Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft
File:                     5d74f046-ba55-4b61-bccd-7e10e81264d1.mft (raw, json)
Hash identifier:          I3p0sXgLMUOPr00/o4O2UBpKbg7a8b85gih0K2PH6U8=
Subject key identifier:   05:DB:AA:3E:7F:26:10:8E:DC:90:98:EE:7B:F6:C8:B7:6D:49:C8:35
Authority key identifier: F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60
Certificate issuer:       /CN=5d74f046-ba55-4b61-bccd-7e10e81264d1
Certificate serial:       010D0C9F4328584956AC2190BE95BF39222D9600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft
Manifest number:          010D0C9F43285840FF12A11CD56F233FF4DD254F
Signing time:             Fri 28 Mar 2025 14:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 14:00:07 +0000
Manifest next update:     Sun 30 Mar 2025 14:00:00 +0000
Files and hashes:         1: 5d74f046-ba55-4b61-bccd-7e10e81264d1.crl (hash: /RQioOzDQQRHV6qy9y7k9Cbt9wNGrE/4v/ey4yrdp/A=)
                          2: a41580dd-b7f0-3cec-be2d-a4e9623d6497.roa (hash: Z6dF3bswYPAFiYW9rtk/4Yc0KwrWxOxkUJUwxd3RC+E=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:ac:21:90:be:95:bf:39:22:2d:96:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d74f046-ba55-4b61-bccd-7e10e81264d1
        Validity
            Not Before: Mar 28 14:00:07 2025 GMT
            Not After : Mar 30 14:00:00 2025 GMT
        Subject: CN=775855ba-05c8-466f-8679-310f6d544508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:e8:75:0d:b3:01:83:bf:52:df:ce:8f:8e:
                    be:6c:90:fc:58:ce:55:3a:19:b0:57:84:df:ff:04:
                    55:9b:9b:7b:3d:a1:8f:4e:ab:e8:84:99:fd:b5:c2:
                    53:b8:80:e5:e1:04:07:b0:bb:fd:ed:b6:a7:28:84:
                    32:24:73:23:b8:4d:dd:5a:0f:c7:bf:94:c6:e5:ea:
                    1b:22:c3:d4:55:7e:15:9a:20:d8:6c:c1:ec:3f:2d:
                    e2:f0:b0:7f:c4:7f:01:a4:e6:a7:dc:da:3c:fc:54:
                    61:72:4a:85:4d:9d:47:8f:17:c7:00:df:b9:fb:c9:
                    fa:8b:48:1e:fa:28:9d:28:ca:9a:f6:64:ec:6f:0f:
                    22:0d:5d:84:78:c9:80:fc:09:3b:e9:4f:87:c7:cf:
                    4e:e4:08:a7:fd:88:49:6b:1c:06:1f:f8:a8:88:12:
                    c8:8f:7e:ef:fc:a7:79:73:45:b6:1c:d1:4d:7e:c7:
                    93:fc:1f:ee:4b:99:d5:65:e8:f3:10:80:dc:56:b4:
                    e7:96:f9:a7:dd:72:b8:2a:ef:a7:41:84:49:35:ce:
                    4c:16:79:7a:b6:21:15:1d:4b:aa:5c:f4:52:ac:18:
                    4b:35:42:43:cf:c6:b3:15:5f:38:cf:2c:86:f6:f5:
                    09:66:e4:6e:35:2f:1a:6d:bf:db:b3:cd:d8:65:55:
                    26:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:DB:AA:3E:7F:26:10:8E:DC:90:98:EE:7B:F6:C8:B7:6D:49:C8:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1/5d74f046-ba55-4b61-bccd-7e10e81264d1.crl

            X509v3 Authority Key Identifier:
                keyid:F5:AB:72:16:18:00:24:6C:81:77:5F:5F:68:E5:21:2A:70:97:9F:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/5d74f046-ba55-4b61-bccd-7e10e81264d1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:7a:22:47:4c:60:6d:10:a8:63:3d:57:5e:d2:18:e4:38:ea:
         9f:d7:69:76:f1:56:41:a7:4c:ed:44:a7:08:45:75:d3:18:05:
         da:d5:a4:3b:f2:15:7b:87:48:71:31:c3:a0:50:7f:31:1d:d6:
         e2:9b:cc:35:db:29:e6:36:7e:31:f7:4b:32:f1:82:a2:ed:ed:
         03:1a:07:90:f6:78:1a:2c:54:7c:d1:11:57:29:66:36:de:46:
         ac:c7:b1:f7:44:09:13:91:8f:cc:aa:c5:58:0a:52:96:fd:0a:
         fe:c5:21:5d:00:8f:40:f3:fd:d9:72:7a:85:c2:0b:2d:fe:3b:
         5f:ae:18:97:2a:76:be:68:b7:58:21:69:b8:49:36:cf:43:f6:
         04:48:49:6b:af:76:70:5b:03:c3:56:b5:af:ae:fc:ae:e6:14:
         c5:03:79:92:fb:1a:05:94:c0:e2:95:5a:7e:4a:d9:e3:4d:35:
         38:1e:1d:6c:2b:37:e6:61:8d:e2:b5:37:2c:7c:b1:73:77:0e:
         e4:34:4d:88:6d:16:22:ae:57:da:2b:e1:5f:04:92:19:86:65:
         4b:09:ee:df:1c:fe:f1:36:d4:7b:b9:1f:47:a7:99:bd:75:25:
         54:64:63:57:b1:8d:c4:e9:b7:e6:af:ac:de:32:94:7a:7e:c6:
         a7:46:ca:5b
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWElWrCGQvpW/OSItlgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ3NGYwNDYtYmE1NS00YjYxLWJjY2QtN2UxMGU4MTI2
NGQxMB4XDTI1MDMyODE0MDAwN1oXDTI1MDMzMDE0MDAwMFowLzEtMCsGA1UEAxMk
Nzc1ODU1YmEtMDVjOC00NjZmLTg2NzktMzEwZjZkNTQ0NTA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoojodQ2zAYO/Ut/Oj46+bJD8WM5VOhmwV4Tf
/wRVm5t7PaGPTqvohJn9tcJTuIDl4QQHsLv97banKIQyJHMjuE3dWg/Hv5TG5eob
IsPUVX4VmiDYbMHsPy3i8LB/xH8BpOan3No8/FRhckqFTZ1HjxfHAN+5+8n6i0ge
+iidKMqa9mTsbw8iDV2EeMmA/Ak76U+Hx89O5Ain/YhJaxwGH/ioiBLIj37v/Kd5
c0W2HNFNfseT/B/uS5nVZejzEIDcVrTnlvmn3XK4Ku+nQYRJNc5MFnl6tiEVHUuq
XPRSrBhLNUJDz8azFV84zyyG9vUJZuRuNS8abb/bs83YZVUmsQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFAXbqj5/JhCO3JCY7nv2yLdtScg1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0
ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEwZTgxMjY0ZDEvNWQ3NGYwNDYtYmE1NS00
YjYxLWJjY2QtN2UxMGU4MTI2NGQxLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNWQ3NGYwNDYtYmE1NS00YjYxLWJj
Y2QtN2UxMGU4MTI2NGQxLzVkNzRmMDQ2LWJhNTUtNGI2MS1iY2NkLTdlMTBlODEy
NjRkMS5jcmwwHwYDVR0jBBgwFoAU9atyFhgAJGyBd19faOUhKnCXn2AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS81ZDc0ZjA0Ni1iYTU1LTRiNjEtYmNjZC03ZTEw
ZTgxMjY0ZDEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBueiJHTGBtEKhjPVde0hjk
OOqf12l28VZBp0ztRKcIRXXTGAXa1aQ78hV7h0hxMcOgUH8xHdbim8w12ynmNn4x
90sy8YKi7e0DGgeQ9ngaLFR80RFXKWY23kasx7H3RAkTkY/MqsVYClKW/Qr+xSFd
AI9A8/3ZcnqFwgst/jtfrhiXKna+aLdYIWm4STbPQ/YESElrr3ZwWwPDVrWvrvyu
5hTFA3mS+xoFlMDilVp+StnjTTU4Hh1sKzfmYY3itTcsfLFzdw7kNE2IbRYirlfa
K+FfBJIZhmVLCe7fHP7xNtR7uR9Hp5m9dSVUZGNXsY3E6bfmr6zeMpR6fsanRspb
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:28:22 2025 by rpki-client