Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft
File:                     da61f786-99c2-4468-90f7-0b35abd168e5.mft (raw, json)
Hash identifier:          Hmk4Ft1EOa6Swqvs8gsWN0iAbTp4DQSvFBUn6affbV8=
Subject key identifier:   C1:02:CD:D9:68:37:B2:D6:9D:5C:CB:3D:25:4F:C0:75:D8:AC:79:96
Authority key identifier: 9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59
Certificate issuer:       /CN=da61f786-99c2-4468-90f7-0b35abd168e5
Certificate serial:       010D0C9F4328584958C42436673E34FE90282E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft
Manifest number:          010D0C9F4328584073A846655D9F3F36F9E9CFC2
Signing time:             Sat 29 Mar 2025 08:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 08:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 08:00:00 +0000
Files and hashes:         1: bc669675-4f09-3100-852b-f89b8e4fa0ee.roa (hash: zFEOHCjO2LzHL9jTYD1YibQUrrC3iWz/tEhrT1VtqDs=)
                          2: da61f786-99c2-4468-90f7-0b35abd168e5.crl (hash: a5pH1rwjf0AHCM00qq3nAum+0ASbjPnWJOE3S6G9qQQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:c4:24:36:67:3e:34:fe:90:28:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da61f786-99c2-4468-90f7-0b35abd168e5
        Validity
            Not Before: Mar 29 08:00:07 2025 GMT
            Not After : Mar 31 08:00:00 2025 GMT
        Subject: CN=344960cf-23ca-4ee9-b41a-795fc235f6f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f7:8c:f2:ed:92:b2:2c:a9:8f:97:9e:1b:6c:
                    bf:8b:5c:a6:66:7d:e3:85:34:a6:8d:e8:15:80:63:
                    aa:41:f8:54:31:e9:0a:d8:14:5c:dc:99:21:b6:79:
                    76:82:c3:c8:d5:8e:30:ce:12:94:96:69:a4:5a:08:
                    62:d4:51:90:ac:3e:5f:78:8b:f3:ef:5b:88:06:54:
                    0e:c5:4e:a7:94:94:b9:61:e6:0a:cc:dc:65:76:77:
                    58:50:7b:d6:e7:fd:94:2a:fd:41:cb:ef:4e:a7:f7:
                    4f:a5:8c:c5:08:64:f4:70:e0:c0:9a:c0:35:89:57:
                    f8:6f:62:d0:1d:4b:d5:6c:01:13:9c:68:c8:44:9c:
                    8a:85:15:09:c5:a2:be:0d:13:bd:1c:48:5f:cd:1d:
                    46:c2:c0:c1:a4:1f:60:d1:7e:03:5e:c1:41:77:7e:
                    8e:69:fb:51:34:77:74:b3:c7:d5:c1:54:c0:fa:c3:
                    3d:9d:9f:d0:7a:9e:b7:52:63:f2:77:46:a4:98:75:
                    6a:1e:8b:60:ba:0d:e6:94:ac:4a:42:63:93:e1:ea:
                    d0:a2:f5:c0:01:fc:3e:48:40:34:fc:05:5f:f2:a6:
                    0f:eb:a8:ca:cf:3b:a7:fa:5c:38:16:30:4c:84:a6:
                    41:bb:b6:1b:59:a4:7a:25:ce:a9:24:34:c7:cf:ee:
                    45:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:02:CD:D9:68:37:B2:D6:9D:5C:CB:3D:25:4F:C0:75:D8:AC:79:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5/da61f786-99c2-4468-90f7-0b35abd168e5.crl

            X509v3 Authority Key Identifier:
                keyid:9B:B2:56:DD:8E:8C:E4:13:02:1F:AC:BA:4D:EB:C0:52:A2:E5:05:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/da61f786-99c2-4468-90f7-0b35abd168e5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:14:d6:38:85:16:e2:b6:af:62:48:6d:e2:61:17:b5:b8:db:
         e8:a0:a1:8f:25:0f:ca:32:65:8a:90:d4:d2:65:b2:05:38:36:
         c6:cf:d2:2c:8b:c2:02:25:ef:b4:41:54:5c:90:5a:95:f1:17:
         2a:b4:e6:e3:4e:49:08:d3:bb:ff:b9:b0:18:81:8d:7a:f7:dc:
         d6:89:61:4b:70:70:e1:c6:4d:f3:ab:5c:48:cf:c4:5b:4c:e8:
         8c:32:92:fd:b4:a7:77:fb:e5:3d:ea:13:42:9b:3d:7b:f3:90:
         bc:ef:ad:13:54:b9:cb:36:8b:da:54:26:da:30:e4:01:95:d5:
         00:9b:c2:a7:b5:2e:52:da:75:f0:3b:d2:92:b5:21:fc:0f:91:
         48:cb:87:bc:ba:b9:2c:aa:e2:1c:7f:00:59:5a:53:a3:95:5c:
         be:3e:55:3f:eb:4d:80:c7:9a:c0:d0:2b:f3:08:32:cd:18:84:
         fc:da:c6:6a:2c:73:c8:e7:be:a1:8d:5e:cb:44:b0:b4:bf:88:
         a8:3d:07:bc:39:99:1b:6e:5b:b2:57:51:46:3e:0c:1a:74:79:
         7e:84:4d:dc:fe:76:32:ba:fa:03:8c:18:fd:ba:55:af:70:1a:
         69:59:47:c7:f6:c3:61:4c:1b:6b:0d:c7:93:f4:bd:0d:ae:84:
         b2:5a:ba:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:38 2025 by rpki-client