Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft
File:                     843d051d-a734-4f3d-9544-a5ed8b60c976.mft (raw, json)
Hash identifier:          ReHiD3exJeX8KHW8oJG0IhUFSwAixqAMS8n0+ohbdo4=
Subject key identifier:   01:94:83:61:43:04:68:87:CD:FB:72:5D:EF:E1:DA:37:C7:49:AF:3B
Authority key identifier: FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95
Certificate issuer:       /CN=843d051d-a734-4f3d-9544-a5ed8b60c976
Certificate serial:       010D0C9F43285848BAAF27AA4065EBB4E9EB1CC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft
Manifest number:          010D0C9F432858476BB9F86998BD9CF0CC87ACBB
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 17:00:00 +0000
Files and hashes:         1: 843d051d-a734-4f3d-9544-a5ed8b60c976.crl (hash: KbtjMB6ToOVEr0WdYl10MCbiN/ldUl4+KTht3VhYUBA=)
                          2: b6dcd107-8c73-3b34-b8c9-5a3274cde545.roa (hash: dvhZIIDoikZrM1o5dt0m+wmJj6XynXA1uWVdFf+26XY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:af:27:aa:40:65:eb:b4:e9:eb:1c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=843d051d-a734-4f3d-9544-a5ed8b60c976
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  3 17:00:00 2025 GMT
        Subject: CN=7935b618-2538-49ea-93bb-21a61da3c9d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:23:a6:be:d9:6c:cf:5c:12:eb:2e:5f:cf:0f:
                    e8:87:b2:b9:7b:97:41:7c:a0:18:e0:da:46:09:8b:
                    37:c9:3f:7d:19:be:f3:47:37:6c:20:b3:ab:b6:9e:
                    88:4a:a2:90:e8:84:78:e2:30:0a:ca:a4:5f:6f:4e:
                    0e:30:a8:80:54:ba:41:55:2a:20:41:ca:99:c4:fe:
                    db:7c:44:1d:f3:d0:19:cf:bb:e7:c4:e9:4c:71:3d:
                    d4:35:b7:98:bc:a6:f4:4a:34:13:46:a8:78:97:0a:
                    a1:a6:7a:2d:18:36:c8:e4:b3:71:fb:00:13:51:0c:
                    6e:cd:39:6d:d0:99:e9:af:ef:1c:7f:3a:8d:4e:98:
                    bc:59:a0:9c:6c:04:e5:b2:36:59:e2:6a:c4:08:ea:
                    f5:51:fe:00:83:cc:0c:1b:18:92:d9:e0:e6:61:35:
                    6f:17:14:cb:e0:af:c9:8c:57:5e:0b:23:56:a7:c2:
                    fc:c1:fa:b9:1a:30:13:a8:90:01:08:1a:02:21:6b:
                    47:10:86:06:8c:bd:32:41:f4:93:62:06:7d:e8:b3:
                    ec:9d:4b:78:41:d1:68:8c:4b:83:2f:94:8e:e9:ea:
                    e3:15:87:6d:16:d3:ec:c3:72:2a:f4:66:06:23:c0:
                    8f:0f:6d:cd:6b:58:7d:5e:98:6a:a7:9e:9f:af:d2:
                    94:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:94:83:61:43:04:68:87:CD:FB:72:5D:EF:E1:DA:37:C7:49:AF:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976/843d051d-a734-4f3d-9544-a5ed8b60c976.crl

            X509v3 Authority Key Identifier:
                keyid:FC:FE:3F:F0:23:F4:A4:22:8F:75:9F:AD:23:3F:81:99:70:42:B4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/843d051d-a734-4f3d-9544-a5ed8b60c976.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:af:36:70:5e:7c:1d:a4:1c:de:61:e0:0b:c7:f8:b5:a2:54:
         6c:38:e6:f5:2b:5c:f2:cc:4f:5c:4b:40:aa:26:ba:20:e0:50:
         17:29:79:df:de:d2:3a:6a:5e:72:cf:e6:22:9c:8c:9e:34:fa:
         bb:36:09:d2:47:6e:14:64:b6:62:a5:01:50:ed:67:0f:84:3e:
         5a:ba:bd:3d:e0:74:7b:8e:fd:ea:b1:7f:df:a6:33:a7:8d:09:
         3e:fa:26:02:7a:0e:ea:84:62:3b:3f:37:94:73:88:7d:a0:ca:
         bb:71:ba:75:09:7e:6e:47:fb:98:c9:01:a2:e4:14:69:59:fd:
         5a:b0:12:c3:5a:6a:a0:d7:db:c0:33:48:01:be:c6:68:69:09:
         c0:7a:91:df:1c:93:9e:ce:69:03:14:56:8a:1a:ae:b3:9f:88:
         76:6a:81:cc:f5:ec:9c:a2:1a:f8:23:be:9e:fc:9b:01:54:a7:
         38:15:b3:04:f2:f0:06:73:33:71:43:fa:55:16:7a:85:da:2d:
         47:a4:a0:e0:dd:e0:37:37:06:19:79:e1:c1:b8:9c:cc:f4:ca:
         96:00:6d:6f:b8:d0:c9:bf:e0:76:83:75:c1:1c:ab:23:43:be:
         dc:bc:b8:b6:cb:93:aa:d5:43:ae:45:1d:49:38:ff:c8:d1:ec:
         cd:a2:3f:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 08:36:02 2025 by rpki-client