Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft
File:                     21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft (raw, json)
Hash identifier:          npN0pSlRNyP7A39plv5Y2mOZ0eY5wFsy7omzJv9anlw=
Subject key identifier:   7D:4D:C3:5E:7B:96:D4:1A:A3:E1:5F:B4:24:4B:44:5F:44:97:65:07
Authority key identifier: 2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13
Certificate issuer:       /CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a
Certificate serial:       010D0C9F4328584957233EDA6D5E4FAE0EE0D600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft
Manifest number:          010D0C9F432858438A0A161212CB83FF1869C511
Signing time:             Fri 28 Mar 2025 18:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 18:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 18:00:00 +0000
Files and hashes:         1: 21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl (hash: EURnaUy7C4V/4+By8kMEuYCJx2aTSJfJ0a3iG/3+D48=)
                          2: fe655c59-f54b-337c-afb0-edb608a6ba8d.roa (hash: d965sKTwTXwSFdzx/MAgIdD75hY2UJcbhw1y+AnPphE=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:23:3e:da:6d:5e:4f:ae:0e:e0:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a0e036-e4bb-4abf-8ede-8ad9a213f91a
        Validity
            Not Before: Mar 28 18:00:07 2025 GMT
            Not After : Mar 31 18:00:00 2025 GMT
        Subject: CN=f2e73c9b-f5d8-4642-bbd3-d7552fbf7472
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ef:dd:a4:0d:89:6d:e5:d7:7c:4d:d5:2d:42:
                    53:9f:fe:ad:8f:80:1e:b5:46:2c:6c:1a:cc:49:55:
                    73:ee:eb:e4:80:2b:fe:04:9e:8a:09:63:43:c5:40:
                    1d:61:88:e2:21:a2:d1:82:39:4a:fc:71:49:35:c5:
                    3f:9a:c9:1b:b3:40:e7:8a:ae:19:6e:86:c2:d4:47:
                    f0:52:09:bb:69:50:65:f7:7e:13:4e:cd:f8:70:97:
                    20:4b:81:04:9e:78:fa:e9:45:ea:fd:6d:3f:22:5d:
                    74:f3:cf:26:a0:61:6c:69:0d:9f:e4:46:6e:99:f1:
                    8c:06:1e:40:14:e1:30:5a:9d:6b:2c:d9:8b:84:d7:
                    ca:49:e9:8c:62:df:f0:17:d3:01:dd:d4:2b:13:d7:
                    5f:59:12:cb:b0:a6:f0:37:e3:1e:0e:0f:82:11:7f:
                    13:30:99:bf:b1:d4:c8:c6:62:1e:73:a3:f5:f4:38:
                    08:2e:7a:5b:ed:10:02:d8:76:4a:a6:c4:8b:20:9f:
                    f4:a2:96:d0:eb:e5:3a:bc:04:d1:31:4e:76:d9:da:
                    8c:f0:77:56:2c:44:90:3f:93:f3:a3:88:98:88:2a:
                    cf:bb:6b:45:90:17:31:73:20:14:c0:ed:2c:e6:34:
                    bf:98:52:72:90:93:61:61:5e:e1:8b:5c:b9:c9:63:
                    af:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:4D:C3:5E:7B:96:D4:1A:A3:E1:5F:B4:24:4B:44:5F:44:97:65:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.crl

            X509v3 Authority Key Identifier:
                keyid:2F:DA:DD:17:BF:CA:37:D5:D7:4F:CD:E5:B1:E7:2E:BB:C2:86:87:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/21a0e036-e4bb-4abf-8ede-8ad9a213f91a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:db:23:b1:80:c9:8b:88:09:a4:ee:e4:bb:db:74:08:97:4f:
         77:e8:60:47:89:18:84:ac:a5:04:4b:71:68:f3:be:5a:3d:3f:
         dc:c8:ca:6d:ed:74:ab:45:91:c3:75:70:c4:92:8a:06:5f:90:
         e9:81:3d:25:e5:cb:f7:d9:06:64:33:43:83:38:41:fd:fb:07:
         03:c8:f4:d5:98:97:81:74:7e:5f:27:b2:f1:be:d6:5c:f2:a1:
         6a:cc:ec:cd:4b:7c:ec:15:6f:f8:27:0e:3c:f5:4b:81:6f:5d:
         e1:23:eb:8f:0f:8d:40:8b:d3:d9:5d:21:f2:37:49:cf:2d:09:
         78:7c:59:3b:82:c8:47:2a:4b:4e:bb:67:52:7e:3f:49:85:21:
         02:2a:00:03:62:f1:2e:0f:36:fd:65:93:0a:c1:a0:11:9b:dd:
         25:d6:ef:92:e7:17:25:27:20:25:e4:98:50:6f:0b:f9:04:1a:
         e1:3b:73:49:11:1b:a8:37:2c:87:23:c3:19:2a:d0:0f:cf:a2:
         c5:7c:8a:02:d1:af:cc:50:64:2a:d7:9d:68:ab:70:28:6c:ba:
         db:ac:1b:4c:fc:aa:a0:b5:56:93:50:9e:43:55:d2:61:09:ea:
         11:ef:e3:20:a1:e3:66:3f:39:3c:12:51:87:c9:df:f2:72:9f:
         0e:4c:39:49
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElXIz7abV5Prg7g1gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhMGUwMzYtZTRiYi00YWJmLThlZGUtOGFkOWEyMTNm
OTFhMB4XDTI1MDMyODE4MDAwN1oXDTI1MDMzMTE4MDAwMFowLzEtMCsGA1UEAxMk
ZjJlNzNjOWItZjVkOC00NjQyLWJiZDMtZDc1NTJmYmY3NDcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAou/dpA2JbeXXfE3VLUJTn/6tj4AetUYsbBrM
SVVz7uvkgCv+BJ6KCWNDxUAdYYjiIaLRgjlK/HFJNcU/mskbs0Dniq4ZbobC1Efw
Ugm7aVBl934TTs34cJcgS4EEnnj66UXq/W0/Il10888moGFsaQ2f5EZumfGMBh5A
FOEwWp1rLNmLhNfKSemMYt/wF9MB3dQrE9dfWRLLsKbwN+MeDg+CEX8TMJm/sdTI
xmIec6P19DgILnpb7RAC2HZKpsSLIJ/0opbQ6+U6vATRMU522dqM8HdWLESQP5Pz
o4iYiCrPu2tFkBcxcyAUwO0s5jS/mFJykJNhYV7hi1y5yWOvAQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFH1Nw157ltQao+FftCRLRF9El2UHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEw
ZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5YTIxM2Y5MWEvMjFhMGUwMzYtZTRiYi00
YWJmLThlZGUtOGFkOWEyMTNmOTFhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMjFhMGUwMzYtZTRiYi00YWJmLThl
ZGUtOGFkOWEyMTNmOTFhLzIxYTBlMDM2LWU0YmItNGFiZi04ZWRlLThhZDlhMjEz
ZjkxYS5jcmwwHwYDVR0jBBgwFoAUL9rdF7/KN9XXT83lsecuu8KGhxMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yMWEwZTAzNi1lNGJiLTRhYmYtOGVkZS04YWQ5
YTIxM2Y5MWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB32yOxgMmLiAmk7uS723QI
l0936GBHiRiErKUES3Fo875aPT/cyMpt7XSrRZHDdXDEkooGX5DpgT0l5cv32QZk
M0ODOEH9+wcDyPTVmJeBdH5fJ7LxvtZc8qFqzOzNS3zsFW/4Jw489UuBb13hI+uP
D41Ai9PZXSHyN0nPLQl4fFk7gshHKktOu2dSfj9JhSECKgADYvEuDzb9ZZMKwaAR
m90l1u+S5xclJyAl5JhQbwv5BBrhO3NJERuoNyyHI8MZKtAPz6LFfIoC0a/MUGQq
151oq3AobLrbrBtM/KqgtVaTUJ5DVdJhCeoR7+MgoeNmPzk8ElGHyd/ycp8OTDlJ
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:27:06 2025 by rpki-client