Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft
File:                     dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft (raw, json)
Hash identifier:          6+GwSxKW/3aqrPA8626jjYNa21w1ityUHBZYMke3B8s=
Subject key identifier:   4F:B5:A0:A7:AC:E6:50:D6:C0:89:C7:22:29:83:B5:6E:61:FF:F9:D2
Authority key identifier: 31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF
Certificate issuer:       /CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
Certificate serial:       010D0C9F43285847F63742B146351824AA5A6780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft
Manifest number:          010D0C9F4328584073A84684C5F38B644F8839C6
Signing time:             Fri 22 Nov 2024 08:00:06 +0000
Manifest this update:     Fri 22 Nov 2024 08:00:06 +0000
Manifest next update:     Mon 25 Nov 2024 08:00:00 +0000
Files and hashes:         1: 3bdfebd3-191c-30e9-b20b-67b6f00c0302.roa (hash: rfTJ/LvD3jd4tpZ0fSrShY/u/kEkkQY6D7TJTor+QXk=)
                          2: c0d609f5-2ea8-369c-9c2b-07ca08e5e6a1.roa (hash: gU1E3n6w73zsok+Bi5p7cJxD+Z4X4I1aAl6q+pBNv6g=)
                          3: dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl (hash: 3jPEOqjuUN1M9sF+XJVKQFX/JtdPLGXnF/0ij7K9u8Y=)

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f6:37:42:b1:46:35:18:24:aa:5a:67:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88
        Validity
            Not Before: Nov 22 08:00:06 2024 GMT
            Not After : Nov 25 08:00:00 2024 GMT
        Subject: CN=04dd38ac-9b44-4bc8-a294-2071b2e9995c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:c8:c6:61:e5:c8:fe:19:08:ea:72:f9:04:c9:
                    a7:43:d5:d7:75:91:4e:e0:46:79:72:ab:49:1b:79:
                    07:f3:b8:3e:47:ae:34:e4:38:df:2f:af:11:7e:e9:
                    16:bd:88:91:4b:b2:b2:b2:0d:94:05:81:3f:ab:63:
                    4b:8f:39:32:df:34:fc:d1:46:42:59:f7:c7:f5:7c:
                    ba:00:3d:68:fa:2d:78:65:e4:5a:0c:b8:5c:b7:e8:
                    a2:db:66:8f:a7:55:31:92:f2:4b:62:e7:a1:7e:db:
                    8e:6c:16:6a:3d:d9:2f:a3:72:7f:91:3a:8e:4c:f2:
                    cd:6a:bd:2f:1f:bd:3b:d1:ea:79:f4:21:fe:62:31:
                    4d:b9:37:0f:cb:98:1b:ff:de:be:cf:e2:67:24:90:
                    e4:41:cf:14:6d:d1:e6:e0:22:62:0b:e0:02:15:24:
                    e0:a8:8f:59:17:cb:08:db:af:d1:59:f3:8c:ba:bb:
                    cc:23:b9:f5:95:67:2f:eb:5c:f7:f8:25:83:9a:98:
                    ab:4d:2d:e0:90:29:cc:86:12:d2:6a:70:75:26:82:
                    53:c0:7c:88:1d:4f:02:32:2b:c7:d5:51:ce:ab:57:
                    ce:28:b1:5f:84:4c:ce:22:cd:d9:e0:0a:8b:17:c2:
                    12:81:04:b7:32:d0:a6:ae:7d:13:d1:7b:4d:37:c6:
                    e2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:B5:A0:A7:AC:E6:50:D6:C0:89:C7:22:29:83:B5:6E:61:FF:F9:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.crl

            X509v3 Authority Key Identifier:
                keyid:31:1E:93:F2:57:D8:23:9D:B9:97:E8:AD:3C:8E:20:86:63:EA:59:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf1a05f-efac-4ef3-8b23-5fdbe3cb4e88.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:67:c7:fa:44:4d:92:f2:ce:4e:30:82:7e:8c:b8:23:6f:5e:
         65:99:41:9d:69:88:17:c6:4f:d8:88:6c:ca:20:f5:aa:67:2a:
         77:4b:17:d5:55:ca:72:13:cf:52:d7:7f:0c:10:c0:0a:1d:8c:
         f7:48:dc:7e:24:63:5f:df:ef:b4:d6:85:a1:0d:0f:67:67:66:
         54:2b:b6:be:5c:8e:62:cc:8b:d0:df:31:16:ca:63:93:f4:54:
         8a:93:61:9e:6b:fd:9f:29:f5:0a:dd:ac:d2:1e:3c:8b:8d:3e:
         68:a6:e6:05:e4:3b:d8:0f:6f:cd:12:12:86:36:ef:e3:a0:a3:
         78:88:b1:1a:76:78:1d:1d:61:8a:87:12:a3:5b:1e:74:ea:b1:
         86:3f:04:ab:af:dc:8c:a5:da:1d:12:f9:4d:1e:ae:10:82:ef:
         05:b1:5e:d4:d0:4c:55:58:e4:e9:9c:87:b1:eb:ef:a7:15:f1:
         2e:77:18:37:55:2f:e8:b9:7d:c1:58:da:41:b5:87:2d:1d:42:
         42:d8:5c:b0:11:87:5e:82:13:89:10:06:11:e7:8b:e0:ca:2a:
         38:29:44:aa:f3:79:2b:27:f8:dd:18:08:d2:58:cd:5d:39:bf:
         7c:29:af:ce:fb:29:7a:e7:9a:31:f9:f9:bd:fa:f2:93:21:ae:
         8a:cd:19:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----