Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft
File:                     a99f9d36-f970-481f-ae52-e74a6f8a7541.mft (raw, json)
Hash identifier:          2FmCKEdjMtCJYPyndmWmB4Y67O614Kv5gNfZhni3F0k=
Subject key identifier:   C5:6B:F1:94:7E:C9:70:65:FE:16:B4:0C:3C:29:8C:79:19:6C:09:82
Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B
Certificate issuer:       /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
Certificate serial:       010D0C9F43285848B949D1387A67D8A6DB53A200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft
Manifest number:          010D0C9F43285844359F5DE769DB6B9B4EDE3C79
Signing time:             Fri 31 Jan 2025 05:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 05:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 05:00:00 +0000
Files and hashes:         1: a99f9d36-f970-481f-ae52-e74a6f8a7541.crl (hash: RgtEp5XBHew9eCdc1r/+3PVKWAFZSp+rQ8U2tPVk93s=)
                          2: d03b1cff-ba5d-3add-8781-7211493b24dd.roa (hash: JVSF4aj86ZK2/l3YaAHDanpdUfd2ww7wSKwnhF9PMhs=)
                          3: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (hash: rxAtvNAigLP9rYxuGMj5Az/uxxn/FOGTxhIiseykc2c=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:49:d1:38:7a:67:d8:a6:db:53:a2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
        Validity
            Not Before: Jan 31 05:00:07 2025 GMT
            Not After : Feb  3 05:00:00 2025 GMT
        Subject: CN=24452a34-8ab3-4096-bd03-6b76c940b531
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:93:2f:01:18:98:8a:f7:cd:e7:af:ba:3f:2a:
                    8f:3d:f7:17:2d:6d:dd:55:80:6e:43:31:1b:d7:c4:
                    7e:47:61:63:18:de:8d:55:72:37:f1:af:fa:19:9d:
                    63:68:1e:a3:e6:b3:c8:df:2d:8d:cc:c6:4a:47:8f:
                    19:c6:55:b5:13:fc:30:26:35:5d:0c:d1:a9:42:f4:
                    a4:05:77:76:58:56:30:23:c1:04:f9:06:55:1f:d0:
                    e6:24:11:7c:18:51:20:f7:97:b3:25:34:af:80:cc:
                    f6:4f:45:19:c0:06:01:30:ce:b4:99:b0:f6:41:c5:
                    73:27:1c:b3:cf:e3:81:d5:1e:62:c7:2c:08:56:63:
                    8a:59:ce:97:c3:d0:c8:d8:50:54:26:e6:c6:d4:0c:
                    55:a6:9c:e4:22:a7:b2:b6:56:e5:df:00:73:f6:72:
                    8a:b1:ce:aa:e2:9c:29:35:34:1d:bc:bf:01:80:00:
                    12:69:f3:ff:57:91:21:4e:c7:1a:35:27:86:be:21:
                    f4:36:a8:b4:fb:0c:75:9c:4a:46:a4:f1:a3:47:28:
                    47:8f:bd:fa:37:6e:89:35:d2:49:bf:ea:1c:c4:b5:
                    4f:40:2e:7c:10:34:1c:2e:27:17:33:c8:40:75:78:
                    92:c0:9e:05:09:e8:fc:81:10:50:a8:ac:42:57:20:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:6B:F1:94:7E:C9:70:65:FE:16:B4:0C:3C:29:8C:79:19:6C:09:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl

            X509v3 Authority Key Identifier:
                keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:41:79:d4:06:be:ce:b0:77:2c:f5:73:9d:39:64:22:03:f0:
         2b:75:8b:d8:5d:d3:de:8c:80:26:b7:1a:2b:3b:59:2d:98:cd:
         15:5e:ad:ca:ec:c0:01:e3:ea:84:f9:80:34:66:ea:ed:3e:16:
         10:87:e5:a5:80:fd:18:bb:36:a3:43:b3:16:65:99:c1:b2:15:
         6e:3f:21:7b:f4:92:eb:ec:db:fc:8e:f1:3a:87:3a:1a:3e:b4:
         1b:34:9a:94:66:f4:53:35:fd:ce:54:21:55:41:55:43:67:12:
         57:09:ab:46:bc:fb:e9:f7:50:1b:de:ba:db:7a:0d:ed:08:48:
         6f:a5:3e:d4:55:c3:34:4f:71:9b:75:2a:e8:18:f9:91:b3:16:
         1f:f6:59:56:e8:65:c4:58:70:67:6e:43:6e:3c:68:9f:cd:64:
         4e:a7:ac:4c:99:07:9b:08:24:aa:1f:d2:bf:60:e2:51:f4:64:
         4b:9f:4d:62:04:4d:e9:5f:72:42:78:1f:94:05:ce:e2:d5:5a:
         50:72:51:dd:a2:91:e1:dc:a5:88:09:d8:ae:bb:76:97:ca:ec:
         5e:3d:80:42:05:46:29:d7:2a:d8:15:5e:8a:4a:96:24:f0:18:
         24:fd:16:4f:0f:27:23:f5:51:76:a6:5d:2c:f0:b0:a0:c5:e3:
         e7:f2:cf:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 17:52:07 2025 by rpki-client