Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft
File:                     f9b1a11d-20ed-494f-a473-5ebece521a34.mft (raw, json)
Hash identifier:          FBu8NY4Nb/0A79vGj4zLi43OirKZgKsSYESqf7zcmNQ=
Subject key identifier:   5F:14:6F:76:82:D9:7D:16:10:EC:6B:FD:64:D0:4D:3B:82:A1:F4:9E
Authority key identifier: 33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29
Certificate issuer:       /CN=f9b1a11d-20ed-494f-a473-5ebece521a34
Certificate serial:       010D0C9F43285848BACCF18029E58F7CA8EEFB80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft
Manifest number:          010D0C9F43285841C86050978DC5184846F6B50E
Signing time:             Fri 31 Jan 2025 18:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 18:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 18:00:00 +0000
Files and hashes:         1: f4a678fd-ed16-368c-9b2f-0942aeefaad2.roa (hash: mHNLlUAQ7eMST3iE600Y6wKXIHW+nuHWE9Eenri3ic8=)
                          2: f9b1a11d-20ed-494f-a473-5ebece521a34.crl (hash: FvmXMHaIg/SZAMp9rz37dsRPUl4U7x2i0E/B4+EKuDI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:cc:f1:80:29:e5:8f:7c:a8:ee:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9b1a11d-20ed-494f-a473-5ebece521a34
        Validity
            Not Before: Jan 31 18:00:07 2025 GMT
            Not After : Feb  2 18:00:00 2025 GMT
        Subject: CN=41b66844-6893-4a62-ba38-2332e0aae5b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:37:31:16:93:c1:f0:95:62:97:6e:33:79:9e:
                    03:c7:bd:7b:5b:ca:25:88:ad:5c:c8:48:83:3a:c9:
                    ba:4b:8a:a5:3b:06:e7:b3:9a:c3:ee:9a:7b:09:36:
                    d9:f1:51:a1:49:a8:58:74:a0:cb:60:ad:9c:cc:a7:
                    21:b7:2f:2d:94:14:27:34:2c:db:6a:09:7f:bf:00:
                    22:68:16:dc:97:ad:6a:73:cb:44:c9:e7:e8:89:4c:
                    58:29:fb:fd:10:72:3d:74:f3:3f:4d:9e:85:76:d4:
                    3e:ba:0a:e1:86:ac:66:07:bf:00:9e:06:ea:81:b6:
                    b9:80:55:98:9a:93:3f:3d:6d:8e:c9:a0:91:7c:4e:
                    c6:a0:93:57:b4:10:e4:2e:49:bd:72:1a:30:ef:fb:
                    e9:40:32:3c:95:f4:48:61:df:c6:e4:95:23:2c:de:
                    1b:7a:69:35:01:5f:ea:98:48:3e:24:95:bd:a5:68:
                    fc:de:36:67:92:95:34:19:7c:f9:2d:d2:9c:92:b5:
                    08:dd:93:b6:99:2e:b7:61:bc:9f:c4:40:87:7e:68:
                    22:d7:29:41:2e:57:3c:ca:b5:ad:36:f5:22:3e:96:
                    6b:21:49:d3:34:0c:ac:4d:ed:e3:37:ad:25:c4:0e:
                    85:db:e1:b9:27:84:94:74:30:eb:14:dd:e8:9c:f0:
                    14:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:14:6F:76:82:D9:7D:16:10:EC:6B:FD:64:D0:4D:3B:82:A1:F4:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34/f9b1a11d-20ed-494f-a473-5ebece521a34.crl

            X509v3 Authority Key Identifier:
                keyid:33:70:29:EA:A3:F0:44:D7:D8:E5:CB:AC:9F:DC:34:E4:50:24:B5:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f9b1a11d-20ed-494f-a473-5ebece521a34.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5c:c1:7f:d6:da:bb:37:09:a9:a6:c4:be:b4:65:40:8c:d7:
         d9:0d:93:4d:6d:40:fc:1c:64:dd:1d:a5:4a:58:63:c2:f6:f5:
         ce:80:f1:a1:5e:6b:55:58:a7:34:ef:e9:a7:df:58:fc:e7:bd:
         62:e7:da:3b:c3:be:0e:51:06:15:65:11:48:78:b7:5c:95:48:
         d7:ee:dc:e5:16:76:ad:fd:6a:5f:4f:d6:9f:2a:47:d1:9a:71:
         7d:ef:d1:97:e7:e7:3a:a4:a4:f9:6a:87:fb:52:9f:8f:ba:62:
         3e:bd:43:f6:60:bf:89:5a:ec:2b:06:ec:2d:2b:f1:4d:df:61:
         10:8b:f3:ae:19:c6:17:9f:99:8d:e3:19:cf:70:9b:d2:44:c1:
         17:b5:dc:6e:02:61:0c:df:d6:65:c0:4d:43:66:32:1a:78:76:
         fc:ca:d6:24:3b:8b:07:ac:21:bb:28:7d:ef:24:19:21:23:48:
         93:34:05:b3:42:ab:e6:32:31:e8:4a:16:ad:21:46:b0:2f:90:
         f8:c0:12:c3:46:57:60:5d:ee:27:c9:da:8c:2b:5a:ee:10:16:
         48:04:d7:4e:a9:49:c7:11:f8:e9:71:59:ac:61:c5:e0:c9:2f:
         af:76:fe:8a:a9:e6:b1:92:62:bf:67:6e:4d:08:a4:e6:59:a1:
         6c:9b:d4:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 11:44:25 2025 by rpki-client