Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft
File:                     25b8413b-5254-4959-a9f1-d00f0fc1b819.mft (raw, json)
Hash identifier:          9fw7vWpK6NcMetKndzovlQT7BVbm8cEi35hy3KyyAzQ=
Subject key identifier:   97:35:5D:69:A5:C9:EB:0D:15:22:11:F4:BB:66:D7:27:11:21:37:3A
Authority key identifier: 9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A
Certificate issuer:       /CN=25b8413b-5254-4959-a9f1-d00f0fc1b819
Certificate serial:       010D0C9F43285849584D09F736E5AB53C75F6180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft
Manifest number:          010D0C9F432858451D2581D3B48CABDB22FE8CCD
Signing time:             Sat 29 Mar 2025 04:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 04:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 04:00:00 +0000
Files and hashes:         1: 25b8413b-5254-4959-a9f1-d00f0fc1b819.crl (hash: Tx8J1FUD8Uu3dLzhuxYTk00MtLXSYUvX3WnP75xMA04=)
                          2: 81b30814-d14d-3119-b7df-c279bfdf03c6.roa (hash: ZH9Wwv7nkXeYMv21e9IjzXqG5xh7N5/RRXM4qgfZQ08=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:4d:09:f7:36:e5:ab:53:c7:5f:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=25b8413b-5254-4959-a9f1-d00f0fc1b819
        Validity
            Not Before: Mar 29 04:00:07 2025 GMT
            Not After : Apr  1 04:00:00 2025 GMT
        Subject: CN=caa0aa13-88c8-4e72-9b4a-cac9a16128b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:a6:72:26:89:b3:47:5a:31:c9:20:18:b4:69:
                    c3:ee:d2:e1:f4:35:2e:ee:dd:82:04:ab:ad:ac:18:
                    fd:a3:a6:d5:37:b1:e6:aa:dc:dd:cb:18:b4:83:97:
                    e0:c1:a4:7f:9a:2f:90:53:c5:c8:c1:a6:9b:bc:8f:
                    8b:e0:41:ea:fd:39:50:b7:5a:a0:64:21:6a:1e:e6:
                    bd:c0:af:97:4c:5b:5c:27:75:40:4a:5f:68:e1:f7:
                    3a:61:e3:ab:4e:5c:95:6f:88:92:03:68:0b:a8:aa:
                    5c:3e:cf:f4:17:d7:d4:45:71:4c:4d:25:af:64:14:
                    61:92:88:e6:a8:c6:f2:6b:8b:f2:ab:15:1a:04:bd:
                    e5:cb:9d:8c:c1:bf:86:82:e6:75:3b:d0:00:5b:fe:
                    0b:1a:58:4e:6d:63:a6:ed:a7:fb:d2:3e:18:31:26:
                    89:09:e9:03:1d:e9:b8:6d:5e:f6:43:ff:b7:5d:cf:
                    a0:ab:0b:4b:8b:d3:8c:ad:17:fb:93:02:e3:91:50:
                    61:ed:e6:8d:81:a2:51:60:65:43:bb:b0:8a:6a:e9:
                    14:4a:54:dd:b2:d7:dc:73:ff:33:e2:01:66:b3:5b:
                    62:20:44:8d:7f:17:32:45:01:5b:c8:01:a7:2d:ce:
                    3b:b2:3c:2f:0b:31:d7:99:db:48:1d:37:8c:8f:7a:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:35:5D:69:A5:C9:EB:0D:15:22:11:F4:BB:66:D7:27:11:21:37:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819/25b8413b-5254-4959-a9f1-d00f0fc1b819.crl

            X509v3 Authority Key Identifier:
                keyid:9B:C1:D5:F2:9F:0C:F5:76:79:67:DF:70:25:4A:6B:8B:65:B9:1E:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/25b8413b-5254-4959-a9f1-d00f0fc1b819.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:67:38:88:9d:57:e9:14:7c:9e:f5:fe:20:e0:0b:00:20:
         b2:51:b5:9b:eb:2e:a9:4a:60:12:d5:81:7d:c7:15:43:1a:52:
         b0:13:7b:4a:e7:e1:ee:e4:22:74:1b:d3:9f:e2:31:ae:7c:4e:
         1d:f0:c5:de:de:07:62:60:74:d3:72:29:54:9d:3f:05:db:14:
         6a:e4:4b:12:af:41:80:ed:3a:a2:c1:fd:8c:f4:cf:ff:48:e8:
         51:53:e3:de:56:01:f2:0b:9d:52:89:02:76:db:11:2d:09:24:
         70:aa:a6:72:ab:26:bd:5e:79:1c:7e:38:71:ab:44:a6:52:95:
         56:bd:2a:6b:2e:67:ae:99:65:ed:b9:0b:9e:a8:7d:81:7f:b5:
         bf:13:04:bd:c6:2e:4d:be:5c:2d:e6:39:8e:de:86:f9:1d:ca:
         5e:09:ab:4f:96:2e:e3:a9:6d:d7:2b:ae:f7:2c:f0:32:85:4c:
         23:f8:0e:92:39:a0:90:73:9e:31:4b:f3:c9:a4:32:92:71:4e:
         8a:e2:35:e5:fe:d8:71:29:e1:11:07:dd:67:e0:9f:9a:84:99:
         ce:22:24:65:a8:bb:f9:41:e8:1c:fc:d2:e1:b5:c6:29:cd:cb:
         5e:fa:d0:7f:1a:53:ab:89:34:45:ac:bc:12:fa:bc:e3:9d:5d:
         cc:35:f6:a9
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElYTQn3NuWrU8dfYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjViODQxM2ItNTI1NC00OTU5LWE5ZjEtZDAwZjBmYzFi
ODE5MB4XDTI1MDMyOTA0MDAwN1oXDTI1MDQwMTA0MDAwMFowLzEtMCsGA1UEAxMk
Y2FhMGFhMTMtODhjOC00ZTcyLTliNGEtY2FjOWExNjEyOGIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3qZyJomzR1oxySAYtGnD7tLh9DUu7t2CBKut
rBj9o6bVN7Hmqtzdyxi0g5fgwaR/mi+QU8XIwaabvI+L4EHq/TlQt1qgZCFqHua9
wK+XTFtcJ3VASl9o4fc6YeOrTlyVb4iSA2gLqKpcPs/0F9fURXFMTSWvZBRhkojm
qMbya4vyqxUaBL3ly52Mwb+GguZ1O9AAW/4LGlhObWOm7af70j4YMSaJCekDHem4
bV72Q/+3Xc+gqwtLi9OMrRf7kwLjkVBh7eaNgaJRYGVDu7CKaukUSlTdstfcc/8z
4gFms1tiIESNfxcyRQFbyAGnLc47sjwvCzHXmdtIHTeMj3q5iwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJc1XWmlyesNFSIR9Ltm1ycRITc6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yNWI4
NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBmMGZjMWI4MTkvMjViODQxM2ItNTI1NC00
OTU5LWE5ZjEtZDAwZjBmYzFiODE5Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjViODQxM2ItNTI1NC00OTU5LWE5
ZjEtZDAwZjBmYzFiODE5LzI1Yjg0MTNiLTUyNTQtNDk1OS1hOWYxLWQwMGYwZmMx
YjgxOS5jcmwwHwYDVR0jBBgwFoAUm8HV8p8M9XZ5Z99wJUpri2W5HlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yNWI4NDEzYi01MjU0LTQ5NTktYTlmMS1kMDBm
MGZjMWI4MTkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB29Gc4iJ1X6RR8nvX+IOAL
ACCyUbWb6y6pSmAS1YF9xxVDGlKwE3tK5+Hu5CJ0G9Of4jGufE4d8MXe3gdiYHTT
cilUnT8F2xRq5EsSr0GA7Tqiwf2M9M//SOhRU+PeVgHyC51SiQJ22xEtCSRwqqZy
qya9Xnkcfjhxq0SmUpVWvSprLmeumWXtuQueqH2Bf7W/EwS9xi5Nvlwt5jmO3ob5
HcpeCatPli7jqW3XK673LPAyhUwj+A6SOaCQc54xS/PJpDKScU6K4jXl/thxKeER
B91n4J+ahJnOIiRlqLv5Qegc/NLhtcYpzcte+tB/GlOriTRFrLwS+rzjnV3MNfap
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:07:48 2025 by rpki-client