Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft
File:                     1d251b68-9cb8-49ab-91e3-66420fc719b5.mft (raw, json)
Hash identifier:          ULp/P7/9y3Ldj2nzsIuR5/G+c1ikUx4EHJIR+NT00Bs=
Subject key identifier:   A9:7E:3D:D3:25:B7:FE:40:F4:C4:3F:F5:80:A1:3F:99:99:40:0C:3C
Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
Certificate issuer:       /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Certificate serial:       010D0C9F43285848BAAF2B02C141500143ACCA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft
Manifest number:          010D0C9F4328584073A81ECEBDDC50551A3CC989
Signing time:             Fri 31 Jan 2025 17:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 17:00:07 +0000
Manifest next update:     Sun 02 Feb 2025 17:00:00 +0000
Files and hashes:         1: 1d251b68-9cb8-49ab-91e3-66420fc719b5.crl (hash: NLjdOCUL+AHQxSscGXHlGQPWt/j2MpbIHq7ejEG+r48=)
                          2: 424b1e54-2d09-3644-a069-61f76e443c39.roa (hash: H9brD4Z8QhjAGnl3OB3wrTyHlw4J+RtZ85QVGE7EMZk=)
                          3: 6f856a7a-d7b5-3c23-9f27-c8353e19cfa5.roa (hash: cI3JXNCUV3wwhfQ2fI5OKWhDFUU+gfNGoKv44p8Zhbo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ba:af:2b:02:c1:41:50:01:43:ac:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
        Validity
            Not Before: Jan 31 17:00:07 2025 GMT
            Not After : Feb  2 17:00:00 2025 GMT
        Subject: CN=62e07eea-b4bc-4463-8126-08b9635307c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2b:23:04:09:63:09:d1:d6:81:9d:ef:9b:ca:
                    94:5d:be:ea:00:9e:69:f8:9a:d8:bb:7d:0a:0a:7b:
                    09:e2:82:94:72:40:5a:50:58:f1:9c:b6:0c:99:9c:
                    fd:97:96:42:5e:0e:85:cb:d2:8d:9f:6d:68:ce:52:
                    65:8a:c2:b7:79:21:c1:6c:9d:8e:08:78:2c:86:e8:
                    dc:32:6b:e9:45:44:fd:f6:ae:1d:fd:c0:04:d6:36:
                    bc:52:72:9e:cd:79:df:b7:f4:ec:ad:e6:16:6b:fa:
                    10:10:4b:d5:2c:31:43:43:d7:e8:20:bc:4a:52:50:
                    70:14:b4:98:ea:c8:e9:cd:45:57:1e:57:16:64:6c:
                    20:1f:fc:2f:53:ef:e4:58:d9:9a:33:d5:b9:fd:fd:
                    76:ec:1a:64:76:b3:f2:f2:31:68:18:b1:06:01:96:
                    98:93:fd:10:e6:be:6b:60:e3:54:28:a5:ad:e5:92:
                    2c:44:f3:45:ef:f4:c6:3a:4a:e8:8e:b1:8f:13:08:
                    5a:bf:8c:a5:fa:e5:02:90:27:c2:dc:ad:fc:06:e4:
                    eb:55:e5:1f:43:52:3c:ab:40:1c:33:d6:e7:b4:f0:
                    2c:e4:71:0b:f9:25:58:48:3b:05:b2:e1:eb:9a:b9:
                    cf:be:56:4e:e7:f0:61:6e:3a:30:74:a1:d5:a3:cd:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7E:3D:D3:25:B7:FE:40:F4:C4:3F:F5:80:A1:3F:99:99:40:0C:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl

            X509v3 Authority Key Identifier:
                keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         85:cb:0a:c8:03:53:0d:ca:73:08:e0:53:b6:a4:2a:7a:2a:ab:
         41:84:05:bc:06:ef:f5:4a:0f:df:2d:32:6c:88:06:09:0a:0b:
         3e:12:74:d5:3b:dd:ac:55:da:5b:2b:ac:5f:b0:e9:03:f6:15:
         bb:38:1c:0f:01:b2:d9:72:e9:c9:70:d0:de:55:64:14:5f:c4:
         1e:7a:80:d7:0b:6e:bd:3d:03:4b:b1:9f:ca:0b:9b:0b:c4:b4:
         ca:a9:40:e1:ab:a5:eb:b8:10:f0:81:d6:10:d4:b7:29:5f:b0:
         7e:66:94:44:83:75:63:cf:8a:1c:73:a1:bf:bc:51:cd:83:de:
         09:c1:f4:ef:7e:32:3b:72:e3:20:ea:8c:0a:b8:08:b5:1a:43:
         29:92:d9:23:a5:3d:91:5e:84:02:de:af:63:fc:8f:e2:67:1b:
         d6:1d:a9:c6:90:99:fb:17:b8:d1:60:5c:fa:27:fe:a2:86:16:
         78:dd:14:f4:fa:04:e5:f5:44:c6:b6:e3:b4:12:ad:17:12:7d:
         11:7d:9f:51:32:73:d3:91:a6:cd:3f:20:d3:cd:7e:34:7b:14:
         47:57:cb:75:d0:0b:fa:39:3e:05:29:bf:10:01:82:2b:0e:b4:
         df:9d:ba:fd:88:8c:67:69:f7:94:c8:5c:d6:16:6e:6a:9e:ea:
         c6:f4:89:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 10 10:23:24 2025 by rpki-client