Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
File:                     d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft (raw, json)
Hash identifier:          DqHeEBcxxQzvmdU+QTpbyEakpGMqNBO2bPp2nQ1bLEE=
Subject key identifier:   CF:02:AE:3C:0B:C9:FE:1D:0F:4A:FC:76:38:82:30:A1:C3:0D:49:36
Authority key identifier: 3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4
Certificate issuer:       /CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
Certificate serial:       010D0C9F43285848B8200B021259386197E871DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft
Manifest number:          010D0C9F432858461CF26CC982C7673D55D582DC
Signing time:             Thu 30 Jan 2025 19:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 19:00:07 +0000
Manifest next update:     Sat 01 Feb 2025 19:00:00 +0000
Files and hashes:         1: 01a6ed43-13df-3c85-9b21-d9bb36f5b559.roa (hash: /tjMQqiSUD3MyA/n41quzTqRRf/sCu2XH8/23yO57Kw=)
                          2: 322647e6-437f-36cc-846f-c425e94ea1d2.roa (hash: JKnzQurPjiCDawqr1+8TlGhWO65al4I22vMs2YHc+sA=)
                          3: 85bac01b-d449-38e4-b9c4-3ebbabdf928b.roa (hash: +LE8hxdtJPulij6FBnOIWBiDhTltHS2n1HcpZSSVx+w=)
                          4: c118e230-bad5-32c0-9043-a0b819d10476.roa (hash: ekxy1DBP4oOF4Q8kVxaFq1dfLKePIctaGsuvt0lnTPY=)
                          5: d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl (hash: y7Eg3b3Dci9xO2iSGUG/7usJ0EA4+ri22TnZ0MdbAI4=)
                          6: d92df1bc-9773-35dd-bdd7-aadba8945c62.roa (hash: jSxxZ17QzfPGKzuWUwIdd+6fImt1tnI1Bt9PiugpRLk=)
                          7: e6ff4323-32bd-3eee-9f33-2548dc06d1b9.roa (hash: +fvUhrF9kkYWHMefM67jI+hR3FZjA+g/e0nSkVmn7fA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:20:0b:02:12:59:38:61:97:e8:71:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d409bef0-b6e9-492d-adf9-0bd8a5610c35
        Validity
            Not Before: Jan 30 19:00:07 2025 GMT
            Not After : Feb  1 19:00:00 2025 GMT
        Subject: CN=97f723c1-ec8a-4d67-8f4f-928e854d662a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:87:ea:ea:5c:cc:c3:e1:26:b4:17:68:32:
                    31:23:66:2a:0c:c9:d3:e9:77:7d:f7:e7:11:14:b9:
                    35:7e:7b:3b:2f:7f:fc:62:0c:ea:38:41:87:44:a4:
                    b3:ca:4b:cb:92:16:b2:d8:ba:ab:f0:31:a8:e0:4b:
                    8f:73:96:99:cb:cc:ff:81:20:7e:aa:7f:6a:b3:b4:
                    f0:bd:f9:b5:d0:76:6b:03:80:67:f0:65:93:9f:34:
                    b6:53:1c:25:de:f2:77:3c:b7:c5:6c:33:03:8b:fd:
                    86:e6:00:53:96:eb:54:44:91:2e:f7:df:e6:1f:e1:
                    2a:e5:1c:9e:88:44:50:9c:37:47:f1:f0:60:95:be:
                    f6:d7:4c:e6:a7:c0:01:dd:c9:c8:31:65:23:32:98:
                    d8:d5:e5:97:f2:df:2c:34:14:b6:35:65:d9:fd:8c:
                    8e:0b:9a:87:06:d1:99:c4:54:38:2a:2b:ce:9d:b9:
                    0f:9a:a3:fa:5f:6f:28:89:0c:ea:90:a9:c0:1f:52:
                    df:03:cb:02:5b:93:71:8c:2b:8f:63:e7:74:fb:76:
                    b5:5a:d1:ef:17:90:53:fc:84:45:86:a3:ac:34:9e:
                    6d:33:4a:fe:14:e6:ed:a0:77:b9:9c:dc:88:61:ea:
                    e6:25:f9:7c:fc:2a:0d:ec:67:99:d8:da:40:10:1b:
                    34:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:02:AE:3C:0B:C9:FE:1D:0F:4A:FC:76:38:82:30:A1:C3:0D:49:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35/d409bef0-b6e9-492d-adf9-0bd8a5610c35.crl

            X509v3 Authority Key Identifier:
                keyid:3B:89:AF:36:6D:D2:02:F7:FC:DA:FA:4D:86:6E:9E:74:D2:2A:8B:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d409bef0-b6e9-492d-adf9-0bd8a5610c35.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:36:60:98:df:c9:45:8b:24:60:3a:4e:ca:67:ee:31:79:bf:
         03:e2:e8:49:17:75:95:a9:18:aa:f2:68:10:8b:37:e4:97:da:
         b5:91:e2:e1:c1:33:ac:9e:f6:6b:b6:14:81:9c:fd:62:a4:c1:
         35:be:9b:95:dc:c5:bd:3a:69:49:cc:74:7e:8b:4a:31:98:7c:
         0e:0c:88:26:15:24:9b:0d:d6:1d:69:05:18:51:1e:ff:7e:76:
         89:d5:f2:7c:d4:2c:a2:c5:b8:fa:4d:76:ba:a7:26:1d:99:99:
         0e:4a:46:be:2b:4f:b8:5f:48:5f:8a:b5:f0:90:6a:49:c0:b5:
         86:0b:21:e3:a7:f2:29:b0:76:62:df:52:99:ec:00:4b:f9:2f:
         38:70:c6:cf:53:98:d5:05:e5:98:70:b5:31:54:67:29:fa:cb:
         1e:a4:05:c8:09:cb:ea:f7:00:e7:b8:92:bc:ba:fd:67:8c:da:
         4b:f7:3b:75:e2:6c:4f:18:a0:7c:cc:f4:b7:32:11:5d:e3:cd:
         2c:e8:21:23:b2:65:3e:f8:9a:65:81:2e:85:c5:09:7e:f0:75:
         f6:20:79:66:bc:13:cf:c4:b7:0b:1c:c8:ce:48:fb:3d:e9:33:
         8a:69:5c:17:58:e2:f2:13:35:bf:b7:cb:56:74:dc:b8:43:d2:
         c0:fb:cb:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 21:55:12 2025 by rpki-client