:7f:df:68:55:
                    5b:1d:f2:d0:50:c5:0d:c2:7a:09:7a:af:38:7d:fa:
                    bb:30:aa:46:d1:3b:30:75:f1:c1:1d:d7:a2:40:aa:
                    32:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:0F:DD:25:0B:A4:A2:70:78:31:24:4F:30:56:F4:83:8E:23:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15/a854a4c3-e5e0-49a9-a110-947d91107e15.crl

            X509v3 Authority Key Identifier:
                keyid:71:A9:F5:D1:AD:6F:48:4C:5F:B4:7D:3E:2F:9E:C9:B7:00:DD:A7:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a854a4c3-e5e0-49a9-a110-947d91107e15.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0d:03:f0:49:99:8d:38:83:b8:7b:fa:0a:75:8e:b1:19:80:
         b9:f8:d1:26:ad:fb:b5:6e:35:e7:21:eb:99:0e:f3:d7:a1:10:
         a0:86:83:88:5c:48:76:62:d1:63:65:3b:70:d3:4d:0b:34:63:
         14:f1:76:e9:09:25:a6:22:38:9b:40:8a:2c:12:56:ed:3e:23:
         f7:ea:36:77:0c:75:6d:91:a6:a9:d1:e0:cf:eb:8b:a3:d4:22:
         75:28:3e:1e:76:0d:6a:cc:a2:31:07:5f:4d:5d:bf:f0:b3:c4:
         b9:0a:d1:c7:11:c7:cd:35:18:8d:fd:6d:c1:a6:65:5b:24:b1:
         72:ae:54:4f:07:40:23:6e:05:af:46:e1:e1:ba:35:81:78:31:
         da:77:22:b2:2f:6c:e5:7d:1b:de:04:89:c9:7b:b8:8f:2a:a8:
         09:8d:2a:26:aa:9a:ee:2a:05:7d:6f:da:8b:b0:dd:65:8c:7a:
         0e:ca:87:c5:04:0d:8b:23:c1:cc:72:c0:b4:b5:5d:2e:97:e9:
         cf:9b:40:65:9c:cb:53:22:26:9a:7e:50:47:a0:1a:d0:a9:b5:
         80:16:77:b1:16:88:40:08:4f:2f:6c:4a:4c:b6:3b:80:f6:cd:
         74:f7:3b:4a:99:0f:75:cd:a8:7c:05:d4:70:be:fa:aa:d9:90:
         b6:2e:dd:72
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi48XtOeb575IZlBAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTg1NGE0YzMtZTVlMC00OWE5LWExMTAtOTQ3ZDkxMTA3
ZTE1MB4XDTI1MDEzMTAyMDIwN1oXDTI1MDIwMTIxMDAwMFowLzEtMCsGA1UEAxMk
MWNlMDQ4NDEtNDRiMS00YzdlLTllN2YtOWUyOTdiMmQ1N2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0hc52it3fMczUfP0/eJaVEbCs+vh9ZQh5n9
WYS+syOePsZNjSsUaegDYEhE9Qfw8WNPbbc7ScebgxqEsVNNvyDPlz/U6J6gYqYQ
Il/BXVfq9uqPdirA8lY8DsKpP2iCUuYJwtqA+MybjKMu0lGPiwIOq0510NoP4nLj
VJDb7Q3RSGw64CpYpB1HG4JOhpEAq4XV60YqSKfvICxwRiUzbu/bh57BjqYGf6mU
F4p1yqlvM8wUELMr2b0ZMM5Uxnt/SgbIcLmvpI2mI1FFH61COjUL0EuAIV2fXKFu
a3/faFVbHfLQUMUNwnoJeq84ffq7MKpG0TswdfHBHdeiQKoynwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFKnnD90lC6SicHgxJE8wVvSDjiO3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0
YTRjMy1lNWUwLTQ5YTktYTExMC05NDdkOTExMDdlMTUvYTg1NGE0YzMtZTVlMC00
OWE5LWExMTAtOTQ3ZDkxMTA3ZTE1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTg1NGE0YzMtZTVlMC00OWE5LWEx
MTAtOTQ3ZDkxMTA3ZTE1L2E4NTRhNGMzLWU1ZTAtNDlhOS1hMTEwLTk0N2Q5MTEw
N2UxNS5jcmwwHwYDVR0jBBgwFoAUcan10a1vSExftH0+L57JtwDdpxkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hODU0YTRjMy1lNWUwLTQ5YTktYTExMC05NDdk
OTExMDdlMTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBNDQPwSZmNOIO4e/oKdY6x
GYC5+NEmrfu1bjXnIeuZDvPXoRCghoOIXEh2YtFjZTtw000LNGMU8XbpCSWmIjib
QIosElbtPiP36jZ3DHVtkaap0eDP64uj1CJ1KD4edg1qzKIxB19NXb/ws8S5CtHH
EcfNNRiN/W3BpmVbJLFyrlRPB0AjbgWvRuHhujWBeDHadyKyL2zlfRveBInJe7iP
KqgJjSomqpruKgV9b9qLsN1ljHoOyofFBA2LI8HMcsC0tV0ul+nPm0BlnMtTIiaa
flBHoBrQqbWAFnexFohACE8vbEpMtjuA9s109ztKmQ91zah8BdRwvvqq2ZC2Lt1y
-----END CERTIFICATE-----
Generated at Mon May 12 09:05:11 2025 by rpki-client