Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
File:                     bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft (raw, json)
Hash identifier:          VTwFQkxUwY3fT4e2wpqYnmYgndQKztxhUAO22rJNuP0=
Subject key identifier:   4E:2C:41:53:AC:9F:92:19:19:C3:2E:09:93:6E:B2:56:1B:0F:89:6F
Authority key identifier: 5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32
Certificate issuer:       /CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
Certificate serial:       010D0C9F43285847F38A5D1F0D4D7F97453D1F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
Manifest number:          010D0C9F4328584073A84BA5382A0D4B2E64BAE2
Signing time:             Thu 21 Nov 2024 09:00:06 +0000
Manifest this update:     Thu 21 Nov 2024 09:00:06 +0000
Manifest next update:     Sat 23 Nov 2024 09:00:00 +0000
Files and hashes:         1: 001b25cc-cdfd-35a1-b46a-8cc19bdbe753.roa (hash: BSc10jJ/LdRbrxGqU+zYnBcoXvUH9vFJTnGI/ZZ3uoo=)
                          2: 00ab9988-b83a-3e42-aaff-72c4f05f5b11.roa (hash: nHaUM/mp2xUFDdLLhFh63lZSHDe7c/D7a4T6RjqozlM=)
                          3: 0226ecdf-74ab-3d17-9a35-3e8bdd301dfe.roa (hash: +5lUaY3FTRk12efp6nxNuFcwqeeKM81tPeLcWMG/lkA=)
                          4: 02c12ca8-25b3-31de-a2a1-2d44c982ff9c.roa (hash: jsvzwzRW8NAZ7Inh1epU1MbmfrfLZ/buu+iZG3Sa1Fw=)
                          5: 03e7082d-5945-3167-a58b-fa442b10ff4d.roa (hash: Sp8gz/3Mi6ZmMvZQtYjhl03mY3/CfDPPiCzMV0pcfMA=)
                          6: 04227fd4-25a0-375e-932b-a237b125a340.roa (hash: w7s7uPB60kJkF+ewyjS2AYDGwio8oJnYQRJ83AL/SCk=)
                          7: 1016c453-3950-3157-8238-b1385cd19da0.roa (hash: TXYLFx3Q2XcQ3RStB6VIZSp0Ph+NBGFqPZdj/ihkHNs=)
                          8: 11a6e6ab-e62e-360c-b2f4-2d6e3991d4da.roa (hash: 4elZMJ0rndI7XNFjiKaDlKQpsKvIQBK4g1f8Db3K+YY=)
                          9: 206642a2-d7e1-3098-9a4d-25ac023b6972.roa (hash: omSRdHD2nYGbqUYx2KpP8zzuhzLUozp/yRX+tvjay28=)
                          10: 28cc181f-7bbe-3348-96d4-658069e7572a.roa (hash: X6KWo8jMaIe/JAs+2b+gPLavg7/XlcdnZuXehmnu2Gw=)
                          11: 4947827a-81e3-3c67-8152-d53e2abb4dab.roa (hash: PoxUTxkmO2V+aGbm9VPpDIf+LgLDd16Z3TJIIY067kE=)
                          12: 518e9091-b854-3d66-ba08-f6d275b4138b.roa (hash: DGol0jr54qT8auGeWqE10RcymjbHqcxMws9oU7ycTJQ=)
                          13: 67faa006-050e-3132-9c96-91eeb4701324.roa (hash: BT1RIjEO5XdmrNL4VSnCPcuEQzO8HIZf0LUxZNRwEOc=)
                          14: 7472e233-c3ae-37b8-a8be-ec2b234930bb.roa (hash: /p6Fz5XLcl7azhAcuQ8oWDrQKiRLa0zI4J1wxqLBhZM=)
                          15: 86b1302f-bbd8-3dd5-bea6-b46eaec452f4.roa (hash: zR18iaaaKyLt3Rj1gsYL0JoYjTNCWlnN8mBdy18VGbU=)
                          16: 8e5d139d-a0de-3b0d-a990-caf789c51809.roa (hash: RijO5vpkIZDgNLMjdcIlBGwccgsRvrkSOtz32dttp4Q=)
                          17: a2c3899c-531a-337d-8d6c-047bf9cf6907.roa (hash: 8+uDEFjY6T1MoWsP9WEvyFMKQoh/73uMzhz6pEcUvtY=)
                          18: a868cfd1-aaa4-36cb-a4af-402b7c912911.roa (hash: 8jLki4vc7TNhi62LeLcgWbqgnfBMoCJTAFM8rgyRa/w=)
                          19: bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl (hash: KZ+sYX8jKtDPe5Snj/6sOvS7xqfimkIkhax+qeuNKgg=)
                          20: c9d7f4b0-07ef-3c63-9739-79d59d8a974e.roa (hash: ocCz14eFH+Y1pUj/C5+4+Y1ea2C9jND40jttVEmjAaA=)
                          21: f6a420de-a079-3b79-bc8f-823946b97fc6.roa (hash: L793TyW+WyKq7agDEeQVVYy7uPXflZfH3da3lmEcmlQ=)

Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Nov 2024 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:f3:8a:5d:1f:0d:4d:7f:97:45:3d:1f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bdd01fc4-c609-4c95-97c4-bd6aef549dc2
        Validity
            Not Before: Nov 21 09:00:06 2024 GMT
            Not After : Nov 23 09:00:00 2024 GMT
        Subject: CN=c557f13f-cf4d-41c6-ba36-3a1f31568975
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:a8:18:23:ac:d2:00:86:03:88:fb:64:20:2e:
                    d8:e6:83:07:16:1c:1e:f0:1c:47:ad:e3:31:52:56:
                    b8:95:a2:0d:ad:73:eb:0f:a6:7f:b6:65:c0:d3:40:
                    ef:c7:da:8e:61:d0:a4:61:07:48:24:b4:80:1f:42:
                    72:fb:33:d6:a6:41:91:36:dc:20:7c:d3:25:26:6a:
                    80:c3:18:50:c2:4f:96:ee:d2:3c:4b:a2:20:ab:03:
                    e9:d3:bd:11:6f:bc:46:86:ce:c7:b0:5a:68:59:2e:
                    ea:4f:38:10:19:b5:5e:5c:d5:b8:98:46:c3:65:b0:
                    35:64:ab:2d:86:7e:12:57:91:12:b5:c5:6d:1a:b8:
                    1b:e0:0c:be:1f:98:b0:a0:8c:6e:d6:ce:86:35:00:
                    4a:57:c6:ee:80:21:f4:b1:fc:40:e9:31:bf:b7:4f:
                    87:ce:3e:a4:ee:e3:87:f3:7a:b6:6b:33:13:cd:84:
                    e4:6b:f8:29:ff:6a:4c:4c:ed:cf:d4:bc:b7:e4:df:
                    18:ab:a2:4b:c7:9c:51:31:d5:d8:bf:30:37:42:6d:
                    e1:99:dc:ed:68:3d:2c:3a:c1:8a:6a:2a:e4:d0:72:
                    6b:92:ee:65:f3:15:30:69:ad:6d:3d:b8:f4:b9:ec:
                    7a:c8:ab:31:2f:85:d4:82:3a:35:57:fa:5e:a8:04:
                    57:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:2C:41:53:AC:9F:92:19:19:C3:2E:09:93:6E:B2:56:1B:0F:89:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.crl

            X509v3 Authority Key Identifier:
                keyid:5F:64:D5:4A:90:46:19:CB:D1:09:D9:0E:D3:69:F1:7C:46:65:38:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/bdd01fc4-c609-4c95-97c4-bd6aef549dc2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:c9:71:66:53:92:fa:34:41:8c:1e:80:d7:85:9a:10:f6:
         51:2f:e9:5b:db:97:ee:31:4e:32:f1:34:3b:f5:62:29:a7:90:
         9f:16:d0:7b:82:7d:fb:34:26:2c:42:a1:d9:e4:1b:53:a7:d6:
         f1:0c:5b:00:e6:2b:7c:60:ab:39:39:9a:e0:e4:ab:f5:ef:1e:
         97:75:1a:99:e1:b4:12:27:52:a4:b3:0a:3e:43:60:e2:f1:d4:
         66:39:75:16:c2:c9:ef:51:eb:b0:f9:2d:e8:b1:b7:bd:16:75:
         d5:71:e1:da:11:85:e3:2b:be:3e:d9:91:76:ee:e6:35:56:c4:
         73:44:45:fa:25:0b:32:85:e3:7a:6d:4f:14:b6:ee:54:f6:0e:
         3d:00:2c:3e:eb:15:ef:4e:76:a6:87:21:fd:a5:3d:7b:c9:b7:
         2e:7d:e3:e1:a5:82:4a:b5:57:d0:f0:ea:a6:4e:76:39:7b:36:
         f9:d0:a4:8a:78:21:8e:e5:fe:eb:a9:b9:a4:12:01:92:c9:bc:
         3f:9e:17:3c:44:94:43:7d:09:50:f1:8b:5a:52:10:c9:16:d2:
         27:e5:b0:6e:f6:86:5d:81:c7:70:55:e5:69:d5:c3:ee:b3:5c:
         f3:c8:2b:f0:4c:7e:aa:92:61:e3:e7:74:5a:83:c1:a9:3e:b9:
         a4:28:3f:de
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEfzil0fDU1/l0U9H4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmRkMDFmYzQtYzYwOS00Yzk1LTk3YzQtYmQ2YWVmNTQ5
ZGMyMB4XDTI0MTEyMTA5MDAwNloXDTI0MTEyMzA5MDAwMFowLzEtMCsGA1UEAxMk
YzU1N2YxM2YtY2Y0ZC00MWM2LWJhMzYtM2ExZjMxNTY4OTc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqgYI6zSAIYDiPtkIC7Y5oMHFhwe8BxHreMx
Ula4laINrXPrD6Z/tmXA00Dvx9qOYdCkYQdIJLSAH0Jy+zPWpkGRNtwgfNMlJmqA
wxhQwk+W7tI8S6IgqwPp070Rb7xGhs7HsFpoWS7qTzgQGbVeXNW4mEbDZbA1ZKst
hn4SV5EStcVtGrgb4Ay+H5iwoIxu1s6GNQBKV8bugCH0sfxA6TG/t0+Hzj6k7uOH
83q2azMTzYTka/gp/2pMTO3P1Ly35N8Yq6JLx5xRMdXYvzA3Qm3hmdztaD0sOsGK
airk0HJrku5l8xUwaa1tPbj0uex6yKsxL4XUgjo1V/peqARXWQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFE4sQVOsn5IZGcMuCZNuslYbD4lvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQw
MWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZhZWY1NDlkYzIvYmRkMDFmYzQtYzYwOS00
Yzk1LTk3YzQtYmQ2YWVmNTQ5ZGMyLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYmRkMDFmYzQtYzYwOS00Yzk1LTk3
YzQtYmQ2YWVmNTQ5ZGMyL2JkZDAxZmM0LWM2MDktNGM5NS05N2M0LWJkNmFlZjU0
OWRjMi5jcmwwHwYDVR0jBBgwFoAUX2TVSpBGGcvRCdkO02nxfEZlODIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iZGQwMWZjNC1jNjA5LTRjOTUtOTdjNC1iZDZh
ZWY1NDlkYzIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBF/MlxZlOS+jRBjB6A14Wa
EPZRL+lb25fuMU4y8TQ79WIpp5CfFtB7gn37NCYsQqHZ5BtTp9bxDFsA5it8YKs5
OZrg5Kv17x6XdRqZ4bQSJ1Kkswo+Q2Di8dRmOXUWwsnvUeuw+S3osbe9FnXVceHa
EYXjK74+2ZF27uY1VsRzREX6JQsyheN6bU8Utu5U9g49ACw+6xXvTnamhyH9pT17
ybcufePhpYJKtVfQ8OqmTnY5ezb50KSKeCGO5f7rqbmkEgGSybw/nhc8RJRDfQlQ
8YtaUhDJFtIn5bBu9oZdgcdwVeVp1cPus1zzyCvwTH6qkmHj53Rag8GpPrmkKD/e
-----END CERTIFICATE-----