Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
File:                     1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft (raw, json)
Hash identifier:          7h/QOp1arX+a37PKbD0guphSZhuP6xKWROUbn5Dte10=
Subject key identifier:   03:9D:89:CC:70:B3:3A:7A:2A:3B:34:E4:EA:EF:60:B8:33:D4:76:56
Authority key identifier: EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48
Certificate issuer:       /CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
Certificate serial:       010D0C9F4328584956C9EB7F8F4902E0021A4AE0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft
Manifest number:          010D0C9F4328584335F03AAC1957BBC89662DAE0
Signing time:             Fri 28 Mar 2025 15:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 15:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 15:00:00 +0000
Files and hashes:         1: 1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl (hash: dLLpV2q0D8t3mJF6licQaiUGfNJiEgG0UvkFS2TLiVU=)
                          2: 60c05e3f-1816-3cff-8958-8504b17b798d.roa (hash: zUHgcKMgqfbX1Z4D25J5DTidZTM251bMNyVXC+wfr8c=)
                          3: beb65aaa-554e-3dad-9bca-51bf7fc1ee35.roa (hash: TpcyP8N/KV5xW5GIFyjKxc8+2Fozhoq3zDjno2jYYwE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:c9:eb:7f:8f:49:02:e0:02:1a:4a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc
        Validity
            Not Before: Mar 28 15:00:07 2025 GMT
            Not After : Mar 31 15:00:00 2025 GMT
        Subject: CN=853ab65a-5fa1-4afe-bea9-0385e13bddc2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:64:5e:f9:1a:d1:45:0a:79:01:c3:39:4e:4f:
                    72:3b:55:8d:77:db:74:fd:db:94:2a:71:82:21:aa:
                    23:72:24:9e:eb:16:32:fc:95:41:5c:92:92:44:1a:
                    d1:02:81:30:41:49:03:ef:d6:aa:1d:96:1b:c8:c8:
                    15:28:d1:ee:13:1e:b0:88:24:32:04:40:26:b4:f2:
                    7a:c1:cc:70:77:c8:bb:82:25:44:e4:e6:b4:9a:62:
                    26:01:33:25:f0:8e:44:08:52:87:12:d7:b7:34:26:
                    fc:07:c7:6f:02:45:89:44:0e:0d:6e:c7:32:cd:ad:
                    6d:3c:47:a2:75:7d:48:dc:21:c6:c5:9e:53:9d:11:
                    31:28:ff:4e:95:7f:13:8d:8a:dd:c1:ba:56:08:68:
                    05:a3:54:af:5b:9b:63:2e:a2:e1:15:84:7a:78:40:
                    80:74:80:54:2f:74:3f:f3:50:78:c7:89:30:4a:95:
                    ec:4e:e5:26:a6:20:d0:de:28:36:70:8a:96:d6:66:
                    ac:ad:5c:c5:f6:a6:66:13:20:15:3a:9b:a3:43:ad:
                    7c:1d:31:23:29:8a:9e:76:e4:78:f0:5e:e6:cc:22:
                    31:c3:b2:ed:84:52:d3:dd:f2:c2:84:4a:49:82:f8:
                    f0:40:c9:db:92:a0:40:72:a7:e5:72:ec:53:5d:aa:
                    ae:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:9D:89:CC:70:B3:3A:7A:2A:3B:34:E4:EA:EF:60:B8:33:D4:76:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.crl

            X509v3 Authority Key Identifier:
                keyid:EA:EB:95:40:D0:14:0A:23:A5:10:18:0E:E2:48:98:83:75:CD:BC:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1fa604c2-bd9c-4d0e-bfb0-daac8cd1c3fc.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:15:76:22:66:e0:75:66:88:8a:63:f9:a1:cd:cf:b9:fd:74:
         30:96:8a:5d:2e:b0:9b:88:8b:25:3a:32:f6:2c:7c:99:29:c4:
         3a:86:64:d2:cd:53:18:be:b7:04:dd:a9:73:05:06:5c:f0:f5:
         4b:aa:af:1f:b8:3a:a3:06:c0:ce:1d:b2:14:1c:bd:a6:f8:b9:
         12:cf:9a:85:c9:a7:44:88:ad:b6:6a:a6:fd:ae:c3:59:51:4b:
         82:a8:06:c3:80:ac:b6:b7:8a:8f:0c:01:5b:39:77:e8:81:ea:
         c2:2a:e9:a2:bd:0b:8f:73:8c:bb:ef:c7:d9:d9:24:6b:1d:6e:
         02:e8:99:7e:36:75:43:24:a1:5b:8a:85:00:53:73:8b:47:3d:
         4e:bd:3c:b1:bf:b4:8e:3d:9f:5c:38:d6:52:9c:0c:73:0d:25:
         79:5e:4b:2e:df:1e:e9:fc:ac:e6:ab:8e:9d:65:45:80:bf:86:
         1a:81:c6:30:c7:50:69:33:b7:69:c4:db:b8:ee:6d:38:93:a7:
         03:99:1a:2d:1f:13:21:84:29:0e:14:5b:2c:c5:0a:15:2c:8a:
         32:a2:28:1d:d1:bb:6f:6c:f8:33:03:f5:40:5d:3a:75:19:83:
         b4:e5:50:2e:57:49:d2:79:1d:85:1b:10:7f:72:2f:5a:b0:92:
         e8:aa:9b:46
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElWyet/j0kC4AIaSuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZhNjA0YzItYmQ5Yy00ZDBlLWJmYjAtZGFhYzhjZDFj
M2ZjMB4XDTI1MDMyODE1MDAwN1oXDTI1MDMzMTE1MDAwMFowLzEtMCsGA1UEAxMk
ODUzYWI2NWEtNWZhMS00YWZlLWJlYTktMDM4NWUxM2JkZGMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2Re+RrRRQp5AcM5Tk9yO1WNd9t0/duUKnGC
IaojciSe6xYy/JVBXJKSRBrRAoEwQUkD79aqHZYbyMgVKNHuEx6wiCQyBEAmtPJ6
wcxwd8i7giVE5Oa0mmImATMl8I5ECFKHEte3NCb8B8dvAkWJRA4Nbscyza1tPEei
dX1I3CHGxZ5TnRExKP9OlX8TjYrdwbpWCGgFo1SvW5tjLqLhFYR6eECAdIBUL3Q/
81B4x4kwSpXsTuUmpiDQ3ig2cIqW1masrVzF9qZmEyAVOpujQ618HTEjKYqeduR4
8F7mzCIxw7LthFLT3fLChEpJgvjwQMnbkqBAcqflcuxTXaquqQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFAOdicxwszp6Kjs05OrvYLgz1HZWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2
MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFjOGNkMWMzZmMvMWZhNjA0YzItYmQ5Yy00
ZDBlLWJmYjAtZGFhYzhjZDFjM2ZjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWZhNjA0YzItYmQ5Yy00ZDBlLWJm
YjAtZGFhYzhjZDFjM2ZjLzFmYTYwNGMyLWJkOWMtNGQwZS1iZmIwLWRhYWM4Y2Qx
YzNmYy5jcmwwHwYDVR0jBBgwFoAU6uuVQNAUCiOlEBgO4kiYg3XNvEgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZmE2MDRjMi1iZDljLTRkMGUtYmZiMC1kYWFj
OGNkMWMzZmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQByFXYiZuB1ZoiKY/mhzc+5
/XQwlopdLrCbiIslOjL2LHyZKcQ6hmTSzVMYvrcE3alzBQZc8PVLqq8fuDqjBsDO
HbIUHL2m+LkSz5qFyadEiK22aqb9rsNZUUuCqAbDgKy2t4qPDAFbOXfogerCKumi
vQuPc4y778fZ2SRrHW4C6Jl+NnVDJKFbioUAU3OLRz1OvTyxv7SOPZ9cONZSnAxz
DSV5Xksu3x7p/Kzmq46dZUWAv4YagcYwx1BpM7dpxNu47m04k6cDmRotHxMhhCkO
FFssxQoVLIoyoigd0btvbPgzA/VAXTp1GYO05VAuV0nSeR2FGxB/ci9asJLoqptG
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:35:42 2025 by rpki-client