Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft
File:                     4a06d1f9-0d04-482f-a665-8c270260e2c1.mft (raw, json)
Hash identifier:          9k4P8l0EXNclWYlF4tS67YJpvyjeF2eHi9lhzsxOHKI=
Subject key identifier:   52:66:CD:89:95:83:64:FE:6C:04:7F:AF:33:36:F9:24:42:16:DA:76
Authority key identifier: 7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB
Certificate issuer:       /CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
Certificate serial:       010D0C9F43285847F9B4A101828D28D95D072BF0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft
Manifest number:          010D0C9F432858412092D640F0B6D0F9EB17C68B
Signing time:             Sat 23 Nov 2024 14:00:07 +0000
Manifest this update:     Sat 23 Nov 2024 14:00:07 +0000
Manifest next update:     Tue 26 Nov 2024 14:00:00 +0000
Files and hashes:         1: 4a06d1f9-0d04-482f-a665-8c270260e2c1.crl (hash: edX6gCqtrF5PN8fbPfo1EpBCedxhhfFiTqZV/4/mhGY=)
                          2: aa5dbaf7-9f34-3a5a-abfb-344711c66ef5.roa (hash: pEqDTwqpHp6sHYzYdCq44qNSHlabcmDgRBSV1PcsqfM=)
                          3: c6eba4d0-e78b-3380-8a7e-c6f25aee6ccf.roa (hash: FzKdcOgnEGwlrFpCSvEOEibRX8GulKNtZK2U4QNKp5s=)

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Nov 2024 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f9:b4:a1:01:82:8d:28:d9:5d:07:2b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a06d1f9-0d04-482f-a665-8c270260e2c1
        Validity
            Not Before: Nov 23 14:00:07 2024 GMT
            Not After : Nov 26 14:00:00 2024 GMT
        Subject: CN=1bd6aa5a-0f46-42ca-bc85-94ebc8859758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:29:96:67:71:b3:91:ef:0b:27:8a:f0:b7:b7:
                    9b:a7:5a:86:00:f0:1f:62:ff:40:dd:ac:5c:5f:e1:
                    68:7d:dc:f2:e3:52:3e:fb:3b:73:f5:80:c6:e4:97:
                    35:a8:c1:6d:82:4a:56:c6:24:fe:3f:d2:dd:f8:d7:
                    5e:7f:08:b0:9f:92:22:37:45:25:f9:7c:e1:8d:30:
                    ab:7b:74:81:ab:cf:e3:8b:95:b5:67:75:20:e5:47:
                    d2:a8:6a:d0:60:ce:c6:33:82:e1:4a:af:62:b8:f9:
                    52:ed:8e:f6:69:67:c9:d9:7a:b7:c5:a8:1e:51:3c:
                    ac:eb:d3:0b:e1:de:86:ff:b6:a2:2d:61:94:73:e7:
                    a3:d3:63:5c:ec:8a:3d:b8:af:4a:00:05:b2:d0:99:
                    c9:73:c6:14:5e:2d:0f:9b:38:89:38:05:c6:67:e7:
                    5c:8e:52:0b:79:ef:53:e2:0a:68:b6:8c:c5:88:ad:
                    27:84:c6:61:57:82:3c:91:d8:47:55:e0:98:85:20:
                    10:6d:62:41:ae:03:98:94:97:f7:23:bb:b8:f2:be:
                    c2:7d:a5:17:1d:ec:72:82:75:d4:9c:ff:a1:c9:9e:
                    82:43:ea:07:2e:05:92:57:2e:58:d8:cd:dd:dc:48:
                    ca:4b:00:a8:a2:ad:ab:1f:c1:fb:1c:ac:d1:7f:dd:
                    ea:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:66:CD:89:95:83:64:FE:6C:04:7F:AF:33:36:F9:24:42:16:DA:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1/4a06d1f9-0d04-482f-a665-8c270260e2c1.crl

            X509v3 Authority Key Identifier:
                keyid:7B:44:2C:34:6A:A0:F4:F0:11:B5:27:93:C3:37:45:6B:6A:A6:43:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/4a06d1f9-0d04-482f-a665-8c270260e2c1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:28:ff:5d:11:5e:a1:52:24:f7:32:0b:92:1f:9f:5d:2c:76:
         df:50:9c:59:7b:96:cb:27:98:75:1f:04:cc:bb:58:f6:f7:ac:
         a9:39:02:4c:ac:06:da:8e:bd:59:49:f1:f2:ca:3d:0f:28:ff:
         23:de:bf:21:36:cc:1c:66:5d:42:87:7f:8a:c5:c4:a3:ed:37:
         f7:5a:37:02:c6:39:ae:a5:ec:ca:15:ba:6e:93:e9:6f:e0:f0:
         a8:0d:0c:2d:5c:68:61:59:89:0e:2e:23:b3:b7:81:09:96:50:
         dc:19:9c:c5:94:a7:8f:9a:03:68:24:ef:6b:70:3f:a8:68:dd:
         2c:0b:71:29:13:31:06:46:f8:d1:f2:fc:e4:28:27:7f:89:e1:
         4f:52:17:6b:09:83:01:ee:a4:f8:aa:04:97:64:fd:dd:e4:49:
         03:f3:1c:09:99:f9:fc:47:6f:ac:fc:b6:11:cc:3a:29:cb:c1:
         b2:a9:c9:8e:64:ed:10:52:22:70:5c:29:3d:81:7f:2d:b8:9c:
         aa:00:96:cc:88:c9:8b:99:33:54:14:37:df:02:53:51:c0:b3:
         ba:c1:dd:46:86:3c:a2:e4:31:0d:86:0c:d8:59:55:bf:6c:28:
         cf:d1:3b:58:74:ce:40:2e:9b:2f:a3:f8:ae:74:41:b3:2e:a2:
         23:14:87:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----