Manifest

$ rpki-client -vvf rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
File:                     74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft (raw, json)
Hash identifier:          UysVhirZXYbMp4USpy6JTLfzQnTh1fg9fdvjhDdMrm0=
Subject key identifier:   77:C0:91:7B:79:04:B0:D1:6A:DD:84:E5:40:46:F6:EF:73:BA:70:26
Authority key identifier: 74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C
Certificate issuer:       /CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
Certificate serial:       2DC6BF3CBC6E7F213FC208CA997F19F2447924E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer
Subject info access:      rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft
Manifest number:          0694
Signing time:             Fri 31 Jan 2025 17:14:03 +0000
Manifest this update:     Fri 31 Jan 2025 17:09:03 +0000
Manifest next update:     Sat 01 Feb 2025 20:07:03 +0000
Files and hashes:         1: 323630343a653463303a3a2f33322d3438203d3e20393439.roa (hash: 21dOxHtL2FriZes2OJNToxjdVd6pUTwfA2UcE6pYmdc=)
                          2: 74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl (hash: 8g35MZmOBGjMywPVdIItX390cBhXRfLf0SIifT+ILgs=)
                          3: 323630343a653463303a3132303a3a2f34342d3438203d3e203230343733.roa (hash: iLBwT2VJX2JRx3QKmo0rT6J95LtEZpf22jVmEnBmjvM=)
                          4: 323630343a653463303a3131303a3a2f34342d3438203d3e203230343733.roa (hash: 0M9A9EMbK49IC3koRNNwo0IlIyzYVKYHHWg6mLppy3A=)
                          5: 323630343a653463303a3a2f33322d3438203d3e203131393330.roa (hash: sbyK0p+HCjIk5y9gh3iBzEeOfgAjk+IJvosCQYdFhIg=)
                          6: 32332e3134312e33322e302f32342d3332203d3e2030.roa (hash: DRLCfqd2Q6EBfCrS8pBe3mGPKdnuGyqugTYBtZYLZug=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:c6:bf:3c:bc:6e:7f:21:3f:c2:08:ca:99:7f:19:f2:44:79:24:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=81dade47ef565a67c33494e667d03d4da7cff1739b027c640b
        Validity
            Not Before: Jan 31 17:09:03 2025 GMT
            Not After : Feb  1 20:07:03 2025 GMT
        Subject: CN=77C0917B7904B0D16ADD84E54046F6EF73BA7026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c4:7f:fd:5c:3e:30:0e:50:02:33:32:07:51:
                    a5:38:28:43:20:00:6d:df:30:b9:b3:29:67:71:04:
                    2e:ae:7a:19:71:f0:e1:63:6a:89:27:0c:e3:2c:ab:
                    b0:90:4b:9f:27:39:c3:75:74:82:bd:20:df:fc:d8:
                    fe:d8:cc:68:9f:9f:42:da:71:27:aa:46:ca:3f:cf:
                    eb:70:cf:15:e6:5d:14:52:1e:39:df:e9:a3:e7:57:
                    3f:30:d0:07:cf:f1:1e:f1:7e:6c:b6:73:da:7c:06:
                    d7:cf:e1:3c:b3:4a:bc:51:ba:90:7f:2d:62:43:9b:
                    68:7d:bb:e3:b0:98:85:29:21:3c:30:c6:d1:bf:ff:
                    77:28:11:59:ec:15:d6:80:32:1c:71:43:1e:b0:79:
                    7f:65:28:8f:eb:55:ba:c5:c8:57:f5:95:09:29:0d:
                    dd:98:d0:a8:38:9a:86:d3:93:df:38:93:5d:e5:c1:
                    b3:09:23:e2:fd:98:8a:25:75:0b:8f:32:1b:0d:99:
                    a4:fe:91:ad:d1:e8:86:ec:cd:b8:e9:2d:dd:a8:82:
                    a5:78:d9:26:37:df:13:ab:36:22:58:04:b5:b0:d3:
                    68:80:93:dd:fc:a7:ec:aa:0c:e8:4b:15:c9:d7:7c:
                    f9:fb:03:f0:a3:fb:c4:1d:8a:5c:31:3a:62:c2:fa:
                    db:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:C0:91:7B:79:04:B0:D1:6A:DD:84:E5:40:46:F6:EF:73:BA:70:26
            X509v3 Authority Key Identifier:
                keyid:74:E3:B9:E1:6E:92:C5:1A:89:79:AD:B5:A7:31:DD:E2:D5:EA:E9:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b5ae183e-a402-4c1a-b464-670472e82b72/81dade47ef565a67c33494e667d03d4da7cff1739b027c640b.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.roa.net/rrdp/xTom/53/74E3B9E16E92C51A8979ADB5A731DDE2D5EAE96C.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:ab:40:09:30:25:44:77:4d:7f:e1:0e:67:99:81:d5:4c:
         2b:b8:f2:cb:df:2d:57:36:dc:b0:94:ae:1c:75:12:ca:a1:43:
         39:ae:df:ea:5b:d1:97:67:81:a1:83:a6:63:34:33:38:fa:cb:
         5a:f8:f8:53:30:b9:6d:3a:80:63:72:f9:cc:b6:7b:b9:0c:0b:
         1e:c6:91:b5:44:7f:9a:b9:53:33:af:ba:6c:4e:63:a1:09:9c:
         ae:f8:c5:33:3a:f0:df:8a:8c:31:88:89:6d:55:11:89:3f:1a:
         f7:7d:32:5a:ba:11:33:ed:e2:36:e8:50:9d:b5:fa:e2:01:d2:
         b7:5b:a0:c9:09:6c:95:db:1c:ce:de:d8:80:7c:cc:92:08:6c:
         50:3e:8a:39:a2:d6:e9:92:01:2e:4e:7c:a2:35:cc:cc:fd:41:
         21:01:e0:cf:3f:c4:e7:b6:e2:7a:65:5c:7f:92:f6:26:4a:3c:
         b4:50:ea:ce:12:63:b0:50:c2:14:7c:f9:95:4a:ff:1b:42:d6:
         6d:b5:5d:b6:9d:0a:04:7f:56:9a:55:09:9a:62:d3:bd:2d:6f:
         fc:37:de:b9:67:7a:f4:5c:db:ed:97:61:a2:0e:bc:ba:bf:3f:
         67:2c:70:74:d2:4a:3f:70:38:8e:1a:1e:1d:e6:33:3d:9a:0f:
         e9:bd:31:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----