Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft
File:                     d622ae28-b14e-4021-900a-c9182c5b5a2e.mft (raw, json)
Hash identifier:          Vbip9JU4X55HoXd/2QA7UuhZr3U6rfpyPWTXFtAWWCI=
Subject key identifier:   B3:7D:23:06:91:17:EF:B3:D1:6E:EC:B6:F9:D3:06:40:31:CA:1A:A3
Authority key identifier: 8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57
Certificate issuer:       /CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
Certificate serial:       010D0C9F4328584958FFB1BD9425C43371446980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft
Manifest number:          010D0C9F43285848EEFC8F027D060E463ADCE2A8
Signing time:             Sat 29 Mar 2025 10:00:07 +0000
Manifest this update:     Sat 29 Mar 2025 10:00:07 +0000
Manifest next update:     Tue 01 Apr 2025 10:00:00 +0000
Files and hashes:         1: d622ae28-b14e-4021-900a-c9182c5b5a2e.crl (hash: LP15uWh/nlRj4oMz3EgeB66HLvxPTzl838sKaEg6QAY=)
                          2: d63ab3ed-1030-3355-be35-f7ac9ff15dc1.roa (hash: ayYoSobdyMBKsYy1Fuzel1MsovkcF3+TYNaTRLXQ6Os=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:58:ff:b1:bd:94:25:c4:33:71:44:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d622ae28-b14e-4021-900a-c9182c5b5a2e
        Validity
            Not Before: Mar 29 10:00:07 2025 GMT
            Not After : Apr  1 10:00:00 2025 GMT
        Subject: CN=bc817051-a1ee-442b-9191-19cf767a00d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5a:53:de:ce:9e:da:53:a2:c8:17:8f:5c:0e:
                    ff:f2:cf:67:41:f9:4d:bd:b7:a8:d4:93:ca:88:d2:
                    f3:9e:e0:9b:71:a0:09:6c:b8:1e:c2:58:80:6a:51:
                    62:f2:68:33:22:2a:c3:dd:d1:5d:23:1a:8a:3a:65:
                    89:87:d8:39:64:81:21:f5:f5:c8:14:97:07:6a:99:
                    8a:29:ec:e4:eb:77:5c:06:c9:58:8a:1f:16:4d:d6:
                    93:96:21:f6:ab:f7:46:c7:e0:63:69:b3:8a:fb:97:
                    86:fa:33:ea:26:fa:28:88:a8:32:d2:52:24:34:44:
                    02:65:da:f7:8f:99:cd:d6:61:1e:9e:bd:87:f3:9d:
                    f8:12:13:81:94:c5:ee:ef:9b:b6:56:c5:b9:ab:d0:
                    77:d9:f0:a8:20:3e:d7:ea:23:5c:f4:09:e8:6b:3e:
                    ae:58:b5:73:27:99:88:e2:80:fd:c7:3a:e8:8d:1f:
                    fa:6b:14:84:3c:22:27:71:0d:fa:5c:2c:dd:59:4e:
                    ca:d8:9a:05:82:1a:83:f0:50:0e:a4:b6:1a:30:c0:
                    84:f4:9e:29:85:42:4a:78:ba:aa:b4:a1:7d:25:3a:
                    90:3b:b7:dc:8d:bc:c9:e7:54:94:cf:52:b4:9e:f6:
                    41:11:2b:f7:16:d8:38:bb:99:cc:4e:f7:fb:fe:b9:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7D:23:06:91:17:EF:B3:D1:6E:EC:B6:F9:D3:06:40:31:CA:1A:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e/d622ae28-b14e-4021-900a-c9182c5b5a2e.crl

            X509v3 Authority Key Identifier:
                keyid:8E:99:4E:29:2F:54:AE:C6:12:78:DB:E7:70:0E:D5:07:2F:FA:94:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d622ae28-b14e-4021-900a-c9182c5b5a2e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:ef:2d:56:c8:85:21:d4:fd:07:28:fe:5d:90:a0:f3:f8:29:
         80:97:60:2f:0e:d9:89:6b:dd:c8:8b:2f:d7:50:7c:12:5d:85:
         d5:37:42:2a:e9:41:c4:84:1a:23:9c:35:61:da:72:53:e6:7d:
         09:8e:b5:3c:f4:7e:3e:57:c1:b2:19:b6:a3:b8:3b:d9:5e:f3:
         65:43:5c:ff:b6:31:41:32:7c:a9:e2:1a:b1:19:d1:21:9a:00:
         54:0a:c5:6c:31:34:fd:c2:69:2c:d7:fa:b7:17:d6:9a:81:47:
         34:a9:1a:93:ab:70:7a:f7:e1:0f:6c:98:12:90:6b:32:2e:a7:
         b6:25:28:0f:9c:be:b1:52:05:1b:0f:ce:ce:66:f8:fa:3d:05:
         14:16:45:13:c1:e6:3b:82:ec:e6:63:ef:8d:26:81:52:af:f9:
         6d:64:39:fd:2c:b7:ab:ed:4d:98:04:f2:d3:a3:c7:ac:57:11:
         69:2d:22:86:38:47:b9:98:a6:c2:43:33:10:be:7c:92:87:a8:
         be:35:76:48:81:a9:b4:f4:e2:ee:06:02:0a:0a:63:fc:fe:8a:
         cf:ec:78:61:d4:df:d4:0f:91:13:de:d5:25:c1:58:73:ba:bc:
         83:bc:ed:c8:59:c2:9a:20:f5:29:3b:f0:f5:fc:73:c3:a2:50:
         e0:ca:71:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:38:57 2025 by rpki-client