Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
File:                     d51877be-b85b-4cf7-ae49-18c7da88238f.mft (raw, json)
Hash identifier:          RAmELn9Xwss+X+cA44mhnqe9Khg3wroJaDGIodSYSkk=
Subject key identifier:   3D:E5:0F:BD:48:BB:D2:E8:70:22:FA:DA:44:B6:36:11:69:5C:91:F7
Authority key identifier: 76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97
Certificate issuer:       /CN=d51877be-b85b-4cf7-ae49-18c7da88238f
Certificate serial:       010D0C9F43285847F20741B0C76148EDD484AE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
Manifest number:          010D0C9F43285845DCE269E9744D25FED3A3D686
Signing time:             Wed 20 Nov 2024 20:00:07 +0000
Manifest this update:     Wed 20 Nov 2024 20:00:07 +0000
Manifest next update:     Fri 22 Nov 2024 20:00:00 +0000
Files and hashes:         1: 2976ee23-b1c1-3dac-b7c5-8e15af1b6de5.roa (hash: egZxwWzM6fTWx6tWLzfo1a06nWtJJlhClf02qw7nD1w=)
                          2: 8cc7d26a-793d-3064-848e-1c2d02982b8b.roa (hash: H3D/BPfhJJLadylgzwr3bnOvPKTn+oTwFJQyKi0Lg/M=)
                          3: d51877be-b85b-4cf7-ae49-18c7da88238f.crl (hash: 5+BEp6HBDhMg3I1ZwT9EnEkR7mFm0B9uB5iLvz9c1Yc=)

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f2:07:41:b0:c7:61:48:ed:d4:84:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d51877be-b85b-4cf7-ae49-18c7da88238f
        Validity
            Not Before: Nov 20 20:00:07 2024 GMT
            Not After : Nov 22 20:00:00 2024 GMT
        Subject: CN=b911fcbb-6da2-46a4-a257-dc8fef3dbc51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:cb:7d:23:52:13:03:ba:cc:ec:e4:80:c8:
                    29:ce:71:33:6c:be:2b:32:0a:7e:f3:ad:91:57:ec:
                    00:a8:12:17:26:d8:14:ec:36:4f:2d:56:16:a3:fb:
                    42:2a:f3:19:c4:14:c6:b9:3b:33:51:19:44:a4:77:
                    ce:ab:f2:ea:94:3e:9d:72:3c:49:de:b0:9b:fa:46:
                    6b:d7:99:e8:87:69:f0:ce:9d:92:29:94:f7:03:0c:
                    a4:3f:4c:94:d5:d8:34:93:d0:16:fe:19:13:73:87:
                    14:bf:26:b1:5a:a5:2e:53:4e:f4:d2:b7:79:a3:e5:
                    b0:0b:c7:40:2f:df:f5:02:b4:02:cf:f2:38:d3:97:
                    d9:09:73:25:cd:3a:b7:9d:aa:80:7a:a4:80:24:39:
                    57:84:3d:60:0c:db:9c:ef:6d:c8:9b:88:19:a9:8f:
                    f4:b4:5b:88:24:e0:3b:af:66:0c:93:66:6b:8a:79:
                    1b:57:7c:40:39:c5:4d:4e:e4:1b:8b:94:98:96:f3:
                    de:28:a5:ae:d9:c3:60:cf:00:be:b0:a6:99:fc:7e:
                    bb:91:a4:d3:73:b2:13:23:f0:3b:a3:25:44:1f:da:
                    49:43:a3:a1:6e:7c:b3:c9:a5:fa:d8:55:b2:fa:cd:
                    bf:cf:a7:d5:b7:8c:50:43:35:8b:2d:a5:4c:bc:7f:
                    06:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:E5:0F:BD:48:BB:D2:E8:70:22:FA:DA:44:B6:36:11:69:5C:91:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f/d51877be-b85b-4cf7-ae49-18c7da88238f.crl

            X509v3 Authority Key Identifier:
                keyid:76:F6:1F:3C:F7:95:21:F5:2A:6C:26:7F:38:C1:32:3D:D4:7E:3C:97

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d51877be-b85b-4cf7-ae49-18c7da88238f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:59:d9:b1:68:07:42:0b:22:19:63:58:68:13:ee:c6:9f:b8:
         6d:21:ce:12:69:76:af:91:64:bc:34:54:1f:7d:a6:e0:b6:22:
         3f:13:2e:dc:50:83:e2:97:dc:a0:21:70:a9:be:27:00:87:0b:
         25:8f:ff:52:e0:69:19:08:e7:b3:73:2c:e4:d6:4b:d4:b0:58:
         08:9e:1b:3a:b7:16:7d:55:84:36:6a:7c:af:65:f6:9a:25:a0:
         92:12:ed:a8:93:b3:27:52:de:35:f7:fb:42:89:62:f7:81:77:
         80:43:73:6c:a0:3c:e7:fb:09:f3:ae:b2:42:de:d0:70:73:2a:
         12:aa:ca:b2:b3:fb:0f:e2:ab:b3:ac:43:30:66:e4:71:c8:b8:
         a3:45:d8:53:18:33:20:e8:99:13:7e:f6:38:85:86:29:3d:f9:
         d8:65:5c:7b:47:4f:39:44:36:de:ff:98:65:93:84:02:85:33:
         08:ae:4a:0a:f9:54:8b:a1:de:6d:e3:bb:16:2a:cc:6a:53:a1:
         b9:ea:75:a7:82:46:d5:56:bb:38:71:03:d7:60:bf:e9:65:8c:
         71:08:d9:06:b0:9a:bf:c2:eb:3d:29:ac:aa:b3:d2:ef:e2:1d:
         e4:26:df:f7:f4:e4:73:69:04:47:8f:3f:2c:e1:cd:24:75:db:
         92:95:e2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----