Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft
File:                     1dc788a1-457a-433f-af51-0da74008d8af.mft (raw, json)
Hash identifier:          KKkM30OF4PqwIbRrmwJSx0KIjdHGM4Ia0DBmSOsIbJ0=
Subject key identifier:   2A:51:F3:5E:CB:C4:74:3A:50:3B:67:21:D4:88:51:17:E4:59:F9:9D
Authority key identifier: 9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41
Certificate issuer:       /CN=1dc788a1-457a-433f-af51-0da74008d8af
Certificate serial:       010D0C9F43285848BA1A46DDF572D97CB42ABA40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft
Manifest number:          010D0C9F43285843C3DEF7501ACC71FF14CEC092
Signing time:             Fri 31 Jan 2025 12:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 12:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 12:00:00 +0000
Files and hashes:         1: 1dc788a1-457a-433f-af51-0da74008d8af.crl (hash: VkK4a/J3wwDDCzCvb7hzgNMduAcpuHp1iTBFFJavIa0=)
                          2: f808789f-4b24-336c-b785-a0d572ba3992.roa (hash: YMynUOXWzW7TQi0VAvNGn05VFBaGHZmW2FxvpSUu19k=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:1a:46:dd:f5:72:d9:7c:b4:2a:ba:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dc788a1-457a-433f-af51-0da74008d8af
        Validity
            Not Before: Jan 31 12:00:07 2025 GMT
            Not After : Feb  2 12:00:00 2025 GMT
        Subject: CN=889d0553-0058-4743-a9b5-0b537af5259a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:08:30:20:ce:dc:96:86:4e:4c:9e:b7:a1:12:
                    c9:e4:67:f3:cc:af:c8:c5:c3:f7:68:e8:6c:e9:3f:
                    34:85:2c:e0:bb:83:4c:33:41:55:9c:14:c4:ee:5a:
                    89:0e:f0:aa:6a:55:e2:31:d5:3d:9d:d9:77:71:6a:
                    fc:2e:44:bd:bd:ad:5c:33:6e:2a:b5:aa:c3:26:3f:
                    dc:ad:b5:5e:ce:de:a6:e2:60:44:31:42:fe:13:6b:
                    75:93:0b:0b:7a:2d:1e:bc:bf:08:1a:d0:86:58:cd:
                    15:d8:2d:9b:fe:9e:87:85:9a:e8:a3:e4:05:de:c0:
                    b7:d7:46:9f:c5:c8:34:d6:77:70:0e:2d:93:1f:e8:
                    fa:ff:bb:d3:96:28:8d:4c:ea:7d:fb:1d:17:30:ba:
                    1e:58:e4:3a:5a:68:5e:8a:53:3f:24:83:19:66:eb:
                    fe:1b:c5:13:e5:00:9d:3f:9e:c2:c3:da:2a:b0:69:
                    99:a4:68:38:12:e9:ae:e3:ec:74:90:40:33:e3:f7:
                    49:de:76:83:05:92:c6:7a:4e:6a:9d:f5:ee:37:e6:
                    b4:53:a4:3c:66:b6:da:f4:45:51:f6:22:9b:69:b3:
                    df:17:ed:2b:58:df:44:4e:46:11:0c:db:9c:f9:51:
                    0a:38:d3:74:7a:ee:99:2d:08:19:ab:5d:79:40:7f:
                    36:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:51:F3:5E:CB:C4:74:3A:50:3B:67:21:D4:88:51:17:E4:59:F9:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af/1dc788a1-457a-433f-af51-0da74008d8af.crl

            X509v3 Authority Key Identifier:
                keyid:9A:BF:69:62:4E:C1:EF:B5:92:7D:86:F4:71:F3:B6:02:2D:42:A6:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1dc788a1-457a-433f-af51-0da74008d8af.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:7c:35:39:c8:cf:b2:aa:f0:f7:25:4a:fe:00:5e:02:70:2c:
         ab:96:3d:85:fd:ee:17:7b:84:ad:d5:c6:9d:33:f6:cb:e4:e0:
         23:4e:09:6d:81:04:7c:58:82:ca:07:f9:86:1f:2a:7e:52:3e:
         29:da:c5:69:94:4e:56:69:4e:c3:2e:bb:4c:36:bd:2f:80:a2:
         3d:52:1c:cd:7f:32:12:5c:69:08:ad:f4:54:93:1d:d6:7e:62:
         18:89:71:f8:fd:e2:f6:28:bf:62:29:e7:90:e7:74:95:c9:ee:
         3a:00:99:9d:57:2f:a7:c6:73:de:ec:b8:6b:77:d5:4e:46:da:
         ca:a0:fe:02:83:ec:a9:e9:5e:a2:8c:2d:ac:8e:26:df:49:cd:
         80:b5:d8:55:d7:a8:e0:3d:cd:32:01:95:80:ab:ac:ff:31:e3:
         c5:a8:7b:3b:42:d4:00:55:81:1a:7d:e8:21:76:01:8f:3c:cf:
         47:b8:28:5d:b6:b5:05:22:97:3c:c8:d1:b1:de:93:dc:80:a1:
         83:9f:53:46:65:50:04:84:2d:c0:97:cd:95:d0:da:50:6e:a1:
         8f:fa:cf:5f:0a:d5:42:eb:18:bc:3d:9b:90:89:7e:d8:0d:c9:
         d3:06:66:02:d6:a6:e5:ad:e2:f3:21:fb:21:49:43:92:53:a0:
         f2:13:fb:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 11:50:46 2025 by rpki-client