Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft
File:                     3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft (raw, json)
Hash identifier:          ABHnwvHOobvxhzwuGQVk3mt5iBtMNCuTdTX7QgbrNLM=
Subject key identifier:   FC:B5:AA:EC:61:D4:C6:6E:D9:08:A4:E4:4A:63:4B:C1:E7:BD:82:0C
Authority key identifier: 10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13
Certificate issuer:       /CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
Certificate serial:       010D0C9F43285848B85B94F48839701720297880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft
Manifest number:          010D0C9F43285847EF76200C9F021E39E91698C9
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:00 +0000
Files and hashes:         1: 3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl (hash: t1DGiiLGHHPUwZUFiy2yiG/gmVA6jJh+zSzo5RGuNzw=)
                          2: fb067586-180b-31bb-9e56-5603dfecf409.roa (hash: jB9T+nCBIYnvmly2kbCatPsOct7ZY5MKay53XjlRq0E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:94:f4:88:39:70:17:20:29:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3be78fcc-c9b8-439e-ad7c-f03e1ec7a147
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  2 21:00:00 2025 GMT
        Subject: CN=39d4fbbf-f8e7-4657-82cf-8d9432943b5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cd:2a:12:21:ce:db:81:0e:50:88:c3:8b:f8:
                    73:53:a5:ed:ed:16:6c:8d:ca:aa:cc:4f:92:cf:49:
                    ef:68:ad:ff:82:4b:39:7c:ce:4d:98:ec:08:a7:66:
                    d7:b2:f1:bb:73:90:cd:e8:7a:70:87:5a:c0:e7:19:
                    9d:d6:15:72:b0:9b:69:2b:a3:b9:0c:8a:92:f4:53:
                    7d:89:b8:7e:55:58:21:7e:f2:be:13:3f:50:19:bf:
                    60:93:49:a4:8a:ec:f2:20:04:b6:d2:18:c3:d6:94:
                    88:52:f1:22:85:97:43:cb:36:0e:a0:0c:05:d1:89:
                    a9:60:0a:25:da:d9:41:4d:94:6c:fa:c8:a9:19:16:
                    00:a1:12:c1:70:3a:97:f5:3e:c4:86:81:d3:b4:3d:
                    e5:22:1b:3b:23:42:7f:15:fa:14:5f:a1:1e:3c:cf:
                    41:ff:78:75:d6:2d:7e:15:88:cb:9e:a4:34:05:4c:
                    28:dd:d7:77:fd:fc:88:f4:6f:a3:58:db:8d:30:7b:
                    f5:bd:30:24:f5:94:8c:90:43:d7:8c:97:3e:9d:d2:
                    b0:f7:29:bb:3d:c6:77:7b:ca:f7:39:94:a0:bc:0d:
                    7b:d4:53:fc:49:ba:ea:f7:04:5b:05:8d:df:99:f7:
                    21:5d:84:02:08:98:db:d7:be:f6:4c:f9:60:85:41:
                    14:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:B5:AA:EC:61:D4:C6:6E:D9:08:A4:E4:4A:63:4B:C1:E7:BD:82:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.crl

            X509v3 Authority Key Identifier:
                keyid:10:73:8B:3D:05:8A:EF:0A:25:25:80:26:59:13:8D:A9:13:A7:49:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3be78fcc-c9b8-439e-ad7c-f03e1ec7a147.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:23:d6:97:0d:87:6c:86:76:8e:ef:8d:af:cf:04:07:94:2d:
         e2:f2:a5:81:22:94:c1:19:72:b7:f0:fc:2b:a6:50:4d:cf:30:
         21:6b:a1:4e:00:31:fc:c0:dd:47:50:ae:10:6a:2a:26:e9:fc:
         ed:88:07:0e:7f:14:ae:49:70:f1:7f:1a:1a:23:9b:2d:fd:6b:
         9e:65:21:de:4e:b9:ed:51:1b:0d:ac:b0:0b:00:99:e6:c2:d1:
         4a:e2:87:d8:26:f8:f4:c4:0b:28:3c:7c:43:18:6b:68:6b:5a:
         3f:c8:64:f9:7f:10:ac:7e:70:37:83:65:aa:66:68:6d:0b:d5:
         2e:1d:cf:a5:82:4c:a1:03:3a:47:53:0c:1e:d2:23:54:6e:bf:
         2e:c5:76:fb:41:10:c8:1d:cb:13:07:eb:65:9a:b3:66:f8:96:
         a7:c2:bc:8c:13:8e:5b:9d:3b:35:60:a9:68:2f:41:cf:48:4c:
         ac:02:ca:ab:b9:5e:6d:12:80:bd:59:0e:4f:ac:ae:67:bc:d0:
         5b:da:c9:4c:21:0f:6f:22:bd:b6:79:5a:73:28:00:18:7b:15:
         71:a9:34:91:2d:6d:56:58:13:bf:3c:29:bd:84:03:4b:ac:39:
         5f:48:e8:76:e2:cb:a2:a1:18:4d:4f:94:ed:e4:69:2c:e7:dd:
         02:de:e1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 09:34:05 2025 by rpki-client