Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
File:                     3e886672-55f3-450f-ab6e-342c76f256db.mft (raw, json)
Hash identifier:          bGqYeLr2Ih8kPk0vCkpzoshCZgN/Nrhb+CGvkS/QvtE=
Subject key identifier:   0C:58:1C:49:FE:2A:90:FB:EA:53:69:B1:5C:E0:50:D4:22:E7:78:9D
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Certificate issuer:       /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial:       010D0C9F43285849567094FC78A498DEDD2FAC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
Manifest number:          010D0C9F4328584073A85188CD3FD1ED596D1232
Signing time:             Fri 28 Mar 2025 12:00:07 +0000
Manifest this update:     Fri 28 Mar 2025 12:00:07 +0000
Manifest next update:     Mon 31 Mar 2025 12:00:00 +0000
Files and hashes:         1: 1e02ac8d-32c8-3de0-b0d8-c586025ab8b1.roa (hash: MnunMun42PQJ8WqatRTCnMBdCW1vpUN54F1tOBfXE2s=)
                          2: 2385dbd7-2d77-33fc-8bdd-fb57b1ecda6f.roa (hash: xkYpJMwKnx6a0+/62ZXx5hzsCAY8z4t5dCjGi7ZLVV4=)
                          3: 3e886672-55f3-450f-ab6e-342c76f256db.crl (hash: JBk20kaL0dOkndeyI1JFZjCwvHcVLTRKASenvD0fvT4=)
                          4: 5fefe850-00d7-3861-8700-f8eb3f16a12b.roa (hash: 7wN8tt9wp80aQMyIg1zY5NqRGEbW8AQfaPUQxeiEWZg=)
                          5: 938a1a8b-5d4c-3f95-8273-2135590b1d77.roa (hash: AQsIRCA0snPgmRvM+R/R04TmWTJVEEPc7haVe6TzEy8=)
                          6: a4736113-6f92-3d60-b497-17a7f165663d.roa (hash: aODU5TTPBzYkrQBYGYzr6I6HohFs4ESv/exTwmPO9Vc=)
                          7: ba58b7ef-ee2a-31b1-951f-6e7b79a52f32.roa (hash: x/sgQuhKpeoW0h8FO+szXj9qMxv8yOuUImnmUSMxYBk=)
                          8: f5ac55ac-f810-3544-90b5-8f6795c65f87.roa (hash: 1TijZT7PUFTeojSjY3vhNB3TeXeOXcmeqpZPQblbO/w=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:56:70:94:fc:78:a4:98:de:dd:2f:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
        Validity
            Not Before: Mar 28 12:00:07 2025 GMT
            Not After : Mar 31 12:00:00 2025 GMT
        Subject: CN=56fbceee-29a8-46d9-8239-5bd28b272824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ad:5b:ff:af:94:78:3a:0a:cd:76:03:c7:0d:
                    78:2f:94:e7:a2:dd:4a:00:7e:a0:1f:61:48:c7:3c:
                    13:22:64:f6:a3:c4:04:18:3b:af:73:c0:ce:5a:b6:
                    26:05:b2:bf:58:75:a0:88:40:82:27:0a:d4:7b:3d:
                    a5:d5:86:53:7d:b2:4d:c5:0d:13:7a:85:ae:c9:e9:
                    8b:8d:a4:26:15:29:0b:0b:63:bc:56:17:3e:d4:49:
                    ed:96:e1:fa:9b:1c:05:40:17:34:ec:f2:78:3b:2b:
                    de:76:90:9f:08:0c:15:e8:94:38:6b:1f:fa:93:39:
                    52:aa:d9:bc:28:1a:2d:f1:5b:f5:17:17:20:70:62:
                    bf:ef:d4:e4:59:5b:f2:99:e4:d5:f3:02:db:9c:64:
                    da:b4:23:ea:58:1c:9b:7d:79:ee:36:a1:f8:d1:b0:
                    65:8c:de:74:92:14:dc:ac:e5:a2:d3:b3:d8:16:4d:
                    0d:68:7d:c9:2c:4a:a8:84:f3:6b:52:a7:41:82:d5:
                    72:b0:29:a4:2d:0f:b8:c0:a7:74:77:45:91:43:3c:
                    04:cb:e6:dc:70:8d:f6:bf:e6:6a:df:e1:da:f7:89:
                    9f:35:bc:e5:f3:2b:a7:0d:11:25:44:11:de:b0:38:
                    04:46:0f:ac:f8:02:5c:9e:70:5f:72:b5:3a:a1:60:
                    ae:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:58:1C:49:FE:2A:90:FB:EA:53:69:B1:5C:E0:50:D4:22:E7:78:9D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl

            X509v3 Authority Key Identifier:
                keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:5f:2e:fd:65:f1:13:ee:bd:20:25:48:db:6e:14:fa:9e:2c:
         b9:16:0f:66:2c:ac:0a:f5:34:db:3c:c9:2c:7c:f3:3d:6a:12:
         7d:9d:6c:b2:33:e3:87:c7:fc:0a:05:98:a7:b2:bd:2e:50:b2:
         8a:bb:8f:1e:be:c4:46:b9:32:91:68:6d:52:c8:80:2e:04:36:
         99:7c:93:da:49:1f:d0:6e:5a:e8:22:2b:fa:bc:00:94:1a:d7:
         7e:e6:f2:7f:ee:50:71:73:cb:c4:55:97:f0:bf:91:be:03:fc:
         96:19:c1:14:12:d9:cf:23:4a:4c:b8:f3:95:82:eb:42:0e:6d:
         09:42:ad:7a:54:01:fa:e8:8d:91:22:b2:f9:12:d0:ec:16:fa:
         1f:94:43:be:e5:26:13:5c:bd:aa:35:a7:77:25:c2:7a:f4:0c:
         df:61:da:b3:3c:7c:aa:29:fd:f9:72:f8:2c:92:fc:93:b3:38:
         79:50:6f:08:fc:12:3a:3c:b8:96:e0:26:b2:b9:6c:78:b3:17:
         b8:91:4e:15:c4:bb:21:7f:bd:dc:47:cc:ac:44:2d:d9:89:be:
         47:f0:f2:bd:47:da:af:6d:b4:60:41:7b:43:3d:72:7d:71:62:
         ad:98:0a:eb:7b:fc:ce:9c:76:3c:40:b7:d3:41:61:4e:5d:3e:
         53:5d:a5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 11 21:06:51 2025 by rpki-client