Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft
File:                     8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft (raw, json)
Hash identifier:          ayHctwMVJqSDJ0/z/U7aWAMtw2Co3ceYfdMzOyjcv78=
Subject key identifier:   CC:FF:CC:F0:E7:0F:A0:7F:13:4D:92:70:AD:B8:72:B4:9E:0C:08:15
Authority key identifier: AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9
Certificate issuer:       /CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
Certificate serial:       010D0C9F43285849579A5DCEB81A49CA100C3F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft
Manifest number:          010D0C9F432858483AD9921EEA1CA83B01E15380
Signing time:             Fri 28 Mar 2025 22:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 22:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 22:00:00 +0000
Files and hashes:         1: 547cc64e-9e9f-3ed2-ba03-cc3b4df93856.roa (hash: Oj8Xb/2IAhPLO0OuwbfPG40DNw+GxECjVhgue+hP7BE=)
                          2: 8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl (hash: RlDdj/F52VglbtCuID/w55UNqTM+rbHLXAtdJ3Ux0/k=)
                          3: 9dc9dd6c-046c-3174-9f6a-b9f6891cad7b.roa (hash: 1ZM+cGKWczAaRllnTa2P3tJMRuA0fUzPWuM1S2r0smQ=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:9a:5d:ce:b8:1a:49:ca:10:0c:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f5b9b3a-f43d-4122-88ea-91f79a3b4136
        Validity
            Not Before: Mar 28 22:00:07 2025 GMT
            Not After : Mar 31 22:00:00 2025 GMT
        Subject: CN=5cf5cbde-d451-4807-9f44-78a26eb7beed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:65:27:0c:5e:63:30:a2:58:61:60:14:3a:96:
                    14:fd:94:9c:95:8d:59:70:43:85:7f:c4:81:91:73:
                    8b:6b:b7:39:c1:98:e5:b7:b4:0d:72:e6:ce:82:dc:
                    41:cd:0f:7b:7c:12:73:4c:4f:94:67:c4:1a:97:c0:
                    f7:96:c1:6a:d5:c6:ec:68:8a:78:69:42:62:0d:6d:
                    90:f1:0e:cb:bb:9d:88:ea:57:a2:b2:c0:4c:0f:73:
                    0a:ff:6b:dd:ee:5e:10:b4:b4:3d:d7:76:9f:be:60:
                    89:2e:7d:c3:e9:72:b8:44:ea:f1:85:8c:7c:28:6e:
                    34:e2:7c:5f:b0:a7:9c:ef:f9:f0:b9:bd:11:57:b1:
                    63:9a:a5:70:c4:d2:38:d5:0b:ab:03:4b:13:f2:00:
                    88:48:cf:24:f9:f0:da:56:20:02:82:41:e2:de:38:
                    f9:39:55:70:4c:e8:74:1d:24:45:4b:5d:3b:89:ae:
                    8a:89:a0:38:db:4d:92:d9:73:50:aa:6f:cf:b3:c5:
                    73:84:2e:c4:57:92:47:d0:6b:1e:1a:3b:bd:97:ad:
                    32:c7:45:f9:0d:f3:a2:d8:eb:b8:45:9f:1a:d3:7f:
                    7d:45:5a:b6:a6:bb:19:df:54:80:da:86:30:f8:d8:
                    b2:f2:5c:90:a5:e1:15:84:c7:1e:8f:d8:64:da:a7:
                    30:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:FF:CC:F0:E7:0F:A0:7F:13:4D:92:70:AD:B8:72:B4:9E:0C:08:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.crl

            X509v3 Authority Key Identifier:
                keyid:AD:6A:0F:B1:AE:85:F7:6A:D8:21:0C:EB:07:C0:03:79:2B:B6:79:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f5b9b3a-f43d-4122-88ea-91f79a3b4136.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:10:97:49:55:9d:a6:07:77:67:bc:ae:36:52:95:11:9f:
         d3:0e:4d:86:2b:6e:56:4a:b4:ca:2c:a0:df:0f:f4:94:41:4e:
         db:e6:42:0b:f9:10:cd:02:75:a5:10:14:33:a7:85:7b:d7:01:
         b0:67:55:a3:bc:7e:cf:64:16:23:bc:42:5d:c7:9b:4a:f4:f2:
         e7:ee:3a:f3:d6:09:90:bf:b0:73:42:3a:3b:0f:0d:ac:4d:1d:
         b8:76:83:af:aa:c6:99:48:7f:2d:d7:9b:a5:c5:93:aa:83:07:
         05:6c:db:24:15:26:48:cb:2d:89:41:16:90:1d:4f:bc:e5:d3:
         91:da:f7:32:aa:17:af:98:db:f0:bf:7b:11:ea:1f:6f:01:bb:
         ab:a6:e8:60:c7:18:ca:b7:b6:b5:4b:4d:6c:04:3e:52:99:e7:
         c2:40:46:65:30:66:ff:eb:f7:5c:aa:fb:2b:bf:7a:92:47:8e:
         0e:a8:d8:5e:bb:f3:55:74:98:8b:d3:1e:2f:60:93:20:dc:31:
         60:4d:03:b0:05:2f:61:62:a2:a5:9a:a7:6c:62:80:69:f0:f7:
         40:1c:a4:3d:97:f3:10:e1:73:7c:9e:a4:ab:31:24:cd:a9:d9:
         03:cf:a7:e9:35:8a:07:43:19:d7:db:d4:35:a0:b0:bb:57:ae:
         41:15:82:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:25 2025 by rpki-client