RPKI Manifest
Location:                 rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft (download)

Subject key identifier:   44:88:78:CF:6D:19:ED:C9:D4:F0:BD:23:91:44:10:54:B9:B8:70:47
Authority key identifier: 13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC
Manifest Number:          010D0C9F4328583A6BF7B9B63F12ABA5EC264D00
Files:
    1: 5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
	hash 3b7EfGaogIWnkQtF1jZfG7+LSj6xf6Q4IaqLVHPJ3q8=
    2: arin-rpki-ta.crl
	hash Q4DLnJEqUJsJavhuOSFbF7xURKeTtCqez5JptqZr5jQ=

--
$ test-mft -p rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft | openssl x509 -text
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3a:6b:f7:b9:a2:32:70:31:0a:8b:ec:fa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=arin-rpki-ta
        Validity
            Not Before: Jun 29 17:20:23 2021 GMT
            Not After : Dec 30 18:20:23 2021 GMT
        Subject: CN=a514f3bc-2a20-4dc3-9538-5ab88bec1c6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:48:11:46:c0:86:61:d6:8d:29:20:11:79:db:
                    a2:7c:32:41:a0:de:ce:ec:39:96:0c:44:ba:5e:d2:
                    26:2b:f1:f6:14:5b:ce:79:33:a1:ba:1f:65:d5:5f:
                    89:ac:6d:e3:99:ed:af:2c:2d:84:e9:b3:66:6c:1d:
                    c7:ae:99:d5:66:da:aa:81:11:08:20:a2:9d:52:c5:
                    33:65:ff:c8:b4:29:10:43:44:d5:d2:3a:ca:15:54:
                    49:5b:20:49:c8:6e:ed:ff:e5:3f:81:1e:56:5f:b6:
                    b2:ce:fe:39:91:ae:a4:34:44:be:a7:98:97:ba:84:
                    80:69:d5:4e:3b:8a:34:fe:f4:6b:e2:07:99:fa:19:
                    0a:0a:85:06:bf:13:db:c9:91:e4:e2:f4:4e:f1:ab:
                    c3:c1:b9:d1:83:8e:1e:4b:c4:99:60:a5:cb:b0:b9:
                    e7:29:6e:a1:84:d1:e2:a1:12:32:00:d0:01:ba:a1:
                    9f:ef:8d:bb:60:44:9a:9b:57:eb:19:e7:56:04:c1:
                    15:51:dc:f0:17:1e:2e:3b:e9:0a:15:0c:dc:74:14:
                    9b:0d:8a:b8:d8:67:40:7b:06:7e:ba:41:d2:46:cf:
                    21:9e:d1:1b:6f:66:63:14:42:b2:bb:c3:da:52:24:
                    3e:73:e0:d6:8f:ee:e6:47:e6:39:b1:2f:0b:13:ca:
                    9b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                44:88:78:CF:6D:19:ED:C9:D4:F0:BD:23:91:44:10:54:B9:B8:70:47
            Subject Information Access: 
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl

            X509v3 Authority Key Identifier: 
                keyid:13:D4:F2:4F:9A:9F:CD:98:DB:36:F9:30:63:18:08:C8:8F:39:74:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:b0:b5:9e:b3:68:40:3f:0e:4d:7f:97:55:b5:0a:fe:43:25:
         b4:c8:22:ad:ed:3e:41:d7:54:fd:77:57:2a:8d:30:82:15:cc:
         7b:46:3e:42:71:93:5c:22:a3:65:32:bb:67:76:a3:3a:f7:5a:
         78:43:62:3b:fd:44:19:ee:43:6f:78:f6:07:d4:6c:98:ba:ae:
         c9:23:5c:c0:2a:1d:6a:34:ce:2e:c1:da:bd:85:94:42:0a:a5:
         45:c1:1e:95:b4:f7:53:08:02:ce:28:41:9d:76:42:a1:4c:81:
         69:84:15:ca:27:72:3e:72:6b:e0:02:1c:f5:19:02:f3:0d:e3:
         22:eb:6e:da:f7:b0:09:15:35:83:bb:98:7e:21:1a:0a:fe:89:
         f3:e9:76:46:96:5c:68:af:9d:6e:a3:42:e9:68:54:0c:0c:6c:
         99:2d:0a:8e:31:4d:2b:a6:c6:47:2f:8e:77:ec:e5:33:04:bd:
         3f:f2:64:8b:0e:aa:fb:eb:9d:f9:0c:cf:85:d7:27:67:21:c2:
         ed:f7:bb:7f:54:2d:6c:31:22:29:ee:63:70:d5:e4:10:f3:15:
         35:71:1b:4d:73:c9:d5:d9:88:04:c1:7a:75:51:ac:55:88:87:
         96:18:9f:6e:0a:a0:f2:93:d8:61:e2:1e:3f:4f:f4:f6:75:97:
         e4:c7:9d:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Sep 26 11:02:20 2021 by LibreSSL & rpki-client.