Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
File:                     a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft (raw, json)
Hash identifier:          a4JZjrAUcLpqyWoEDgMPzb6NaU8jthVYCKC2pHbA8JA=
Subject key identifier:   A6:8D:C1:F3:90:59:25:15:40:8F:01:94:BD:B2:24:BC:32:8E:29:24
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Certificate issuer:       /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial:       010D0C9F4328584958889A1E91AA55B386148C00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
Manifest number:          010D0C9F4328584666BAF1C82AE4CD035D330217
Signing time:             Sat 29 Mar 2025 06:00:08 +0000
Manifest this update:     Sat 29 Mar 2025 06:00:08 +0000
Manifest next update:     Tue 01 Apr 2025 06:00:00 +0000
Files and hashes:         1: 05532e03-b3a1-3527-bf6a-64d41fa06e14.roa (hash: ZXGl+RbZo8y+uEDQ5remOuLtcyUdP/S/WGFkx4LfYfU=)
                          2: 183d89fc-295e-32a1-a289-209268aa32be.roa (hash: NT+lIS/8k7sDxjuO9yR7QRNzWxvx6xbfP7Z1p8txiNA=)
                          3: a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl (hash: 8KBZn1oLg57gTRqM0wIRHWpmTbIu9MA02ONO28CPnb0=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:88:9a:1e:91:aa:55:b3:86:14:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
        Validity
            Not Before: Mar 29 06:00:08 2025 GMT
            Not After : Apr  1 06:00:00 2025 GMT
        Subject: CN=c3023e02-99c4-4db7-96dd-30d8e0afd9e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6e:d7:ec:d8:a0:31:23:0b:d8:27:e7:4a:52:
                    b4:89:0c:65:35:c5:dd:9f:13:0f:f8:87:05:dc:cf:
                    77:8f:cb:ff:23:4e:27:04:cb:32:0f:e0:b3:ee:f9:
                    fb:88:8d:a2:ca:63:b7:d9:b4:d3:58:7a:55:f4:b2:
                    06:16:cb:25:f5:c6:a0:53:ec:eb:e2:5c:76:a7:74:
                    5d:02:d1:35:40:84:93:8f:7a:4c:fc:f9:04:98:21:
                    a9:67:ee:be:a0:91:ac:29:77:78:45:6c:68:1b:cf:
                    8c:26:57:b2:34:d0:68:c8:8e:8c:ab:05:61:6e:aa:
                    21:fa:ea:bb:1a:9a:3f:83:87:8d:e3:8f:d1:13:9e:
                    31:da:b3:62:c0:c9:96:69:8a:43:5c:d7:04:8f:7b:
                    5d:e8:51:ae:bf:f6:17:70:0b:52:dc:c2:f0:82:73:
                    26:6e:32:65:76:59:dd:58:08:90:97:a3:bf:cd:93:
                    e0:8d:ee:99:7e:ac:2e:46:03:9c:af:48:2d:09:92:
                    7a:05:de:60:14:4a:60:fb:dd:12:9f:9c:75:3c:e0:
                    cf:0f:de:b2:b8:61:c4:5a:5f:67:c3:7a:53:cc:c0:
                    59:7e:1f:d3:f1:e5:16:cb:db:b4:96:e7:69:3e:f8:
                    1a:4d:42:1f:05:a1:7d:6f:10:01:79:af:56:2a:b6:
                    bf:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:8D:C1:F3:90:59:25:15:40:8F:01:94:BD:B2:24:BC:32:8E:29:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:83:e1:8b:d0:26:87:8a:e5:9a:bf:2e:11:5a:d6:f3:d5:e7:
         29:1e:4d:9d:e2:ca:ff:e0:20:8c:ec:74:41:b4:8a:3c:ba:ac:
         c3:51:dd:c7:f2:6b:f1:c2:3d:10:12:76:ba:62:f9:53:64:6a:
         23:89:26:fe:6f:39:27:e9:aa:38:2e:b9:9f:14:6c:bf:83:cc:
         53:48:3e:dc:bb:5f:ed:90:44:5c:29:90:0b:4f:c7:60:5a:95:
         a3:11:e1:4a:c0:26:3c:53:17:08:d1:2d:0a:9c:64:40:f6:09:
         32:fd:ee:65:7f:c3:db:49:50:b5:5b:28:a0:c6:47:51:d8:de:
         29:cd:d2:59:4e:10:64:7d:1a:9c:58:13:ed:b5:4a:01:b2:37:
         c9:29:2c:5d:f2:3c:bb:1a:0c:9b:0d:d1:07:1f:32:f2:50:dd:
         e6:6d:16:93:79:c9:f1:f0:27:bd:5a:14:a8:c5:7b:64:c3:88:
         ab:18:a0:77:0c:c6:ab:41:58:22:24:07:6a:b6:d6:a4:3a:e4:
         54:3d:8a:97:98:1e:db:2e:c0:e0:0f:1c:fb:9c:d4:c1:b7:05:
         f1:81:5a:cf:5a:5b:6c:58:ae:a2:0d:cd:8a:3c:86:2d:1b:b9:
         3d:f5:56:67:9d:96:ec:55:da:2d:cd:d2:c0:09:a0:3b:74:4a:
         88:96:ce:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:13:37 2025 by rpki-client