Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft
File:                     99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft (raw, json)
Hash identifier:          q4DmySQgiZz0lLKGLOQ1kZlls7315rAPMWV166rADR4=
Subject key identifier:   75:F0:FF:A5:2A:D8:41:B2:33:71:F2:99:D1:06:BA:11:02:3B:CA:58
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Certificate issuer:       /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial:       010D0C9F43285848BA9161E0DB12CE79773C4940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft
Manifest number:          010D0C9F432858411599BB6BCA2A10368C220E70
Signing time:             Fri 31 Jan 2025 16:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 16:00:00 +0000
Files and hashes:         1: 14f73e52-7825-3f57-b7ce-56bda9756aa4.roa (hash: cBMDQEOGFmsgyJ0H+KODgrHJVybgjDX6ow4RmPUlF4c=)
                          2: 99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl (hash: n+RBH6J+6qsKKTNRqlMVDd+HVYeHX33JOEi8Xj3ptsY=)
                          3: b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa (hash: 0i33la8sGDa4UvxlOtc9L/cMnqH2mfgvQNIcpGOxJpA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:91:61:e0:db:12:ce:79:77:3c:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
        Validity
            Not Before: Jan 31 16:00:07 2025 GMT
            Not After : Feb  2 16:00:00 2025 GMT
        Subject: CN=6acf3b67-7670-4872-8145-2b18d08225db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cb:96:57:60:9d:4b:30:c6:1f:e6:0b:86:e1:
                    c2:7b:98:f6:2e:01:9e:b5:bb:72:6d:17:a3:17:36:
                    44:b4:9b:bb:89:29:c8:59:90:35:ea:86:40:b2:7d:
                    d3:db:f9:b7:74:e6:c9:82:bc:a0:a8:f5:15:a6:0d:
                    aa:9a:a5:dd:d5:03:bb:27:e6:43:71:db:69:a1:2d:
                    d5:e4:bb:cc:e6:65:94:de:d5:04:13:02:00:96:2c:
                    b5:0c:20:ef:25:58:48:1c:25:0b:ea:ee:62:97:35:
                    5d:b1:c8:3a:82:f9:ec:ba:8a:42:5a:b8:4f:18:66:
                    25:04:a4:58:46:9f:bf:28:fe:a5:14:b5:c2:fc:cc:
                    a2:a4:47:54:36:2e:55:d2:31:d7:7d:59:eb:69:3d:
                    10:77:c4:3e:eb:23:cc:6b:61:f5:4f:51:7f:e0:45:
                    b5:ae:7f:05:33:b8:a8:63:ed:ed:ac:c3:7c:fa:9c:
                    72:8b:76:78:1e:46:d5:bb:89:eb:fa:fd:5d:d5:50:
                    58:68:c3:98:59:de:07:c8:10:1f:a6:e6:a8:36:5c:
                    22:f9:39:24:25:5e:c6:40:85:4d:89:df:35:73:49:
                    8a:b7:d9:63:b2:ad:2d:23:86:83:be:63:5e:fc:16:
                    c4:07:d1:91:a5:e8:2c:9e:67:d9:58:55:12:2f:12:
                    ca:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:F0:FF:A5:2A:D8:41:B2:33:71:F2:99:D1:06:BA:11:02:3B:CA:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl

            X509v3 Authority Key Identifier:
                keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:35:68:81:3e:54:51:09:0f:f7:49:cd:e8:87:44:47:f4:77:
         c0:32:92:c3:93:a1:43:b9:bb:47:76:27:e9:c1:42:3e:69:99:
         7b:5d:96:d0:81:6d:d8:54:11:1b:b2:75:dc:2a:68:49:39:31:
         6b:e4:54:9f:31:2e:cb:63:6a:29:f8:27:02:55:4d:09:21:73:
         30:cb:46:de:04:22:18:93:63:34:52:32:6b:40:82:eb:b4:d3:
         4e:8b:28:86:03:85:07:97:f6:ec:d3:36:d4:36:88:0d:0c:9d:
         1b:e7:3d:57:d0:11:90:d2:71:5b:3a:92:e5:08:16:a1:ed:a5:
         91:36:9a:2d:0c:c7:67:58:b7:e9:f5:ef:5b:be:bd:15:ff:0c:
         25:26:2c:4f:a5:6f:d5:4f:60:a5:51:de:2a:73:d0:c6:af:5a:
         ae:a3:4c:47:f2:4f:8d:6a:44:16:14:f8:94:30:5f:83:d8:16:
         35:ac:dc:05:ee:a6:99:81:9b:b9:27:c9:27:75:e6:eb:c5:c9:
         1e:03:7b:40:bb:bc:10:79:f2:dc:ee:43:9a:32:99:c4:51:89:
         10:09:0b:30:b5:28:c7:7e:e7:2d:8e:c6:16:6c:aa:ab:ef:91:
         69:99:33:c6:2b:e8:69:5e:15:46:d6:e1:d4:6c:e6:37:af:b0:
         62:a6:32:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 03:38:43 2025 by rpki-client