Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft
File:                     397724ba-b516-4bac-893a-fcaae9e60f35.mft (raw, json)
Hash identifier:          jDLiYf+ZrUx8vtysACl/nGjL44x8YuljrRdlZST2Eec=
Subject key identifier:   0A:DC:D9:BE:C1:A1:7C:BC:7F:FD:09:7F:35:89:49:BF:B9:F4:06:65
Authority key identifier: 1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A
Certificate issuer:       /CN=397724ba-b516-4bac-893a-fcaae9e60f35
Certificate serial:       010D0C9F43285848B9A328077F620E9879AC0000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft
Manifest number:          010D0C9F4328584073A84884800E2111CA1A1CBF
Signing time:             Fri 31 Jan 2025 08:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 08:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 08:00:00 +0000
Files and hashes:         1: 2f4d68a2-02ee-3b78-97bd-f8cdbd0f6232.roa (hash: CYNuE0LV13UD553uLvkBIk5ttUw2goQ//8bXyj84I1M=)
                          2: 397724ba-b516-4bac-893a-fcaae9e60f35.crl (hash: B55I0ocbl3lqB/d1L1GpylokOGElIBfoBCcUvuPbwes=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:a3:28:07:7f:62:0e:98:79:ac:00:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=397724ba-b516-4bac-893a-fcaae9e60f35
        Validity
            Not Before: Jan 31 08:00:07 2025 GMT
            Not After : Feb  3 08:00:00 2025 GMT
        Subject: CN=6d5e6a83-3d29-4aeb-9218-c50da26750e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c2:01:b8:d6:03:23:28:00:48:a5:a3:de:fb:
                    2c:82:f9:ae:b7:27:44:1e:21:ae:bb:16:e3:05:c9:
                    ac:28:84:27:8f:77:51:1c:1c:b4:18:ad:a2:7a:8f:
                    b1:6e:d0:c9:bc:89:a5:4d:e6:7f:23:6b:93:62:c8:
                    ec:4a:f1:32:a7:db:b2:a8:8a:5b:3c:9c:68:fa:64:
                    c4:66:43:11:0e:80:10:af:64:ec:6c:28:25:48:c6:
                    fa:05:64:44:6d:ac:a6:d6:2e:45:66:e3:5b:d0:36:
                    1d:00:10:56:3b:06:c0:cb:45:89:45:5a:12:23:69:
                    0f:c9:57:b0:32:c5:e2:1b:25:3a:ad:c5:54:cb:12:
                    2d:16:14:14:1d:42:b2:6f:7c:41:df:bf:60:ff:a6:
                    f2:5f:d5:f2:86:db:29:4a:2e:ea:d4:29:36:9a:84:
                    a2:f7:c0:89:87:15:6e:1f:d4:bc:4c:6e:2f:f5:23:
                    96:af:65:f8:36:bd:77:61:9a:2b:1d:64:31:cd:a4:
                    d5:91:a5:a2:15:e0:1b:a0:b0:e9:a4:e3:a4:71:c6:
                    e8:3a:22:38:b6:49:1a:7e:48:c3:2d:92:7f:66:85:
                    f7:43:b5:c2:8e:46:1a:33:c4:5d:28:37:03:f0:ff:
                    a4:97:16:c6:f6:5c:dc:4e:d2:9a:3c:92:60:0b:a1:
                    0b:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:DC:D9:BE:C1:A1:7C:BC:7F:FD:09:7F:35:89:49:BF:B9:F4:06:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35/397724ba-b516-4bac-893a-fcaae9e60f35.crl

            X509v3 Authority Key Identifier:
                keyid:1D:42:77:C5:31:A9:37:CC:E7:05:AD:CF:2B:3B:6B:3F:B7:EA:2C:9A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/397724ba-b516-4bac-893a-fcaae9e60f35.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:71:ae:0d:d1:d3:ae:4b:8b:b8:77:39:c9:13:66:98:74:84:
         7e:5c:5d:36:8c:2c:e7:57:39:22:20:96:78:e1:0a:a3:ee:e6:
         c6:58:cd:64:91:26:6c:45:b9:d1:a6:68:c5:60:6e:14:21:53:
         e6:c2:87:2a:c6:3c:1b:0a:a5:2e:41:54:a0:74:43:fc:e3:55:
         d1:26:9d:52:4d:5e:04:9e:41:d3:b9:49:25:95:11:e8:52:e0:
         e6:82:69:6b:2f:0b:15:15:fb:97:df:82:b6:aa:79:3a:24:cc:
         2d:81:06:d4:3e:ad:a4:8c:48:dc:98:e5:c6:9c:31:fe:e6:45:
         76:f5:ab:ff:d5:48:90:dc:54:69:ff:08:7b:97:78:1f:bd:2d:
         23:05:e7:a2:1d:f6:6f:b1:15:0d:35:79:3a:17:a5:d7:63:16:
         91:3c:a5:9e:d5:32:65:77:54:8a:a6:53:2e:bc:b5:98:f3:f4:
         c3:df:41:20:da:d6:ad:14:d2:7b:be:1e:8e:30:2e:3d:1b:26:
         e8:12:4d:55:14:dc:7e:5d:19:e2:7e:19:78:d5:f1:de:1b:94:
         49:04:5d:b9:08:ef:62:94:29:b2:93:8c:7e:eb:ac:c9:54:b3:
         52:19:63:a8:ca:43:17:e8:3e:a6:de:8f:46:c7:b5:c5:53:07:
         10:df:31:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 08:06:30 2025 by rpki-client