Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft
File:                     0d76e4c1-4951-48f9-a654-18ee7c98157a.mft (raw, json)
Hash identifier:          A4uEqiC2PzN2bY+/WNrsAELerO8FmJDyalXbnoGfJvc=
Subject key identifier:   18:7A:DA:CD:7E:67:02:6E:B8:17:7F:7D:C9:44:17:6D:25:5D:37:5A
Authority key identifier: BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A
Certificate issuer:       /CN=0d76e4c1-4951-48f9-a654-18ee7c98157a
Certificate serial:       010D0C9F43285848BA380D6B0E906799C955EA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft
Manifest number:          010D0C9F43285847B114E65ABB7534365CAA6060
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 13:00:00 +0000
Files and hashes:         1: 0d76e4c1-4951-48f9-a654-18ee7c98157a.crl (hash: daNnMwyHMhNetwrlHTU2jddIjHkZfz0oIqevfXMk0Eo=)
                          2: 1e85c596-69bf-373d-9906-1d381b3d01ef.roa (hash: +4M6Gb73O9INjN7Z3rc/G58BJscS/Djx8dDq+Q/7WhE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:38:0d:6b:0e:90:67:99:c9:55:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d76e4c1-4951-48f9-a654-18ee7c98157a
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  2 13:00:00 2025 GMT
        Subject: CN=820ce01a-13f1-4593-85d9-25f39e172cf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:25:ec:cc:c7:17:85:65:bd:38:2d:ed:05:
                    23:cf:f5:cd:bd:be:fa:58:b2:44:f9:18:96:ce:03:
                    46:4f:c7:02:4b:cc:c9:0b:b2:af:d8:40:9d:08:03:
                    ab:e5:f9:bc:1c:a3:42:01:d2:87:5f:13:b0:eb:b0:
                    44:d9:a3:28:59:f6:3c:17:7b:5e:0f:1d:2b:1c:34:
                    ec:be:43:1c:54:e1:c5:da:be:ca:66:7f:2f:e7:64:
                    ed:c5:82:b9:cc:ec:cd:51:19:af:65:a6:cd:d3:a7:
                    5f:4a:bb:44:b2:64:ab:6d:b0:bc:98:22:2f:b6:95:
                    90:b7:ec:94:59:f4:52:43:49:c7:73:f6:d6:06:3a:
                    38:21:35:cb:95:1a:07:12:cd:bd:87:c0:3b:a6:18:
                    a4:04:25:51:2a:5f:63:11:5a:69:5b:9f:34:21:c7:
                    11:84:61:7c:b0:3e:9d:1d:9a:85:a9:50:de:d1:73:
                    33:1e:6c:ea:0f:88:a9:7c:6f:1e:bd:d9:dd:00:cf:
                    79:42:2e:d1:3c:39:71:95:01:39:2b:c7:f9:43:a3:
                    81:9a:aa:4e:b9:fb:7a:8e:ae:ab:f1:c1:22:c7:e6:
                    14:8f:ac:b1:52:e6:f3:44:8a:29:9c:44:4f:60:0d:
                    12:a2:40:0e:ed:46:a1:ec:4a:7e:a9:56:f6:28:bf:
                    c6:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:7A:DA:CD:7E:67:02:6E:B8:17:7F:7D:C9:44:17:6D:25:5D:37:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a/0d76e4c1-4951-48f9-a654-18ee7c98157a.crl

            X509v3 Authority Key Identifier:
                keyid:BC:A6:71:B7:AE:35:D0:B0:02:05:BF:4F:20:43:46:F6:C8:54:C8:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0d76e4c1-4951-48f9-a654-18ee7c98157a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:bd:2d:61:17:8e:62:17:bc:db:e2:8f:a0:d8:8e:f1:fc:64:
         0b:5a:6b:63:c2:0f:6a:83:09:d4:a1:d4:4d:d8:9e:84:4f:3d:
         02:f7:25:86:dd:72:41:47:f7:8f:0c:c9:41:0f:85:57:66:c7:
         1e:6d:11:bd:ef:5d:cc:51:21:c8:59:a1:c3:70:86:30:63:a5:
         cf:b9:d8:08:28:00:e0:b1:b6:26:f1:bb:16:c5:6f:92:f0:87:
         29:33:a2:24:0f:0f:6e:b2:90:81:71:27:89:57:1d:8b:8b:60:
         e8:24:86:ed:9b:69:d4:35:9a:d3:3a:81:d7:2f:26:ef:11:40:
         15:b0:10:73:f1:88:f6:3f:10:cd:b9:89:74:81:fc:f7:58:d7:
         54:14:ad:68:80:0d:db:d8:d5:f1:77:c7:d6:a6:fd:1b:61:60:
         14:b2:bc:ee:4b:d9:24:35:8d:80:f1:92:e8:3c:c9:58:1a:bb:
         e4:ed:c6:df:89:d9:b8:f9:10:cc:ed:7b:98:84:ee:4a:57:04:
         af:3b:79:f4:57:5b:71:17:af:11:bb:78:d3:8e:de:26:a7:d6:
         95:4f:89:00:39:84:26:13:a5:25:8a:12:df:14:67:f3:3f:e3:
         6b:01:6d:52:79:62:c9:22:2b:6e:7a:79:f8:06:bd:07:38:2e:
         3e:5a:f7:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 13:22:42 2025 by rpki-client