Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft
File:                     3bb548a9-e172-41a3-925a-609e931d0009.mft (raw, json)
Hash identifier:          4epHwpJYU+wWuC8TUkSYhQ/4MmsF9vhz2LEvQ67L2ig=
Subject key identifier:   8A:9B:E2:A7:EC:72:01:19:37:EC:28:9F:07:62:2E:CE:1B:AE:55:EE
Authority key identifier: 16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A
Certificate issuer:       /CN=3bb548a9-e172-41a3-925a-609e931d0009
Certificate serial:       010D0C9F4328584956E7B418DF57584CB0DBF200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft
Manifest number:          010D0C9F43285847448A94FE4E0E821F3BB12D83
Signing time:             Fri 28 Mar 2025 16:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 16:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 16:00:00 +0000
Files and hashes:         1: 3bb548a9-e172-41a3-925a-609e931d0009.crl (hash: jvZ1moq0rzTDGVZ1jMl7JlsCBE+pFJzRj+3PP5j87bs=)
                          2: d3c5df3e-f2e4-3613-9626-265a72a6dcb1.roa (hash: 0xiwld1SgdjG9xvUsBwQTFZfBXRCFGOOzCX3icGqIRo=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:e7:b4:18:df:57:58:4c:b0:db:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb548a9-e172-41a3-925a-609e931d0009
        Validity
            Not Before: Mar 28 16:00:07 2025 GMT
            Not After : Mar 31 16:00:00 2025 GMT
        Subject: CN=7307e5ae-95aa-4529-9f1e-7d87227f62a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:82:8a:9a:73:4d:08:47:50:e1:60:53:22:57:
                    31:34:03:10:48:22:87:a4:48:3d:94:86:7f:fe:ae:
                    42:3f:a1:cb:b3:b6:8f:e5:c6:90:35:da:eb:2f:0a:
                    cc:e6:1f:7f:68:22:a7:fe:a2:87:a7:f8:d2:7f:ac:
                    78:f9:69:bb:47:40:36:b7:f0:5c:03:40:b8:7f:b5:
                    eb:4d:81:73:f7:aa:6a:ed:00:6c:fc:07:48:62:0d:
                    67:5f:32:bb:32:5e:bc:e8:03:43:f8:96:ab:4d:dc:
                    25:66:a0:ef:df:a0:31:dc:9e:fb:8c:1a:ef:83:ba:
                    78:d3:46:4d:a7:4f:76:52:82:18:b3:99:aa:87:ea:
                    b4:6f:f8:e5:16:68:21:a8:ec:d6:5b:30:ee:f8:6b:
                    1d:19:dd:12:d9:05:c8:d3:f6:fc:e6:bf:28:d9:a0:
                    39:67:6c:3b:57:22:95:81:93:73:9b:b6:f1:66:72:
                    3a:9c:ee:04:45:f2:17:f3:90:88:af:27:20:53:74:
                    74:f3:3e:5c:ba:91:b8:64:24:e7:a8:e8:7f:6f:8d:
                    89:94:f6:7c:4f:a5:cd:c8:a8:4d:a0:23:61:dc:c6:
                    89:fb:30:8e:ee:c5:86:3d:6c:a6:25:fb:25:c6:51:
                    a4:f0:6c:66:c3:8d:f4:f4:25:75:91:fc:af:43:c8:
                    95:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:9B:E2:A7:EC:72:01:19:37:EC:28:9F:07:62:2E:CE:1B:AE:55:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009/3bb548a9-e172-41a3-925a-609e931d0009.crl

            X509v3 Authority Key Identifier:
                keyid:16:45:78:81:7F:45:4F:3C:CC:47:18:0B:E4:D9:31:D1:48:93:8B:0A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb548a9-e172-41a3-925a-609e931d0009.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:9d:c9:d2:b4:b4:2e:80:34:bb:ee:fb:86:0b:d6:5a:fa:00:
         18:a9:f1:63:e4:8c:0e:fd:8c:97:49:8d:ad:f2:b4:5e:22:ed:
         64:9a:15:13:b8:96:92:a9:f6:76:8a:84:48:67:28:b3:29:a1:
         93:98:51:ec:00:04:fb:d1:6e:fc:33:05:7c:40:b2:fa:cc:f9:
         96:f1:80:db:57:59:5b:24:87:e5:2a:67:d8:10:81:70:4e:f7:
         61:ea:ef:ac:6e:eb:e5:e7:85:41:89:48:d1:49:d9:00:af:15:
         fa:72:65:75:18:43:b6:7d:13:83:27:cb:7d:59:ee:4f:ca:0a:
         47:49:9e:57:eb:27:bf:44:67:74:2d:4c:c2:f5:a4:3b:ba:59:
         f3:15:9f:82:9f:68:ec:3a:f2:c6:99:37:86:07:75:84:c7:69:
         55:40:22:06:df:b8:36:94:15:5c:25:35:98:85:37:0c:20:44:
         78:0f:30:4d:8e:f1:4d:04:1c:f2:ef:36:cb:8f:e3:df:b5:09:
         d8:1b:02:a9:9a:84:ec:fc:ff:92:76:82:57:c1:69:6e:54:36:
         c7:cc:4e:5a:4d:08:06:be:76:3c:31:ff:f4:d2:66:6b:a5:ae:
         92:9f:ba:79:ee:90:6d:12:9f:cd:3d:e9:0c:ee:74:3f:a3:c9:
         1c:12:8d:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 05:04:05 2025 by rpki-client