Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft
File:                     4d906a8c-85ee-4279-9f48-d84ea4865122.mft (raw, json)
Hash identifier:          woZ68wWuMEe7bUYAl1FeCJGKpzqr09AwSackRwCtoTI=
Subject key identifier:   3B:43:BD:95:84:29:AA:F9:70:3C:B8:2D:12:CA:C0:C4:14:7E:09:5D
Authority key identifier: C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D
Certificate issuer:       /CN=4d906a8c-85ee-4279-9f48-d84ea4865122
Certificate serial:       010D0C9F43285849582F3FAA0BA554C7A7BEDC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft
Manifest number:          010D0C9F432858488F2DFE4F2DA3E9C7D9FAB149
Signing time:             Sat 29 Mar 2025 03:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 03:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 03:00:00 +0000
Files and hashes:         1: 4d906a8c-85ee-4279-9f48-d84ea4865122.crl (hash: zEVs/sPVSNl840EoXtwr2OQ5VL6x/jYMK9I9JPjd6w8=)
                          2: 929897a7-ecc0-34d6-a55c-aeb26602f817.roa (hash: pq0qpevlkaIE1aZ711eN9fJLSr8VX8/sHT3gIRmJWD8=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:2f:3f:aa:0b:a5:54:c7:a7:be:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4d906a8c-85ee-4279-9f48-d84ea4865122
        Validity
            Not Before: Mar 29 03:00:07 2025 GMT
            Not After : Apr  1 03:00:00 2025 GMT
        Subject: CN=62b4058c-5eea-4e86-b064-eec20174c490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:dc:b0:cc:7f:26:b5:42:b3:2e:33:67:6c:a2:
                    95:dd:a3:cc:4f:e0:17:a2:54:a3:12:5c:e0:6a:57:
                    47:bc:6b:b0:f2:73:42:00:7d:85:b7:aa:45:35:6d:
                    a9:7a:07:31:15:82:14:63:28:22:67:12:cc:28:9e:
                    d5:85:39:3d:95:b2:df:e0:e9:9a:5f:1a:cc:65:fa:
                    0c:b8:63:0a:6f:a6:47:db:96:69:e4:30:6e:73:fb:
                    c6:a8:cb:3b:c2:c4:b7:05:b5:6f:0f:1d:87:8e:37:
                    29:53:ad:c8:a2:f5:98:33:dc:df:30:ce:7a:85:71:
                    bc:5b:d5:da:60:ea:36:ac:b8:42:92:9a:6c:f4:9e:
                    c5:7d:d1:b9:e0:04:71:84:20:af:70:aa:59:9c:d9:
                    f6:1c:f7:c9:7f:0e:21:52:af:c6:57:1d:aa:88:61:
                    d6:1b:44:50:8a:72:00:87:2e:60:43:4d:77:04:21:
                    36:0d:19:54:53:cd:83:4c:a9:22:a4:69:64:f4:71:
                    2b:55:0b:67:69:26:89:b1:0a:c3:9c:d0:20:21:d6:
                    ee:c8:8b:95:81:25:dc:6f:f0:1c:f4:99:5f:c4:e4:
                    5b:44:33:0b:b5:4c:5e:d3:29:dd:18:c0:02:5d:a7:
                    52:a4:40:46:c8:df:9e:43:df:f4:69:bf:e7:6a:da:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:43:BD:95:84:29:AA:F9:70:3C:B8:2D:12:CA:C0:C4:14:7E:09:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122/4d906a8c-85ee-4279-9f48-d84ea4865122.crl

            X509v3 Authority Key Identifier:
                keyid:C5:52:3D:9F:A1:CC:FC:24:0A:04:F9:19:66:E1:44:3B:9E:0F:B6:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/4d906a8c-85ee-4279-9f48-d84ea4865122.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:5c:77:1c:d3:86:72:e6:c1:1d:20:0f:a3:a5:28:25:8c:d1:
         d6:e9:c9:3c:ab:87:84:b0:83:88:18:b2:66:19:7c:c3:79:3e:
         8e:cb:31:ee:fe:22:49:25:d2:c4:8d:2b:5e:ad:41:59:00:32:
         eb:3f:e7:fb:39:75:48:35:94:51:b1:ec:0a:8e:e1:6f:41:d2:
         00:25:f5:04:02:2a:d7:ef:c8:01:79:5d:48:de:20:0d:9a:1c:
         76:e7:71:e9:44:6b:be:45:73:e3:f6:b0:78:25:f7:38:7b:d0:
         a5:dd:0e:d4:b0:0f:70:2a:14:cf:1f:d3:ed:3f:94:45:27:25:
         f8:0e:91:b1:52:34:c1:ec:0c:da:49:ae:68:e1:13:db:2f:8e:
         66:58:77:29:17:02:08:8c:f6:d4:c1:20:bc:be:b8:f6:b5:73:
         a4:38:fc:2f:17:ee:00:56:b8:ca:51:aa:ee:5f:79:05:52:06:
         37:03:78:e0:56:f1:33:27:97:28:bd:eb:51:75:7e:93:96:e7:
         f0:0d:7c:6f:00:81:cd:e1:25:e4:97:61:5c:4d:49:89:29:c4:
         ac:5a:ed:26:8a:5a:32:8c:80:0b:e4:ce:a6:9d:c2:d7:3c:82:
         4d:78:6a:b9:ef:84:00:7e:4f:17:de:86:67:f7:a6:76:9d:6a:
         24:dd:32:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:33:15 2025 by rpki-client