Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft
File:                     cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft (raw, json)
Hash identifier:          LPcfATh7N9ses5NOGpTYPRKCGJZNUspCFOYhiHzBDvE=
Subject key identifier:   52:58:B9:E1:58:AE:0A:A6:0F:FC:F0:C8:AB:E2:6C:E7:A2:14:8F:43
Authority key identifier: A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1
Certificate issuer:       /CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f
Certificate serial:       010D0C9F4328584957B825F488CDC444E832A4C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft
Manifest number:          010D0C9F4328584698489B28867CEBCB2FF7C9F3
Signing time:             Fri 28 Mar 2025 23:00:08 +0000
Manifest this update:     Fri 28 Mar 2025 23:00:08 +0000
Manifest next update:     Mon 31 Mar 2025 23:00:00 +0000
Files and hashes:         1: 295d13d7-99ef-33dd-a625-3a2596a0f75d.roa (hash: ju3B5k2xaY39P5pceiv2UOviZYx2kzMafnYY96Z3kbI=)
                          2: cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl (hash: 3nrHYM8EzY6elv+5OSt2ORzBWmmbk4MZsXIifrfAPoQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:b8:25:f4:88:cd:c4:44:e8:32:a4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb5b14dc-69ee-4b58-b27d-78fe51b1335f
        Validity
            Not Before: Mar 28 23:00:08 2025 GMT
            Not After : Mar 31 23:00:00 2025 GMT
        Subject: CN=bd86089a-21da-47e0-b403-3d3e1843fb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:ff:5b:35:8d:18:96:7e:9f:5e:ed:44:9d:
                    8f:d2:91:19:4e:b5:66:ff:1d:58:9c:5e:97:c4:63:
                    59:30:0e:1d:c6:74:3c:7f:a8:1e:23:3a:5f:5a:35:
                    1a:0d:5c:e9:b8:d4:2a:e9:d4:3f:bf:fc:a4:ed:c5:
                    81:e8:2f:dd:f1:3f:1c:98:f9:f8:d5:25:de:05:18:
                    18:7f:e0:83:90:63:01:ff:11:55:74:90:36:91:d5:
                    3e:90:54:22:27:1c:46:b8:da:6d:c0:60:45:8f:25:
                    10:e4:61:c6:1a:8e:dc:9a:89:a3:7b:0b:2e:ef:06:
                    36:2c:94:ce:f0:5f:98:c1:3d:22:51:65:c5:e7:8b:
                    53:ff:91:28:a7:69:8a:b9:2f:d3:94:53:15:c1:28:
                    df:9a:1e:bc:a4:7c:19:83:e8:03:3b:9b:4d:b0:9a:
                    86:d1:38:e4:1e:96:a9:ae:de:a4:90:27:fd:00:83:
                    f9:54:2e:cb:43:03:7e:13:96:b1:51:0a:24:ae:f1:
                    6f:d4:f5:93:f6:e6:78:dd:4c:e9:c6:81:c1:24:6e:
                    8f:6f:98:64:c5:d0:82:9c:21:c2:ed:c5:8d:19:f7:
                    2b:13:02:59:e3:6c:31:0d:59:b4:17:05:c3:03:73:
                    5b:5e:3e:5c:52:ae:c4:04:2b:e3:fa:74:31:4f:b9:
                    00:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:58:B9:E1:58:AE:0A:A6:0F:FC:F0:C8:AB:E2:6C:E7:A2:14:8F:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.crl

            X509v3 Authority Key Identifier:
                keyid:A1:9A:77:2F:FD:70:E8:07:64:E2:E3:1C:A4:41:24:B6:42:51:05:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cb5b14dc-69ee-4b58-b27d-78fe51b1335f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:3f:d1:b6:c7:0e:a4:26:2f:00:b7:8e:05:3f:62:99:50:7a:
         27:a9:61:ce:95:2f:74:13:12:07:37:33:3f:12:3b:d7:d0:5b:
         75:84:22:6e:d2:a5:92:74:d6:50:7b:05:0f:2b:49:c6:92:37:
         6c:11:ee:6d:fb:1a:ab:5c:b1:52:61:50:eb:1b:71:b1:5e:68:
         bb:b4:77:cc:68:be:ae:b7:cc:0e:cf:44:ae:61:ea:47:ed:72:
         5f:63:b0:ab:3e:29:99:5d:0f:e0:bb:aa:d8:d2:3a:81:3e:d2:
         0a:16:13:69:db:f2:93:55:f7:12:b2:cf:9a:b8:ee:90:a3:cb:
         12:c5:88:1e:67:58:9c:fe:fa:67:25:f2:cf:6b:ed:6b:9f:8d:
         da:bd:9e:ef:15:83:08:36:4a:cf:ab:58:93:45:81:1f:17:d8:
         43:f6:3d:c4:c1:db:7b:6d:b7:39:3c:aa:13:1c:a5:09:f1:78:
         28:11:f1:9a:cd:94:3c:3e:39:7b:c3:59:7f:99:f7:ed:5b:b1:
         53:2e:19:9a:55:55:b7:6d:4b:01:2c:bb:ad:76:91:61:f3:79:
         18:a1:45:db:59:dd:3a:b9:a1:16:8c:7f:70:a0:40:5a:7a:ec:
         7a:15:f2:df:2d:53:74:2f:31:9a:7b:c3:f3:65:09:1b:56:f9:
         ac:ee:83:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 13:34:30 2025 by rpki-client