Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
File:                     1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft (raw, json)
Hash identifier:          qXTuETTIM7ziabXw03qmQHgwC6aQd8ggPHGjVbkDr2g=
Subject key identifier:   88:21:CA:C9:7B:11:B3:0D:D4:33:A7:96:25:60:C9:AD:74:C6:D2:B8
Authority key identifier: 0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31
Certificate issuer:       /CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
Certificate serial:       010D0C9F4328584957D5E92B4D02B49AE0D05500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft
Manifest number:          010D0C9F43285844DF4D44EED96218EB930ADB63
Signing time:             Sat 29 Mar 2025 00:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 00:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 00:00:00 +0000
Files and hashes:         1: 1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl (hash: eLx9W38zng/bKms72I2bLD5QlVUbytEApgbsDn7uJks=)
                          2: 7ddfcdd8-2f3f-3cae-b205-ab157dc89fce.roa (hash: HL62PYcNIIBq6cNV9YllTJ7p5XFHW7fSQt+KgnwrMc0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:d5:e9:2b:4d:02:b4:9a:e0:d0:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e6442ce-ff1f-4b6b-94e3-36479d01ca52
        Validity
            Not Before: Mar 29 00:00:07 2025 GMT
            Not After : Apr  1 00:00:00 2025 GMT
        Subject: CN=2dc6f03f-b946-4758-9d1d-be51cb2ef3a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:e3:1f:05:a1:f5:44:11:cb:9f:8a:72:91:ec:
                    9e:09:90:da:9c:22:f3:cb:02:d1:15:d6:f6:09:46:
                    94:d9:7e:ff:13:05:25:3a:2c:fd:57:e8:54:da:68:
                    be:d9:a8:7f:2a:1e:a7:8c:85:4c:6c:68:7d:f6:a3:
                    89:4a:de:f4:ff:e9:c5:82:27:ce:d4:b4:6a:58:40:
                    bc:c3:14:f8:3e:6a:55:be:88:eb:46:6b:61:6d:7e:
                    1f:9e:41:21:99:b4:eb:94:b6:43:cd:e6:f5:96:b7:
                    bf:aa:e2:8e:e6:84:b6:9e:f6:be:92:0c:e2:b8:57:
                    95:3e:02:72:5f:01:81:a6:63:df:29:9b:85:e3:a8:
                    84:39:1a:ef:3f:10:e8:a7:70:2f:30:d1:2c:e9:66:
                    c7:3f:97:e3:c3:ba:b1:fc:6c:a2:65:27:88:b4:e1:
                    46:bd:2a:67:b1:a7:c6:75:1f:0f:56:c9:e1:30:80:
                    2f:47:d9:00:91:51:d4:40:09:fe:de:07:d3:7a:4a:
                    f1:d9:27:e7:17:2c:41:a7:b9:c4:72:9c:cb:82:34:
                    8e:ff:d9:2e:45:96:94:31:2a:4d:ec:79:65:c7:68:
                    69:30:d7:9e:b7:39:27:b3:2d:1c:40:c4:99:ef:c1:
                    93:64:a2:8b:0e:6e:db:33:3f:70:9f:20:32:a0:e5:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:21:CA:C9:7B:11:B3:0D:D4:33:A7:96:25:60:C9:AD:74:C6:D2:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.crl

            X509v3 Authority Key Identifier:
                keyid:0F:AF:2B:40:4F:E9:6D:EC:01:0D:03:8E:62:19:6C:36:84:75:98:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1e6442ce-ff1f-4b6b-94e3-36479d01ca52.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:3a:56:62:a1:02:d6:ac:02:b4:88:01:3d:a8:61:1a:1e:f6:
         46:56:f5:96:89:cf:d5:2f:58:29:7b:94:e8:ec:5f:f5:15:9b:
         6e:e9:ad:c4:14:c9:a8:2c:60:b0:3e:fb:7c:27:05:cd:fb:27:
         2b:43:df:53:7d:01:33:0d:3e:4a:bb:b1:14:d8:83:7d:aa:11:
         a9:c5:78:bb:a2:9f:2d:c8:f4:99:fe:85:83:70:f6:cb:cc:75:
         f3:e9:d0:bb:b7:2d:81:cb:b0:6a:48:59:6d:26:5d:b0:3a:67:
         42:51:a4:df:52:79:de:83:8d:c8:be:80:7a:a1:92:75:6d:7b:
         68:32:56:ce:69:c7:6d:5f:93:2e:76:fd:5c:6b:d6:43:7b:97:
         0d:39:bb:d3:f7:bc:9b:61:aa:3b:73:30:94:42:08:9b:18:43:
         d8:22:57:16:3a:e3:27:ed:66:9b:e2:e5:b5:11:0e:58:a7:5d:
         12:f4:27:08:35:93:00:a6:53:d5:79:f0:0e:bb:24:11:90:5e:
         1c:ba:66:f1:4e:b6:de:7c:3d:d7:3c:46:b8:30:6c:a3:c8:a1:
         64:01:bf:c6:4b:9f:b8:74:eb:33:03:84:a8:81:2f:a7:d9:10:
         03:f4:70:e7:33:8f:26:28:5e:f6:2d:5d:16:c8:39:d0:36:0c:
         3a:99:bf:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 4 15:56:11 2025 by rpki-client