Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft
File:                     3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft (raw, json)
Hash identifier:          h4qQz6E4Zbib01y1bedFQVDsmligC+sSX1+RO9byNxw=
Subject key identifier:   3E:AE:65:80:04:DC:35:08:AC:0E:1F:8B:74:58:B1:34:B6:C2:72:B0
Authority key identifier: 8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE
Certificate issuer:       /CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
Certificate serial:       010D0C9F4328584957057D0404EBE7277F499820
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft
Manifest number:          010D0C9F432858472E4400AAFFB6310D953F349D
Signing time:             Fri 28 Mar 2025 17:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 17:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 17:00:00 +0000
Files and hashes:         1: 1cd2ae84-266a-3017-bcaa-4c3494a17476.roa (hash: EJkeMry8BsQ2seAmpnzPyuMVJ41zvC/sVRy2hXHpaWk=)
                          2: 3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl (hash: FW0R/1HOR53Hqvp0jmvBH4sB7uNcuMFZjbY8r8fcxIc=)
                          3: 448413e2-c061-37b4-8032-98f3e37c5970.roa (hash: 6Jlm7C1j4o9m9GAUGFHfTMEkP2wN+MK7Vk2U6GDt2nU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:05:7d:04:04:eb:e7:27:7f:49:98:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb
        Validity
            Not Before: Mar 28 17:00:07 2025 GMT
            Not After : Mar 31 17:00:00 2025 GMT
        Subject: CN=3380bb7e-9fc6-409a-bf5a-874776a179d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:9f:d3:b5:fd:b5:2d:88:f3:97:20:e7:c0:bd:
                    f7:87:ab:01:36:5f:71:1e:83:2b:12:dc:2b:24:1c:
                    1c:32:6d:c9:9e:e0:31:43:db:44:4a:fa:a8:a6:2d:
                    54:31:68:db:43:38:a7:4c:39:e5:70:10:6a:4b:95:
                    0d:44:27:96:4f:5f:5d:e0:6d:cf:bc:9e:89:d2:76:
                    3c:28:fa:22:7f:71:8d:f7:bc:ce:b8:fd:b3:cd:dd:
                    2a:66:98:43:23:bd:de:7e:bd:07:34:6a:23:4c:17:
                    d7:76:f8:aa:f2:1f:ff:92:92:23:d0:ef:9e:4d:75:
                    8f:11:55:ed:33:18:d6:ac:09:a1:b4:e5:76:98:d1:
                    bb:ad:0b:73:bc:8c:e5:06:2f:c9:b8:41:31:a1:bd:
                    22:66:e0:a4:11:a8:4a:80:56:dc:b1:5d:eb:2c:b9:
                    a4:a5:38:e0:a9:6f:14:ef:f4:ae:65:45:59:ae:fa:
                    3f:12:1e:e1:30:ae:8b:b8:24:a4:5d:19:07:73:60:
                    e9:d9:54:8b:cb:41:7c:f4:c8:2d:de:95:16:21:1c:
                    4f:80:f3:7b:2e:9d:48:7a:b2:7e:f6:b0:45:82:aa:
                    bd:31:b1:3c:1c:f2:00:9f:d9:3a:42:5a:3a:ff:67:
                    2e:25:b3:73:39:47:cb:ec:cb:17:72:b4:00:c7:e2:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AE:65:80:04:DC:35:08:AC:0E:1F:8B:74:58:B1:34:B6:C2:72:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.crl

            X509v3 Authority Key Identifier:
                keyid:8D:C5:0D:DB:AC:9F:FD:0A:83:61:55:C8:DB:3B:59:5A:D7:3A:03:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3c7d502a-cf13-4ee0-bdb1-d8fd0afc6ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:e5:67:6f:40:75:6d:f7:cf:3a:1e:0d:5c:12:54:ca:39:3a:
         89:ea:01:f8:e9:c3:7a:1f:f5:18:30:f5:41:4f:25:4b:58:f5:
         32:6f:e3:93:f2:6d:c2:54:04:30:68:69:f8:9e:da:b6:39:35:
         99:0b:c4:1d:29:54:c9:8a:63:d7:1b:46:1c:2a:f2:a5:b1:93:
         f6:92:8e:f5:16:84:9e:9b:f8:97:93:98:4c:7c:76:53:3a:b9:
         68:9e:cf:3e:a8:e7:fc:c3:c3:34:be:62:d7:19:b5:17:fe:99:
         bd:d2:1e:87:30:0f:44:b8:2e:d5:f9:e9:66:b3:e1:89:77:29:
         c0:a3:e3:3b:e6:e4:7a:13:2c:0e:a8:d0:c6:08:bc:45:9b:9e:
         93:e1:f1:30:92:59:76:89:ac:05:f3:cd:0a:64:5e:04:51:b5:
         90:79:64:58:04:67:9d:3e:c7:31:55:fa:bb:54:ba:6d:3e:0d:
         9c:50:f1:b8:68:e6:64:a8:a0:d2:6b:cd:0d:e3:bb:36:f8:48:
         c8:13:1a:57:2b:21:ab:0c:f5:01:5c:9e:1e:82:f3:7e:ff:ed:
         e5:27:98:b7:dd:52:5f:50:85:0a:6f:98:97:97:e5:aa:b2:47:
         ce:87:15:f3:5b:11:8c:e1:2c:57:76:a0:2a:f7:4f:1d:06:7a:
         1e:e3:ba:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 22:29:28 2025 by rpki-client