Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
File:                     066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft (raw, json)
Hash identifier:          kZEWi4wPmxl9jV1DUYAds8pVW6c4EGpq/g5HuSOIlQo=
Subject key identifier:   9F:30:C1:B1:52:0D:D0:49:2D:5C:E0:7D:2E:6E:8A:BD:2B:80:DB:CC
Authority key identifier: B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75
Certificate issuer:       /CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
Certificate serial:       010D0C9F4328584956C9ED784265F09C76937B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft
Manifest number:          010D0C9F43285842EA8BC909D3B1DA34DE1FD0DC
Signing time:             Fri 28 Mar 2025 15:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 15:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 15:00:00 +0000
Files and hashes:         1: 066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl (hash: hOYPMA2LwCtDn8wMkTZDuPIqCdm+w1tleiUbN/2QYp0=)
                          2: 4f89d9d4-dbe8-3d2f-a529-a977e0d57156.roa (hash: sXvtd4tyQi209UTMpIcXxazdalRaOhlt4xoDHaagcA4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:c9:ed:78:42:65:f0:9c:76:93:7b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=066c6b6f-1287-4dc0-9074-6cef3c211c0e
        Validity
            Not Before: Mar 28 15:00:07 2025 GMT
            Not After : Mar 30 15:00:00 2025 GMT
        Subject: CN=f62fcbcb-fe79-4175-8e86-4f5542f7cd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b0:d0:da:5d:78:9b:65:9d:bb:ff:2c:dc:64:
                    15:b0:c3:4a:b8:54:cd:8b:81:a3:44:ea:8e:c6:ca:
                    b8:42:98:8a:0f:10:16:c6:19:ab:51:26:e7:6f:31:
                    97:da:eb:f1:46:cf:b6:8d:4e:0e:6c:97:ff:92:9e:
                    2a:9f:b3:46:19:96:e8:35:cd:e8:04:65:59:ef:8d:
                    d4:0b:bc:9b:2b:e9:5b:5e:c1:2a:e1:d6:4d:85:b5:
                    c0:9c:b1:32:bf:c0:d3:e1:db:a6:e5:fb:29:a5:87:
                    5d:f8:c6:fd:2e:b7:1e:6e:da:33:7f:77:f3:3c:e1:
                    62:5a:b5:b5:1e:9d:e4:4b:e3:d0:3c:50:1a:49:70:
                    7c:02:3a:ee:c4:7f:2d:1c:3d:27:32:e3:3c:62:66:
                    63:43:da:cc:a2:56:d7:a4:16:5e:28:b4:d3:f6:09:
                    f9:36:ff:a3:56:a6:2a:c4:d1:c4:3e:90:65:34:ee:
                    0d:34:98:d8:35:52:cd:ab:6a:25:cd:38:8a:8c:b2:
                    ea:f1:77:f4:d5:9d:d4:18:b9:a2:02:4e:20:f9:aa:
                    81:99:6e:e1:b5:2b:35:37:c6:37:b9:1f:57:be:20:
                    05:87:a6:3d:83:5e:f7:c5:75:c2:94:d1:80:da:08:
                    cf:70:10:5e:d6:6d:df:8b:39:93:5a:c4:bf:88:db:
                    05:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:30:C1:B1:52:0D:D0:49:2D:5C:E0:7D:2E:6E:8A:BD:2B:80:DB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e/066c6b6f-1287-4dc0-9074-6cef3c211c0e.crl

            X509v3 Authority Key Identifier:
                keyid:B8:90:E1:34:AE:A8:99:2E:DB:5E:9F:81:06:47:6F:DB:9E:79:5A:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/066c6b6f-1287-4dc0-9074-6cef3c211c0e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:c6:ce:55:98:2b:63:ea:2e:20:87:cc:30:06:5d:bd:1b:5e:
         32:3d:05:60:a3:21:ec:d0:22:0c:ec:28:b6:25:4a:a5:8b:57:
         b4:62:4a:a7:08:03:e2:d7:8d:b6:fe:2d:07:be:97:9a:3d:00:
         c0:53:bf:b9:c4:6a:82:b9:6b:ce:7a:62:ff:c5:11:9b:0e:30:
         09:60:9f:8c:ec:38:33:bb:47:12:00:ca:0a:b0:ec:ff:1c:ef:
         29:87:0a:9b:81:a0:a7:5c:4b:5c:59:76:d7:69:7c:2f:03:fa:
         66:ca:41:e4:b9:ce:14:74:22:7b:78:8d:dc:e9:ee:a3:a0:0c:
         ee:dc:dc:f6:53:97:15:f1:51:fb:00:1d:e8:ba:c1:d5:74:f7:
         65:f3:fd:3c:5b:18:e4:ac:c3:c5:6a:2c:9d:88:89:82:13:ae:
         36:bc:af:17:8b:6b:9d:7e:d0:4d:52:4c:36:a2:37:8d:9c:ca:
         05:75:2c:83:69:88:6e:c6:02:bc:cd:fd:e5:ad:64:5d:1a:3d:
         9c:10:57:f1:55:39:c0:db:8b:64:da:8c:cf:7f:62:70:24:94:
         18:70:78:89:9e:9f:3d:42:10:7c:55:30:1a:28:04:8a:af:ff:
         15:96:eb:d3:53:ab:4d:be:48:fc:53:84:9e:63:5d:5f:dd:20:
         0d:a1:e9:a1
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElWye14QmXwnHaTewAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDY2YzZiNmYtMTI4Ny00ZGMwLTkwNzQtNmNlZjNjMjEx
YzBlMB4XDTI1MDMyODE1MDAwN1oXDTI1MDMzMDE1MDAwMFowLzEtMCsGA1UEAxMk
ZjYyZmNiY2ItZmU3OS00MTc1LThlODYtNGY1NTQyZjdjZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbDQ2l14m2Wdu/8s3GQVsMNKuFTNi4GjROqO
xsq4QpiKDxAWxhmrUSbnbzGX2uvxRs+2jU4ObJf/kp4qn7NGGZboNc3oBGVZ743U
C7ybK+lbXsEq4dZNhbXAnLEyv8DT4dum5fsppYdd+Mb9Lrcebtozf3fzPOFiWrW1
Hp3kS+PQPFAaSXB8AjruxH8tHD0nMuM8YmZjQ9rMolbXpBZeKLTT9gn5Nv+jVqYq
xNHEPpBlNO4NNJjYNVLNq2olzTiKjLLq8Xf01Z3UGLmiAk4g+aqBmW7htSs1N8Y3
uR9XviAFh6Y9g173xXXClNGA2gjPcBBe1m3fizmTWsS/iNsFrwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJ8wwbFSDdBJLVzgfS5uir0rgNvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZj
NmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2VmM2MyMTFjMGUvMDY2YzZiNmYtMTI4Ny00
ZGMwLTkwNzQtNmNlZjNjMjExYzBlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDY2YzZiNmYtMTI4Ny00ZGMwLTkw
NzQtNmNlZjNjMjExYzBlLzA2NmM2YjZmLTEyODctNGRjMC05MDc0LTZjZWYzYzIx
MWMwZS5jcmwwHwYDVR0jBBgwFoAUuJDhNK6omS7bXp+BBkdv2555WnUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wNjZjNmI2Zi0xMjg3LTRkYzAtOTA3NC02Y2Vm
M2MyMTFjMGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAZxs5VmCtj6i4gh8wwBl29
G14yPQVgoyHs0CIM7Ci2JUqli1e0YkqnCAPi1422/i0HvpeaPQDAU7+5xGqCuWvO
emL/xRGbDjAJYJ+M7Dgzu0cSAMoKsOz/HO8phwqbgaCnXEtcWXbXaXwvA/pmykHk
uc4UdCJ7eI3c6e6joAzu3Nz2U5cV8VH7AB3ousHVdPdl8/08WxjkrMPFaiydiImC
E642vK8Xi2udftBNUkw2ojeNnMoFdSyDaYhuxgK8zf3lrWRdGj2cEFfxVTnA24tk
2ozPf2JwJJQYcHiJnp89QhB8VTAaKASKr/8VluvTU6tNvkj8U4SeY11f3SANoemh
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:04:29 2025 by rpki-client