Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft
File:                     21873e5a-a16d-4890-8dfe-c281bf6e020e.mft (raw, json)
Hash identifier:          gUhT22OHtAxrNJ9pfzLs+X9CRk9BaHl+4M54D7L/6LM=
Subject key identifier:   DA:F1:1A:80:D6:71:8D:52:E8:DC:08:2B:C3:60:80:E5:D0:91:74:9E
Authority key identifier: C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6
Certificate issuer:       /CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
Certificate serial:       010D0C9F43285849567093E7736F5972DF0FC540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft
Manifest number:          010D0C9F4328584125F19CB051F83E2E5E6C632E
Signing time:             Fri 28 Mar 2025 12:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 12:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 12:00:00 +0000
Files and hashes:         1: 04b35b42-a07c-34ef-9f3a-c2f6e5bfb9de.roa (hash: 1WW5CG3qPQI9qPrEh+36mrb+t4CR2vH85IqJ5mcfOQA=)
                          2: 21873e5a-a16d-4890-8dfe-c281bf6e020e.crl (hash: yJe0rxOKWzeeIPbN7uMGw2ubc4ofGaeVo6H8sS8nER0=)
                          3: 4749d5a9-351a-310d-a4b1-7d0866c068cd.roa (hash: 8RUlhwno1b6ApWdEcF5k/zwpDLqJWZo6zF3D3XFZJGA=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:70:93:e7:73:6f:59:72:df:0f:c5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21873e5a-a16d-4890-8dfe-c281bf6e020e
        Validity
            Not Before: Mar 28 12:00:07 2025 GMT
            Not After : Mar 30 12:00:00 2025 GMT
        Subject: CN=dd7bb887-0e88-44d4-a507-46730c647bc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:73:21:53:ea:34:97:a5:fd:7d:90:8c:d6:f0:
                    5e:33:ca:00:f0:12:6b:86:8a:36:0f:52:d9:02:fb:
                    d7:9d:ea:e5:5d:1a:49:32:2b:47:f4:1f:25:9c:e3:
                    41:7b:4c:53:e3:a0:f8:f2:2e:c8:4f:d4:47:12:71:
                    4c:3d:7f:73:0a:a1:a2:34:1b:50:c3:e4:9b:78:af:
                    43:c3:58:6e:24:fe:5a:f8:3e:13:c4:ae:e7:41:49:
                    c8:c6:10:09:35:72:72:06:e1:d4:59:1a:05:52:09:
                    f7:3d:de:ef:33:66:34:0a:fc:1d:25:1a:a2:0b:c5:
                    69:3f:ca:3a:09:fb:ed:5e:02:59:ef:e0:56:9c:d9:
                    67:01:d2:6a:08:9e:f7:8f:9f:fa:a3:4a:30:ce:c1:
                    9e:32:4c:db:c8:c4:35:ef:9a:b6:fc:75:bf:b5:28:
                    56:ca:61:cc:e8:ca:5a:2f:50:93:d5:f7:fe:b8:d5:
                    dd:d3:da:67:bd:f6:6f:4c:e6:21:4c:63:17:f9:59:
                    74:b0:36:55:9b:d2:04:9f:6f:50:0c:a6:61:59:ae:
                    af:8d:f3:08:2b:9a:9c:60:f0:b6:f5:b3:47:80:93:
                    d0:7b:3b:3d:f6:97:4e:eb:e4:0e:c1:88:55:10:b3:
                    46:8d:4b:32:1f:ba:d1:9a:bf:56:ce:48:67:4e:86:
                    f6:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F1:1A:80:D6:71:8D:52:E8:DC:08:2B:C3:60:80:E5:D0:91:74:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e/21873e5a-a16d-4890-8dfe-c281bf6e020e.crl

            X509v3 Authority Key Identifier:
                keyid:C7:79:A7:C6:3F:DA:5B:57:55:3E:FC:42:87:91:EE:1B:37:F1:C2:A6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/21873e5a-a16d-4890-8dfe-c281bf6e020e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:bb:98:12:49:eb:e1:72:28:f9:97:dc:d1:e5:fa:4a:24:b9:
         e4:2b:ec:91:7b:57:37:6b:35:64:79:34:97:09:55:a9:01:fe:
         98:2c:aa:fd:7a:12:46:8c:c1:2a:e0:cc:85:23:db:d8:94:5c:
         0f:cb:4b:ba:48:cc:13:94:fa:64:a2:cb:1c:1c:f2:44:8c:8e:
         08:99:9d:f5:43:78:fd:b7:88:f5:b3:50:3d:d6:51:60:ea:57:
         64:32:82:95:03:2a:03:90:e4:a3:cf:90:ce:9c:99:cc:66:1e:
         80:59:3e:c4:13:75:2b:ba:59:08:49:d7:20:62:35:0b:45:59:
         70:87:68:7b:49:18:3e:82:b1:77:b7:98:a3:00:41:84:83:62:
         73:42:70:7e:58:4f:6b:ab:2e:29:0b:bc:dd:c8:d1:8d:62:95:
         de:bf:1c:9f:7b:9a:6c:0b:fe:84:37:51:15:26:e7:7f:c4:7d:
         15:c9:c1:bc:2f:54:10:75:b1:f5:8d:63:91:af:ab:d2:bf:0a:
         76:43:e0:77:34:c2:67:d5:9c:41:87:c7:80:a5:22:e3:41:9d:
         fb:63:e3:cd:17:ab:68:20:1d:ed:cb:84:f3:cd:b3:e7:72:58:
         3a:06:f8:5f:05:29:21:57:69:b2:eb:77:94:10:8a:d5:35:7b:
         ee:00:f1:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 23:38:49 2025 by rpki-client