Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft
File:                     67ec447a-9170-4e11-ba80-1aaca76fcd42.mft (raw, json)
Hash identifier:          qoBSsn71dxS3P8pAgQ8n2sfgoyQrUukuQPzRFBTZA40=
Subject key identifier:   84:F0:8E:9E:61:03:D8:F1:67:77:29:63:F0:97:AD:5D:47:2C:42:4A
Authority key identifier: D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE
Certificate issuer:       /CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
Certificate serial:       010D0C9F43285848BA9161BC8F96A5B171B2F080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft
Manifest number:          010D0C9F43285847FF858D7FF36CDF974A73AB63
Signing time:             Fri 31 Jan 2025 16:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 16:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 16:00:00 +0000
Files and hashes:         1: 67ec447a-9170-4e11-ba80-1aaca76fcd42.crl (hash: GuR+KGvDY7E20+8s1XsDf56RFsb4j29xZMxblH0Mun4=)
                          2: d3bbfb8c-4bb3-354c-8e1b-fc8eee4fc3d2.roa (hash: j3ebmuwYHk87s7h4kRDh+JXfTfLrnL47TTzV97O9bN8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:91:61:bc:8f:96:a5:b1:71:b2:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67ec447a-9170-4e11-ba80-1aaca76fcd42
        Validity
            Not Before: Jan 31 16:00:07 2025 GMT
            Not After : Feb  2 16:00:00 2025 GMT
        Subject: CN=25f2b911-1bb4-4fc5-a3f2-491866424c68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:4f:ce:da:62:c0:5a:aa:1a:63:2b:05:51:
                    e2:96:bf:cb:49:c6:68:0e:c6:5a:ce:05:a5:76:b5:
                    05:fe:89:a4:d1:fe:13:56:d7:13:cd:b6:46:8a:74:
                    33:c8:40:8b:f7:73:75:e1:42:9e:d9:b8:54:2f:50:
                    51:16:fc:4b:ce:52:8b:cb:4a:bf:5e:bd:13:d7:e1:
                    44:ab:c9:11:df:08:e0:18:97:bd:10:c9:ba:2b:91:
                    bb:61:02:e5:1a:0e:53:21:fa:92:0c:82:d6:ec:ab:
                    24:1d:42:5d:12:c9:52:83:1a:f0:cb:3c:0a:0f:97:
                    93:af:08:46:4a:55:84:c3:f6:10:c5:e6:bd:1f:4a:
                    f5:ba:e4:f6:2d:08:50:6b:b1:6d:06:d5:35:43:45:
                    ed:99:b5:d0:be:0b:ec:fe:77:3d:c0:ee:f3:6f:02:
                    80:b8:52:b4:ea:e2:54:69:83:56:df:c9:ed:28:cb:
                    19:df:8c:a0:ce:c6:dd:a5:72:24:3b:36:b5:39:72:
                    a7:18:1d:c8:6b:e3:46:a6:6c:19:a7:2f:0c:67:04:
                    6f:28:78:7a:28:d2:fc:77:de:88:e3:25:68:73:51:
                    ce:f6:d5:c5:1f:ad:ce:f3:7c:eb:7a:d5:9d:d5:be:
                    69:7c:47:cd:22:3c:0b:0e:9a:b8:19:06:30:a9:db:
                    14:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:F0:8E:9E:61:03:D8:F1:67:77:29:63:F0:97:AD:5D:47:2C:42:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42/67ec447a-9170-4e11-ba80-1aaca76fcd42.crl

            X509v3 Authority Key Identifier:
                keyid:D7:FE:BC:7A:80:E2:0D:5A:61:4C:0C:62:E8:F4:8C:90:39:FE:4C:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/67ec447a-9170-4e11-ba80-1aaca76fcd42.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bf:d8:0b:05:d7:14:35:4e:10:73:a2:5d:a8:f1:66:e9:10:ff:
         59:ab:fa:e7:34:a8:53:27:84:24:d8:ef:c8:ae:a8:54:b5:23:
         c6:f4:e5:29:8f:21:32:c7:23:fb:7a:81:4b:10:b9:5e:11:af:
         f4:dd:64:4d:cf:aa:75:5a:c4:c9:e9:dd:64:b9:26:de:9f:98:
         e3:2e:76:f8:71:c2:d7:4d:26:8a:00:5d:b2:cc:8a:06:70:d5:
         f1:73:9e:69:47:54:4d:f9:72:86:b9:cc:27:bd:ae:12:06:47:
         00:2d:76:7b:92:be:d0:3e:6b:30:30:9c:72:7f:03:7f:ee:97:
         f7:72:07:a6:29:9e:81:c8:67:09:32:26:72:6d:e0:29:49:d2:
         e5:4f:d7:f3:27:bb:be:57:cf:8d:8b:2b:7d:98:4f:35:5a:a4:
         d9:a2:8b:4c:cd:0c:a9:ef:a9:79:26:36:70:fb:f2:29:59:48:
         b7:92:ea:c2:ab:a8:03:5d:a0:9c:98:8b:a2:2e:7f:10:b4:51:
         3d:1b:1a:3e:7b:e3:59:3b:0a:c7:f3:06:36:75:7a:ce:06:86:
         b9:19:73:0b:ef:cd:da:c6:70:d7:5d:12:53:43:38:40:ec:c6:
         2b:bb:74:38:d2:4c:ff:be:0a:cc:52:dd:e9:b2:28:25:3a:44:
         e9:66:62:3a
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEi6kWG8j5alsXGy8IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjdlYzQ0N2EtOTE3MC00ZTExLWJhODAtMWFhY2E3NmZj
ZDQyMB4XDTI1MDEzMTE2MDAwN1oXDTI1MDIwMjE2MDAwMFowLzEtMCsGA1UEAxMk
MjVmMmI5MTEtMWJiNC00ZmM1LWEzZjItNDkxODY2NDI0YzY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl9VPztpiwFqqGmMrBVHilr/LScZoDsZazgWl
drUF/omk0f4TVtcTzbZGinQzyECL93N14UKe2bhUL1BRFvxLzlKLy0q/Xr0T1+FE
q8kR3wjgGJe9EMm6K5G7YQLlGg5TIfqSDILW7KskHUJdEslSgxrwyzwKD5eTrwhG
SlWEw/YQxea9H0r1uuT2LQhQa7FtBtU1Q0XtmbXQvgvs/nc9wO7zbwKAuFK06uJU
aYNW38ntKMsZ34ygzsbdpXIkOza1OXKnGB3Ia+NGpmwZpy8MZwRvKHh6KNL8d96I
4yVoc1HO9tXFH63O83zretWd1b5pfEfNIjwLDpq4GQYwqdsUfQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFITwjp5hA9jxZ3cpY/CXrV1HLEJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi82N2Vj
NDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFjYTc2ZmNkNDIvNjdlYzQ0N2EtOTE3MC00
ZTExLWJhODAtMWFhY2E3NmZjZDQyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNjdlYzQ0N2EtOTE3MC00ZTExLWJh
ODAtMWFhY2E3NmZjZDQyLzY3ZWM0NDdhLTkxNzAtNGUxMS1iYTgwLTFhYWNhNzZm
Y2Q0Mi5jcmwwHwYDVR0jBBgwFoAU1/68eoDiDVphTAxi6PSMkDn+TL4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi82N2VjNDQ3YS05MTcwLTRlMTEtYmE4MC0xYWFj
YTc2ZmNkNDIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQC/2AsF1xQ1ThBzol2o8Wbp
EP9Zq/rnNKhTJ4Qk2O/IrqhUtSPG9OUpjyEyxyP7eoFLELleEa/03WRNz6p1WsTJ
6d1kuSben5jjLnb4ccLXTSaKAF2yzIoGcNXxc55pR1RN+XKGucwnva4SBkcALXZ7
kr7QPmswMJxyfwN/7pf3cgemKZ6ByGcJMiZybeApSdLlT9fzJ7u+V8+Niyt9mE81
WqTZootMzQyp76l5JjZw+/IpWUi3kurCq6gDXaCcmIuiLn8QtFE9Gxo+e+NZOwrH
8wY2dXrOBoa5GXML783axnDXXRJTQzhA7MYru3Q40kz/vgrMUt3psiglOkTpZmI6
-----END CERTIFICATE-----
Generated at Mon Apr 28 08:15:46 2025 by rpki-client