Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/128DA31A0B3E59364454178FFC869CF565994CC6.mft
File:                     128DA31A0B3E59364454178FFC869CF565994CC6.mft (raw, json)
Hash identifier:          wd5T/WS36jxMjLcHAmOYL+wYeQiYI88dqKI0T+9gdMQ=
Subject key identifier:   01:01:65:A4:89:80:82:41:39:4B:BB:3C:E7:CC:18:CA:20:BD:BC:A2
Authority key identifier: 12:8D:A3:1A:0B:3E:59:36:44:54:17:8F:FC:86:9C:F5:65:99:4C:C6
Certificate issuer:       /CN=62e8972cb6b57f2d31e585644b610fec30140371cff48baccc
Certificate serial:       3110343C96CA6376AB60413BFBDF237ADE8F8973
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/62e8972cb6b57f2d31e585644b610fec30140371cff48baccc.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/128DA31A0B3E59364454178FFC869CF565994CC6.mft
Manifest number:          09
Signing time:             Sun 20 Jul 2025 22:36:56 +0000
Manifest this update:     Sun 20 Jul 2025 22:31:56 +0000
Manifest next update:     Mon 21 Jul 2025 23:17:56 +0000
Files and hashes:         1: 128DA31A0B3E59364454178FFC869CF565994CC6.crl (hash: jycsRaF5fvbIIYVbygKMKb59ULBfOfb/piA7mjHSAsQ=)
                          2: 323632303a3130663a663030313a3a2f34382d3438203d3e20333939393730.roa (hash: ZxoUP4iCkFbYss6qwkFCJdj2lyQEpEZ/G0XyumKxF6Q=)
                          3: 323632303a3130663a663030303a3a2f34342d3434203d3e20333939393730.roa (hash: cXt+Oo5ctFtnen4B/nymemeP7TY3bawmbX8ySGYzrQM=)
                          4: 323632303a3130663a663030303a3a2f34382d3438203d3e20333939393730.roa (hash: DRlck55m7qvYVWav/811xuVdJhJ5/U24kljAGdc2TCc=)
                          5: 323632303a3130663a663030323a3a2f34372d3437203d3e20333939393730.roa (hash: eVwBgn0eUTrHGWnqhgAJt/dZ2DjR17byveTkEIXC9Og=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:10:34:3c:96:ca:63:76:ab:60:41:3b:fb:df:23:7a:de:8f:89:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=62e8972cb6b57f2d31e585644b610fec30140371cff48baccc
        Validity
            Not Before: Jul 20 22:31:56 2025 GMT
            Not After : Jul 21 23:17:56 2025 GMT
        Subject: CN=010165A489808241394BBB3CE7CC18CA20BDBCA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e5:cc:b5:14:7d:7e:f8:ac:b8:ad:93:e7:1f:
                    b4:6a:cc:16:73:10:e3:f9:e1:f2:ba:dd:0a:d2:de:
                    ce:0f:2c:50:18:81:93:a5:06:98:e7:26:3a:9e:5b:
                    04:e3:74:0c:1d:18:38:6c:60:a7:ef:86:d1:a7:cf:
                    7b:b9:24:42:0f:de:ad:c4:f0:5c:b4:5b:d6:f7:ce:
                    71:b7:09:81:99:77:f5:ef:4b:b0:54:83:ba:d2:75:
                    88:47:17:20:f2:76:22:f4:26:57:5a:c9:e2:a0:7d:
                    df:d8:42:6b:63:06:1f:c4:8e:71:c3:b2:43:71:29:
                    c1:06:1a:c6:73:35:54:01:83:2c:6d:85:9b:35:21:
                    a7:a3:c2:9d:07:bb:79:82:57:ce:31:18:20:db:df:
                    fa:e2:19:1d:25:80:68:4f:af:4e:35:ea:19:f4:48:
                    2d:87:8e:71:77:76:cc:92:0a:fd:ea:7b:ff:29:62:
                    d6:c6:14:43:90:d2:43:48:97:cc:d2:5c:a3:7d:05:
                    66:fd:6c:a8:c5:2e:c7:2c:0e:d5:87:7a:e8:d6:a0:
                    50:be:11:7d:77:4d:b5:0b:39:d2:9b:84:51:70:af:
                    c0:6c:7a:b1:f1:ce:26:4d:0f:ca:45:fb:71:97:92:
                    dc:61:0f:e6:43:d2:0e:01:38:fd:fc:34:b4:08:32:
                    f9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:01:65:A4:89:80:82:41:39:4B:BB:3C:E7:CC:18:CA:20:BD:BC:A2
            X509v3 Authority Key Identifier:
                keyid:12:8D:A3:1A:0B:3E:59:36:44:54:17:8F:FC:86:9C:F5:65:99:4C:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/128DA31A0B3E59364454178FFC869CF565994CC6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/d605c12b-ac18-40bb-adb3-78730040a3b5/62e8972cb6b57f2d31e585644b610fec30140371cff48baccc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/1497794d342e459cadad5d25a1b6f827/0/128DA31A0B3E59364454178FFC869CF565994CC6.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:ea:92:4e:bf:d7:a5:a0:9d:31:cc:5f:3f:99:2e:e4:b6:41:
         97:a8:06:aa:33:5e:1e:d7:b6:50:52:76:41:ad:98:5c:8e:32:
         cd:e8:38:e7:05:37:49:9d:cd:04:01:ee:7b:cb:cf:d5:04:27:
         fe:5e:c9:d3:74:92:8d:e4:32:47:32:c0:25:f0:28:6e:47:03:
         14:ca:7b:c0:f6:a0:30:a7:80:7f:6a:bb:5c:1a:49:67:4b:75:
         54:c2:b7:68:9f:f4:13:55:41:70:8a:2c:03:2d:c9:72:64:29:
         72:9f:eb:f5:1c:6e:cb:81:14:7f:ff:46:aa:ec:3b:31:85:bb:
         de:b0:19:12:71:78:e8:9f:ed:17:40:0c:58:62:d7:13:0c:86:
         f5:49:f7:18:34:61:00:ba:2b:7c:11:7b:e9:a8:9f:c3:2a:6e:
         db:d0:73:65:8a:f6:61:62:c0:fb:1f:cd:ff:bb:a9:88:f4:85:
         0b:f2:52:a7:cc:e9:cd:ca:39:37:a9:10:43:a0:e2:45:78:f0:
         65:53:67:2b:73:3d:22:18:02:ca:18:7b:38:6f:9f:bb:02:74:
         6a:96:ce:f7:2d:e1:bd:56:6b:d8:1e:21:6c:7c:e3:64:d9:d8:
         f6:4b:f4:5c:17:a8:96:ae:d6:74:9a:6e:ff:32:a4:ca:34:2d:
         5b:f3:80:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----