Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft
File:                     b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft (raw, json)
Hash identifier:          HCPz/1wzf5pOmwjecnbRNl2c24jxXID8ETKnwli0VWE=
Subject key identifier:   1E:60:16:5D:F8:4A:21:1A:28:07:40:25:42:25:4E:A9:44:95:F5:3F
Authority key identifier: 50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16
Certificate issuer:       /CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
Certificate serial:       010D0C9F4328584956C9EF10788F596097138280
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft
Manifest number:          010D0C9F43285843BBED17C5D16B378B5E3BD991
Signing time:             Fri 28 Mar 2025 15:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 15:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 15:00:00 +0000
Files and hashes:         1: 9ef82791-0187-3292-ac80-d098483e41c9.roa (hash: ZmwSh4SsE83eHTRtAqGJP5XD7rUjpOwsT4rRvEv/DzM=)
                          2: b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl (hash: //n8gj4hQsmu4Jo/+U1JNlMy9GZKOnEWjq2u5heR9LY=)
                          3: c3fe83f8-d27f-3b24-975e-d5ab3000c892.roa (hash: nO6Vwfxmjzvs8DBXXDRATCcRnY6fT/QCCPueR5B7i8I=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:c9:ef:10:78:8f:59:60:97:13:82:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b4e8e990-50f4-4284-bfc0-1878a5fbc0f0
        Validity
            Not Before: Mar 28 15:00:07 2025 GMT
            Not After : Mar 31 15:00:00 2025 GMT
        Subject: CN=b684e112-b943-42ed-8f38-2ee91b093973
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:03:0a:58:31:20:da:b1:1e:4d:8d:fb:7a:90:
                    f6:44:81:f4:96:7a:b4:1f:2c:59:de:97:9b:67:81:
                    af:20:e6:72:3d:a3:49:fa:2d:86:f5:47:b8:0c:27:
                    61:1e:56:83:6a:a6:f0:77:e0:8b:01:b5:d0:2a:7c:
                    89:d8:7b:df:f1:fc:2d:89:0a:e8:32:d7:20:38:a1:
                    73:a3:51:b3:d7:5d:be:19:ac:af:03:ff:92:95:39:
                    de:47:39:5a:a5:74:36:10:32:09:50:b5:e3:92:af:
                    59:dc:b4:47:b7:cf:e5:ed:18:99:dd:fc:c6:9e:8f:
                    c3:df:1e:a9:48:df:40:23:ef:7a:23:a8:e4:7e:b3:
                    7e:b9:fe:c9:2f:fe:f5:ae:dc:eb:99:79:6b:45:1a:
                    06:dd:69:13:e2:be:8d:49:72:27:4b:63:5f:5c:94:
                    5d:ed:df:a7:97:0a:76:e1:98:4a:61:67:c7:8c:cb:
                    36:9b:fe:2e:74:8c:0f:19:95:e7:45:af:74:91:47:
                    67:73:ff:09:53:08:0e:57:92:96:96:51:a3:41:8a:
                    92:f7:8e:1c:ca:1c:9e:51:ae:84:d9:ab:90:be:b1:
                    c6:1f:fa:72:13:b5:61:f3:97:1e:87:42:a1:8b:4d:
                    4b:57:84:a6:48:f0:7e:26:1b:c3:08:75:c5:e4:18:
                    23:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:60:16:5D:F8:4A:21:1A:28:07:40:25:42:25:4E:A9:44:95:F5:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.crl

            X509v3 Authority Key Identifier:
                keyid:50:54:33:D5:86:6D:3C:3B:51:47:9A:52:14:A6:2C:A3:03:14:2E:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b4e8e990-50f4-4284-bfc0-1878a5fbc0f0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:bb:99:b2:4e:3e:d5:fc:7c:6a:eb:4a:20:cf:77:fd:e3:fa:
         fc:36:84:60:7a:6e:8c:bf:ec:78:e7:01:b3:4d:10:93:3f:36:
         4c:69:79:7a:ca:33:d6:1a:71:af:35:2c:cd:20:90:a5:cc:cc:
         94:ba:15:d2:3e:f9:d9:d3:20:52:30:90:8c:84:29:a5:71:db:
         2c:bf:c3:45:ef:09:ee:28:26:6b:d9:78:e3:1c:9c:55:fd:8c:
         d9:b0:ff:88:3d:39:ee:50:bf:cb:3c:28:60:48:a8:02:dc:ab:
         e9:70:99:63:14:2f:71:2e:20:91:27:04:7b:be:5b:b8:f3:9c:
         ba:4f:29:02:ef:75:5b:10:de:c7:68:c0:fb:60:1d:1a:28:a3:
         51:b0:36:50:cd:18:be:0d:4e:96:6d:29:d0:a7:5e:c3:88:1d:
         d7:10:86:ce:b7:27:60:1e:c5:c6:b1:f3:65:a3:ec:85:f7:8f:
         62:aa:4b:93:e8:8e:2b:25:70:6e:07:24:0a:3e:cb:65:1c:f3:
         f2:c8:95:1d:e9:0c:88:ca:4a:24:c3:70:1a:a0:b3:0e:7c:1b:
         dc:2b:b7:a2:58:c5:dd:76:2a:75:8b:07:f5:9a:e5:d6:f7:de:
         94:cb:46:d4:24:51:0e:2c:8e:95:69:a7:59:be:1d:df:5e:c5:
         ee:5a:fa:3f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElWye8QeI9ZYJcTgoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjRlOGU5OTAtNTBmNC00Mjg0LWJmYzAtMTg3OGE1ZmJj
MGYwMB4XDTI1MDMyODE1MDAwN1oXDTI1MDMzMTE1MDAwMFowLzEtMCsGA1UEAxMk
YjY4NGUxMTItYjk0My00MmVkLThmMzgtMmVlOTFiMDkzOTczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQMKWDEg2rEeTY37epD2RIH0lnq0HyxZ3peb
Z4GvIOZyPaNJ+i2G9Ue4DCdhHlaDaqbwd+CLAbXQKnyJ2Hvf8fwtiQroMtcgOKFz
o1Gz112+GayvA/+SlTneRzlapXQ2EDIJULXjkq9Z3LRHt8/l7RiZ3fzGno/D3x6p
SN9AI+96I6jkfrN+uf7JL/71rtzrmXlrRRoG3WkT4r6NSXInS2NfXJRd7d+nlwp2
4ZhKYWfHjMs2m/4udIwPGZXnRa90kUdnc/8JUwgOV5KWllGjQYqS944cyhyeUa6E
2auQvrHGH/pyE7Vh85ceh0Khi01LV4SmSPB+JhvDCHXF5BgjgwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFB5gFl34SiEaKAdAJUIlTqlElfU/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4
ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4YTVmYmMwZjAvYjRlOGU5OTAtNTBmNC00
Mjg0LWJmYzAtMTg3OGE1ZmJjMGYwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjRlOGU5OTAtNTBmNC00Mjg0LWJm
YzAtMTg3OGE1ZmJjMGYwL2I0ZThlOTkwLTUwZjQtNDI4NC1iZmMwLTE4NzhhNWZi
YzBmMC5jcmwwHwYDVR0jBBgwFoAUUFQz1YZtPDtRR5pSFKYsowMULhYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNGU4ZTk5MC01MGY0LTQyODQtYmZjMC0xODc4
YTVmYmMwZjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBBu5myTj7V/Hxq60ogz3f9
4/r8NoRgem6Mv+x45wGzTRCTPzZMaXl6yjPWGnGvNSzNIJClzMyUuhXSPvnZ0yBS
MJCMhCmlcdssv8NF7wnuKCZr2XjjHJxV/YzZsP+IPTnuUL/LPChgSKgC3KvpcJlj
FC9xLiCRJwR7vlu485y6TykC73VbEN7HaMD7YB0aKKNRsDZQzRi+DU6WbSnQp17D
iB3XEIbOtydgHsXGsfNlo+yF949iqkuT6I4rJXBuByQKPstlHPPyyJUd6QyIykok
w3AaoLMOfBvcK7eiWMXddip1iwf1muXW996Uy0bUJFEOLI6VaadZvh3fXsXuWvo/
-----END CERTIFICATE-----
Generated at Thu Apr 3 22:18:39 2025 by rpki-client