Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft
File:                     35b4b3a4-a195-4325-8f07-9376a8ef2903.mft (raw, json)
Hash identifier:          jp9r0uIaIvsuOto1Tzs1cKtf6ZMxYYA0zAQTiSuMZyM=
Subject key identifier:   E9:46:DA:CB:FA:4B:BB:84:73:6B:95:53:DE:F6:12:07:4E:93:42:33
Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66
Certificate issuer:       /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
Certificate serial:       010D0C9F43285848B85B95DC93564AFD12BA2700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft
Manifest number:          010D0C9F43285840FFEB05220C09EDB2BD3F4856
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:00 +0000
Files and hashes:         1: 068688c1-0def-318a-acc5-4f64a4b57119.roa (hash: QL3dcyFi/9F1JcaQqCdrtBJ07e5dn4+W5zH778Ej/w4=)
                          2: 35b4b3a4-a195-4325-8f07-9376a8ef2903.crl (hash: sSZttxa5AXOcGpIxxLsAvhKeMbpUMPsxap95sJNXPmY=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:95:dc:93:56:4a:fd:12:ba:27:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  2 21:00:00 2025 GMT
        Subject: CN=a73ec639-4d42-4534-b780-cb46dfd51a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:cf:af:27:ff:4a:e6:d8:b7:a3:17:b0:bd:94:
                    ec:de:bf:63:8d:21:03:a6:78:70:1e:ee:18:8a:af:
                    7c:65:7f:d8:c1:5b:83:00:1e:d6:56:6d:65:72:34:
                    78:aa:46:af:92:97:4b:39:18:03:76:7e:fe:72:eb:
                    be:09:e4:df:6b:f2:bf:46:42:41:47:33:f8:00:97:
                    d6:55:02:2e:23:92:78:9b:43:35:3f:e2:ae:3f:1a:
                    c5:6d:bc:68:c2:ac:65:52:05:ae:4a:4b:92:2a:c2:
                    ce:d7:44:eb:2f:d2:1a:a9:7e:73:62:47:6d:02:18:
                    79:51:83:3a:06:00:08:83:5b:db:32:d8:c2:cc:7f:
                    16:59:f4:85:77:aa:24:59:bf:41:98:1f:4d:46:4e:
                    ce:dc:5b:fb:46:42:9e:58:3a:46:99:8e:5c:4f:e7:
                    f7:1e:0b:0e:23:bf:21:b5:41:87:1d:24:f6:64:66:
                    8a:3f:4d:8a:af:85:35:40:43:0e:e5:7c:4b:32:42:
                    b2:cf:0b:0a:8d:d4:2c:5d:30:de:d1:30:5c:77:c3:
                    c6:26:d5:ae:03:f5:ce:75:38:ed:91:7d:74:fb:5e:
                    f2:d5:f7:31:61:21:b9:a5:fe:09:e5:44:13:fd:ab:
                    da:f4:10:4c:8e:d6:a1:8d:0c:11:2e:c4:1c:ab:c5:
                    91:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:46:DA:CB:FA:4B:BB:84:73:6B:95:53:DE:F6:12:07:4E:93:42:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl

            X509v3 Authority Key Identifier:
                keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:23:90:73:28:d7:18:2d:ad:df:17:3b:ba:f0:13:38:48:98:
         6e:0c:86:44:90:cd:18:0d:10:35:37:bc:44:32:ca:f2:a4:54:
         35:aa:61:1b:29:25:8b:fe:90:ef:9e:e1:da:c8:8a:19:87:66:
         41:88:91:1d:ae:8b:79:12:6e:13:da:6d:4f:8a:cf:62:0c:1a:
         29:94:80:f7:55:96:da:e9:e0:15:74:df:14:d1:f4:54:b9:a3:
         40:9b:de:fe:7b:0d:81:ec:d1:90:d5:d8:96:29:e0:16:28:8d:
         ac:13:6e:42:ac:e7:b7:5f:24:e1:66:5f:87:c7:39:42:4a:fc:
         4b:8a:3c:e4:81:78:b0:5e:c7:92:4f:c4:e0:91:c3:8f:bd:d2:
         f5:6f:e8:36:9a:0d:45:b9:30:8f:9a:40:10:2c:1c:eb:8c:75:
         dc:a2:60:ed:58:99:06:27:cf:3e:7a:da:95:80:86:5a:6d:30:
         0e:ae:5c:c2:64:f7:0a:1b:25:92:37:84:94:3d:a5:62:0e:b9:
         43:58:14:c1:93:e6:e6:ea:0e:28:c8:a7:73:1a:8f:56:2a:54:
         e5:5d:a8:d1:2f:3a:92:74:4b:eb:bd:c6:c0:32:de:6e:60:54:
         73:10:f7:7d:6a:26:ed:eb:6b:c7:98:e6:98:60:6d:3f:86:0d:
         b6:59:d6:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:40:59 2025 by rpki-client