Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
File:                     433ef7a7-1e53-4401-9dec-0da336641458.mft (raw, json)
Hash identifier:          exd9Wp9g7dA/+YSWXooz3SodY29UJrCao+aSsjepqFQ=
Subject key identifier:   99:EA:A6:40:25:85:54:22:FB:E7:4B:4E:8C:AD:4D:9C:06:7D:EA:A2
Authority key identifier: 15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18
Certificate issuer:       /CN=433ef7a7-1e53-4401-9dec-0da336641458
Certificate serial:       010D0C9F43285848BACCEF5C9F4A26EE305AD5C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft
Manifest number:          010D0C9F4328584646AAFC67B35FD9718D331123
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 18:00:00 +0000
Files and hashes:         1: 2ed55df2-5261-3406-ba62-c0b9b1e1c065.roa (hash: 42lPP73rpO8tjwk9jqXBMCVTWFSm3CaPp1cRKk2rmYs=)
                          2: 433ef7a7-1e53-4401-9dec-0da336641458.crl (hash: Y5A38MIiEdJKlByZJ2HoZj1N7+1I3YrRrUZGYuTSST8=)
                          3: 554b5153-bd14-3fa2-b11e-cd539e6e2916.roa (hash: ImHRJl2037b283ofVwBJY14cHO2BqygKUszJwxKhVs4=)
                          4: 6f62d5f0-6742-387b-8f76-2fd1c3ad4990.roa (hash: giQcKxd5//a5SA3/I47lxvLHwDn3A0dJbunnys3LdGc=)
                          5: bc2a06ed-75d9-399b-a897-c3e3f6f89620.roa (hash: IqYZvw5sdtLaaTpqScgP33/2SmqvXveQXMbLRacKENU=)
                          6: bc4323e3-e1c2-326c-9c12-5a15ce1a2bfb.roa (hash: T1smZpMSTQtFpiNyerkRod9nE2StDZChDimFfrqjtfM=)
                          7: e5b31250-4a53-3c7e-9b22-65a3524b54a1.roa (hash: x1VbW6/0+0NMuvm0ssEs3WsjJN7CCHZ7QEvz4Z0At2E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:ef:5c:9f:4a:26:ee:30:5a:d5:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=433ef7a7-1e53-4401-9dec-0da336641458
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  2 18:00:00 2025 GMT
        Subject: CN=ddca4e3d-a472-4a6b-bddd-0a300576b3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b2:15:ef:33:29:ff:74:5f:bf:4a:6d:ab:fc:
                    d9:c1:5e:18:76:fa:5f:f3:38:6c:86:25:00:6b:9b:
                    16:88:b4:d7:b9:f0:ee:8a:89:75:d5:3d:e7:95:4b:
                    cc:a5:70:a8:5b:0b:52:ac:95:2b:9f:e0:94:bd:e8:
                    ca:ce:94:f6:bc:a4:ed:ab:4a:8b:8a:c4:9e:e6:61:
                    42:71:e7:0d:09:a0:5b:28:db:4a:d8:1e:26:ed:23:
                    61:ca:ea:c8:a6:43:ab:50:d7:93:41:6a:69:b0:12:
                    61:27:b3:4c:32:32:09:80:23:51:5c:71:04:e5:18:
                    80:c2:ab:19:9e:80:a5:19:ec:84:4d:73:88:ac:df:
                    4e:6a:11:6b:e0:af:c0:f7:d1:28:dd:b2:0c:54:d3:
                    de:ad:a3:15:42:09:6c:33:1b:8f:96:d2:61:e3:51:
                    4f:9f:c6:02:79:7b:55:e9:b4:a7:9f:ad:b4:76:07:
                    54:05:78:f2:db:27:78:83:ea:0a:e0:8f:6d:f4:fa:
                    76:c1:76:e3:c9:d6:5d:47:3b:b9:8d:b6:eb:f7:05:
                    7e:cd:f1:52:b7:0a:a6:6e:a2:f8:a3:f8:6b:34:7a:
                    08:f5:25:1f:83:c1:9f:05:e4:82:b3:2d:f6:53:93:
                    d1:b7:65:6f:ae:aa:78:8b:80:45:0a:4b:19:04:ac:
                    8c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:EA:A6:40:25:85:54:22:FB:E7:4B:4E:8C:AD:4D:9C:06:7D:EA:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458/433ef7a7-1e53-4401-9dec-0da336641458.crl

            X509v3 Authority Key Identifier:
                keyid:15:30:88:CA:F9:3D:07:83:7C:69:02:0E:D3:C9:E9:33:1B:96:30:18

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/433ef7a7-1e53-4401-9dec-0da336641458.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:d0:20:c5:bc:5a:64:67:57:eb:16:67:19:0c:26:7f:5e:dd:
         58:92:8a:2d:4c:07:f2:96:74:26:02:94:09:8e:33:b0:eb:1c:
         e9:95:df:45:fe:da:60:9f:e4:a2:6a:02:6e:61:d9:a6:83:13:
         27:b9:fa:8e:24:15:48:45:12:01:82:a5:fe:ec:d9:36:85:df:
         69:83:1a:42:96:ed:88:2f:0a:42:6d:d6:f9:4c:ef:a3:24:8b:
         1d:c0:cc:d8:19:46:93:fc:92:84:13:47:61:db:1e:36:53:bf:
         22:10:de:a2:ff:6a:6d:d9:02:f3:ec:62:6f:9d:4d:82:5f:13:
         b1:77:cb:ff:ae:4a:40:30:a6:c7:c1:3d:ac:4d:18:92:0a:69:
         15:a9:ed:02:6a:fb:c1:7b:5b:6b:ed:71:6c:09:e5:6b:d3:1b:
         21:bb:8b:fd:40:7c:e9:9f:e7:2e:d2:31:63:56:4d:50:38:ad:
         37:f8:af:4d:0c:22:64:b1:55:d3:a3:20:17:b0:b0:5a:ee:ea:
         40:00:0e:33:39:67:de:8a:76:fa:ca:d7:e0:da:ef:ae:e4:b8:
         c5:db:5d:91:0f:d4:7b:87:f4:54:4e:c4:c1:11:7f:8e:a5:b8:
         62:d5:4e:5a:2e:43:9d:39:e9:ce:c1:36:90:e4:8e:b9:ec:82:
         e5:1c:18:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 22:53:19 2025 by rpki-client