Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft
File:                     214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft (raw, json)
Hash identifier:          aukUavFCbeWk+FVxNxBSlix6PD3aHFnBmiR7oHiBZQ4=
Subject key identifier:   9C:61:C3:27:5E:68:4E:BD:FD:93:5D:DC:6F:22:1F:32:00:FB:39:32
Authority key identifier: F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D
Certificate issuer:       /CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
Certificate serial:       010D0C9F43285848B9DEB502BEAD85B770071500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft
Manifest number:          010D0C9F4328584073A84E14A2800122F3AEA288
Signing time:             Fri 31 Jan 2025 10:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 10:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 10:00:00 +0000
Files and hashes:         1: 214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl (hash: mlb2Z5aM1cyUk6GLWakGdYtkbKMQvEvDwINna3Frj1s=)
                          2: 40466fe5-eaeb-37b1-9356-b1362b1dd8ae.roa (hash: raQrGVOBAXaU5HAGyLE4RBqkrB9ZiFMPQWWVFHVUnfo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:de:b5:02:be:ad:85:b7:70:07:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=214de91d-b5db-4aa3-aab9-2a7f2c0075b6
        Validity
            Not Before: Jan 31 10:00:07 2025 GMT
            Not After : Feb  3 10:00:00 2025 GMT
        Subject: CN=fb88b290-f4b7-427a-8912-c8a354f15b4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:bc:c9:95:e8:cf:f6:3c:fc:df:04:30:69:c8:
                    48:c2:00:d4:0e:9d:8d:75:c9:71:79:e2:42:fe:41:
                    92:13:1a:9c:22:82:59:1d:21:d0:e5:e5:ee:27:6d:
                    dc:8c:f2:c6:95:c1:56:d8:e4:eb:94:a6:4f:d3:30:
                    f5:d7:ce:a1:6a:5b:2a:92:8c:ff:4b:4f:19:00:8b:
                    58:6e:f5:9e:e0:06:12:f9:14:2b:99:a9:3e:1f:ea:
                    fc:9e:da:72:c8:37:d7:87:b1:80:e1:c1:4b:72:74:
                    04:55:ea:12:7f:bb:49:06:f9:88:9b:a7:b0:4b:ce:
                    05:5e:11:73:3e:dc:40:11:12:0d:3e:91:b8:4c:7f:
                    ed:83:5e:f3:cb:4a:31:fd:8f:7d:70:71:59:42:d4:
                    be:42:53:6e:ad:83:be:d9:ac:f7:ec:59:cb:32:09:
                    9d:1f:93:85:95:c8:23:87:f0:a6:7e:de:17:ac:9e:
                    f1:7c:c0:69:ba:d8:d1:7d:60:29:ec:cf:29:41:12:
                    b4:c1:b5:83:f4:cb:c8:e4:80:03:1c:73:64:94:2b:
                    3e:25:a1:ce:c7:78:93:9c:cf:c9:44:40:0b:88:3f:
                    49:c5:36:65:b3:32:05:bd:7f:a0:fb:30:1a:98:cc:
                    17:60:4c:41:1c:bc:09:88:05:e2:f6:b5:9f:6e:5b:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:61:C3:27:5E:68:4E:BD:FD:93:5D:DC:6F:22:1F:32:00:FB:39:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.crl

            X509v3 Authority Key Identifier:
                keyid:F7:B7:99:5C:7B:1A:30:18:CC:99:0A:04:2D:53:DC:80:BE:02:B0:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/214de91d-b5db-4aa3-aab9-2a7f2c0075b6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:cf:43:ec:89:4a:1d:21:0a:cc:89:57:b3:30:5b:c2:71:bb:
         89:61:e5:f6:e7:04:56:28:b5:22:7b:1b:45:e3:8c:6c:4b:6c:
         2f:b5:fc:ec:80:1d:a0:c0:f2:48:f7:7f:84:32:24:54:c2:38:
         3f:42:88:5e:91:fd:b7:58:94:7c:49:03:9e:45:82:d1:04:b8:
         ee:a5:29:c1:af:79:a9:8e:e8:08:d8:cd:1a:36:72:32:9a:64:
         98:1d:20:b9:5b:e4:88:42:a5:96:0d:10:8c:f0:0c:7a:c9:c2:
         d4:76:b4:2b:51:a3:ee:c7:27:ef:d1:d4:7d:0c:a6:e4:d8:5c:
         4d:5e:a3:69:0f:07:74:88:b7:67:95:d5:33:5b:2b:8d:b4:1b:
         55:ce:13:39:52:c6:4f:2e:8a:ea:f4:8c:62:a8:ac:47:54:b9:
         a1:97:de:1b:53:8a:2a:d0:b3:40:9e:d8:41:ed:8a:3a:95:aa:
         2b:3c:b9:e7:c0:06:66:72:90:10:a7:bb:03:24:f0:b1:11:6c:
         15:13:98:4b:63:cd:83:e4:b8:02:12:8e:07:27:bb:fa:8f:5c:
         25:9a:a0:58:ec:a9:ac:42:8d:4d:29:cc:8f:08:07:4a:96:e5:
         3d:c7:87:61:bb:42:e3:53:e8:d3:d4:20:0b:ff:11:60:c0:c8:
         a1:12:b4:62
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi53rUCvq2Ft3AHFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE0ZGU5MWQtYjVkYi00YWEzLWFhYjktMmE3ZjJjMDA3
NWI2MB4XDTI1MDEzMTEwMDAwN1oXDTI1MDIwMzEwMDAwMFowLzEtMCsGA1UEAxMk
ZmI4OGIyOTAtZjRiNy00MjdhLTg5MTItYzhhMzU0ZjE1YjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlrzJlejP9jz83wQwachIwgDUDp2NdclxeeJC
/kGSExqcIoJZHSHQ5eXuJ23cjPLGlcFW2OTrlKZP0zD1186halsqkoz/S08ZAItY
bvWe4AYS+RQrmak+H+r8ntpyyDfXh7GA4cFLcnQEVeoSf7tJBvmIm6ewS84FXhFz
PtxAERINPpG4TH/tg17zy0ox/Y99cHFZQtS+QlNurYO+2az37FnLMgmdH5OFlcgj
h/Cmft4XrJ7xfMBputjRfWAp7M8pQRK0wbWD9MvI5IADHHNklCs+JaHOx3iTnM/J
REALiD9JxTZlszIFvX+g+zAamMwXYExBHLwJiAXi9rWfblvSqQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJxhwydeaE69/ZNd3G8iHzIA+zkyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRk
ZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdmMmMwMDc1YjYvMjE0ZGU5MWQtYjVkYi00
YWEzLWFhYjktMmE3ZjJjMDA3NWI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjE0ZGU5MWQtYjVkYi00YWEzLWFh
YjktMmE3ZjJjMDA3NWI2LzIxNGRlOTFkLWI1ZGItNGFhMy1hYWI5LTJhN2YyYzAw
NzViNi5jcmwwHwYDVR0jBBgwFoAU97eZXHsaMBjMmQoELVPcgL4CsB0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yMTRkZTkxZC1iNWRiLTRhYTMtYWFiOS0yYTdm
MmMwMDc1YjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBz0PsiUodIQrMiVezMFvC
cbuJYeX25wRWKLUiextF44xsS2wvtfzsgB2gwPJI93+EMiRUwjg/Qohekf23WJR8
SQOeRYLRBLjupSnBr3mpjugI2M0aNnIymmSYHSC5W+SIQqWWDRCM8Ax6ycLUdrQr
UaPuxyfv0dR9DKbk2FxNXqNpDwd0iLdnldUzWyuNtBtVzhM5UsZPLorq9IxiqKxH
VLmhl94bU4oq0LNAnthB7Yo6laorPLnnwAZmcpAQp7sDJPCxEWwVE5hLY82D5LgC
Eo4HJ7v6j1wlmqBY7KmsQo1NKcyPCAdKluU9x4dhu0LjU+jT1CAL/xFgwMihErRi
-----END CERTIFICATE-----
Generated at Mon Apr 28 12:12:19 2025 by rpki-client