Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft
File:                     dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft (raw, json)
Hash identifier:          TKyu10bYLckV9fHlp/7SxsRqoPIkBK7OTEza5CF1irk=
Subject key identifier:   55:EA:7C:52:48:56:42:F7:99:8E:E0:A4:AD:22:CE:AC:44:01:FF:5A
Authority key identifier: 35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11
Certificate issuer:       /CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9
Certificate serial:       010D0C9F4328584957B82850F50E48DE10FF8C20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft
Manifest number:          010D0C9F4328584073A82DFC0659598689D498C2
Signing time:             Fri 28 Mar 2025 23:00:08 +0000
Manifest this update:     Fri 28 Mar 2025 23:00:08 +0000
Manifest next update:     Sun 30 Mar 2025 23:00:00 +0000
Files and hashes:         1: 7c20deec-1152-3c56-8ea4-d899a929dad8.roa (hash: F6av60BkrRI3OurNwt0mVMaP/7p+K84JKpcNt/OjrEo=)
                          2: dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl (hash: V85RgJvatbLEmNLKekTpsC5JKyDNnhqVFoee5KWF+O8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:b8:28:50:f5:0e:48:de:10:ff:8c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dafb7b4c-08cc-4d76-ada2-b572a2d233a9
        Validity
            Not Before: Mar 28 23:00:08 2025 GMT
            Not After : Mar 30 23:00:00 2025 GMT
        Subject: CN=8741e50c-41ca-4639-998b-4e8298e4d711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ca:b9:4e:bc:b5:92:00:e3:36:9b:e6:60:ad:
                    8b:c9:71:e9:27:52:dc:94:45:e2:51:bc:e1:ad:41:
                    14:a9:ee:c2:45:db:84:4f:51:c9:d0:88:71:ae:25:
                    7c:43:b5:1f:ec:db:5a:7b:7e:5d:b1:66:ca:5e:64:
                    c1:03:29:d6:98:51:e7:4a:89:ed:8a:71:2c:56:5f:
                    a6:4c:ee:fa:df:e8:b0:c7:23:70:e3:f9:4b:87:12:
                    c5:5a:ff:22:81:4a:30:3a:8b:cf:d9:2d:eb:23:3c:
                    90:d0:2e:4c:37:ec:ac:d7:56:9f:76:20:5a:24:d8:
                    2c:30:58:21:4e:f3:8c:20:e0:e8:d3:93:83:18:c4:
                    93:d6:a6:dd:71:a3:84:e1:94:c3:d8:35:a3:ca:91:
                    d2:41:5e:e7:18:63:46:b1:af:70:f9:1e:d4:18:81:
                    fc:4c:f6:f1:74:f7:62:79:ef:dc:e4:66:2e:13:19:
                    48:bc:75:69:59:1a:87:fc:77:63:7b:cd:d5:88:79:
                    ec:96:29:0c:de:04:36:f3:04:22:2e:da:3b:79:58:
                    16:b8:d6:35:e4:ab:34:f9:be:58:83:42:8a:e2:87:
                    5a:0d:ff:96:6c:d7:b6:8a:8b:1f:0f:bc:16:0d:03:
                    2b:51:79:80:e6:8b:43:b3:75:bb:08:9a:b5:91:ec:
                    19:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:EA:7C:52:48:56:42:F7:99:8E:E0:A4:AD:22:CE:AC:44:01:FF:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.crl

            X509v3 Authority Key Identifier:
                keyid:35:7F:E0:80:07:13:C0:91:F4:F7:40:D0:BA:63:B9:0A:E8:F5:B3:11

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dafb7b4c-08cc-4d76-ada2-b572a2d233a9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:8c:d5:76:ed:d6:7c:27:74:be:a1:9e:1f:7e:45:ac:cb:3b:
         a5:6f:07:13:b4:e2:10:3f:09:d1:38:7a:0d:16:51:a4:67:03:
         35:1a:aa:cb:95:98:9d:92:da:04:ee:f3:09:98:75:38:5e:7b:
         a9:4a:79:a1:b8:9e:5b:f5:ee:24:68:57:c1:ed:c0:29:62:9b:
         24:98:41:a3:80:f8:56:32:02:7d:c5:bb:9c:0f:eb:9d:83:8b:
         3e:63:46:36:6c:bb:77:99:8d:88:54:86:69:c0:81:0c:7e:ee:
         e7:c2:f1:cc:6c:c8:b9:00:91:b1:a6:d5:c0:6e:8d:d2:f6:8a:
         1c:0d:17:06:cf:f3:26:fc:ab:64:51:e2:a7:fc:bc:a5:4f:7a:
         29:3a:29:e5:b8:27:10:39:e8:6e:9c:ce:c9:96:ba:ff:4c:c0:
         24:03:a2:57:fc:8e:27:d5:9f:d8:15:97:56:ec:fb:87:f5:ee:
         97:de:91:25:d5:ad:8d:88:b2:b6:f1:12:bf:53:22:94:6a:bf:
         34:27:41:7d:ea:b6:d8:2e:d4:38:5a:5f:90:01:17:d8:19:fb:
         20:34:7e:ff:81:c0:cc:44:75:ca:67:d1:11:14:75:c1:d2:ab:
         d0:6f:b8:d2:09:36:ed:65:dd:d9:85:71:3d:62:6a:12:a4:64:
         c8:a3:26:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:00:47 2025 by rpki-client