Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
File:                     caf19008-048f-4580-9101-f0d1eb7fc3ae.mft (raw, json)
Hash identifier:          sBX2cEtfUFxpxDpkHBB+N4P+Z2z2p/mM0gcaX+bOe9k=
Subject key identifier:   6D:84:7C:E3:F1:4F:D6:EB:5A:F4:31:14:E8:67:E7:52:E0:3A:C7:D2
Authority key identifier: 42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35
Certificate issuer:       /CN=caf19008-048f-4580-9101-f0d1eb7fc3ae
Certificate serial:       010D0C9F4328584958A65E141BD0003F305D6680
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft
Manifest number:          010D0C9F4328584073A84561B07C62D8C8FAA0C3
Signing time:             Sat 29 Mar 2025 07:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 07:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 07:00:00 +0000
Files and hashes:         1: 16bcc855-d7fc-3d7d-9d16-8553c18a2e4f.roa (hash: NAhE0p3Ysx8Qy7n8cXeppi5zqEcE/f4yMLcvj2iVHwM=)
                          2: a45902da-9e70-3943-a932-51f817256e75.roa (hash: bLuOTwhFm2WL/4EfkZUPWoq5IllPo5HvXRK+modd05Y=)
                          3: caf19008-048f-4580-9101-f0d1eb7fc3ae.crl (hash: sHIEz5mcRaIV1VUM4wJ5RK3bDCh3l+AkHTWhwbCan1o=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:a6:5e:14:1b:d0:00:3f:30:5d:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=caf19008-048f-4580-9101-f0d1eb7fc3ae
        Validity
            Not Before: Mar 29 07:00:07 2025 GMT
            Not After : Mar 31 07:00:00 2025 GMT
        Subject: CN=5b2dd03b-ebf2-4de9-b86e-0385e0fac2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:92:a4:a3:f4:e9:9e:e9:c6:af:71:49:6e:b8:
                    51:c0:aa:28:2e:f9:61:ea:43:fb:1e:66:11:55:a0:
                    e4:b9:e0:35:f7:58:43:2d:d2:10:34:e9:44:8a:1b:
                    e3:5d:da:75:ce:50:5c:df:f6:83:a7:8a:ce:3c:20:
                    69:e2:e1:d2:98:11:70:2c:88:a5:f4:f4:ad:b6:0c:
                    ee:de:c7:df:80:c6:1b:8f:b4:79:70:53:1b:f6:17:
                    8a:30:ae:75:7b:21:62:97:74:6f:fd:18:10:0f:33:
                    7c:39:f5:bb:68:04:73:1e:da:ca:c8:5f:d3:d3:b0:
                    f5:c8:f6:89:f8:60:52:eb:8d:da:ac:8d:eb:a0:76:
                    7c:53:4c:ab:ff:5c:b0:e5:8b:2a:52:85:ad:dc:be:
                    79:13:10:b7:4d:1b:45:6a:f2:38:4a:34:56:99:d1:
                    68:f1:45:5c:1f:48:f1:1b:b4:f9:12:b3:16:a5:45:
                    30:2a:c2:2a:95:1c:b3:d1:05:3a:0b:45:62:ba:e4:
                    ca:e6:c0:c7:21:48:20:49:76:e0:36:e9:35:ad:b7:
                    2f:7f:bf:93:b7:9b:83:1b:40:cb:36:b4:b8:77:c9:
                    21:72:db:95:f1:90:f6:40:15:40:a4:21:d5:55:a4:
                    0e:32:3a:a7:13:5e:43:12:f8:bf:cf:99:96:dd:f5:
                    b0:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:84:7C:E3:F1:4F:D6:EB:5A:F4:31:14:E8:67:E7:52:E0:3A:C7:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae/caf19008-048f-4580-9101-f0d1eb7fc3ae.crl

            X509v3 Authority Key Identifier:
                keyid:42:27:D2:6F:BA:49:97:EC:41:51:16:C1:24:E8:0E:B0:5F:EE:61:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/caf19008-048f-4580-9101-f0d1eb7fc3ae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:6a:18:e1:e0:67:8a:2a:14:87:41:05:26:90:aa:cf:4b:95:
         25:ae:48:04:d5:64:eb:97:ce:97:6b:90:68:28:5c:92:43:37:
         7f:e0:c6:3e:d0:ae:8f:97:e5:47:e0:59:27:39:6d:63:cd:e0:
         e7:de:5b:73:3a:60:19:e0:20:9b:42:fe:77:52:9f:85:58:47:
         7b:55:78:ca:0d:64:5e:00:ff:c3:74:25:c2:f2:3a:1c:9b:af:
         97:1c:90:76:4b:88:23:f4:1e:1f:bc:88:b0:b7:98:78:23:79:
         0e:43:8a:38:b8:f0:72:73:f9:5d:c0:64:dd:3c:4c:ea:b4:52:
         df:1e:02:9c:70:ca:65:20:6b:30:d2:e3:33:2e:43:8e:ae:52:
         86:a1:7b:3e:c0:a1:51:06:38:ac:23:e0:fb:54:0e:b1:f8:8c:
         f5:e2:e8:99:ad:84:36:62:b6:c4:a3:cf:eb:d0:9f:5f:fb:7b:
         0c:b2:c8:ac:13:c9:3e:d9:e3:62:fe:9d:17:be:80:63:31:a7:
         39:49:85:7f:53:4a:a8:5e:3c:99:cb:fd:7f:b2:37:b7:26:11:
         3a:ee:97:09:60:9a:43:1e:65:bf:b1:49:b1:2a:bd:1c:1d:8c:
         b6:57:c1:1e:55:86:cf:e6:96:51:89:f8:ef:c0:bc:fb:ad:25:
         02:d7:08:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:20:00 2025 by rpki-client