Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
File:                     2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft (raw, json)
Hash identifier:          O9O+gkER7l/DuyHVi3ISDRH1Ogg7mgcIJa/aFz535qY=
Subject key identifier:   38:5A:E5:40:4E:9F:B2:31:58:14:DB:CE:B6:D5:61:64:DF:4B:01:F0
Authority key identifier: 12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB
Certificate issuer:       /CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
Certificate serial:       010D0C9F43285848BACCF19E809848EE906BB780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft
Manifest number:          010D0C9F43285845CEA08E9DCB8C9DBBF7382218
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 18:00:00 +0000
Files and hashes:         1: 2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl (hash: 0P5H3IUBE9k7AWI3ssr0HCGQsiRvmsf5bPzKb0UDz/0=)
                          2: 5925a732-37e4-38f1-b869-f45e205b206d.roa (hash: k1HBggBqj+OEM/LosInpLQQmhFr7SD4L0YB7AjdyAVY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:f1:9e:80:98:48:ee:90:6b:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff822df-fd2d-4fdf-8320-3c5a61d09369
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  3 18:00:00 2025 GMT
        Subject: CN=13747f79-9a90-470c-86a7-a98342b2d587
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1f:2a:72:ab:bc:37:9a:f3:38:90:bd:13:e0:
                    2e:58:59:d8:62:4a:28:24:61:d8:3d:04:bb:35:82:
                    31:a0:0d:83:7c:88:02:08:83:6a:5c:1b:09:82:ff:
                    16:64:5f:f5:c5:a6:45:8d:61:be:8f:36:6f:04:70:
                    bc:07:2a:ff:52:df:dc:f5:83:bc:76:f5:e5:1f:d1:
                    ab:87:81:9c:d7:f8:ee:66:d9:c3:89:8a:e2:74:f2:
                    38:29:95:c3:0e:22:51:9a:4d:ed:0c:77:70:35:e5:
                    aa:57:35:6a:8e:f1:dd:94:f8:ef:3f:e3:7d:37:37:
                    80:96:a3:d8:58:7d:cb:64:0a:ea:27:d4:7c:f2:a3:
                    d8:64:fc:13:27:5b:fe:e8:c4:a9:ed:46:ce:7d:1a:
                    c1:f9:43:ac:f4:50:47:5f:97:fa:da:33:8b:38:3e:
                    53:3b:14:e3:dd:35:40:9d:b7:16:12:3b:7c:53:0b:
                    56:d6:20:25:50:b0:f4:01:6a:32:6a:ba:db:82:06:
                    a2:c9:2e:60:7a:7d:4a:3e:54:35:5e:63:9b:a9:11:
                    dc:fe:0d:02:22:2d:9d:df:01:47:f8:7c:8c:12:f0:
                    94:b4:0d:48:92:75:4e:cf:79:b7:3a:75:09:8b:15:
                    af:7d:d2:6c:77:93:39:e2:f8:05:fc:c7:6f:fa:93:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:5A:E5:40:4E:9F:B2:31:58:14:DB:CE:B6:D5:61:64:DF:4B:01:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369/2ff822df-fd2d-4fdf-8320-3c5a61d09369.crl

            X509v3 Authority Key Identifier:
                keyid:12:BB:91:00:0A:6C:5E:97:61:21:EF:C3:80:BB:27:03:11:47:ED:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2ff822df-fd2d-4fdf-8320-3c5a61d09369.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:e4:b5:0f:7a:5a:fa:43:89:13:79:92:c9:75:79:7d:63:9f:
         bc:fb:15:45:31:b3:48:b1:6b:61:87:5b:1c:d8:bc:eb:db:b1:
         9b:40:2e:d6:d0:2b:9b:d1:26:78:b5:b9:bf:9a:9c:70:37:e3:
         0e:19:96:e0:21:35:fc:0e:9c:27:11:87:66:11:90:96:dc:78:
         bd:b9:48:94:aa:59:73:9a:5e:7d:13:26:5c:c5:fa:03:35:15:
         49:66:09:38:3e:6e:89:a9:87:9a:b2:e2:9c:ad:9c:d2:9f:20:
         ac:a9:5d:59:6b:49:6f:a5:74:32:6f:d1:f9:7b:b0:58:4f:82:
         f9:2a:56:99:18:2a:87:f8:a8:36:30:f7:b4:88:33:36:92:2d:
         9e:34:3f:fa:44:85:a6:c7:eb:99:0f:1a:67:0b:06:fd:0a:13:
         c3:bb:ed:4c:31:e0:2f:98:fe:a0:91:94:1d:cb:9c:9a:36:b6:
         a8:6d:99:e2:a1:2b:fb:8f:7b:a4:71:d5:f1:76:d1:74:9d:ba:
         f9:f7:25:77:69:cb:2f:bc:b1:89:7d:37:97:e4:b6:de:32:0e:
         5c:fb:7a:b2:7d:3b:71:06:c6:d9:8e:47:a3:eb:0a:b5:7c:76:
         10:ff:8f:f9:2b:59:0b:32:55:38:ae:26:82:92:55:52:2d:6b:
         14:f1:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 5 12:14:28 2025 by rpki-client