Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
File:                     511ed25c-3ac7-4d86-9290-879e3813322e.mft (raw, json)
Hash identifier:          DFaAvE0DH7xHKlZTWsPlBDBOotAtEAdG21weauqE3rY=
Subject key identifier:   53:BE:65:AD:BB:E8:AE:96:BF:64:B1:B4:D9:1D:68:EB:DD:4D:7A:63
Authority key identifier: BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E
Certificate issuer:       /CN=511ed25c-3ac7-4d86-9290-879e3813322e
Certificate serial:       010D0C9F43285848B85B95ABC46D85E36CE80700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft
Manifest number:          010D0C9F43285841EFE6102B086F82254ED0469D
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:00 +0000
Files and hashes:         1: 511ed25c-3ac7-4d86-9290-879e3813322e.crl (hash: c3Zkm5Gz2HXeQp9PF/p+XrVJTlNcawJHSEGWWfPomAA=)
                          2: a1fe6b98-8ca8-3bd4-b108-6345c52cff1e.roa (hash: +t2ts8Bc9a2GEJL1Cg8Lvgt9PyFHSw5PbdqnZMT063M=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:95:ab:c4:6d:85:e3:6c:e8:07:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=511ed25c-3ac7-4d86-9290-879e3813322e
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  2 21:00:00 2025 GMT
        Subject: CN=b5dc312e-fe7b-4a90-8e6e-f44647f9ab29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:e4:4b:06:45:40:2b:44:c9:fa:94:47:e9:a0:
                    bf:3a:a8:a8:1b:09:4b:aa:c2:63:96:17:12:24:81:
                    ce:f2:42:62:72:3e:3e:49:e6:9f:dc:8c:c8:be:5a:
                    a5:b4:2a:59:e5:a6:1e:48:65:03:a2:3e:92:53:b4:
                    96:cb:ea:cd:34:fd:41:94:0d:a3:78:bd:83:56:5c:
                    65:9f:ed:5b:f2:74:91:3d:a3:d1:df:3a:9f:51:2f:
                    54:4d:0f:eb:7c:e0:2b:1d:a1:cb:a5:ce:58:c8:5c:
                    c9:da:e2:8e:7a:aa:bc:b5:6b:2e:ee:9b:7e:66:95:
                    d7:96:43:e6:a8:d4:9f:cc:e1:01:66:12:9d:4a:b9:
                    ad:c6:14:be:4e:1f:1b:10:9d:05:3b:13:c0:87:67:
                    92:03:83:c5:ae:f3:b8:8f:c0:32:50:ea:bd:af:89:
                    09:d1:5c:d6:13:bc:b3:90:57:5a:4c:75:e8:6f:d3:
                    68:df:4b:10:d6:97:77:a8:a5:6e:79:14:78:e0:09:
                    09:16:d4:59:eb:06:c6:94:1b:7d:84:e5:88:85:b5:
                    f8:90:a2:a8:61:d8:53:e1:52:b8:ae:33:5a:1f:50:
                    63:0c:4b:90:e1:9c:16:fc:f0:c9:4c:3c:88:cc:c7:
                    7f:e2:9f:ea:ba:5d:9e:ab:28:98:1a:0b:11:7a:e8:
                    2b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BE:65:AD:BB:E8:AE:96:BF:64:B1:B4:D9:1D:68:EB:DD:4D:7A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e/511ed25c-3ac7-4d86-9290-879e3813322e.crl

            X509v3 Authority Key Identifier:
                keyid:BE:D7:8A:60:72:85:70:10:7B:28:43:F1:2E:E5:D4:DC:6F:C7:5B:2E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/511ed25c-3ac7-4d86-9290-879e3813322e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:37:17:96:f8:bd:7a:08:4b:73:6c:93:d9:f8:18:cb:66:06:
         88:1e:c3:28:51:9f:d7:2c:18:23:29:12:c8:85:f5:80:e5:1f:
         90:df:98:aa:6f:b4:2f:61:1d:5c:40:d9:e9:26:b5:7c:34:71:
         d4:a1:f0:3d:b4:cd:12:eb:8e:75:9e:ed:c2:89:74:27:2e:d0:
         2c:58:7a:c3:7d:65:71:80:20:c7:48:e8:05:d6:2f:81:2d:46:
         3e:81:eb:70:7f:50:64:5b:9c:bb:b0:05:42:02:96:40:8e:f7:
         ef:c5:5c:df:f6:54:d3:d7:dd:61:18:9e:e3:7a:73:3b:61:ae:
         fa:36:f9:ca:71:41:6b:f5:b8:8b:66:19:2a:ed:91:cd:c9:4c:
         12:10:96:8d:1c:eb:8b:0d:4e:8d:c4:bd:82:1f:79:6e:3b:6c:
         c9:b1:1a:2d:f3:42:78:db:ec:16:b3:0c:80:77:68:3c:19:b3:
         ae:15:9b:69:b0:52:1b:28:49:fa:5b:e8:6f:b1:f3:1c:57:4f:
         a8:e4:11:52:de:ad:2d:1e:ef:57:3b:d1:d5:42:20:f9:e2:6b:
         96:ed:42:34:26:67:d5:e5:9e:64:aa:ec:cc:7a:c9:95:27:ef:
         f1:7e:09:fa:8f:c1:20:8f:90:43:ca:f3:04:4d:ce:d1:02:9a:
         26:95:36:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 17:48:09 2025 by rpki-client