Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft
File:                     b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft (raw, json)
Hash identifier:          1gHbyzPMXDE/KTyU4DjfDIjSHDKefFZB4PclcwaCTd4=
Subject key identifier:   A1:9E:EC:B8:EC:0F:87:50:F0:49:95:FA:3D:4F:16:7F:8F:AC:A2:31
Authority key identifier: 44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD
Certificate issuer:       /CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
Certificate serial:       010D0C9F43285848B9C0F1177995D7D56E0834D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft
Manifest number:          010D0C9F4328584073A849C7A0F704CE7B0CF08E
Signing time:             Fri 31 Jan 2025 09:00:07 +0000
Manifest this update:     Fri 31 Jan 2025 09:00:07 +0000
Manifest next update:     Mon 03 Feb 2025 09:00:00 +0000
Files and hashes:         1: 197ca69c-f6d5-3b63-ae60-623cff8b7efb.roa (hash: l6PeyM3c9ORUN7qigr1ZDskECDzg85sEAK/8ey6LNsU=)
                          2: b111c894-cd73-3500-9cee-b79cec172482.roa (hash: 7A8lgiiQavYk1BcVfkVLICZSLT5JO2VpXKAVjU4wcto=)
                          3: b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl (hash: OPSDNfh0dGZqk7g26LlxlE8zSNuP7SOe1c2kcuhxmbI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:c0:f1:17:79:95:d7:d5:6e:08:34:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b450e5ef-41c2-4834-b6b3-6d1a1efe28f0
        Validity
            Not Before: Jan 31 09:00:07 2025 GMT
            Not After : Feb  3 09:00:00 2025 GMT
        Subject: CN=9f486ece-5426-4a1f-93ae-c7a365e7271c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:11:d1:47:cc:24:bb:4f:70:34:39:e3:95:f9:
                    b8:a6:f8:9a:50:67:50:ad:dc:59:58:9d:97:dc:53:
                    1f:49:bc:30:c0:d9:c2:9b:75:8f:c9:46:6e:20:ef:
                    bb:19:5e:e3:77:5c:38:78:a6:6b:71:32:c4:8d:5b:
                    da:b0:ac:a9:9b:b3:5b:be:55:b5:74:86:4e:81:2c:
                    91:3e:4d:a5:6a:89:fd:8f:d0:a0:43:c8:84:bd:1e:
                    9e:8c:c2:25:e0:0e:f5:8f:d7:d3:ec:7c:a7:ee:15:
                    3b:ad:36:05:89:35:5f:31:dc:27:e2:33:cc:77:69:
                    3f:a7:05:36:2f:13:7b:41:5c:ec:23:4c:31:f8:73:
                    b9:51:0f:40:0e:6b:91:aa:46:c1:38:68:01:6d:cd:
                    ba:3b:ba:c0:73:99:a9:55:50:35:f5:45:7d:4a:1d:
                    2e:05:c7:c1:49:95:14:b8:3c:6d:0f:ad:c8:c3:e9:
                    75:05:ad:3e:ca:ad:b5:c8:b1:97:02:be:aa:44:de:
                    93:a5:06:7a:90:37:d2:7e:89:84:28:30:3b:5e:af:
                    43:32:0f:7c:24:b2:d2:b5:27:61:48:83:a5:75:fc:
                    c8:f5:38:f3:bd:bd:c6:72:82:0f:18:91:34:3d:03:
                    d6:62:1c:5f:bb:18:00:fb:cb:d5:bf:20:93:40:28:
                    49:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9E:EC:B8:EC:0F:87:50:F0:49:95:FA:3D:4F:16:7F:8F:AC:A2:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.crl

            X509v3 Authority Key Identifier:
                keyid:44:70:52:90:13:82:B9:35:9C:3D:3F:EF:73:C2:83:91:9B:95:22:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b450e5ef-41c2-4834-b6b3-6d1a1efe28f0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:8a:bd:f4:8d:06:f3:1c:e7:3b:ed:b0:de:c0:91:d1:11:3f:
         66:a7:57:ce:57:f5:04:0b:46:9f:e1:e9:7b:1c:37:56:83:60:
         f8:e2:99:b4:37:18:42:ca:63:68:d7:7e:77:4b:2e:0a:4f:c4:
         2c:46:20:fd:43:df:bf:63:75:82:69:af:42:6e:85:e9:50:8e:
         84:fb:0e:46:ec:5d:63:68:5a:13:d3:3a:0f:89:6d:02:72:be:
         33:26:e1:2a:73:4d:e7:80:3d:27:8d:db:54:96:8f:ee:49:8a:
         10:aa:5d:ab:44:c6:ff:05:17:b0:32:2f:03:ec:9b:f3:1a:14:
         8e:14:ae:0e:5c:2c:68:51:fc:13:2c:6f:b2:2a:fb:4f:d2:96:
         a6:2d:9e:2c:9e:53:7e:3e:8c:42:8d:d2:7d:ef:0e:ab:bd:69:
         ac:24:c2:b4:f8:dd:d7:06:67:d1:b8:ef:d0:d4:24:7e:01:31:
         61:c9:2a:dc:28:aa:33:7a:8f:5f:36:1e:ca:08:4b:49:7b:07:
         ca:68:19:fe:a1:af:4d:97:04:ca:59:49:f2:e1:c7:05:59:df:
         7c:64:da:a0:80:7c:fb:3d:96:ec:02:d6:1f:aa:5d:ce:f0:ec:
         aa:aa:de:e6:d8:61:c1:e6:06:dd:ad:37:6c:5a:ef:8b:b0:85:
         62:08:76:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 21:22:00 2025 by rpki-client