Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
File:                     0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft (raw, json)
Hash identifier:          m+PkqDTrGYjEOPQ2oCR2ajlqFQLT9WhybuRTDmD5tiM=
Subject key identifier:   03:16:BD:BB:35:03:31:FD:4A:8B:C9:52:DE:B5:70:A4:AC:88:FD:27
Authority key identifier: CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6
Certificate issuer:       /CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
Certificate serial:       010D0C9F432858497F093B6A7BB8AF8BD4157AA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
Manifest number:          010D0C9F4328584073A8337A340EB376B1F8F721
Signing time:             Sat 12 Apr 2025 01:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 01:00:03 +0000
Manifest next update:     Mon 14 Apr 2025 01:00:00 +0000
Files and hashes:         1: 0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl (hash: zRMM3A5OaozCJRoK307Az8JYWfz56GipX3rMx1zY2sk=)
                          2: 896bba77-8553-37ca-90e0-b8ef42e49c98.roa (hash: kHjQccIESWk+AhaEMTq1TVMW6BFiI82WLpgOHC9TYHQ=)
                          3: a0ac8c5b-4bc4-3470-82ef-6792b44ab9cb.roa (hash: b32sGr89JSYe1kSz3UnaqUZwPSJu1YFsvtpXSktnt2M=)
                          4: de1340c7-c065-3ffc-b8a2-c28d45a357e5.roa (hash: q1vqoOOZ14MJTYrvz7AWEaH5qXw7MukbEjz0orAZnKc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7f:09:3b:6a:7b:b8:af:8b:d4:15:7a:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d1fca78-9d98-4559-bd51-80a6c47ba01e
        Validity
            Not Before: Apr 12 01:00:03 2025 GMT
            Not After : Apr 14 01:00:00 2025 GMT
        Subject: CN=e3ee07db-7a3f-4cbf-a845-8ed2c1515163
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ff:c5:80:80:bf:1e:5e:71:a9:11:c6:0d:33:
                    88:13:48:4e:81:fb:a8:2f:ef:ca:07:5d:43:1e:25:
                    ca:15:99:33:e3:e5:7c:8f:dd:77:ed:b8:b3:69:89:
                    c7:57:fd:bd:90:62:ba:e5:bf:bc:80:e8:2c:e8:42:
                    80:03:cb:cf:18:a8:40:dc:4e:01:81:0b:80:35:a1:
                    2a:2f:c4:a2:07:8e:d4:61:0d:d9:fc:bd:77:cc:6f:
                    42:89:e6:81:00:02:3c:f1:4c:68:43:fb:c3:f2:a7:
                    10:a9:1b:54:a7:0f:05:c1:5e:c5:b1:f9:f7:d6:c0:
                    7e:fd:11:2e:14:ed:eb:e1:1d:13:65:d9:16:dd:bb:
                    d5:70:a8:67:7e:30:59:96:6a:2d:75:81:3f:4b:6d:
                    00:3f:c3:73:85:aa:9f:b8:2b:89:21:13:51:60:04:
                    b1:00:ee:5d:21:8b:d3:45:1a:53:0c:0a:96:1c:20:
                    38:f8:aa:3d:e8:dc:91:d7:1c:a6:34:e0:90:81:60:
                    ea:93:99:3e:0b:09:a4:bb:e6:c8:b4:bd:a5:42:0e:
                    ac:12:bd:62:2b:04:8f:98:46:56:4c:9c:c2:2b:d9:
                    62:e3:fa:16:a8:f7:29:c1:cb:41:c5:49:f5:c1:32:
                    a1:49:87:43:fb:a8:29:fb:8c:ef:02:cd:78:6a:f2:
                    ca:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:16:BD:BB:35:03:31:FD:4A:8B:C9:52:DE:B5:70:A4:AC:88:FD:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e/0d1fca78-9d98-4559-bd51-80a6c47ba01e.crl

            X509v3 Authority Key Identifier:
                keyid:CA:61:9B:E8:AC:A4:3A:07:D0:BF:6A:5F:5B:AA:3F:D4:20:E9:5A:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0d1fca78-9d98-4559-bd51-80a6c47ba01e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:3c:38:d7:56:36:73:25:d7:e8:59:f6:5a:06:47:dd:6d:22:
         9d:87:5b:b1:05:eb:c6:d4:aa:5d:0f:7b:d3:aa:b8:c7:ba:7e:
         12:b9:24:4b:1f:9b:0d:5c:2e:ac:de:9d:02:e2:d0:5f:77:94:
         18:ba:c8:3e:84:1d:a7:fc:95:7b:35:2c:f5:4d:9c:63:1d:07:
         dd:80:3d:c8:a5:ea:a1:98:07:6a:15:fb:9c:7f:ea:ae:a4:65:
         38:4a:63:cd:ed:3b:c1:2c:a1:c5:6e:4a:c4:66:12:5f:ea:9a:
         a9:0b:a3:59:22:1d:90:1a:fb:fc:76:e3:1b:40:32:57:d7:05:
         f9:13:44:0c:b2:77:f3:6a:b4:73:a9:62:e7:82:6b:e6:d9:e2:
         79:ae:b1:c0:42:46:ec:e0:e8:82:ef:2e:f9:d5:32:3a:ad:e3:
         79:93:ee:94:a5:f7:5a:b0:e2:b6:8e:86:6a:c9:ea:c7:0e:97:
         78:d6:ab:2e:f1:1e:22:39:36:a7:c7:0b:98:df:c6:4f:c1:cc:
         b3:e8:c6:8c:49:65:c0:74:9c:5f:41:97:91:cc:fc:27:3d:da:
         38:ff:23:3c:d0:d6:40:21:d1:92:63:b4:a3:cc:83:02:e8:0e:
         55:7f:bf:be:3f:87:3b:26:03:79:f3:b9:7b:35:5f:5a:ce:bb:
         59:f8:dd:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 17:23:04 2025 by rpki-client