Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.mft
File:                     dfbd5b0f-e06b-409d-a492-aff81175f2cd.mft (raw, json)
Hash identifier:          FetZKWTGTo7IGs8Zad3s23ff4vT80h70MSDI93eNta4=
Subject key identifier:   98:24:C3:E9:13:48:53:A9:96:2A:0E:65:EB:C4:34:CB:82:A3:A6:7C
Authority key identifier: 8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A
Certificate issuer:       /CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
Certificate serial:       010D0C9F4328584956C9E9A05DF9E0D7474FC000
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.mft
Manifest number:          010D0C9F43285846B60BEB2D7FFCD6129E0508F7
Signing time:             Fri 28 Mar 2025 15:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 15:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 15:00:00 +0000
Files and hashes:         1: ac33e81c-e21e-307e-8679-630443462c2f.roa (hash: cgnA59U3xg4XakMqbwI1SD90RoACvv4VAfa3vGnFqC0=)
                          2: dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl (hash: nY0kXh9X5Tqp/bV29wTcx95af5UuMIt23+stPAAGfos=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:c9:e9:a0:5d:f9:e0:d7:47:4f:c0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dfbd5b0f-e06b-409d-a492-aff81175f2cd
        Validity
            Not Before: Mar 28 15:00:07 2025 GMT
            Not After : Mar 30 15:00:00 2025 GMT
        Subject: CN=259ca9df-ce4f-4dce-a9e8-1ca6c9f90bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ca:1f:91:96:23:72:c2:47:de:16:0d:25:b8:
                    34:e9:dc:d9:02:0f:55:9f:54:df:1e:fb:9b:0d:78:
                    58:a3:bc:5f:45:48:e5:1f:b3:2b:b1:14:61:8e:22:
                    87:25:b4:6b:7a:12:6d:95:37:45:84:0e:42:18:90:
                    fa:0a:91:94:15:94:3c:ab:17:ce:b8:99:56:a4:07:
                    ad:a5:9d:c2:8e:91:7d:40:69:9a:77:3d:89:5f:2b:
                    2a:6e:4c:49:ab:4a:ee:a7:6c:3e:84:f7:0a:35:4e:
                    eb:23:b0:0e:ba:ec:37:b0:bd:bb:65:ce:25:1f:64:
                    b4:42:07:2a:b5:15:5a:9d:31:6e:25:fa:e5:99:ec:
                    90:f9:3d:83:24:fe:7f:e2:9a:fe:f8:b5:0e:39:e7:
                    35:c9:58:d7:74:18:94:bc:2d:70:62:b1:f1:4e:62:
                    ca:72:9a:20:c1:bf:9f:4e:0d:2d:90:06:a2:81:54:
                    dc:6a:06:32:b7:95:1c:87:e6:7d:26:dd:b5:c1:c3:
                    92:ca:70:57:d7:2e:a3:11:87:83:0d:2b:1c:5a:1f:
                    95:8a:a2:95:b6:5b:44:01:60:d8:b0:9a:1b:f7:d4:
                    a1:b1:32:f8:68:af:78:70:75:ee:e0:a0:c8:aa:a0:
                    e5:74:b7:1b:2e:e2:7b:24:94:95:2d:ba:3c:85:a2:
                    8b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:24:C3:E9:13:48:53:A9:96:2A:0E:65:EB:C4:34:CB:82:A3:A6:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd/dfbd5b0f-e06b-409d-a492-aff81175f2cd.crl

            X509v3 Authority Key Identifier:
                keyid:8B:F2:33:5D:44:8C:B4:0E:A9:0C:C9:AE:02:A2:0D:59:19:25:69:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/dfbd5b0f-e06b-409d-a492-aff81175f2cd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:09:93:9f:83:fd:59:40:47:65:3f:19:b1:d1:b2:63:91:74:
         d2:c4:49:23:a8:95:7d:62:58:2c:db:51:64:66:a4:0f:c5:76:
         75:a7:c1:14:ff:d1:3b:2c:48:cd:8d:3f:db:78:f8:9c:bd:1a:
         9f:46:d0:2f:e6:90:17:b1:e0:3b:c1:40:06:d4:ff:29:29:a7:
         32:6f:7a:9e:42:a4:1e:ca:ce:91:da:b1:e2:64:70:0d:01:bb:
         b8:bc:1e:d7:82:68:cd:71:8c:2b:8b:fb:9f:01:ca:c9:94:b1:
         be:37:ff:9d:02:38:f8:2c:08:24:bb:f8:f2:50:a5:79:fa:2e:
         ca:f2:6d:26:86:08:3b:74:b7:6c:a4:79:cf:d5:c3:bc:d9:7a:
         63:fd:f7:0a:bc:9b:88:2a:bc:40:6c:ef:84:41:c1:fa:f2:52:
         40:8f:59:18:02:e7:6f:37:d0:ac:ab:66:e7:01:ab:b3:1b:d9:
         34:bc:e2:e0:6c:2e:34:5b:17:96:1c:b4:11:eb:58:09:bb:21:
         aa:d2:69:d8:ca:93:44:58:69:57:0a:1b:0f:9c:f4:91:66:ea:
         85:84:34:c8:e6:8b:3a:fd:4f:6e:0e:d9:d8:6e:7d:1c:4d:09:
         02:c5:7f:e6:d8:33:e0:0a:1a:5a:00:4d:50:9a:a9:ca:1b:ef:
         6e:77:4e:9c
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElWyemgXfng10dPwAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGZiZDViMGYtZTA2Yi00MDlkLWE0OTItYWZmODExNzVm
MmNkMB4XDTI1MDMyODE1MDAwN1oXDTI1MDMzMDE1MDAwMFowLzEtMCsGA1UEAxMk
MjU5Y2E5ZGYtY2U0Zi00ZGNlLWE5ZTgtMWNhNmM5ZjkwYmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAisofkZYjcsJH3hYNJbg06dzZAg9Vn1TfHvub
DXhYo7xfRUjlH7MrsRRhjiKHJbRrehJtlTdFhA5CGJD6CpGUFZQ8qxfOuJlWpAet
pZ3CjpF9QGmadz2JXysqbkxJq0rup2w+hPcKNU7rI7AOuuw3sL27Zc4lH2S0Qgcq
tRVanTFuJfrlmeyQ+T2DJP5/4pr++LUOOec1yVjXdBiUvC1wYrHxTmLKcpogwb+f
Tg0tkAaigVTcagYyt5Uch+Z9Jt21wcOSynBX1y6jEYeDDSscWh+ViqKVtltEAWDY
sJob99ShsTL4aK94cHXu4KDIqqDldLcbLuJ7JJSVLbo8haKLOQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJgkw+kTSFOplioOZevENMuCo6Z8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9kZmJk
NWIwZi1lMDZiLTQwOWQtYTQ5Mi1hZmY4MTE3NWYyY2QvZGZiZDViMGYtZTA2Yi00
MDlkLWE0OTItYWZmODExNzVmMmNkLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZGZiZDViMGYtZTA2Yi00MDlkLWE0
OTItYWZmODExNzVmMmNkL2RmYmQ1YjBmLWUwNmItNDA5ZC1hNDkyLWFmZjgxMTc1
ZjJjZC5jcmwwHwYDVR0jBBgwFoAUi/IzXUSMtA6pDMmuAqINWRklaWowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9kZmJkNWIwZi1lMDZiLTQwOWQtYTQ5Mi1hZmY4
MTE3NWYyY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBXCZOfg/1ZQEdlPxmx0bJj
kXTSxEkjqJV9Ylgs21FkZqQPxXZ1p8EU/9E7LEjNjT/bePicvRqfRtAv5pAXseA7
wUAG1P8pKacyb3qeQqQeys6R2rHiZHANAbu4vB7XgmjNcYwri/ufAcrJlLG+N/+d
Ajj4LAgku/jyUKV5+i7K8m0mhgg7dLdspHnP1cO82Xpj/fcKvJuIKrxAbO+EQcH6
8lJAj1kYAudvN9Csq2bnAauzG9k0vOLgbC40WxeWHLQR61gJuyGq0mnYypNEWGlX
ChsPnPSRZuqFhDTI5os6/U9uDtnYbn0cTQkCxX/m2DPgChpaAE1QmqnKG+9ud06c
-----END CERTIFICATE-----
Generated at Sat Apr 12 09:28:19 2025 by rpki-client