Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
File:                     3f8ce937-b65c-4889-8a3c-145d71949e14.mft (raw, json)
Hash identifier:          HU8Qrilxrj0BHk+/Sb+Uz7IWoXWR3qkbhnwCaTU1AtQ=
Subject key identifier:   B7:6E:7C:5D:39:D6:0E:20:0F:28:41:D6:C2:5F:89:16:E8:9A:97:52
Authority key identifier: 73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B
Certificate issuer:       /CN=3f8ce937-b65c-4889-8a3c-145d71949e14
Certificate serial:       010D0C9F4328584958FFB44D7CECC22C739CA740
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft
Manifest number:          010D0C9F432858468E5D7ABA139861D50B688E8B
Signing time:             Sat 29 Mar 2025 10:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 10:00:00 +0000
Files and hashes:         1: 10a98a9b-b733-37e9-901d-63dd77533c16.roa (hash: 7WQFTwm3ZazXVx0+7xZZiQtpKVXF59nRbXxOJ2L53Lw=)
                          2: 3f8ce937-b65c-4889-8a3c-145d71949e14.crl (hash: +kkxkWPE/nv5vCyZk1Gro4Ae+8HLd+ax4/0kgG+Mc9A=)
                          3: 7b6c03e6-4fac-348a-8d3e-54c7def1c0ad.roa (hash: ir+9aE3x35DBq6syNpk7TTrDiC3LwKMUYGfZL0KjAW8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:ff:b4:4d:7c:ec:c2:2c:73:9c:a7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ce937-b65c-4889-8a3c-145d71949e14
        Validity
            Not Before: Mar 29 10:00:07 2025 GMT
            Not After : Apr  1 10:00:00 2025 GMT
        Subject: CN=6d9eb35f-6983-44f8-86ce-1644e5722981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4c:51:b9:ef:83:6d:1b:f4:32:94:d5:dc:48:
                    74:42:0c:a6:4e:b9:3a:ae:6c:11:68:a9:b3:f6:5d:
                    92:59:1e:0f:af:f6:b6:0f:0c:88:a6:29:0a:5b:ae:
                    1f:f9:b2:aa:77:c7:ce:f5:ad:46:f5:b8:9b:33:23:
                    6c:41:de:d3:1b:ff:c3:5d:58:63:f6:54:ee:bc:75:
                    77:6e:f2:95:38:32:9a:f5:28:d3:27:e9:54:a0:52:
                    78:f4:e3:f0:d7:41:43:ba:db:3a:da:68:2f:12:a9:
                    ad:3a:6d:d1:a3:e6:54:c3:b2:a5:02:e1:0b:59:ad:
                    d1:e5:8d:b6:5c:96:a5:7c:77:54:7f:d8:9b:bc:af:
                    02:fa:12:f4:81:a3:4c:5c:bf:52:2f:fc:44:6a:23:
                    7c:f5:11:4b:69:c4:2c:3c:d4:a4:65:39:e9:3a:c9:
                    f8:2a:d6:4b:0e:6a:ce:d1:08:ca:95:69:60:2d:ff:
                    4f:96:aa:ff:0e:8d:db:8d:b2:7d:f7:5a:6e:e0:a9:
                    cc:2c:cf:e5:f4:56:7a:69:b1:fd:e4:5b:be:ca:27:
                    7b:9d:31:ce:0b:68:ef:90:cc:94:fd:72:6c:f0:bf:
                    fe:14:ff:84:8d:78:6f:67:4e:44:9c:22:84:93:a6:
                    32:0d:0c:9f:78:2e:dc:c9:84:5c:2b:47:85:77:33:
                    2e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:7C:5D:39:D6:0E:20:0F:28:41:D6:C2:5F:89:16:E8:9A:97:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14/3f8ce937-b65c-4889-8a3c-145d71949e14.crl

            X509v3 Authority Key Identifier:
                keyid:73:7A:94:97:DE:E3:83:C1:8B:9D:50:15:D3:04:28:51:E9:B6:B8:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3f8ce937-b65c-4889-8a3c-145d71949e14.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:92:33:cb:25:e6:d4:1d:28:13:18:d4:62:de:0b:25:20:d8:
         d8:62:02:cc:e3:5e:83:bd:e0:a3:6e:e4:c5:a1:4d:15:ea:92:
         17:3b:ca:42:8f:73:e9:26:c7:ad:ea:ab:14:b7:1f:2f:89:ab:
         bf:3b:1e:77:65:0c:52:6a:4b:a5:6d:89:5c:c5:81:95:1b:e6:
         48:e3:94:c0:40:f6:a3:5e:d3:d6:32:fd:ff:36:3a:41:79:0f:
         5c:c9:3c:1f:d3:bf:c3:ed:15:7f:aa:e6:67:d6:2a:70:80:a8:
         c1:71:56:1a:43:b1:87:aa:e9:68:71:c9:94:6a:38:5a:3d:d5:
         33:32:cf:23:a3:95:ef:b6:35:e7:25:d1:5c:64:27:17:15:fa:
         ae:a7:01:b3:fd:13:79:59:07:75:fb:b4:57:39:a0:2c:4a:fd:
         4e:99:d0:10:34:dc:91:3e:66:ba:a0:c0:dc:3a:92:b5:c8:e4:
         0f:4a:d2:62:4e:c3:a5:70:c4:83:26:fc:8c:a9:ea:65:7c:b3:
         dc:e6:91:71:66:5a:50:93:d1:6c:9e:b3:91:45:ef:4e:72:e9:
         60:f5:e5:97:20:cf:e1:56:b9:88:db:30:0a:9c:cf:a1:1b:b1:
         17:bf:c2:fb:92:0d:43:41:11:c0:1b:0f:34:a7:d6:80:2f:98:
         cd:ce:b4:08
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElY/7RNfOzCLHOcp0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4Y2U5MzctYjY1Yy00ODg5LThhM2MtMTQ1ZDcxOTQ5
ZTE0MB4XDTI1MDMyOTEwMDAwN1oXDTI1MDQwMTEwMDAwMFowLzEtMCsGA1UEAxMk
NmQ5ZWIzNWYtNjk4My00NGY4LTg2Y2UtMTY0NGU1NzIyOTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0xRue+DbRv0MpTV3Eh0QgymTrk6rmwRaKmz
9l2SWR4Pr/a2DwyIpikKW64f+bKqd8fO9a1G9bibMyNsQd7TG//DXVhj9lTuvHV3
bvKVODKa9SjTJ+lUoFJ49OPw10FDuts62mgvEqmtOm3Ro+ZUw7KlAuELWa3R5Y22
XJalfHdUf9ibvK8C+hL0gaNMXL9SL/xEaiN89RFLacQsPNSkZTnpOsn4KtZLDmrO
0QjKlWlgLf9Plqr/Do3bjbJ991pu4KnMLM/l9FZ6abH95Fu+yid7nTHOC2jvkMyU
/XJs8L/+FP+EjXhvZ05EnCKEk6YyDQyfeC7cyYRcK0eFdzMukwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLdufF051g4gDyhB1sJfiRbompdSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zZjhj
ZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVkNzE5NDllMTQvM2Y4Y2U5MzctYjY1Yy00
ODg5LThhM2MtMTQ1ZDcxOTQ5ZTE0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvM2Y4Y2U5MzctYjY1Yy00ODg5LThh
M2MtMTQ1ZDcxOTQ5ZTE0LzNmOGNlOTM3LWI2NWMtNDg4OS04YTNjLTE0NWQ3MTk0
OWUxNC5jcmwwHwYDVR0jBBgwFoAUc3qUl97jg8GLnVAV0wQoUem2uAswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zZjhjZTkzNy1iNjVjLTQ4ODktOGEzYy0xNDVk
NzE5NDllMTQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA2kjPLJebUHSgTGNRi3gsl
INjYYgLM416DveCjbuTFoU0V6pIXO8pCj3PpJset6qsUtx8viau/Ox53ZQxSakul
bYlcxYGVG+ZI45TAQPajXtPWMv3/NjpBeQ9cyTwf07/D7RV/quZn1ipwgKjBcVYa
Q7GHquloccmUajhaPdUzMs8jo5XvtjXnJdFcZCcXFfqupwGz/RN5WQd1+7RXOaAs
Sv1OmdAQNNyRPma6oMDcOpK1yOQPStJiTsOlcMSDJvyMqeplfLPc5pFxZlpQk9Fs
nrORRe9Oculg9eWXIM/hVrmI2zAKnM+hG7EXv8L7kg1DQRHAGw80p9aAL5jNzrQI
-----END CERTIFICATE-----
Generated at Wed Apr 9 16:43:32 2025 by rpki-client