Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft
File:                     576c64a5-3cd2-44d5-80c3-626ccc84e087.mft (raw, json)
Hash identifier:          nZowRzYs3gcCrS1OiL2a0BpGA7Ci1Q3HZwgJT+idwLI=
Subject key identifier:   74:D1:4C:0F:78:E5:69:0F:10:6B:BA:C5:EC:DF:27:8D:52:C3:19:C0
Authority key identifier: 93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89
Certificate issuer:       /CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
Certificate serial:       010D0C9F43285849591D79684EBD7B6448E38C50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft
Manifest number:          010D0C9F4328584073A85142D98E51DBFB16A3B3
Signing time:             Sat 29 Mar 2025 11:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 11:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 11:00:00 +0000
Files and hashes:         1: 576c64a5-3cd2-44d5-80c3-626ccc84e087.crl (hash: 1SBkEVtmCY9jTdqwnRuM6iMzx3eJBUfHfrL1XV7cZYQ=)
                          2: 9fd81086-d2ab-3b69-873f-c043d5f1123e.roa (hash: Znm4DmcLDjUvbS8q2vpQ0t9GI7WS9LbEDqlf3w+6ZUc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:59:1d:79:68:4e:bd:7b:64:48:e3:8c:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=576c64a5-3cd2-44d5-80c3-626ccc84e087
        Validity
            Not Before: Mar 29 11:00:07 2025 GMT
            Not After : Mar 31 11:00:00 2025 GMT
        Subject: CN=aabaeb64-10bd-4f6b-bd61-d0b2ef571bf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:d5:fd:31:ae:b1:6d:df:79:f0:09:ba:68:5a:
                    59:0a:a2:39:3f:81:39:06:cf:95:de:b6:f8:99:3a:
                    b4:b8:b9:11:fd:4f:a2:fd:1c:28:51:3e:41:13:eb:
                    f1:d0:63:6a:99:9b:7e:df:e4:13:f3:9a:64:43:4c:
                    13:44:52:1c:b2:97:d8:5d:bb:11:21:49:9a:8a:1e:
                    8f:b6:9a:42:95:1e:53:a0:e8:5f:65:4c:85:3f:da:
                    f4:a2:d3:8e:8e:79:f7:95:87:fd:c7:24:4d:24:e5:
                    32:ad:ce:c9:80:13:a8:72:af:58:16:6d:8b:3b:63:
                    01:13:cf:f3:c2:92:62:29:ed:15:6b:18:89:39:40:
                    f5:49:0a:49:a1:ba:a3:30:70:06:0a:41:0e:cf:9c:
                    c7:6c:b5:cf:09:43:91:d9:fe:58:a5:98:57:ea:fc:
                    f5:9c:25:89:41:24:4c:03:8e:2a:a2:df:a5:bb:47:
                    5d:46:58:32:c6:6f:3a:aa:9c:e6:92:b8:66:c0:3e:
                    a8:08:a1:05:aa:60:e1:c3:9b:d3:3a:1d:ea:fd:84:
                    b9:97:19:41:d3:72:20:25:cd:43:45:1a:8c:80:38:
                    c6:6e:ff:33:67:63:9b:34:23:b8:28:0f:48:d6:96:
                    ce:b5:d4:80:b1:a4:f5:91:bc:c9:b8:af:5b:7f:4f:
                    e9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:4C:0F:78:E5:69:0F:10:6B:BA:C5:EC:DF:27:8D:52:C3:19:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087/576c64a5-3cd2-44d5-80c3-626ccc84e087.crl

            X509v3 Authority Key Identifier:
                keyid:93:40:CE:B6:71:96:DA:3E:FD:16:0C:87:23:2E:E0:A8:3B:C7:1C:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/576c64a5-3cd2-44d5-80c3-626ccc84e087.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b5:60:7d:21:d0:f3:12:3b:f7:a7:e7:04:54:c1:5c:38:91:
         19:24:c8:e4:41:ea:84:86:26:a3:93:e9:fe:6d:4e:81:09:83:
         4c:e9:a8:54:3a:58:8d:cf:35:0d:0d:1c:d6:ef:50:c5:72:47:
         07:01:78:28:f1:3c:79:67:6c:26:b3:3e:00:86:a6:6b:e9:a9:
         73:61:fe:de:dd:a0:b9:50:d3:32:af:0d:f2:be:c4:6e:09:af:
         3b:03:bc:da:0f:46:78:b8:82:b6:19:ff:b1:05:69:a1:da:38:
         4b:fc:a4:af:c3:77:24:6e:da:95:86:cf:6a:80:17:46:d6:8d:
         37:af:c9:b0:2d:1a:64:93:80:83:d6:8d:91:b9:6b:dd:d3:d7:
         8d:85:7e:dc:8d:a5:9d:ee:5a:29:38:1c:fd:79:cf:07:c3:89:
         6c:57:f3:e7:8a:d5:70:ec:40:c5:3b:48:38:10:6f:37:e9:b3:
         b2:4a:89:9d:68:70:3c:3f:5d:08:78:e8:53:6a:b2:ba:4f:1d:
         27:32:e0:fa:6b:18:42:a3:bf:42:f2:89:ad:80:52:ef:59:89:
         8e:c6:8a:63:5a:f3:05:a8:32:79:b2:bf:ba:0f:37:c9:52:35:
         26:66:3c:a3:ed:66:c9:0c:45:ee:4a:97:e4:0a:63:ae:4a:e1:
         b2:ee:80:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 02:42:46 2025 by rpki-client