Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft
File:                     ca91b8b1-a975-4a43-947f-794da888c198.mft (raw, json)
Hash identifier:          vilWmZ+AXyBa6Y+WrAAC4cRVSBFnzIdCn8iTxbHl4Po=
Subject key identifier:   CA:D2:76:57:E8:8E:3B:98:60:36:A8:F0:03:1A:93:36:E3:74:CA:89
Authority key identifier: 12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3
Certificate issuer:       /CN=ca91b8b1-a975-4a43-947f-794da888c198
Certificate serial:       010D0C9F4328584956E7B0C900D32B0598711DDE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft
Manifest number:          010D0C9F4328584073A81AF87E0C298DDE791DC1
Signing time:             Fri 28 Mar 2025 16:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 16:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 16:00:00 +0000
Files and hashes:         1: 437d0e6c-a815-314d-8cb0-d4b4ee246e61.roa (hash: BOEoKTZ6y8O+DLJfeQzBtm6fqPSq7L2r9i7UDt0HuCU=)
                          2: ca91b8b1-a975-4a43-947f-794da888c198.crl (hash: 6JXtxWPXvX+KqnN/4ZggWTtW+r+2RnOCGyFnT4/21Z4=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:e7:b0:c9:00:d3:2b:05:98:71:1d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ca91b8b1-a975-4a43-947f-794da888c198
        Validity
            Not Before: Mar 28 16:00:07 2025 GMT
            Not After : Mar 30 16:00:00 2025 GMT
        Subject: CN=40ae7a4e-4866-465e-aa55-fb7aa356c4a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:91:7b:7d:67:f9:2e:63:67:90:b0:b7:9f:55:
                    57:b7:15:57:cf:85:2e:f3:bc:c6:c4:10:bc:63:17:
                    74:66:a6:3d:41:f3:7a:6f:07:ef:ae:c7:08:c0:79:
                    93:9b:03:b7:21:6d:03:6a:f3:17:de:d9:1b:f5:fd:
                    b1:16:36:f8:b7:d0:56:a4:b2:00:55:36:e0:f5:49:
                    d3:c8:c3:4b:16:8e:4a:0d:a8:26:56:25:66:32:52:
                    2c:2a:d4:ef:9f:1c:b9:64:6b:1f:46:20:a9:1b:ea:
                    00:f5:f0:f7:8c:cd:a6:f2:d6:c3:22:36:de:56:4c:
                    d6:02:6b:7b:a4:58:c9:1b:f5:06:dd:6a:a5:d4:48:
                    77:6e:be:93:8b:49:d2:28:98:0b:bd:c5:22:b9:a4:
                    02:0e:e3:9f:f0:9c:a0:93:a9:5d:47:e0:17:43:d3:
                    a8:ae:b8:1e:83:39:d1:86:52:52:ba:3f:56:2c:42:
                    5a:17:b0:4a:4e:38:dd:ab:d5:a1:01:30:d7:06:88:
                    ed:5c:be:53:cb:2f:92:9e:d2:fd:e4:55:7b:39:2d:
                    62:c8:62:c3:f9:0d:70:d9:4c:4f:bf:9f:34:8e:a5:
                    47:b2:05:91:6e:3d:7c:c8:cd:cc:69:1e:74:97:1e:
                    12:e5:12:c6:5c:4c:60:b5:d5:9c:92:37:55:35:8b:
                    93:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:D2:76:57:E8:8E:3B:98:60:36:A8:F0:03:1A:93:36:E3:74:CA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198/ca91b8b1-a975-4a43-947f-794da888c198.crl

            X509v3 Authority Key Identifier:
                keyid:12:90:A8:FB:25:F3:18:F0:78:D4:C4:7C:89:4F:C3:D4:9E:A5:89:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/ca91b8b1-a975-4a43-947f-794da888c198.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:61:70:1c:b8:5b:ce:32:00:d7:90:9d:3f:20:39:3e:29:0e:
         b6:7e:e4:b9:ad:60:b3:57:93:be:a2:d9:f6:de:56:9e:8d:be:
         3e:6b:e0:4b:13:ee:95:ee:09:82:a5:0d:19:2a:d0:e5:93:0d:
         e6:db:d4:b7:12:0d:45:44:36:2c:19:19:04:25:82:9c:77:92:
         0d:25:d8:73:a6:4c:27:90:cb:3d:de:05:82:0d:6c:38:26:80:
         71:f5:be:7a:33:61:b7:50:d0:15:6b:17:1c:90:29:12:11:a0:
         72:c5:55:10:ed:4e:8c:51:54:09:43:7e:b5:41:15:76:96:87:
         d6:c1:33:e0:23:d5:90:b9:5c:b7:9b:d1:8d:0f:45:e9:a0:1b:
         29:88:b5:cc:c8:1d:71:c6:91:aa:74:62:63:a6:23:fb:ed:a8:
         a7:ba:eb:47:2b:97:8d:05:82:25:a9:22:9b:91:f6:fc:8d:8e:
         28:37:6a:0f:56:b4:a3:98:9d:11:38:e5:fb:36:57:ca:ba:01:
         8f:bb:5b:0e:53:73:09:72:73:7a:92:7f:ea:e4:08:d6:57:2a:
         dc:c5:25:9c:b0:0a:16:22:84:17:d5:ed:36:12:1c:a6:90:41:
         1a:3d:35:d8:a4:f1:10:34:b2:e4:61:69:07:58:ac:01:4a:96:
         05:6f:30:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 12 03:05:42 2025 by rpki-client