Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft
File:                     aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft (raw, json)
Hash identifier:          z4KuRfqVt7UrGIyCtvQbrP8bm4TQ/qLL5Rrds57vYEI=
Subject key identifier:   59:FB:48:46:AA:E9:80:CC:0F:42:91:73:96:CD:41:A7:B9:C4:68:D0
Authority key identifier: B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA
Certificate issuer:       /CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
Certificate serial:       010D0C9F4328584958E1F2A64AF46AC5EC02FE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft
Manifest number:          010D0C9F4328584073A84B5B78FE156D22EF3A8B
Signing time:             Sat 29 Mar 2025 09:00:08 +0000
Manifest this update:     Sat 29 Mar 2025 09:00:08 +0000
Manifest next update:     Mon 31 Mar 2025 09:00:00 +0000
Files and hashes:         1: 2a11ff05-0d1c-3be8-9361-2a091482c21c.roa (hash: OX7NtfjOEXNJuhVjSzEnzRg/m/KVHksGhGfjCN+eQ+U=)
                          2: 2aa7585f-d51c-30da-a0fb-36d9463654ab.roa (hash: eVzhK/UfUS1TfDlIyTz9t8o+f5P5s4cZMx3Nxjn0SCg=)
                          3: 3f9a7e2e-2d31-3535-b621-6366e70f54ac.roa (hash: JGsg94NEQG6t7HvOoNmXfsgwIS6i/FCeHEgAC4/GcIA=)
                          4: aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl (hash: lIKxhDIQSZTUg5rd2sahA+E1poVNOewWORMazcXpHYg=)
                          5: fc2beedf-cafc-3658-b3dd-125f2ba3d10d.roa (hash: Pjvf2oEjXUBK0RRnpqXIbGviFqxnOSHMLgSHF0wAwjo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:e1:f2:a6:4a:f4:6a:c5:ec:02:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa2e344f-01a0-461d-9c0a-21ddbc70aa99
        Validity
            Not Before: Mar 29 09:00:08 2025 GMT
            Not After : Mar 31 09:00:00 2025 GMT
        Subject: CN=a3975d90-aae2-46c8-8514-5349d930598c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:69:b9:9c:34:31:e8:39:ef:ca:52:07:2f:52:
                    17:6f:9d:fa:ee:25:98:12:c3:98:80:71:ac:2b:2f:
                    c7:7e:89:39:e9:73:45:b1:d9:29:16:a6:85:9f:2b:
                    fe:96:66:1a:86:f1:29:6f:39:fb:9d:0d:f9:22:d6:
                    44:46:e0:9f:2a:a1:aa:5f:74:6d:36:a0:37:b7:ed:
                    56:92:de:a3:79:b0:55:e9:96:3d:f4:c1:0a:30:49:
                    42:7c:97:e2:05:5f:7a:63:14:43:d2:29:c0:4f:a6:
                    3e:eb:91:da:b4:2f:a7:f4:b5:8b:9d:23:73:38:74:
                    75:64:c3:f2:d6:87:f1:ea:9e:16:9c:63:49:fc:19:
                    90:35:62:ff:c9:10:ae:8a:0f:4c:06:8e:9e:bd:9e:
                    14:c3:13:b7:3b:54:78:aa:b7:44:fe:92:51:cf:95:
                    37:bc:9a:7d:94:23:4d:93:2b:c6:f2:82:af:24:9e:
                    32:c3:99:d0:2c:b7:00:5d:9c:66:67:68:d2:e3:b1:
                    1e:e2:68:9b:d0:6f:40:4e:6e:3d:4b:1a:12:71:91:
                    44:f6:8a:6a:2a:c7:a4:c6:d3:5c:1f:5a:9e:38:49:
                    cb:5a:8c:43:6c:94:50:b3:25:f9:ff:83:21:05:6f:
                    09:20:38:aa:5e:0b:78:67:29:dc:d9:32:9d:33:49:
                    be:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:FB:48:46:AA:E9:80:CC:0F:42:91:73:96:CD:41:A7:B9:C4:68:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.crl

            X509v3 Authority Key Identifier:
                keyid:B6:9E:5A:3C:88:1E:BF:09:B7:25:CF:05:8C:C0:C1:2E:A9:C4:9F:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/aa2e344f-01a0-461d-9c0a-21ddbc70aa99.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:2f:f9:a2:65:f5:f6:b3:e5:7a:78:ec:59:48:65:ff:f0:f7:
         88:82:ab:f0:fa:a7:1b:2d:c0:a6:f1:94:52:27:f3:10:8a:af:
         cc:52:1e:30:c5:f6:2e:bc:26:d8:9f:75:cc:7b:92:b4:fb:9f:
         8c:96:09:76:61:29:6a:a1:8d:fb:28:b8:ac:6e:87:26:18:53:
         9c:79:83:66:d7:f4:69:f5:c3:76:0d:53:38:bb:fc:96:4e:36:
         ab:a1:63:4e:3c:d7:61:86:5b:ab:e6:99:b3:76:e7:07:4b:c8:
         2a:83:67:cf:61:1d:c0:c8:2f:91:76:f1:16:95:04:ed:e7:58:
         f4:73:38:8f:35:6a:79:ca:2b:aa:e1:1a:62:59:70:da:70:ea:
         09:6d:fb:c3:03:26:51:40:64:02:9b:0a:57:f2:0e:65:de:fd:
         28:df:dc:55:5d:b5:66:30:4b:5b:98:fd:64:44:4e:d8:8b:92:
         61:6c:b4:50:f5:c3:e1:b7:45:d9:02:da:b8:ad:41:85:88:35:
         a8:12:19:86:af:0e:77:8d:8f:41:95:b2:88:29:dd:57:3e:8d:
         9a:cb:5b:42:34:ac:e6:76:ff:41:dd:1a:09:ba:26:8c:e7:af:
         ab:28:45:7f:d6:f3:b9:49:9b:bd:4b:eb:a9:ee:76:48:54:e5:
         0e:7c:3e:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 00:01:26 2025 by rpki-client