Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft
File:                     ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft (raw, json)
Hash identifier:          DJI57GHQ0TNN9xM53HdYouW/0erSBAanCGUKNT6dab4=
Subject key identifier:   35:AC:2F:57:68:EF:D9:73:EE:FF:9D:90:11:CA:71:28:A8:3E:3D:42
Authority key identifier: A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9
Certificate issuer:       /CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928
Certificate serial:       010D0C9F432858495811792B96F33D1EB08AF2C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft
Manifest number:          010D0C9F432858445F156B290AF6E6BACDD299D4
Signing time:             Sat 29 Mar 2025 02:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 02:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 02:00:00 +0000
Files and hashes:         1: 7e2ef2cf-51f5-39ab-9164-9e223b3770fb.roa (hash: w2ewM67Sv/0X+TLs9QVhVis9/n+aYqJRxIuFXp7f6iY=)
                          2: ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl (hash: R0Aq7qBvIIC+nCOV09u5Js60sU13T8MjaBsiE5oKGWg=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:11:79:2b:96:f3:3d:1e:b0:8a:f2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac5a7f9f-da2b-4121-b0ab-afc083ef9928
        Validity
            Not Before: Mar 29 02:00:07 2025 GMT
            Not After : Apr  1 02:00:00 2025 GMT
        Subject: CN=2b15fbc2-baaa-4eb1-8ae5-c55b903f5e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4a:36:d2:87:12:a8:0b:ac:82:59:2c:0a:ba:
                    78:43:82:cc:0d:8b:1d:27:8a:85:0a:bb:82:a5:0f:
                    c4:78:17:f0:b2:b2:34:08:03:d2:3a:ab:11:51:4e:
                    e7:32:8e:51:9f:60:f3:ad:16:77:bf:c8:49:15:d0:
                    a8:77:54:c1:70:e4:86:41:1f:7d:e8:31:0a:02:fd:
                    58:fd:5a:e1:e2:60:1b:66:fb:3f:36:37:31:c6:4b:
                    af:de:71:68:72:9f:99:27:ea:b9:7e:c8:f7:b2:7e:
                    fb:49:c1:5f:e5:84:ec:c1:20:cd:a0:52:15:a2:8f:
                    2e:50:fa:d9:4f:46:82:a7:35:17:36:a7:2f:52:a6:
                    06:94:a0:0b:80:33:bc:7f:55:dc:c8:68:71:ee:57:
                    92:ef:25:18:d0:f6:04:65:c7:28:69:4e:5f:d6:fa:
                    df:15:35:60:1a:84:67:9a:64:b9:44:a0:9c:34:af:
                    18:19:c6:b7:2f:71:bd:4a:85:ae:87:2c:e5:98:39:
                    f6:50:73:19:f2:81:75:90:c5:8f:02:f3:51:37:44:
                    f4:7f:b9:3d:c8:22:24:52:13:b2:db:ee:07:5c:e8:
                    52:16:9c:43:f7:66:65:2d:64:0d:9b:d7:60:c0:7a:
                    78:0e:58:0a:84:cf:7f:24:a4:b1:41:80:27:ab:49:
                    47:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:AC:2F:57:68:EF:D9:73:EE:FF:9D:90:11:CA:71:28:A8:3E:3D:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.crl

            X509v3 Authority Key Identifier:
                keyid:A7:B1:F7:12:06:D7:BA:B6:7A:3C:23:2D:F7:6B:0E:B3:86:98:40:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac5a7f9f-da2b-4121-b0ab-afc083ef9928.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:59:7d:88:69:d7:f2:63:34:04:16:01:ff:e9:47:48:8a:5e:
         c7:6a:23:fe:36:f8:ad:42:54:ac:85:e9:68:7b:a7:fa:09:04:
         6e:4e:cd:8b:0d:b5:d6:a3:22:3b:3a:5c:8a:1c:56:ea:37:d2:
         c2:4d:7d:96:6e:9d:0c:ca:e5:ba:bf:35:45:45:1d:60:c5:b5:
         15:a4:a8:52:7d:4d:5b:99:ab:2d:2d:ba:d6:ad:36:24:06:9e:
         85:0c:c4:4e:ee:25:4b:94:de:68:96:27:a4:c5:35:2a:85:51:
         9f:87:c5:50:83:11:df:a3:37:73:d7:1e:d9:25:57:3a:dc:24:
         7b:eb:9f:88:aa:f5:70:e6:f0:5f:09:c8:e5:d9:ce:08:cb:f4:
         1c:82:03:e1:ec:0b:8e:a5:5f:23:c6:f3:1b:ff:df:ba:e5:89:
         17:cc:34:a1:c5:b3:e6:76:01:dc:da:d1:1f:69:dd:3b:62:22:
         ce:4a:21:4a:25:19:64:8a:01:fb:4b:b0:d9:7b:c4:da:5f:65:
         76:d5:d8:e1:e3:27:7b:3e:b7:01:a4:e4:7e:80:32:8b:98:fd:
         25:81:db:b6:27:93:08:5a:51:3c:69:ac:96:a8:b2:c1:48:dc:
         d3:b9:af:8a:40:98:d7:15:c3:11:32:25:0a:42:53:49:87:50:
         ee:ba:ff:bf
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElYEXkrlvM9HrCK8sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM1YTdmOWYtZGEyYi00MTIxLWIwYWItYWZjMDgzZWY5
OTI4MB4XDTI1MDMyOTAyMDAwN1oXDTI1MDQwMTAyMDAwMFowLzEtMCsGA1UEAxMk
MmIxNWZiYzItYmFhYS00ZWIxLThhZTUtYzU1YjkwM2Y1ZTE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw0o20ocSqAusglksCrp4Q4LMDYsdJ4qFCruC
pQ/EeBfwsrI0CAPSOqsRUU7nMo5Rn2DzrRZ3v8hJFdCod1TBcOSGQR996DEKAv1Y
/Vrh4mAbZvs/Njcxxkuv3nFocp+ZJ+q5fsj3sn77ScFf5YTswSDNoFIVoo8uUPrZ
T0aCpzUXNqcvUqYGlKALgDO8f1XcyGhx7leS7yUY0PYEZccoaU5f1vrfFTVgGoRn
mmS5RKCcNK8YGca3L3G9SoWuhyzlmDn2UHMZ8oF1kMWPAvNRN0T0f7k9yCIkUhOy
2+4HXOhSFpxD92ZlLWQNm9dgwHp4DlgKhM9/JKSxQYAnq0lHnwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFDWsL1do79lz7v+dkBHKcSioPj1CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzVh
N2Y5Zi1kYTJiLTQxMjEtYjBhYi1hZmMwODNlZjk5MjgvYWM1YTdmOWYtZGEyYi00
MTIxLWIwYWItYWZjMDgzZWY5OTI4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM1YTdmOWYtZGEyYi00MTIxLWIw
YWItYWZjMDgzZWY5OTI4L2FjNWE3ZjlmLWRhMmItNDEyMS1iMGFiLWFmYzA4M2Vm
OTkyOC5jcmwwHwYDVR0jBBgwFoAUp7H3EgbXurZ6PCMt92sOs4aYQMkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzVhN2Y5Zi1kYTJiLTQxMjEtYjBhYi1hZmMw
ODNlZjk5MjguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB5WX2IadfyYzQEFgH/6UdI
il7HaiP+NvitQlSsheloe6f6CQRuTs2LDbXWoyI7OlyKHFbqN9LCTX2Wbp0MyuW6
vzVFRR1gxbUVpKhSfU1bmastLbrWrTYkBp6FDMRO7iVLlN5oliekxTUqhVGfh8VQ
gxHfozdz1x7ZJVc63CR765+IqvVw5vBfCcjl2c4Iy/QcggPh7AuOpV8jxvMb/9+6
5YkXzDShxbPmdgHc2tEfad07YiLOSiFKJRlkigH7S7DZe8TaX2V21djh4yd7PrcB
pOR+gDKLmP0lgdu2J5MIWlE8aayWqLLBSNzTua+KQJjXFcMRMiUKQlNJh1Duuv+/
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:21:59 2025 by rpki-client