Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
File:                     c85989e4-dae0-4a06-83a1-0ce7104427a0.mft (raw, json)
Hash identifier:          OvOo00vWA+3m/zVEvwHrt9Eny9vYzn9QGa3QaB4Yo44=
Subject key identifier:   A8:6E:96:A9:F5:36:31:5F:4E:95:C1:02:61:DA:59:CC:BC:98:8D:9C
Authority key identifier: 99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21
Certificate issuer:       /CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
Certificate serial:       010D0C9F43285848BA55D5DF7C7648A4862D9000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft
Manifest number:          010D0C9F4328584073A857DDA7017388457AC162
Signing time:             Fri 31 Jan 2025 14:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 14:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 14:00:00 +0000
Files and hashes:         1: 0de08070-992e-334f-8090-a4c3a88677f1.roa (hash: dKwbDKGO6b7/Pc9XJvtj1kLV4ZjFk1HiK8XZlbl5+Oo=)
                          2: 25438931-47eb-3745-8de8-a5736ce96be0.roa (hash: 2Oe81LN9zPfiim+RQ4X7FJAFvClklddVJcuIUggX6I8=)
                          3: 441ba8c3-51b4-353d-b914-e586c621a0f9.roa (hash: J251LYbRgeE9GDmwjpjeRDjMCWdKY0R2rvKNvUngDN8=)
                          4: 61771297-1cb3-368b-a4b6-f8cdcd0c63f7.roa (hash: u/31VXDEXL7r1tQHPxDM2OVy8J1hQ2JAFT6SwELtl9k=)
                          5: c85989e4-dae0-4a06-83a1-0ce7104427a0.crl (hash: cp5tk88D7NDZ7ayVZv1RDvZVVnrsFCD6YfBqfQYaTXY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:55:d5:df:7c:76:48:a4:86:2d:90:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c85989e4-dae0-4a06-83a1-0ce7104427a0
        Validity
            Not Before: Jan 31 14:00:07 2025 GMT
            Not After : Feb  3 14:00:00 2025 GMT
        Subject: CN=e4c62865-08ea-43cc-9119-3b7a47a5ba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8a:98:46:a6:30:39:c8:79:7c:6e:c1:80:aa:
                    47:f6:3b:8c:98:b7:97:b1:42:e6:aa:5d:3a:27:b3:
                    44:54:f0:72:8a:93:23:9b:b5:9b:dc:61:b7:6f:a6:
                    d1:5a:67:79:66:22:75:75:46:07:70:50:37:f8:54:
                    ea:b3:ee:d3:31:0a:97:0d:d7:8a:dd:dc:2f:eb:1f:
                    cd:2e:2b:52:3a:38:47:f0:f8:bc:ac:cf:2d:4d:5e:
                    46:19:2a:25:8b:b9:f6:42:f2:29:bc:b0:90:16:90:
                    aa:c4:f9:5c:ec:44:91:a5:b7:22:3b:c4:79:a7:a5:
                    8d:bb:1d:af:69:51:ff:b1:20:ce:e5:11:ea:ae:56:
                    63:02:0f:69:21:79:d6:dd:e4:1a:8d:46:d6:d0:e4:
                    8b:f2:94:30:cf:2e:1a:d2:45:83:d1:6e:ab:c7:4d:
                    d6:2f:dc:fc:11:e4:ef:4d:20:ee:61:02:06:dd:7d:
                    0a:8e:f2:7f:51:4a:6a:6a:ac:34:29:a5:9d:86:68:
                    a7:9d:15:db:1d:c1:57:68:5e:3b:ff:aa:b4:ae:24:
                    33:4c:46:2e:91:a9:e1:c8:db:06:03:c8:d4:5f:25:
                    99:27:b2:04:a2:32:8e:70:61:f2:6d:0e:5b:25:c8:
                    9b:3d:7a:38:60:72:e3:72:8f:b7:0b:80:dc:9a:cc:
                    62:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:6E:96:A9:F5:36:31:5F:4E:95:C1:02:61:DA:59:CC:BC:98:8D:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0/c85989e4-dae0-4a06-83a1-0ce7104427a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:31:C5:3E:0F:0D:94:B3:98:40:F4:0F:77:5C:19:4E:15:BE:F2:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/c85989e4-dae0-4a06-83a1-0ce7104427a0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:fe:f7:94:fa:ab:50:62:4b:3d:be:20:92:b7:9e:54:77:f6:
         ed:0c:b7:87:36:e7:7b:34:4c:9b:1e:74:e8:6d:0c:64:9f:e9:
         e6:73:fa:25:d8:6d:be:9b:f7:d4:18:8c:9c:2a:5a:0e:4b:ad:
         26:ba:e4:c0:81:5f:68:0b:2a:24:9b:d1:46:51:9c:b5:bb:5c:
         5e:0a:0e:4c:89:b5:2f:1e:59:12:c3:35:62:2d:de:2a:5c:56:
         b9:d3:a6:30:5a:34:d9:62:76:f8:39:d0:b6:10:95:cf:95:b9:
         84:3d:20:26:b2:27:1b:26:71:7d:74:95:b9:e3:11:b5:38:25:
         1f:40:4b:f8:8b:94:04:cf:d0:1d:74:01:6b:96:40:49:3f:4e:
         e7:e2:9d:06:a8:f4:9a:33:45:88:82:e0:c7:70:79:27:c7:70:
         01:8e:0e:93:4a:f9:98:08:7d:e3:83:4f:ad:69:9f:95:f2:00:
         87:f9:ce:fb:4a:56:3e:60:2a:f5:37:c6:6e:80:a0:a9:5f:d5:
         45:0d:b4:bb:5f:0a:5b:7f:25:52:24:6f:0f:33:43:da:38:f0:
         69:ef:c1:4f:c2:eb:5e:b7:6c:a9:d8:ec:5c:53:29:8c:64:55:
         19:dd:d9:19:dc:f1:cf:34:d6:a9:2a:51:49:10:bf:52:5d:cd:
         83:82:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 06:45:46 2025 by rpki-client