Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
File:                     25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft (raw, json)
Hash identifier:          RuAUnuPdud4Smlv49+O1vVjQhmyOM7jUfYcG5wafAwM=
Subject key identifier:   97:E4:8D:54:D0:A2:BE:BE:6D:74:25:9F:97:B7:31:0A:16:6D:67:FD
Authority key identifier: 11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A
Certificate issuer:       /CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
Certificate serial:       010D0C9F43285848BACCF4A3887C233E24FE4B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft
Manifest number:          010D0C9F432858473F26DA99C0767EE0C9A7DC0F
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 18:00:00 +0000
Files and hashes:         1: 25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl (hash: x5HiVmWNBhig8jtj3YMfPUnmnOz5mHW+sCWmxkxghpI=)
                          2: 87d6315b-8b3b-3ba8-9be4-a5b7433e605a.roa (hash: IjrDOtRPZz6UTWGr5GlElY30uYc0G6eL9cl+w79He1M=)
                          3: 913ccad0-9f81-3143-b72c-4473dba1b1d3.roa (hash: NaQmFtnDrAvx8/UUHk3xWuQzIzakaTQ5j8boSK/6meQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:f4:a3:88:7c:23:3e:24:fe:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25ddefcd-6e0e-48ac-8728-a1d82e91129a
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  3 18:00:00 2025 GMT
        Subject: CN=cddb5bdb-3748-4fe6-a14d-5250abe7598b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:7b:40:d5:88:d7:62:5c:3d:8e:52:54:47:2b:
                    1a:08:5c:19:11:fe:2f:f4:f7:14:4a:43:93:ea:08:
                    37:2b:ac:a4:82:e5:87:d8:5e:65:03:7d:f2:25:be:
                    da:5e:9f:cc:31:31:72:c4:7c:89:1e:e5:35:8a:67:
                    5f:84:61:0b:7e:a4:44:08:9d:48:be:53:24:5f:e8:
                    cb:63:c0:e4:5b:c5:61:b8:36:92:8f:97:aa:8d:d0:
                    2f:03:d7:f6:02:4f:6b:39:b2:dd:57:98:32:ea:29:
                    f8:88:43:b0:09:dd:e4:71:b2:2b:7a:c7:02:fb:89:
                    20:47:1a:20:b7:25:25:d6:cf:ab:f4:9d:07:bb:48:
                    1d:54:bf:8e:21:74:44:f6:4c:51:26:ef:3f:70:5e:
                    65:cc:7a:d2:f5:72:21:94:63:5a:ef:7c:d2:99:cc:
                    a1:fb:3f:23:24:db:a5:c9:52:46:0b:76:23:2a:e3:
                    e3:ec:36:d4:7e:be:ab:e8:18:a0:bf:64:b2:44:20:
                    02:32:aa:a9:24:08:64:8e:0a:47:ab:b5:d0:f0:fe:
                    3b:97:64:b0:0a:31:31:09:eb:85:6e:63:ad:ab:40:
                    39:a4:52:a4:88:6d:07:62:86:42:68:c5:91:56:e1:
                    66:e3:87:84:7e:d5:72:08:a6:06:1e:d3:a7:3a:a7:
                    3b:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:E4:8D:54:D0:A2:BE:BE:6D:74:25:9F:97:B7:31:0A:16:6D:67:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a/25ddefcd-6e0e-48ac-8728-a1d82e91129a.crl

            X509v3 Authority Key Identifier:
                keyid:11:11:3A:E1:1E:12:41:62:86:04:76:0F:83:E2:2F:ED:3A:F9:B6:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/25ddefcd-6e0e-48ac-8728-a1d82e91129a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:e4:b2:96:ad:b6:22:c7:d3:d3:0c:44:88:16:91:c2:bd:f0:
         12:cf:a7:fc:94:74:6d:39:ef:06:9b:16:3e:67:00:60:a1:01:
         9b:ec:d4:ac:70:1d:51:b7:f4:b8:1d:ac:fb:7a:85:99:c3:4d:
         19:ca:31:ab:f1:95:35:14:8b:5e:17:4c:cf:15:06:e0:58:8e:
         04:5a:97:22:6a:1e:e4:75:b4:7b:2a:6c:f5:85:9e:71:97:7e:
         ba:23:d9:6f:db:32:a6:6d:6f:f3:a3:48:ee:16:43:11:d8:61:
         c4:9b:d4:c4:32:29:2c:c9:b4:76:15:7c:63:40:45:30:d8:bd:
         01:e8:f6:b9:dc:a3:aa:57:34:01:2d:a0:bd:03:3c:5d:75:39:
         9d:08:b6:71:68:6b:2a:c7:aa:d1:e3:27:d9:27:96:dc:f2:25:
         a2:8d:05:3c:50:44:18:e8:82:fb:10:23:9c:1b:69:ad:b3:66:
         37:1b:08:2f:79:7f:e9:91:7e:29:d4:ca:1d:72:2e:c0:a7:a6:
         a0:47:3c:78:4b:4c:ee:72:c1:8a:cf:c8:51:9c:84:c4:ff:e7:
         93:29:eb:69:1e:e7:db:98:bf:09:68:f5:33:a2:4d:7f:60:6c:
         6a:af:e6:2d:6d:6f:ad:aa:0e:0b:1c:fb:7e:ca:02:dd:6c:bc:
         5e:ec:2e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 10:22:28 2025 by rpki-client