Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
File:                     cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft (raw, json)
Hash identifier:          GcxDq+QnMESABnefT1WVtNSuekeh/Sz/Ezc3YLRd0/M=
Subject key identifier:   87:31:76:A0:9F:D8:0B:15:53:1D:0A:B3:6A:C6:85:B7:FE:5E:8E:02
Authority key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE
Certificate issuer:       /CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
Certificate serial:       010D0C9F43285849568E58696F29653F88CCCF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
Manifest number:          010D0C9F432858460E5B34E1DB457D29A7BB3B34
Signing time:             Fri 28 Mar 2025 13:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 13:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 13:00:00 +0000
Files and hashes:         1: cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl (hash: KSwpBhRuc2Zq2YxoycJKq97I6MJwgX1FySx/Qb56cps=)
                          2: f4637f85-f045-3611-b433-908584a54b6e.roa (hash: JkJpaAQAWlYUkDUu6zMtx5763bosGFCgNFN9aSVobuI=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:8e:58:69:6f:29:65:3f:88:cc:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
        Validity
            Not Before: Mar 28 13:00:07 2025 GMT
            Not After : Mar 30 13:00:00 2025 GMT
        Subject: CN=d683a9ef-f1b4-4385-9f9b-1cbd6f486ee6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:b6:78:d0:ce:b6:f2:25:88:ca:b9:21:f5:f9:
                    ef:90:71:bc:11:24:c9:66:ce:2b:61:99:2a:b8:8e:
                    53:9d:90:0d:8d:5a:62:8a:09:02:19:be:9b:ec:be:
                    63:d8:aa:95:9a:08:dc:a6:59:06:95:52:a8:05:27:
                    6e:54:bc:65:4d:8e:58:1a:9c:2f:88:b0:02:55:e9:
                    52:8c:ef:ec:25:33:09:1e:13:68:f4:03:f9:69:a0:
                    db:9e:f8:8c:4e:c2:33:b7:34:d7:5c:52:56:6c:31:
                    66:5d:56:74:ef:af:98:c8:bb:47:22:2a:71:54:e4:
                    c7:fd:0e:97:d2:0c:73:e3:fd:f7:48:f6:6b:ab:03:
                    1e:8d:7d:b8:fe:e2:a4:5d:68:52:64:2f:6e:06:b9:
                    7b:98:56:48:e0:4b:b2:0e:b0:21:7d:f2:46:fc:9f:
                    ba:dd:ae:ba:e9:32:ab:c4:1f:e3:fb:ef:b5:08:ff:
                    45:28:52:9f:33:f9:a6:39:b2:83:80:85:30:df:35:
                    d5:08:c9:27:fb:8b:6d:29:2b:2a:09:4d:fb:10:82:
                    e1:b3:48:54:87:38:02:55:a6:d2:80:f9:b1:2e:2a:
                    ed:57:ca:30:11:7d:5c:00:b6:d7:d4:9f:10:67:a2:
                    b8:53:fc:b8:c3:8d:0d:5e:81:7d:98:e9:c7:19:5f:
                    75:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:31:76:A0:9F:D8:0B:15:53:1D:0A:B3:6A:C6:85:B7:FE:5E:8E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl

            X509v3 Authority Key Identifier:
                keyid:49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:c8:58:f1:0e:70:90:d1:64:5b:1a:68:b0:c9:b5:57:16:40:
         de:4b:cd:e9:71:86:0d:da:87:eb:1c:94:55:4c:93:fc:cd:93:
         35:d6:90:ec:1a:6c:4b:9b:f3:2d:3a:b8:3f:66:81:48:52:32:
         17:4d:b8:ad:b9:16:9e:18:f6:5e:8d:e4:14:b1:c8:ae:7b:96:
         0a:9b:f8:63:a6:c0:33:ff:19:30:eb:2a:48:c8:6e:7f:f4:ee:
         43:47:5e:2a:db:74:b6:44:75:7b:8b:d8:00:15:59:a3:40:4b:
         7c:7a:52:6e:b7:a4:b6:46:d6:1d:44:c1:01:1f:33:f4:f6:02:
         af:4c:e7:53:69:56:3e:a7:a7:b6:68:e7:5b:78:00:9a:d1:b3:
         b8:c1:2c:67:1e:78:4c:58:07:2f:e2:8f:ce:76:a6:c2:8e:4e:
         ce:c0:24:90:00:22:02:78:62:17:75:9b:3f:97:49:66:90:2d:
         02:ea:16:db:75:21:72:04:a9:05:38:ef:6d:4f:b0:00:8e:9b:
         82:05:b9:6c:8b:c9:f8:ec:18:21:e7:d9:5e:77:27:fe:11:6a:
         6b:24:23:98:bd:27:06:e4:e9:fb:89:cb:30:24:b5:c5:15:80:
         1e:1c:87:11:59:2e:53:23:04:80:03:04:be:66:9b:a6:81:0a:
         a3:4e:8e:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:37:05 2025 by rpki-client