Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
File:                     daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft (raw, json)
Hash identifier:          qd4i5RPIIl70Im19C2oxrpxJ46T1f4JME9DHkEFLtgk=
Subject key identifier:   B1:69:EB:AA:32:04:87:4D:75:D9:B0:C8:1B:ED:2A:A4:E6:C5:A5:07
Authority key identifier: C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5
Certificate issuer:       /CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
Certificate serial:       010D0C9F43285847F47898372A41FC0B57160EE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
Manifest number:          010D0C9F4328584073A81E85081BDD4BB4FDC49C
Signing time:             Thu 21 Nov 2024 17:00:07 +0000
Manifest this update:     Thu 21 Nov 2024 17:00:07 +0000
Manifest next update:     Sun 24 Nov 2024 17:00:00 +0000
Files and hashes:         1: 01c04108-2084-3163-a90d-4fc763d9b1d1.roa (hash: kZb9pTMwahJH95aLPrjmUB/zyTTbNS+WTgRfDrBx1AY=)
                          2: 039241b2-b599-30f0-bcc6-07b9fed5d863.roa (hash: +NLQ9vB4cRV6Q8hN11aS5AyY7HkELVUyAmUlcBFZ9NM=)
                          3: 04e7c570-d1d7-38ca-aa12-f43e2240ca21.roa (hash: Kuy24+LLxbKN7WFdmQUHoQLlRR2ZwQakuRxOErmoRcU=)
                          4: 1be8468a-e8ed-3fde-a52b-da1ce11f4c71.roa (hash: sPS5JkAAnzB4gBwQLCII0ceGcQbopR+mTF0YYG76LEI=)
                          5: 27938e9c-3192-3793-af30-042a052457c7.roa (hash: Vj1lQQRInZt7K4JYm9T8tQWh5YzhJhmoR9FF11d/r34=)
                          6: 28e01cf7-f5be-34ef-9dfc-3719434f963a.roa (hash: sfX1Xar3HhWToXKVnMbz+Thd9B/1j3vze8y5SNDIy/w=)
                          7: 2bbd8a46-2cba-38a1-8529-1accbb01208c.roa (hash: GLdFn/TZ09qznu/UFchvlzSIvgGJdVVB80Q2jF1ZbY4=)
                          8: 43fea1b8-0c9c-376c-af5c-83f5b3b68484.roa (hash: xQ5xgECyGhZsYvVd3utwrG9MS/WqPCii6xNaf4eukag=)
                          9: 502da292-08a8-3b75-bc4b-8d390e5fe580.roa (hash: HpODjS1Za7kqqyZ6SL3L/GTmFq9fsx+irJGPo9OqYwA=)
                          10: 661fc493-e5f2-3843-b87f-cec243b8a026.roa (hash: 7hP09NGnolu5FYCS4WbgZBO6LpwOyNSK1eUrqQKDLSs=)
                          11: 6f4a9ef0-fbfd-305c-9d22-76347bbc0a55.roa (hash: lUPEGUvE9J0yxj7ky94EN8S10KKV+F1zSBd/B2oONfI=)
                          12: 7332e9a4-0787-3148-ac49-59abb3ffcd35.roa (hash: HfmJrBpxjoUZgvfzPo4BVTTjTjAWpVZe9qX4QxqEQjQ=)
                          13: 7612b17a-2d72-38f0-bf0e-8f8d841f4364.roa (hash: 0BzK1AmfvrEucm57hdCXOtidhFHrZU2pU6u+O9zgp2Y=)
                          14: 9061acde-1566-3f28-a9b6-14f165759f16.roa (hash: /gQ59US4MSMfg4PQiYsXNjGhkewjAKhv2xaq5p0xs5E=)
                          15: a6e90a7a-ad6c-315c-b6c7-b8475297de70.roa (hash: 9GrcpE/bJ2yzHZVSNoYVKbyOoIsHm9W5etOejaKlRRY=)
                          16: ad35477a-7b33-3abf-a97f-75b5a8927582.roa (hash: XYE/S8VLaMODHnDJsOO6AfB1Q/o81hrZqYxh9AoPDLw=)
                          17: b9b41ebd-8408-373c-9f8a-7115febbd080.roa (hash: 1j8jkYxN8t8zQR2KELwAjlcujdvJ3XjLr+we+Za0+no=)
                          18: bdaa1236-db49-323d-8634-b5c7b8224fda.roa (hash: eTzChC1Eah3Ks9LTlu95hFn4lTRV/x3jGCYst/LjMBs=)
                          19: d1206389-b9de-36cd-8068-be081e3c00dd.roa (hash: yQb6YpwqJ3X2B0GTrfBlH0NcisjM7q0ijgS9JbWgeik=)
                          20: d231e946-74bf-3765-97f0-efb9933dc249.roa (hash: mslQ979hq4Y3cDNXS8U4/oQfv6/9MLx7j/7kELUPixo=)
                          21: daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl (hash: 7BOeq6NZFbZgPBW+saAK6Tx90bvM1OmzS4bOHtPMsEk=)
                          22: dfe22e5b-6650-3d51-aa9c-66a2e02b6967.roa (hash: nXNalbExVbKweccDlR0pg+RaqcLTEDWOmV3wqIPAGPs=)
                          23: eb6bc177-0801-37e2-977d-c23f6a5ca132.roa (hash: jHzZaNjsIz5Ap61Uwvs9og3/tJuzjLTz+pvhl+89mY8=)

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f4:78:98:37:2a:41:fc:0b:57:16:0e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=daa8bdf2-31df-4e1e-bcf3-96d6c5800faa
        Validity
            Not Before: Nov 21 17:00:07 2024 GMT
            Not After : Nov 24 17:00:00 2024 GMT
        Subject: CN=dc3072b9-e238-4c82-9b1f-08ef0e74f772
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cb:d5:1a:27:0d:38:78:b1:86:4d:b3:63:72:
                    3e:37:9a:09:98:53:1f:5c:78:7b:ed:dd:d9:43:f9:
                    3a:e8:a6:5b:63:87:4c:10:7f:cf:7d:2b:ff:fb:da:
                    bc:0a:c9:29:d9:d9:20:30:df:62:9d:cc:5e:24:a1:
                    af:4b:4e:c5:ec:f0:9b:19:2b:00:c6:6e:89:45:31:
                    72:ce:e6:5a:36:cd:7e:c6:0f:1f:04:d7:b8:ab:80:
                    6b:33:50:43:26:ef:5a:1f:72:cb:0b:22:d2:c9:82:
                    b4:ea:6b:fc:fc:6e:0f:61:5e:c5:4d:6d:84:3f:b1:
                    7a:0e:6b:bd:aa:9b:eb:ab:16:30:00:ca:79:30:4c:
                    38:03:e6:95:77:c0:9c:ad:cd:09:d0:92:65:5a:dc:
                    46:5d:84:04:ee:ef:5e:ca:d9:90:70:26:0c:10:79:
                    f9:4e:f5:2d:0f:b7:75:b6:73:57:27:d3:11:8d:91:
                    0c:e9:31:68:02:6b:1e:57:31:0b:b7:07:f5:2c:40:
                    52:51:f4:b3:02:95:5b:b5:08:9a:2b:4c:0e:fb:27:
                    9f:90:9e:f0:bf:db:0c:80:80:d8:8d:0b:0b:1a:2c:
                    7e:c7:ec:1e:47:34:f9:5d:c7:d6:78:87:c4:53:38:
                    42:80:f8:2f:9c:02:59:3d:bf:e9:20:c0:03:ec:6d:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:69:EB:AA:32:04:87:4D:75:D9:B0:C8:1B:ED:2A:A4:E6:C5:A5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.crl

            X509v3 Authority Key Identifier:
                keyid:C8:21:6A:53:54:33:76:13:DB:FB:F3:B4:60:95:5E:18:1E:6A:D3:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/daa8bdf2-31df-4e1e-bcf3-96d6c5800faa.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:2b:df:92:36:f0:82:36:e4:ef:e6:26:e1:81:72:b3:fd:c0:
         a3:7c:a1:08:77:06:16:b6:79:c6:56:e9:1f:d9:94:24:ee:e6:
         cb:f1:11:08:70:df:f7:af:68:34:7a:4f:42:0a:40:ca:58:79:
         50:ba:1b:dd:ae:6d:85:24:d5:11:47:27:4a:39:4c:20:0b:09:
         17:15:41:24:13:6f:17:7a:e9:46:4b:7e:de:7c:d9:86:e4:b3:
         f6:60:95:03:4b:ad:46:13:b3:27:c5:e8:47:df:bf:7b:3d:a9:
         b8:fe:01:b5:56:52:07:19:d5:5e:ec:77:8e:44:a2:92:3d:86:
         74:b4:35:9a:37:71:25:45:30:e5:be:24:5f:93:3f:82:97:ff:
         d5:e4:52:6a:55:33:5c:03:1b:b4:41:0b:2d:8a:83:17:47:0e:
         c0:f8:76:3a:d9:51:75:cc:47:ae:d4:e8:04:76:94:04:c3:64:
         0a:42:da:c0:b3:1c:c0:36:8d:ea:4a:f1:f3:85:86:07:82:f0:
         39:d5:4a:6f:1d:2f:05:44:3b:af:b3:39:d8:c1:c6:4b:9e:4c:
         74:73:f5:fe:c4:4a:e6:95:5b:5c:63:2e:32:64:9a:d3:da:49:
         d0:c6:8f:41:f2:8b:9b:4d:8b:0a:1f:bf:41:b4:1f:f8:39:da:
         60:58:95:4e
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEf0eJg3KkH8C1cWDuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGFhOGJkZjItMzFkZi00ZTFlLWJjZjMtOTZkNmM1ODAw
ZmFhMB4XDTI0MTEyMTE3MDAwN1oXDTI0MTEyNDE3MDAwMFowLzEtMCsGA1UEAxMk
ZGMzMDcyYjktZTIzOC00YzgyLTliMWYtMDhlZjBlNzRmNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMvVGicNOHixhk2zY3I+N5oJmFMfXHh77d3Z
Q/k66KZbY4dMEH/PfSv/+9q8Cskp2dkgMN9incxeJKGvS07F7PCbGSsAxm6JRTFy
zuZaNs1+xg8fBNe4q4BrM1BDJu9aH3LLCyLSyYK06mv8/G4PYV7FTW2EP7F6Dmu9
qpvrqxYwAMp5MEw4A+aVd8Ccrc0J0JJlWtxGXYQE7u9eytmQcCYMEHn5TvUtD7d1
tnNXJ9MRjZEM6TFoAmseVzELtwf1LEBSUfSzApVbtQiaK0wO+yefkJ7wv9sMgIDY
jQsLGix+x+weRzT5XcfWeIfEUzhCgPgvnAJZPb/pIMAD7G06iQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFLFp66oyBIdNddmwyBvtKqTmxaUHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4
YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2YzU4MDBmYWEvZGFhOGJkZjItMzFkZi00
ZTFlLWJjZjMtOTZkNmM1ODAwZmFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGFhOGJkZjItMzFkZi00ZTFlLWJj
ZjMtOTZkNmM1ODAwZmFhL2RhYThiZGYyLTMxZGYtNGUxZS1iY2YzLTk2ZDZjNTgw
MGZhYS5jcmwwHwYDVR0jBBgwFoAUyCFqU1QzdhPb+/O0YJVeGB5q08UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kYWE4YmRmMi0zMWRmLTRlMWUtYmNmMy05NmQ2
YzU4MDBmYWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7K9+SNvCCNuTv5ibhgXKz
/cCjfKEIdwYWtnnGVukf2ZQk7ubL8REIcN/3r2g0ek9CCkDKWHlQuhvdrm2FJNUR
RydKOUwgCwkXFUEkE28XeulGS37efNmG5LP2YJUDS61GE7MnxehH3797Pam4/gG1
VlIHGdVe7HeORKKSPYZ0tDWaN3ElRTDlviRfkz+Cl//V5FJqVTNcAxu0QQstioMX
Rw7A+HY62VF1zEeu1OgEdpQEw2QKQtrAsxzANo3qSvHzhYYHgvA51UpvHS8FRDuv
sznYwcZLnkx0c/X+xErmlVtcYy4yZJrT2knQxo9B8oubTYsKH79BtB/4OdpgWJVO
-----END CERTIFICATE-----