Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft
File:                     250ff67c-5904-4655-8b50-832a485ad1b8.mft (raw, json)
Hash identifier:          dRG9OBSmPa+Ie8GN60XiOjIMpMxWZ30NEV8xi8OfRqo=
Subject key identifier:   91:38:D3:C1:93:A1:B8:5A:46:55:26:28:04:5C:48:1E:25:DE:AB:7B
Authority key identifier: D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39
Certificate issuer:       /CN=250ff67c-5904-4655-8b50-832a485ad1b8
Certificate serial:       010D0C9F43285849828698B575C3460D066A2140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft
Manifest number:          010D0C9F4328584073A84550DC18A073FE698511
Signing time:             Sun 13 Apr 2025 07:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 07:00:00 +0000
Files and hashes:         1: 0b601613-bb29-3f7b-9ff9-886f0c9a7dbc.roa (hash: YK5uUnDq9+uxkgIG+Eq2mnCv4yAhjyJOh0ONqTdF+to=)
                          2: 250ff67c-5904-4655-8b50-832a485ad1b8.crl (hash: IbwaZ5D/Ot9cKdM/9em/Gght/DTH2TZ8Do1V2p5E0As=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:86:98:b5:75:c3:46:0d:06:6a:21:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250ff67c-5904-4655-8b50-832a485ad1b8
        Validity
            Not Before: Apr 13 07:00:03 2025 GMT
            Not After : Apr 16 07:00:00 2025 GMT
        Subject: CN=5197438f-3b32-4400-bdc9-9d0de902481d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:da:bf:32:84:26:46:c1:73:5e:b1:1d:df:e3:
                    55:51:fd:87:06:72:f2:40:78:0a:8f:ad:7c:df:a7:
                    a9:af:c6:9e:37:66:16:0d:64:a4:94:c8:44:c2:1a:
                    12:e1:84:73:df:2e:2d:8f:3a:c0:14:11:e3:b0:7d:
                    68:95:ec:7c:ac:11:41:49:79:8e:2b:0b:2b:20:c8:
                    5f:53:3e:69:31:55:4e:33:2c:8c:7a:f7:fe:5e:68:
                    52:6e:3f:e1:40:92:3a:89:2f:3b:22:83:41:86:cd:
                    00:e3:3b:b5:0f:a4:64:19:37:3b:42:b7:03:52:c8:
                    bb:cb:bd:dd:60:91:3f:5c:16:60:c8:c1:bf:2e:e9:
                    a1:b2:27:c2:1d:8f:4b:33:68:27:16:a6:6c:c9:cd:
                    6c:14:a0:80:26:ce:9b:a3:7f:29:e6:77:6a:95:0e:
                    65:13:b4:d0:82:9d:e7:ed:e5:05:42:a5:6a:84:b4:
                    18:39:39:31:41:06:32:3a:48:87:b3:f6:70:0f:88:
                    2a:e2:b4:5c:83:b3:a7:2c:43:1b:d5:c9:02:ea:45:
                    98:fa:de:09:47:ad:d5:9e:d2:9a:cd:9c:72:02:d8:
                    27:1e:7c:fd:a3:bd:9d:91:2a:6f:54:72:65:98:a7:
                    ea:23:f3:71:f0:3d:f9:67:19:12:3c:45:58:04:20:
                    87:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:38:D3:C1:93:A1:B8:5A:46:55:26:28:04:5C:48:1E:25:DE:AB:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8/250ff67c-5904-4655-8b50-832a485ad1b8.crl

            X509v3 Authority Key Identifier:
                keyid:D9:6C:55:DE:64:B8:CC:BB:AA:F1:2C:69:37:97:52:99:75:55:6B:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/250ff67c-5904-4655-8b50-832a485ad1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:51:1b:95:38:e6:9e:76:e4:27:93:66:c5:ba:b6:cb:52:af:
         13:09:db:4c:11:20:5f:14:ca:5a:25:84:78:95:d7:04:33:8e:
         69:5f:77:92:d7:1d:c7:09:74:97:f9:9f:7c:0f:69:b5:5b:25:
         b7:79:ff:dd:c0:98:4a:0d:74:10:d5:e0:19:70:d7:df:5b:bb:
         0f:d9:6a:dd:d8:20:75:b1:63:10:60:7c:50:23:cb:0a:f7:f3:
         ed:3a:87:f5:c4:0a:5c:d0:68:7f:7a:77:e4:4f:f3:f0:1f:c1:
         dd:97:39:d2:5d:30:b3:37:3c:89:4e:81:eb:ef:60:11:43:d5:
         c0:03:a4:d7:ab:44:d4:a6:ae:71:f9:53:d7:79:83:33:81:3c:
         26:93:00:27:8b:7b:41:53:1c:51:50:7b:23:80:91:36:b5:8c:
         f2:2b:8c:a1:26:9e:4b:ab:f3:c0:e5:25:09:95:b3:e0:15:8f:
         9f:4d:16:80:fd:2d:c7:dc:d4:31:9d:93:ba:2b:38:cb:7e:0d:
         3f:b4:48:6c:a9:0e:41:7d:da:03:e8:5d:b8:f3:7a:be:a4:19:
         25:05:79:6a:3d:1e:21:11:21:15:1a:b6:95:83:89:84:80:53:
         b4:76:62:5a:b2:8f:8b:5a:a1:02:9d:36:7d:4a:48:80:73:10:
         f1:bc:19:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----