Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft
File:                     cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft (raw, json)
Hash identifier:          ENx3dwH8iPwbSt4lcFiw9qibefxZpcuT15eKzKEyXOM=
Subject key identifier:   58:7F:80:CE:D5:05:CC:4E:DF:15:81:32:7B:65:00:AD:B5:DD:3B:C0
Authority key identifier: 76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54
Certificate issuer:       /CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64
Certificate serial:       010D0C9F43285849577C94DD0ADF78B177E85900
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft
Manifest number:          010D0C9F4328584073A82A28F077B993AC8B95DA
Signing time:             Fri 28 Mar 2025 21:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 21:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 21:00:00 +0000
Files and hashes:         1: 40814025-5675-3cb3-b3ce-80b3cbcdd5f8.roa (hash: k14E4tnW1fkfEBq8PcXHTXMBVt+y/WpAStkNmZKyozw=)
                          2: cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl (hash: KAkAJb5pz1RpkFFcKwZJ61XeTEdsD4K1y7cPl9DXsQo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:7c:94:dd:0a:df:78:b1:77:e8:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf5b9ef6-3b7c-485e-9804-e3ad65c54f64
        Validity
            Not Before: Mar 28 21:00:07 2025 GMT
            Not After : Mar 30 21:00:00 2025 GMT
        Subject: CN=e4f9cb40-43b0-4360-94df-87fa4a93f92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:1c:d0:73:b4:ab:e2:f2:e4:2e:3b:2e:ae:
                    75:e5:50:5a:4a:b8:7f:a8:af:4f:d2:87:d9:e8:b9:
                    54:79:e3:eb:7d:67:b0:31:31:31:70:0d:14:7a:5b:
                    23:a6:c3:9c:1a:4b:71:ad:c6:7f:bd:3c:29:4f:f8:
                    39:e0:81:55:3d:c8:16:37:ee:5b:6c:ac:36:fc:76:
                    71:dc:24:d8:e7:07:60:75:65:54:8b:d6:f8:e0:47:
                    d7:a7:bb:2d:88:2b:b7:8b:0a:d3:bb:7d:91:92:9f:
                    bb:26:d7:d5:82:73:5b:7c:61:31:e2:ab:67:a2:87:
                    cf:7a:2a:17:c9:da:b6:05:3b:b3:8b:31:bd:ba:4f:
                    e6:f1:7c:f6:48:3e:7c:0b:b7:77:ec:a6:ca:7b:eb:
                    c0:68:e7:4e:a8:6c:ee:86:16:85:6d:e2:eb:4a:70:
                    8d:e7:0e:9f:2d:c4:a2:5d:53:c9:e3:b5:fa:5c:8b:
                    d4:65:2c:24:13:98:1b:be:c8:32:53:f2:18:bc:99:
                    2f:76:ad:f6:98:f7:52:0c:e7:d5:43:28:45:fe:12:
                    27:ce:1f:83:34:e9:bb:9d:69:e0:6b:8e:d7:fc:bc:
                    c7:fe:eb:ef:f5:a4:b5:79:b0:5b:c1:17:46:94:39:
                    1f:6e:7c:8c:96:f2:ee:c7:d7:3b:45:bc:8b:8f:b1:
                    92:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7F:80:CE:D5:05:CC:4E:DF:15:81:32:7B:65:00:AD:B5:DD:3B:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.crl

            X509v3 Authority Key Identifier:
                keyid:76:F9:D6:80:16:66:BA:B0:1C:C3:F9:2A:1C:70:79:C8:43:C2:B4:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/cf5b9ef6-3b7c-485e-9804-e3ad65c54f64.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:6c:ac:e4:03:83:57:a3:64:e6:22:cc:cd:ac:e3:b2:c9:94:
         99:5c:dd:16:bd:f7:46:ed:20:61:95:50:b3:37:f2:14:96:86:
         7b:7d:84:b0:84:43:df:62:e5:61:a4:a7:21:de:00:e5:4c:e6:
         46:09:c6:2b:d1:5d:10:2f:54:ec:5a:3c:4b:57:a9:66:b6:06:
         ff:1a:73:9d:8d:a3:3e:67:02:a5:5a:9f:9d:5f:f7:1c:d0:eb:
         51:83:ba:28:a2:24:4c:cf:50:1f:d7:30:d5:db:ce:42:9c:48:
         d6:d6:79:d4:ac:c8:14:d2:09:87:65:bb:5a:54:b8:9f:f3:e6:
         52:ce:0e:27:df:46:10:b9:c8:1c:b1:db:a6:ff:76:62:32:7e:
         8f:2b:55:8c:ef:49:42:37:c5:ac:e6:ee:34:1e:84:06:b1:19:
         46:9d:d4:36:0c:54:fb:e4:86:d5:fd:c9:ef:0b:e8:69:5e:0a:
         50:61:d6:80:4b:a4:b3:f3:1d:01:a6:35:a8:5d:f2:9e:c7:82:
         2f:7f:a3:91:8f:a8:5f:98:63:3a:66:de:b7:56:cf:9f:67:59:
         8e:cb:40:0f:5a:eb:f0:9c:2e:c0:41:3d:3a:39:83:37:f4:6b:
         f3:f9:6b:c2:eb:37:a5:71:e7:82:5b:bc:17:b7:c4:1e:68:80:
         7d:a5:9b:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 12:12:51 2025 by rpki-client