Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft
File:                     a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft (raw, json)
Hash identifier:          hYu0p532/bVy21LAaE/7/LkFRGe1n8ORuefoEh42BIw=
Subject key identifier:   94:A4:F3:38:33:D4:7C:1C:15:8A:BE:07:0A:2E:1C:1A:4E:28:42:61
Authority key identifier: 39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA
Certificate issuer:       /CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2
Certificate serial:       010D0C9F4328584957057A4F38FB5D27DF776400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft
Manifest number:          010D0C9F4328584073A81EA3627C88E46E3B36C2
Signing time:             Fri 28 Mar 2025 17:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 17:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 17:00:00 +0000
Files and hashes:         1: 2c00b969-31c6-39cf-887a-d4c674d20b23.roa (hash: dpeFBBVjFkAq6nKpBbcUcAfesNSqYmyeV0oR1SsEh14=)
                          2: a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl (hash: KHOJJAkXAVS6vYjdbhkPgIsoXy2Lnizmk9jKruLk9jo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:05:7a:4f:38:fb:5d:27:df:77:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2
        Validity
            Not Before: Mar 28 17:00:07 2025 GMT
            Not After : Mar 30 17:00:00 2025 GMT
        Subject: CN=3b6b3d2f-f44f-4c7b-9ead-6370bd2c9e55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:1d:3b:6c:dc:4b:70:50:d3:fb:5d:56:96:0a:
                    67:c5:82:33:aa:81:ea:2c:d0:cb:5b:79:74:f6:40:
                    1b:36:c9:fb:7f:79:e2:8a:e6:dd:f3:7d:58:83:da:
                    0a:9b:aa:5e:a0:6f:35:70:a1:ed:c1:11:05:61:b4:
                    20:6f:26:b6:32:fd:e8:fd:a7:56:e8:0e:fa:c0:db:
                    ce:12:60:7c:2c:bb:6e:60:cb:d2:84:5e:96:98:b8:
                    c0:d9:83:7c:6f:33:a7:57:50:39:91:71:dc:ad:ca:
                    2b:18:7b:f6:a9:c4:12:6a:c9:07:32:f5:e7:eb:e2:
                    76:4c:b2:f1:f6:b0:f2:2d:21:13:c5:b1:e4:84:d8:
                    c6:db:d3:e1:22:35:a9:92:37:23:6f:7b:71:6d:09:
                    f5:62:a4:6a:86:8a:f5:4b:da:75:9b:3f:dd:53:a6:
                    35:aa:78:1d:71:50:a1:13:13:b4:d3:30:51:c9:d8:
                    a3:9a:a7:9b:4e:18:d8:19:d1:c6:71:d5:35:d7:10:
                    42:84:c4:b2:07:f7:19:8b:66:8f:59:49:e6:e5:d4:
                    d5:0e:c7:06:50:91:81:ba:72:be:59:f5:43:0e:9b:
                    0e:8e:27:1e:83:54:98:14:7d:d4:9a:d0:0c:34:04:
                    10:1e:99:60:93:98:ad:3e:8e:39:96:69:e8:05:5e:
                    4f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:A4:F3:38:33:D4:7C:1C:15:8A:BE:07:0A:2E:1C:1A:4E:28:42:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.crl

            X509v3 Authority Key Identifier:
                keyid:39:D9:61:2C:61:AC:B8:5B:95:58:7F:A5:1C:AF:6E:31:87:58:78:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/a242b88c-8a8d-48ec-a0d3-8a4aef5e46e2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:96:00:f4:87:87:08:ed:ae:76:a5:1a:c0:6a:09:5c:39:a1:
         79:e2:2d:f0:0d:9f:3e:c8:e9:d5:b2:98:a6:37:60:c9:31:31:
         c8:9a:28:43:aa:7a:eb:62:ac:ef:6e:8a:a6:c7:1d:38:64:dc:
         d1:30:40:d9:3e:55:24:cc:b7:43:a4:5a:7c:b4:a0:7d:27:76:
         f6:e0:4a:16:e3:89:ad:5c:63:fa:ea:8e:ca:5a:9d:f8:77:0b:
         8c:e9:4b:c6:01:06:0b:a2:37:e5:82:cc:c3:ea:e3:ab:df:35:
         a4:d0:c0:6a:d6:f2:2c:c4:6d:bc:93:90:74:33:65:58:b4:36:
         81:1f:e9:4e:69:38:92:79:bc:6c:1d:18:46:77:4c:63:25:bd:
         e6:c6:1e:c2:11:73:f1:52:2c:f5:61:92:18:19:c0:67:ae:3f:
         62:f5:23:92:bf:07:04:8e:e9:7e:e8:64:2e:b1:2e:4a:7f:67:
         b3:d4:e5:ac:1f:44:56:cf:4c:78:20:06:76:dd:ce:77:d3:6c:
         92:1d:20:da:dd:e8:5e:0a:be:61:53:a5:40:d3:f4:2b:47:e8:
         58:ef:c9:d8:ca:48:f3:cd:c5:af:47:d2:b0:f0:69:c2:66:d5:
         50:be:c1:7f:63:f4:5b:28:ab:81:92:4b:a7:40:31:6c:cb:ba:
         25:5c:58:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:02:15 2025 by rpki-client