Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.mft
File:                     857f4763-aacf-4784-828d-557ab7b55809.mft (raw, json)
Hash identifier:          ew9RiGyvcCf/bRuryqvjRVoHK3h6HqNiBaLlJu/gElo=
Subject key identifier:   26:00:AD:05:C7:94:10:05:73:C9:63:DA:C4:7C:F8:4A:46:D7:35:3B
Authority key identifier: 60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9
Certificate issuer:       /CN=857f4763-aacf-4784-828d-557ab7b55809
Certificate serial:       010D0C9F43285848BACCEFA42CB95EEB074D7440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.mft
Manifest number:          010D0C9F43285846B3A67A69EE87BB927151F73F
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 18:00:00 +0000
Files and hashes:         1: 14842e5d-ad09-3b78-bf54-277a31112e14.roa (hash: Fdu/UpDcag038FCE6YkIQCTKoUXvbRJ5d4gn5B+pghU=)
                          2: 857f4763-aacf-4784-828d-557ab7b55809.crl (hash: +xoCmTShKQsmunt6Nnae+9Zz98huBZdU+7szadVylJs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:ef:a4:2c:b9:5e:eb:07:4d:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=857f4763-aacf-4784-828d-557ab7b55809
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  3 18:00:00 2025 GMT
        Subject: CN=5436304f-526f-40b6-b155-63d84ca78b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d9:d4:7b:ce:6f:23:62:69:37:84:42:94:68:
                    73:51:87:e3:97:35:41:fa:ef:c2:96:4a:78:33:ea:
                    1a:7a:3f:6a:32:9c:b4:08:8d:37:b0:55:3c:8c:cb:
                    e8:2b:94:a7:2c:64:76:23:93:70:6f:fb:8a:e2:dc:
                    d4:f8:f1:49:2e:28:8e:9e:4c:75:df:bb:60:0b:b7:
                    d5:94:42:ed:d8:a8:a4:d8:91:11:82:a0:f8:03:96:
                    ba:e2:80:60:a3:b3:6c:63:d8:40:61:7d:a7:27:2d:
                    be:90:d3:ad:6c:5b:4c:75:ad:70:8d:a6:ff:c8:b1:
                    7d:a0:5a:db:3f:e7:a2:0e:76:cf:70:a8:b4:ff:66:
                    66:53:cd:28:bf:70:c4:d0:91:54:26:ae:3d:26:79:
                    e4:2c:0d:fa:1c:de:e7:42:4f:4f:74:ea:94:ae:df:
                    44:9a:88:c4:da:f4:d1:41:48:5e:06:f2:54:9a:c2:
                    cd:2a:27:90:f9:4f:a6:fb:a3:52:79:73:9e:6d:09:
                    75:f8:e5:e2:54:97:6b:98:3a:47:ab:d1:da:48:24:
                    27:76:fa:7b:77:c3:85:f2:ac:54:82:38:4e:1c:c4:
                    f7:44:f7:e0:3a:08:8c:f3:e3:39:94:9f:fb:2a:39:
                    8f:67:ae:99:9c:61:67:19:24:fe:60:6a:88:c4:37:
                    97:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:00:AD:05:C7:94:10:05:73:C9:63:DA:C4:7C:F8:4A:46:D7:35:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809/857f4763-aacf-4784-828d-557ab7b55809.crl

            X509v3 Authority Key Identifier:
                keyid:60:6E:A9:6B:80:47:38:44:DB:DD:10:A6:72:70:6D:0B:97:DC:72:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/857f4763-aacf-4784-828d-557ab7b55809.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:37:3d:a1:dd:95:53:04:a4:93:ea:92:d7:40:a0:6f:73:7a:
         bd:2e:ee:8f:b6:ab:f7:dc:20:1e:4c:a9:86:ac:76:68:23:c4:
         e8:b9:ca:4d:36:a1:f7:bb:08:2a:63:86:19:65:49:9a:2c:03:
         bb:fc:49:f5:e6:e3:6a:b2:48:49:af:64:8a:0c:80:2d:53:ea:
         45:71:f2:e3:97:8d:40:be:f4:1a:24:c0:74:50:4c:39:f1:f9:
         39:28:7e:58:06:f9:20:d3:a5:41:80:bf:9b:3a:df:00:c3:66:
         d7:7b:ab:1a:db:4c:1a:87:8e:b3:c8:bb:90:86:84:a2:d1:b6:
         0d:e5:84:54:ea:10:2d:72:15:a6:4c:10:b3:2c:38:3c:ba:d3:
         39:33:d2:9a:44:e5:57:92:99:f3:4a:35:e4:39:d5:75:cf:31:
         72:af:68:d7:00:14:bd:53:75:bd:b4:df:8a:cc:d6:5d:94:69:
         a9:a4:2a:0e:47:35:23:2a:4f:ec:0a:96:ea:8d:19:5f:bc:01:
         61:8f:1d:76:48:fa:52:22:63:6f:12:be:fc:f4:bf:8a:fa:62:
         8a:a8:86:ed:f5:e8:fc:95:1f:a7:65:7b:a5:2f:f4:cb:cb:6f:
         37:fc:42:e2:2c:47:c9:aa:8c:1f:d0:d9:e3:b2:68:a9:3a:85:
         f9:d2:f5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:05:54 2025 by rpki-client