Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
File:                     afac962a-1647-4571-99e5-a23db5fd79d7.mft (raw, json)
Hash identifier:          g1+1HHxx88pB43Fnz0gg2zEb8enVEhPReYK+AQk3B5g=
Subject key identifier:   BD:8C:E4:E8:80:B0:BB:3B:B9:F1:00:46:2D:93:78:0E:74:5B:07:92
Authority key identifier: D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F
Certificate issuer:       /CN=afac962a-1647-4571-99e5-a23db5fd79d7
Certificate serial:       010D0C9F43285849766DA890E699F8E7CDB48400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
Manifest number:          010D0C9F4328584073A82FF0EBCB41ACCF058853
Signing time:             Tue 08 Apr 2025 23:00:07 +0000
Manifest this update:     Tue 08 Apr 2025 23:00:07 +0000
Manifest next update:     Fri 11 Apr 2025 23:00:00 +0000
Files and hashes:         1: 01cd1793-f8fc-3093-850b-0b0ebdbf290c.roa (hash: Lz4UOSP+7v1v2DU8HzeavBoXKt/18eLh15fxqcTuOQk=)
                          2: 0d8274da-0703-3d0a-ab87-cd190f0a1378.roa (hash: QWokQjqKZiZ4n6n0NbHpMBVLfKENxs8i+2tQd/mOUVs=)
                          3: afac962a-1647-4571-99e5-a23db5fd79d7.crl (hash: WKcroofSowUgt1io6/BVOOL/mZSVxLFFttZZd5KNBXw=)
                          4: b393d2e1-dfc7-3955-ba83-e6c3e0b6b75a.roa (hash: p7jMfIB1O2FgB4cH76n/PjOU+q6sBQeFEHsOJi5WRwc=)
                          5: e5e560e3-7114-3301-9261-7725a1241fa8.roa (hash: Xf/jewegsjG/t+ollpV/H0fD0go3YjMleB27j3ZB3F8=)
                          6: ed93203f-cf71-30b1-9801-397105ab7580.roa (hash: MWGcH70CB1oo/CONVvgs/RMePXmncLGfZh6V820cbRk=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:6d:a8:90:e6:99:f8:e7:cd:b4:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afac962a-1647-4571-99e5-a23db5fd79d7
        Validity
            Not Before: Apr  8 23:00:07 2025 GMT
            Not After : Apr 11 23:00:00 2025 GMT
        Subject: CN=edc3880f-a5d6-4647-b1d2-d976f390fcd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:83:ca:f7:7f:a2:2d:e8:15:34:1c:5b:8e:c7:
                    10:30:66:72:e4:25:8f:36:f6:6f:5f:1b:77:f0:bb:
                    d3:8a:74:41:21:f6:37:a6:46:ec:08:90:ab:90:94:
                    c2:de:71:87:91:40:d9:1b:80:ce:71:0e:bf:84:65:
                    ad:a5:e9:06:91:cc:c9:81:73:b2:3e:9e:40:6a:1a:
                    68:b4:06:01:73:15:5c:c5:23:37:f0:c9:cd:d0:dd:
                    52:a6:b9:8f:81:9b:9a:be:3e:f3:ba:3c:d1:f1:0b:
                    dc:40:e0:45:4c:7e:e8:71:45:99:be:d8:2f:0a:c3:
                    e6:f5:dc:79:0f:ec:6a:ab:d8:f3:41:84:12:09:fe:
                    00:39:63:e5:65:b1:1b:dd:5a:4b:96:a1:5c:7c:f7:
                    f0:57:aa:39:c7:2c:6d:37:1e:11:40:6f:32:71:71:
                    23:96:6c:78:a0:c0:79:2c:ef:b9:41:f2:9d:4e:18:
                    b5:41:9c:a2:7d:9f:9c:1b:3a:41:18:a9:db:75:a6:
                    15:6d:26:3f:26:5b:e8:14:69:6d:a6:94:4f:39:c4:
                    1d:4d:12:2f:27:b1:0e:26:39:dc:09:13:bd:ba:1c:
                    51:48:5c:e9:3a:9c:12:f8:c8:19:44:fa:11:c1:91:
                    77:73:1f:32:31:ee:b3:b1:4c:33:c5:2d:98:96:25:
                    89:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:8C:E4:E8:80:B0:BB:3B:B9:F1:00:46:2D:93:78:0E:74:5B:07:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7/afac962a-1647-4571-99e5-a23db5fd79d7.crl

            X509v3 Authority Key Identifier:
                keyid:D7:C7:3D:59:94:8A:75:99:F5:58:48:2E:6D:B3:CD:7C:B9:1B:F2:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/afac962a-1647-4571-99e5-a23db5fd79d7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e1:12:74:72:69:32:f7:b7:61:be:35:86:61:45:6d:c4:a5:
         3c:07:82:96:eb:de:55:8c:9b:2c:f6:f1:95:28:1f:17:1e:0a:
         7a:c7:61:06:6e:e1:88:fe:9e:f9:c0:b0:08:f3:7c:e8:09:25:
         6e:52:8a:32:0a:b6:38:bb:9a:2d:90:12:54:65:d1:b9:4a:03:
         82:42:9e:2c:78:c5:9c:2d:e2:31:54:80:76:0e:eb:d2:d5:93:
         eb:44:5a:9a:75:b5:19:6a:89:59:c9:20:88:e4:01:95:64:0b:
         35:ca:5e:d8:32:e0:c4:76:3d:e4:56:e7:8a:d2:f1:00:f9:88:
         e9:33:f1:6b:e7:2d:fa:53:03:58:bf:12:0f:43:3b:2e:e8:a4:
         c3:3c:76:87:ee:36:98:b9:24:9c:48:e4:fb:f9:e9:cd:fc:c2:
         67:0b:45:0e:73:30:de:e6:b2:08:bd:b3:df:e2:1b:a0:05:72:
         7a:67:3b:ce:c1:b7:b7:20:7e:f4:4a:69:dc:b3:9d:f1:f1:30:
         f3:f5:0f:e1:f8:42:b4:a1:dd:48:c2:85:bd:a9:80:d1:07:57:
         9c:df:64:e1:63:8f:a9:bb:37:b9:87:3a:f4:0b:a6:39:63:2f:
         28:57:e0:e6:c6:52:9b:ab:1a:54:b1:c7:f2:f1:30:dd:f8:af:
         de:8b:7f:bf
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEl2baiQ5pn45820hAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZhYzk2MmEtMTY0Ny00NTcxLTk5ZTUtYTIzZGI1ZmQ3
OWQ3MB4XDTI1MDQwODIzMDAwN1oXDTI1MDQxMTIzMDAwMFowLzEtMCsGA1UEAxMk
ZWRjMzg4MGYtYTVkNi00NjQ3LWIxZDItZDk3NmYzOTBmY2QyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz4PK93+iLegVNBxbjscQMGZy5CWPNvZvXxt3
8LvTinRBIfY3pkbsCJCrkJTC3nGHkUDZG4DOcQ6/hGWtpekGkczJgXOyPp5Aahpo
tAYBcxVcxSM38MnN0N1SprmPgZuavj7zujzR8QvcQOBFTH7ocUWZvtgvCsPm9dx5
D+xqq9jzQYQSCf4AOWPlZbEb3VpLlqFcfPfwV6o5xyxtNx4RQG8ycXEjlmx4oMB5
LO+5QfKdThi1QZyifZ+cGzpBGKnbdaYVbSY/JlvoFGltppRPOcQdTRIvJ7EOJjnc
CRO9uhxRSFzpOpwS+MgZRPoRwZF3cx8yMe6zsUwzxS2YliWJxwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFL2M5OiAsLs7ufEARi2TeA50WweSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFj
OTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNkYjVmZDc5ZDcvYWZhYzk2MmEtMTY0Ny00
NTcxLTk5ZTUtYTIzZGI1ZmQ3OWQ3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYWZhYzk2MmEtMTY0Ny00NTcxLTk5
ZTUtYTIzZGI1ZmQ3OWQ3L2FmYWM5NjJhLTE2NDctNDU3MS05OWU1LWEyM2RiNWZk
NzlkNy5jcmwwHwYDVR0jBBgwFoAU18c9WZSKdZn1WEgubbPNfLkb8i8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hZmFjOTYyYS0xNjQ3LTQ1NzEtOTllNS1hMjNk
YjVmZDc5ZDcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBh4RJ0cmky97dhvjWGYUVt
xKU8B4KW695VjJss9vGVKB8XHgp6x2EGbuGI/p75wLAI83zoCSVuUooyCrY4u5ot
kBJUZdG5SgOCQp4seMWcLeIxVIB2DuvS1ZPrRFqadbUZaolZySCI5AGVZAs1yl7Y
MuDEdj3kVueK0vEA+YjpM/Fr5y36UwNYvxIPQzsu6KTDPHaH7jaYuSScSOT7+enN
/MJnC0UOczDe5rIIvbPf4hugBXJ6ZzvOwbe3IH70Smncs53x8TDz9Q/h+EK0od1I
woW9qYDRB1ec32ThY4+puze5hzr0C6Y5Yy8oV+DmxlKbqxpUscfy8TDd+K/ei3+/
-----END CERTIFICATE-----
Generated at Wed Apr 9 06:48:56 2025 by rpki-client