Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
File:                     f40e4177-8831-4c30-83f0-fa2c74173aff.mft (raw, json)
Hash identifier:          5GA2XNEUeQyRY7I+GyS6CMCtLGvZSjrWe76DDI33fF8=
Subject key identifier:   5C:2C:8C:F7:30:EA:79:2E:64:31:9A:C3:6B:D5:C4:37:62:B7:1B:69
Authority key identifier: 19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C
Certificate issuer:       /CN=f40e4177-8831-4c30-83f0-fa2c74173aff
Certificate serial:       010D0C9F43285848B85B97B65ED64FF29D227280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft
Manifest number:          010D0C9F43285848A7AF56F7016EE06E0A249507
Signing time:             Thu 30 Jan 2025 21:00:07 +0000
Manifest this update:     Thu 30 Jan 2025 21:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 21:00:00 +0000
Files and hashes:         1: 31fbfac3-3eee-330b-b4fc-6a494f86a985.roa (hash: mHXz1jSE2kNeOahPuZPjsjoHbLBh+eRae6gSlADPpPc=)
                          2: f40e4177-8831-4c30-83f0-fa2c74173aff.crl (hash: n72gL5scdjkEw93avgZcF3SSrMDvIN40+p5UEqAcLP8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:5b:97:b6:5e:d6:4f:f2:9d:22:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f40e4177-8831-4c30-83f0-fa2c74173aff
        Validity
            Not Before: Jan 30 21:00:07 2025 GMT
            Not After : Feb  2 21:00:00 2025 GMT
        Subject: CN=9c82bf45-25af-47a1-bc77-7bf4f22d1f51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6f:44:7e:26:6a:c9:a9:32:53:1e:b8:3e:22:
                    eb:3c:9e:ba:c1:ee:9a:01:53:b3:9a:9d:5c:9c:82:
                    4f:89:dc:e6:cc:74:cb:6f:06:46:8e:6f:29:d6:8a:
                    4e:7d:a5:c1:15:df:55:92:b2:d3:36:d5:71:94:70:
                    1f:00:3a:65:50:cf:cc:51:0e:f0:df:58:c2:f3:ce:
                    12:e7:ea:ed:74:1b:52:94:fa:c3:c2:65:62:5d:07:
                    59:3d:48:5e:1d:7f:91:19:e5:04:f7:8f:2c:9e:b8:
                    55:5b:71:5e:c2:e1:b7:4f:dd:6b:e9:7e:7a:d3:f4:
                    0f:e5:43:e8:40:df:76:40:44:dc:f5:63:af:70:29:
                    19:c8:85:eb:2d:31:49:64:9e:df:a3:dd:8a:fc:38:
                    f4:6a:fc:3b:6a:84:ef:56:b8:32:94:e8:58:41:a2:
                    bd:25:fa:be:6e:2e:39:8f:c5:2e:86:99:b6:ad:a5:
                    1e:6b:1c:12:02:17:51:b9:54:a0:e7:e0:88:01:25:
                    25:0d:8e:08:21:cf:64:a1:42:d2:f7:09:64:d5:fc:
                    f6:d3:f0:1c:01:f1:e5:77:68:81:62:ff:f4:db:2f:
                    41:f5:34:61:5d:b1:eb:b3:84:19:06:53:a0:7f:ab:
                    7b:78:45:4c:04:26:6e:da:8f:6c:46:1c:b9:0b:f1:
                    e1:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:2C:8C:F7:30:EA:79:2E:64:31:9A:C3:6B:D5:C4:37:62:B7:1B:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff/f40e4177-8831-4c30-83f0-fa2c74173aff.crl

            X509v3 Authority Key Identifier:
                keyid:19:D9:FD:6D:F5:8C:FE:30:7D:D1:9A:39:59:39:DC:F3:7B:81:68:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f40e4177-8831-4c30-83f0-fa2c74173aff.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:e4:dc:14:86:61:b9:1d:4d:b1:a2:4c:9a:f7:90:46:5f:c0:
         dc:75:64:86:c8:e5:3f:68:a8:56:15:51:89:22:84:83:72:06:
         5d:77:be:a5:da:4a:73:48:63:9b:5e:be:66:43:f0:70:ea:a0:
         a6:c6:b2:5a:79:8f:8f:71:c1:08:ee:71:28:c4:ed:1a:b1:63:
         ec:7e:72:76:59:3c:4d:77:61:3c:ea:87:36:5e:e0:2a:32:32:
         48:97:f1:ac:08:33:1a:b6:3d:91:8d:f2:96:e6:09:5d:4b:56:
         6c:ec:60:26:52:0f:bd:12:6a:82:0a:7e:c0:48:3a:20:c5:21:
         dc:e8:bd:a1:7f:76:d9:3b:fc:1a:ef:77:e6:34:19:e5:9e:1c:
         88:b8:b3:68:15:6c:8c:f8:6a:91:9b:64:4e:ec:5a:e8:0e:74:
         81:0d:3a:bf:06:e0:0e:16:72:29:c1:a0:e3:2b:5a:6f:08:f3:
         d6:d1:1e:9d:15:75:6d:af:bc:13:28:13:3a:25:85:5e:94:c6:
         91:06:f3:80:bc:71:70:ed:a8:c7:6c:2a:60:59:96:71:ec:3f:
         b2:71:b8:c0:3c:ba:61:f4:a2:b9:d6:7e:d4:d0:27:36:71:de:
         9e:1e:92:a9:d9:49:37:74:61:c8:6d:23:14:6f:e1:8e:fb:d1:
         ac:71:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 01:07:42 2025 by rpki-client