Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
File:                     ac870f3e-b014-4387-bb59-63f4192b5665.mft (raw, json)
Hash identifier:          m9Hgx0Ed7l8BbLQCruSOh/8O1v1loTmVSXv1vXwyjHU=
Subject key identifier:   F6:D0:1E:CC:C3:12:14:47:20:97:80:BA:99:C2:11:15:B6:4C:40:47
Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Certificate issuer:       /CN=ac870f3e-b014-4387-bb59-63f4192b5665
Certificate serial:       010D0C9F43285848B8D2B42026E26ED7143FBE80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
Manifest number:          010D0C9F43285843C5670C91ACAFC119817959D1
Signing time:             Fri 31 Jan 2025 01:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 01:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 01:00:00 +0000
Files and hashes:         1: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (hash: uEYw5ad9xYdB3SQiwt5pXI47YaOgbGCZvQ9YGQ83P18=)
                          2: ac870f3e-b014-4387-bb59-63f4192b5665.crl (hash: UudiAAzHx/VF4LPYOOD+g4wAy85mUzsNY+DvuNZVX7g=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:d2:b4:20:26:e2:6e:d7:14:3f:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665
        Validity
            Not Before: Jan 31 01:00:07 2025 GMT
            Not After : Feb  3 01:00:00 2025 GMT
        Subject: CN=888a8718-a346-47b0-a0a1-1e9a7d76b2b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:2b:e5:7e:b3:39:8f:55:9b:97:ae:cc:ff:5a:
                    89:68:43:5d:9f:28:c1:65:1d:27:9c:df:2d:87:86:
                    24:dd:3c:c4:c3:85:72:cc:b9:35:9f:a4:3c:58:77:
                    51:1c:eb:87:21:a7:a6:68:cd:f7:71:1c:73:f8:9f:
                    dd:e2:78:e0:a4:1a:cf:64:32:d6:b3:b4:22:29:b4:
                    a0:ba:cb:22:65:e6:47:dd:2d:34:1f:64:ad:28:75:
                    62:66:83:a2:49:bd:b8:4e:59:85:07:b8:89:c7:80:
                    90:e3:c4:6c:17:c9:d5:9a:1e:79:5f:70:9b:5f:2a:
                    ae:21:f8:02:54:61:b8:c4:5e:b5:49:6a:be:c2:b7:
                    8b:d4:c9:fb:d0:5e:43:3b:f1:66:89:a6:fe:83:97:
                    2f:a7:27:bc:98:73:4a:8e:87:e2:6a:fc:8f:d5:69:
                    7f:c2:82:5f:19:da:93:4d:fb:80:8c:1b:a1:a2:da:
                    a2:7b:95:cd:56:db:5e:fa:06:91:09:7f:c4:61:6d:
                    1d:e8:f0:35:8c:f7:96:ef:28:63:44:b4:1d:cd:91:
                    79:96:49:dd:78:82:41:a2:f6:23:2b:a7:e5:39:36:
                    c4:94:57:15:50:63:cc:12:83:38:1f:c8:08:73:92:
                    97:8c:d9:a0:76:43:ca:c5:94:67:b8:2d:2e:23:14:
                    d8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:D0:1E:CC:C3:12:14:47:20:97:80:BA:99:C2:11:15:B6:4C:40:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:7e:d1:0c:6a:3d:e5:5b:6b:c1:01:e5:7c:95:2b:3a:8f:d8:
         e9:c9:97:33:04:20:0e:20:72:b4:ae:a9:58:52:7f:ad:e9:72:
         6e:f0:87:ca:26:22:01:14:65:71:ac:a3:96:74:d9:fd:00:ee:
         ce:a5:c9:0b:f9:26:b7:66:da:3a:2a:b9:77:ac:16:08:59:68:
         5a:e3:1b:41:30:c0:19:d7:1f:35:76:0d:c2:52:79:a0:38:8d:
         b2:05:f1:36:fa:05:ba:d5:c3:ff:62:ce:14:73:06:99:1f:d4:
         b7:db:7f:4c:e0:b9:be:3e:ce:91:c4:d8:b2:1d:fe:23:df:ef:
         74:28:a0:ab:be:3e:18:ce:90:d3:2b:bc:52:a8:a1:c5:d9:19:
         cc:7c:b2:96:a0:95:fc:12:55:b9:89:9f:4e:bf:7a:59:ed:41:
         29:cd:a1:a4:ad:4b:f2:bb:5d:d0:e2:b7:0e:76:7d:ff:0d:12:
         3a:f7:94:1a:9c:bb:35:1c:d2:08:32:b9:11:a5:98:d1:7a:08:
         c7:a0:51:c2:13:3d:f8:35:fc:42:06:c1:0b:1c:75:12:5e:8d:
         c4:8a:3c:a2:85:c8:1d:34:8e:c3:33:2f:e5:f5:47:bb:6b:70:
         bd:69:4b:2e:30:09:52:6e:5c:13:eb:ed:5e:96:30:bc:bb:de:
         b0:21:ae:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 21:38:00 2025 by rpki-client