Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
File:                     d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft (raw, json)
Hash identifier:          qiHo7C93n1OyZf7tZm0VUgpj50BmsfWF9+Vtfpg+YeQ=
Subject key identifier:   0A:BC:6E:3B:34:69:CD:8A:7E:5D:F8:27:2A:56:94:52:7C:8A:E0:A7
Authority key identifier: 5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6
Certificate issuer:       /CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
Certificate serial:       010D0C9F43285848BA380CAE68A588F5BE408100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft
Manifest number:          010D0C9F43285841636D890175245AC831ED382E
Signing time:             Fri 31 Jan 2025 13:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 13:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 13:00:00 +0000
Files and hashes:         1: 991e404f-8d3f-3233-a41d-35ee0ba90723.roa (hash: euevQkGpGEa/LRkUWk/ebNJpQJDl4OPLviua1lj0bs0=)
                          2: d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl (hash: zdeMiiSudYEW2hWW0U5B30EB3GI2xXAAIwYYZlcyYKU=)
                          3: f3c81f4a-d997-391e-bd4f-3480c77100bc.roa (hash: pz7oJF+qR/QCrmrcmPTjB5VZnYyae64UbdHGxjyQCzg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:38:0c:ae:68:a5:88:f5:be:40:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d050b4de-f4c8-4ee7-907a-4df39253e1ae
        Validity
            Not Before: Jan 31 13:00:07 2025 GMT
            Not After : Feb  2 13:00:00 2025 GMT
        Subject: CN=c1b993ef-6c30-4ce7-aabc-2b0a3d72d13d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:30:e6:a3:5f:45:73:e0:92:26:27:6a:51:66:
                    53:a0:2b:41:7e:65:3c:51:50:4d:f8:c0:34:8a:9c:
                    62:da:ed:6c:cc:38:0d:d8:e7:03:98:47:6f:73:bd:
                    6d:2e:59:3d:9e:70:0d:53:88:34:97:f5:f9:f9:e4:
                    d9:18:c3:27:1c:13:28:13:2d:35:a0:cd:f6:c0:b5:
                    eb:46:5d:48:89:da:fd:ad:5f:3e:a0:fb:ee:2f:69:
                    7a:d3:5e:43:5a:83:12:58:dd:a5:e0:5c:a2:da:c5:
                    c0:60:e3:46:fa:5a:42:78:e7:f6:b0:b1:5f:56:3d:
                    e4:9e:99:70:9b:30:63:cc:4b:51:95:27:1f:2a:64:
                    74:27:d0:71:4c:3d:6f:6d:e7:a9:fd:d6:5e:ba:66:
                    ed:eb:7a:6f:4c:66:5d:e6:b9:a1:e2:02:28:0c:3f:
                    14:0d:a5:f2:8a:42:8b:d6:ac:c7:1a:6f:17:df:f4:
                    53:4d:23:24:e7:4c:a4:bd:01:82:06:31:8e:46:8f:
                    5f:18:0d:bc:92:8a:84:b8:00:b5:d9:1d:4c:ef:8c:
                    a4:64:36:d9:d9:9b:ec:10:b2:8c:19:d2:87:f4:24:
                    de:04:25:1d:52:4c:53:0a:47:0c:b0:69:c3:00:f4:
                    fd:95:ff:17:82:cd:cb:a8:f5:85:d6:3a:4c:12:0c:
                    bf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:BC:6E:3B:34:69:CD:8A:7E:5D:F8:27:2A:56:94:52:7C:8A:E0:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae/d050b4de-f4c8-4ee7-907a-4df39253e1ae.crl

            X509v3 Authority Key Identifier:
                keyid:5B:81:B6:A9:BC:F1:89:7D:05:CD:44:0D:F3:EA:0E:EF:1D:4D:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d050b4de-f4c8-4ee7-907a-4df39253e1ae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:6b:ba:17:fb:61:75:c4:dd:29:ec:e7:ee:83:26:fc:d0:40:
         17:2d:bf:b1:21:77:46:91:3e:29:e3:0c:c7:8f:e2:7e:7d:d0:
         35:13:c7:44:9b:e3:13:6e:71:f8:f4:a8:3e:4d:e3:8c:50:75:
         fb:7d:16:67:c6:67:42:af:c3:06:16:57:ab:4f:07:43:fb:b9:
         b8:55:9f:dd:9e:17:92:8a:da:fa:db:d7:00:63:17:fa:b3:78:
         83:bf:97:9b:1a:f6:b9:52:6b:fb:09:57:32:0c:0d:0a:80:d4:
         85:ba:03:93:b6:c5:a9:35:56:02:02:30:4d:2b:29:60:a3:0d:
         67:8a:10:2b:93:b0:dd:6e:70:56:c2:80:4e:47:c8:3b:5d:d6:
         4e:85:08:42:84:bd:c2:f9:fc:5a:15:f3:90:1c:7f:05:41:bb:
         c8:22:17:d4:ca:28:e9:41:d8:e9:12:e2:02:98:46:99:d3:4d:
         dc:68:18:02:06:9f:b7:b1:5c:cb:13:15:b8:68:c0:54:e2:05:
         bb:f9:1b:97:ec:38:f0:03:42:36:1e:16:e4:c6:8d:1b:c6:a0:
         ae:a4:7f:05:a9:8e:6c:a8:c5:b6:a9:56:8e:dc:bf:3d:bf:94:
         51:37:4f:3e:f8:69:8c:53:8a:e3:95:01:8c:4d:41:2a:67:17:
         d3:18:a0:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 26 16:41:27 2025 by rpki-client