Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft
File:                     df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft (raw, json)
Hash identifier:          IK3UZLbl0OEGIiUANaFFcXxY2bcSgV6/fCz4mc4olTk=
Subject key identifier:   7F:CE:58:A2:9C:3D:7A:66:7A:C5:C2:DD:EC:C0:A4:86:DC:51:91:9B
Authority key identifier: A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09
Certificate issuer:       /CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
Certificate serial:       010D0C9F43285848B8795C103BEB5DB113FE9D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft
Manifest number:          010D0C9F43285845464B28A2C2FBF55DA9F9C6C7
Signing time:             Thu 30 Jan 2025 22:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 22:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 22:00:00 +0000
Files and hashes:         1: bda6574d-81c2-38f7-b624-cdc878c38860.roa (hash: 0FQsabQm03sjK7XihAO0q+yxIuXPezYwm1s3h9Qqz6U=)
                          2: dd6ebc65-6375-3f3d-a4d4-7e79b1662d01.roa (hash: /Q7r99TOgjByo5EldiwE+6luAQfEyHHCqlnrtVNjHwc=)
                          3: df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl (hash: ehWRRRhtS6Rj1vYTN3TceQI57IgsNGYGCsrQzc8WlDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:79:5c:10:3b:eb:5d:b1:13:fe:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df2d2a52-5ca7-4a36-849f-a7d6b876e687
        Validity
            Not Before: Jan 30 22:00:07 2025 GMT
            Not After : Feb  2 22:00:00 2025 GMT
        Subject: CN=2729d85f-6ee3-41d3-ad79-89fafa62b484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:dd:34:7f:09:60:74:0e:1d:e8:0e:b1:1a:96:
                    e2:f7:f5:b2:3f:d2:fb:aa:10:30:d5:98:5e:0a:00:
                    5a:22:9f:85:76:84:6a:1f:fa:fe:42:43:c8:44:49:
                    b9:5e:f7:95:93:ff:71:64:51:cb:5e:8d:d8:90:3e:
                    08:86:d3:d2:59:79:f1:c9:6a:60:c8:15:fd:42:d6:
                    f8:4d:6e:77:cb:ab:c1:ec:89:b5:d1:43:54:ce:ac:
                    f3:9a:4b:a0:90:91:cd:11:b3:29:84:1e:49:e0:e4:
                    7f:a2:4c:bd:5b:91:20:eb:74:b7:1d:d0:34:08:b6:
                    c0:79:25:e0:7a:9e:6e:bc:dc:69:b0:6e:83:a0:eb:
                    81:92:36:58:18:5e:d9:52:45:d0:15:a9:21:81:81:
                    e6:4a:bb:2d:85:7a:77:30:9d:9a:3c:56:d6:69:49:
                    c8:29:93:fe:11:46:e3:c9:59:b9:3b:c5:00:83:94:
                    37:db:e0:38:c3:39:2a:6f:aa:ae:89:41:bc:8c:a4:
                    1a:e7:09:2b:79:e1:4d:94:e5:7c:57:8c:6e:04:5c:
                    90:c0:eb:a6:67:43:ca:ed:ff:d9:f4:00:60:4c:8e:
                    39:d1:9e:46:ce:46:36:df:0b:76:5b:54:7d:45:3f:
                    d4:2b:fa:97:ac:b0:98:5f:dd:c6:88:6f:d5:e2:01:
                    c4:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:CE:58:A2:9C:3D:7A:66:7A:C5:C2:DD:EC:C0:A4:86:DC:51:91:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687/df2d2a52-5ca7-4a36-849f-a7d6b876e687.crl

            X509v3 Authority Key Identifier:
                keyid:A0:DF:EE:0C:A3:CA:99:A2:2F:92:AF:E5:F6:52:C1:DF:94:46:97:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/df2d2a52-5ca7-4a36-849f-a7d6b876e687.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:c4:d5:04:56:9e:ab:aa:4f:88:30:3b:7d:b9:79:f9:c0:4e:
         0b:01:47:6f:cf:ae:00:72:d3:d6:11:7f:54:c2:a2:0e:c7:bc:
         f1:46:98:bc:55:6e:ad:48:c9:14:3d:90:01:a2:2f:78:e8:f2:
         eb:d1:b0:4a:e8:30:10:14:d9:83:c2:aa:ed:76:4d:1b:ed:61:
         d6:1c:20:9d:e3:c1:29:ca:a6:ef:78:f5:87:a8:8b:82:b1:c5:
         0c:6d:86:59:81:ae:2a:92:86:4e:2d:a1:b4:b7:f9:af:07:a3:
         1e:18:3c:7e:3e:8f:4f:9c:35:6f:62:b0:af:4f:f4:c1:e2:f3:
         10:6f:0a:20:ed:b4:1f:9c:2d:cf:fc:f3:6c:36:3b:ae:62:6d:
         0d:0e:3e:0e:50:64:c2:0f:49:2f:61:ec:ff:84:b7:e8:37:6c:
         ff:41:9f:d8:6a:7c:e5:55:c0:a0:3e:f2:1c:dd:1a:d7:d0:48:
         13:ae:7c:d3:90:3b:10:a0:08:6a:00:f4:ba:61:88:bf:7a:bb:
         c4:9c:22:19:03:03:e2:bd:f2:1e:5c:50:8b:74:54:13:47:15:
         a5:9a:be:d5:e6:bf:28:e7:78:3f:f5:0f:b0:ce:b6:6b:76:26:
         33:cd:25:15:a5:a5:23:40:ef:93:93:b8:a2:eb:bb:57:cf:8a:
         78:f9:27:4f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi4eVwQO+tdsRP+nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGYyZDJhNTItNWNhNy00YTM2LTg0OWYtYTdkNmI4NzZl
Njg3MB4XDTI1MDEzMDIyMDAwN1oXDTI1MDIwMjIyMDAwMFowLzEtMCsGA1UEAxMk
MjcyOWQ4NWYtNmVlMy00MWQzLWFkNzktODlmYWZhNjJiNDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt00fwlgdA4d6A6xGpbi9/WyP9L7qhAw1Zhe
CgBaIp+FdoRqH/r+QkPIREm5XveVk/9xZFHLXo3YkD4IhtPSWXnxyWpgyBX9Qtb4
TW53y6vB7Im10UNUzqzzmkugkJHNEbMphB5J4OR/oky9W5Eg63S3HdA0CLbAeSXg
ep5uvNxpsG6DoOuBkjZYGF7ZUkXQFakhgYHmSrsthXp3MJ2aPFbWaUnIKZP+EUbj
yVm5O8UAg5Q32+A4wzkqb6quiUG8jKQa5wkreeFNlOV8V4xuBFyQwOumZ0PK7f/Z
9ABgTI450Z5GzkY23wt2W1R9RT/UK/qXrLCYX93GiG/V4gHEPwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFH/OWKKcPXpmesXC3ezApIbcUZGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJk
MmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2Yjg3NmU2ODcvZGYyZDJhNTItNWNhNy00
YTM2LTg0OWYtYTdkNmI4NzZlNjg3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZGYyZDJhNTItNWNhNy00YTM2LTg0
OWYtYTdkNmI4NzZlNjg3L2RmMmQyYTUyLTVjYTctNGEzNi04NDlmLWE3ZDZiODc2
ZTY4Ny5jcmwwHwYDVR0jBBgwFoAUoN/uDKPKmaIvkq/l9lLB35RGlwkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kZjJkMmE1Mi01Y2E3LTRhMzYtODQ5Zi1hN2Q2
Yjg3NmU2ODcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCkxNUEVp6rqk+IMDt9uXn5
wE4LAUdvz64ActPWEX9UwqIOx7zxRpi8VW6tSMkUPZABoi946PLr0bBK6DAQFNmD
wqrtdk0b7WHWHCCd48EpyqbvePWHqIuCscUMbYZZga4qkoZOLaG0t/mvB6MeGDx+
Po9PnDVvYrCvT/TB4vMQbwog7bQfnC3P/PNsNjuuYm0NDj4OUGTCD0kvYez/hLfo
N2z/QZ/YanzlVcCgPvIc3RrX0EgTrnzTkDsQoAhqAPS6YYi/ervEnCIZAwPivfIe
XFCLdFQTRxWlmr7V5r8o53g/9Q+wzrZrdiYzzSUVpaUjQO+Tk7ii67tXz4p4+SdP
-----END CERTIFICATE-----
Generated at Fri May 9 14:32:05 2025 by rpki-client