Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
File:                     8c902da3-488d-44d9-9833-f1295a9fd887.mft (raw, json)
Hash identifier:          I8/BHSwfnTbCm8blYj0Q723leQ29NK9QCaxv62QX+Z0=
Subject key identifier:   4B:E1:A7:5F:BA:D2:E0:D8:BD:13:DE:20:26:21:63:3F:49:7C:A3:9F
Authority key identifier: 1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2
Certificate issuer:       /CN=8c902da3-488d-44d9-9833-f1295a9fd887
Certificate serial:       010D0C9F43285849577C985C9629DAF5EADDD280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft
Manifest number:          010D0C9F4328584073A828BE490A7E22F4117A89
Signing time:             Fri 28 Mar 2025 21:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 21:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 21:00:00 +0000
Files and hashes:         1: 10a59856-f71a-35fa-aa0d-3c293faa8ca8.roa (hash: H3cNNVIWP4Wvs4aFUs1EepHSY2Wv5s5VK/kQZ/SAkm8=)
                          2: 77026aec-a6c7-3339-9364-ade3cc39f353.roa (hash: FQuvh6LxvXtN06igwwX4mfSpHKDqu8nAwqROFQHlaUs=)
                          3: 8c902da3-488d-44d9-9833-f1295a9fd887.crl (hash: NX7TaTNL7wVU5L7QPSfeXev9pMHvq2Z0pKhfNmHp7Pc=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:7c:98:5c:96:29:da:f5:ea:dd:d2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c902da3-488d-44d9-9833-f1295a9fd887
        Validity
            Not Before: Mar 28 21:00:07 2025 GMT
            Not After : Mar 30 21:00:00 2025 GMT
        Subject: CN=1094675b-6975-43c8-8e7a-e86587fe291e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:25:0a:2a:04:8d:ec:f4:0d:27:54:0a:a1:
                    8d:3a:ad:82:8f:aa:bc:dc:6c:66:01:fc:46:20:3b:
                    47:ea:ee:a3:b3:5a:38:a6:6f:28:52:01:18:11:98:
                    2a:5c:ac:e4:a0:a5:e9:43:53:3b:d9:93:03:fb:f9:
                    bc:0f:55:af:77:cc:a6:14:da:cd:03:4a:31:f7:70:
                    a6:85:8d:6c:26:a7:60:7b:11:86:99:ea:b0:31:a7:
                    48:89:3d:4a:25:2e:39:b1:9b:cb:e0:f1:c8:c3:a9:
                    c6:5d:fe:c1:af:26:10:81:11:c9:94:fc:da:f3:13:
                    67:36:c0:ba:5f:d8:70:2f:e9:d3:57:57:e2:1d:f0:
                    89:a4:ac:14:e9:ee:e8:0a:4a:a2:50:ed:c8:9d:a0:
                    9a:02:1b:bd:1c:a5:22:22:32:f9:34:79:63:e9:8b:
                    d4:5c:31:0a:30:ec:b9:af:4a:6b:e7:28:3f:b1:f4:
                    75:dd:ab:f4:7b:75:ca:d0:50:50:1d:dd:ca:a7:dd:
                    4f:1c:c9:7e:0d:ee:a2:dd:87:bf:a1:ef:63:13:48:
                    e9:b6:b7:d4:e1:44:83:54:82:9e:c1:6c:a9:d5:65:
                    c7:fb:d0:f8:b5:32:76:57:eb:ad:ee:7d:18:47:ec:
                    1d:36:f7:71:e9:ba:a0:ee:ee:ca:9a:b8:83:8d:41:
                    40:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:E1:A7:5F:BA:D2:E0:D8:BD:13:DE:20:26:21:63:3F:49:7C:A3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887/8c902da3-488d-44d9-9833-f1295a9fd887.crl

            X509v3 Authority Key Identifier:
                keyid:1A:3F:BD:48:B8:18:D6:2E:89:17:81:D2:0A:54:B5:D9:4C:F6:36:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8c902da3-488d-44d9-9833-f1295a9fd887.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:79:b9:38:c8:87:14:05:d5:b6:91:e1:68:92:12:76:52:50:
         4a:35:71:b7:71:f9:34:19:69:09:b8:4a:83:8b:63:cf:27:2a:
         ff:61:dc:b2:b5:8b:fd:ba:a1:8f:87:c0:c1:40:ab:c3:e4:f8:
         a3:5a:80:39:6a:3f:39:70:22:c2:bf:5a:de:8e:d5:1c:51:3d:
         b5:5c:15:a9:a9:5a:cf:c4:a5:54:b1:72:55:d9:1c:53:b2:f6:
         0c:3b:72:f8:d4:1a:d0:7f:da:71:c3:f6:ab:fc:45:e3:c5:f6:
         ed:72:a0:17:8b:74:55:1d:a5:c0:11:54:84:f9:74:af:09:f9:
         92:dd:44:26:ec:c3:4a:0d:ea:ee:13:c7:0b:44:ff:2f:a3:a4:
         f0:3d:4d:47:1e:82:72:21:02:4c:1d:de:ba:3d:49:8c:de:a6:
         10:15:7a:8b:e4:aa:7a:0e:63:e8:82:a7:cc:9a:cf:70:ed:fa:
         8c:33:0c:1b:09:3a:b8:65:5e:b8:50:24:f6:6b:23:cd:7c:22:
         10:ba:55:ee:d9:01:e5:b2:e1:14:c6:77:e7:06:16:dd:c5:9b:
         cd:52:10:7d:aa:b7:6c:a9:62:12:e5:f4:09:52:ca:6e:2e:1f:
         22:93:87:b2:a3:a9:bb:44:2f:e7:8a:5e:bb:5d:78:20:8b:51:
         9c:99:6f:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:16:12 2025 by rpki-client