Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft
File:                     3dbd8306-91a8-46a2-828a-ece722fc4280.mft (raw, json)
Hash identifier:          7xEIiWx3DPifRH///7UMDz4OtQHNuxJiASZV8iIZaQ4=
Subject key identifier:   05:BC:31:B3:18:66:4B:A4:2C:57:C0:AF:EA:73:E6:F3:9E:98:AF:04
Authority key identifier: 1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64
Certificate issuer:       /CN=3dbd8306-91a8-46a2-828a-ece722fc4280
Certificate serial:       010D0C9F4328584957F3B2B880B067813C2971C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft
Manifest number:          010D0C9F43285843E151E3DEE11AC645A1C9E909
Signing time:             Sat 29 Mar 2025 01:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 01:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 01:00:00 +0000
Files and hashes:         1: 3dbd8306-91a8-46a2-828a-ece722fc4280.crl (hash: EZU+6iWjOnNOSc1a28lxTrpW/SJ4G5RR/yIumU7sFmc=)
                          2: 9d86f567-f312-3939-b61d-473fa6432bdb.roa (hash: iqpNpD/7RWZvAe0JspUJq8r5vAxZhhJfYZ8wCXdxbic=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f3:b2:b8:80:b0:67:81:3c:29:71:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dbd8306-91a8-46a2-828a-ece722fc4280
        Validity
            Not Before: Mar 29 01:00:07 2025 GMT
            Not After : Mar 31 01:00:00 2025 GMT
        Subject: CN=5b468365-c235-4daf-8ea2-12fce5c6950c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:39:ca:be:f6:cf:3f:db:56:67:02:5a:87:8a:
                    f4:54:df:97:3c:53:ab:92:6e:37:45:f8:00:f2:9e:
                    cb:8f:9a:f2:58:7b:0d:2c:74:6f:65:12:b6:33:e6:
                    38:3c:11:73:0a:63:5d:bc:11:60:87:da:04:91:0d:
                    43:07:02:98:d6:1a:bc:97:91:43:82:49:8c:fb:09:
                    84:59:e1:42:41:cc:71:6a:23:d5:b2:31:71:d2:82:
                    40:a6:04:e7:35:d7:4c:ad:de:05:9d:b9:08:45:2b:
                    c7:6a:8a:b1:5a:53:95:24:9c:5c:a1:ec:f5:39:81:
                    87:fa:e1:58:36:23:d8:51:eb:7f:3b:f6:84:a3:b1:
                    93:48:12:b5:7e:f8:a4:14:46:23:d7:75:18:d7:bd:
                    fa:2c:e2:63:29:ae:49:4b:9c:04:13:90:99:9a:67:
                    49:61:7c:f1:65:d4:03:21:62:b4:04:b9:b4:de:4b:
                    3d:63:7a:75:73:34:1e:a8:07:a5:0b:d9:c5:29:6f:
                    3a:1a:32:5a:5a:ec:20:f1:61:26:36:b3:d8:a6:f1:
                    2d:df:de:00:a9:7d:44:f8:a3:a3:bb:d4:98:3c:d9:
                    1f:be:be:0b:6c:12:36:96:e5:26:fc:d8:6a:f6:b6:
                    ef:ca:9d:7b:ff:45:36:8d:d2:db:e0:0e:42:fb:6c:
                    eb:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:BC:31:B3:18:66:4B:A4:2C:57:C0:AF:EA:73:E6:F3:9E:98:AF:04
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280/3dbd8306-91a8-46a2-828a-ece722fc4280.crl

            X509v3 Authority Key Identifier:
                keyid:1D:60:0E:40:9D:B0:4D:ED:CB:11:04:48:13:9C:45:13:5A:66:EE:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/3dbd8306-91a8-46a2-828a-ece722fc4280.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:b0:86:0d:db:75:66:f9:8c:e8:dc:7b:ba:ca:62:66:ff:81:
         dd:5b:0a:9e:69:d4:62:68:ea:da:00:01:51:f2:0e:99:d1:fb:
         a1:ce:1b:0a:b0:fa:d4:0e:36:2f:b8:4f:40:54:03:3e:e2:19:
         91:ec:1f:ec:bd:0b:fa:88:9d:a2:f8:38:4b:72:bb:16:92:2f:
         5c:f9:b2:3f:d0:f9:08:05:9e:2b:61:25:91:69:98:b4:de:2c:
         40:b6:99:21:2c:2c:b0:81:a3:b3:ba:99:7d:04:19:54:33:15:
         11:92:aa:ab:9a:f9:77:43:e8:3a:3d:83:70:7a:c9:fa:aa:c2:
         23:f6:ce:24:65:78:a6:f9:ba:59:43:12:f1:fe:c1:c1:33:23:
         3a:79:19:d7:0b:64:02:c4:db:27:c3:c7:38:b5:87:e9:20:5f:
         45:8b:93:94:f3:c2:aa:14:47:85:a2:fb:1e:84:4c:60:c9:b5:
         ce:5b:38:05:5f:a3:f3:0c:c6:88:30:46:ad:16:0c:05:cf:42:
         b5:7d:c0:74:56:b5:7f:6a:c8:c7:54:20:95:2a:87:07:5a:3d:
         ef:65:a5:59:80:e0:e6:34:df:ca:62:d3:92:f5:9e:e6:09:f3:
         12:eb:ef:59:94:30:89:fb:1f:f2:41:f0:ae:8f:a3:77:33:06:
         c8:18:c0:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 3 22:15:17 2025 by rpki-client