Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
File:                     540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft (raw, json)
Hash identifier:          ghpQJB0uMgnwwrTHq1kBqbIwoNedmi11CWzJNSnPfOI=
Subject key identifier:   8F:5A:72:88:F1:0B:F8:95:16:E7:3B:8E:ED:57:BE:93:72:F5:36:AA
Authority key identifier: 54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0
Certificate issuer:       /CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
Certificate serial:       6F96BFBE37C8DCED9B8A56718AC77D007D485378
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft
Manifest number:          02A3
Signing time:             Wed 11 Jun 2025 19:52:11 +0000
Manifest this update:     Wed 11 Jun 2025 19:47:11 +0000
Manifest next update:     Thu 12 Jun 2025 20:54:11 +0000
Files and hashes:         1: 3139312e352e35362e302f32322d3234203d3e203430383530.roa (hash: 9Cb1fE4U9LMr/3Fb+oRhqw0piUFFeB6UtUbLFuBaBJM=)
                          2: 540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl (hash: LRXRV0+Xi2pNbeHYnsGa8WyVN5P7FZ24mOkN8EumkAI=)
                          3: 3133382e3131382e3131362e302f32322d3234203d3e203430383530.roa (hash: 6N4BP/VU427jIUqJbFznVHC4y7fTWC01Rw0a88rVLeA=)
                          4: 323630373a326563303a3a2f33322d3438203d3e203430383530.roa (hash: 6phQFYLpZUUkJeQ6DOLPZog2G1ozIk6AYZ9O6Yr6kuE=)
                          5: 3137372e3132382e3132382e302f32322d3234203d3e203430383530.roa (hash: WabH3tIeHZOz0TLttGoxatEy3MWhIrZjDCa5Yjawdsw=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:96:bf:be:37:c8:dc:ed:9b:8a:56:71:8a:c7:7d:00:7d:48:53:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738
        Validity
            Not Before: Jun 11 19:47:11 2025 GMT
            Not After : Jun 12 20:54:11 2025 GMT
        Subject: CN=8F5A7288F10BF89516E73B8EED57BE9372F536AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:bd:82:1a:4c:79:a0:e6:67:28:be:68:0e:
                    fd:35:c9:6d:81:ed:fc:64:6f:0a:ee:fe:73:1e:1a:
                    08:d2:39:4e:ec:cf:1d:fb:6b:77:63:52:97:44:53:
                    42:0f:72:14:2f:bf:fc:46:22:3a:ce:6e:59:aa:97:
                    0a:c9:7b:c3:59:e5:c6:31:6c:80:e8:c9:64:43:cc:
                    a2:f0:11:ea:67:a0:92:18:98:a2:8d:23:ab:b7:08:
                    1f:7c:13:ae:42:dc:d3:55:79:73:74:1a:b4:53:6e:
                    fa:bb:ab:e5:f1:de:e3:16:f9:0e:9c:d1:d4:9e:57:
                    c1:0d:a2:3e:f2:7a:d7:07:cf:03:75:5f:c5:d6:a2:
                    f2:38:d9:0d:44:be:50:8d:c8:7a:ab:a3:48:35:ae:
                    77:35:13:3d:73:d0:30:1a:b6:cf:51:bf:c7:33:d5:
                    b0:56:6b:a9:c2:96:3b:bd:7e:5c:cf:eb:44:29:1f:
                    33:38:da:f8:45:b5:3d:7a:87:dc:a0:bb:09:63:9a:
                    a9:99:ee:36:b7:a1:69:68:a0:c7:6a:ca:ec:60:25:
                    06:79:64:fb:de:8c:dc:42:f5:b5:8b:21:49:a1:51:
                    e0:de:d6:33:70:f5:0a:83:18:17:92:8a:d1:dc:92:
                    ef:6e:0b:77:f0:3d:e4:93:ef:32:5e:45:24:8c:7c:
                    7d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:5A:72:88:F1:0B:F8:95:16:E7:3B:8E:ED:57:BE:93:72:F5:36:AA
            X509v3 Authority Key Identifier:
                keyid:54:0B:53:6A:C1:A2:BB:8F:D1:20:16:62:B4:30:48:5B:DE:4F:A6:D0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1a4b6836-4e28-439c-9ea2-50482aa15b68/0b75eb340709c863b5ee2132841f8644dd26fad4a204af7738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf89e02e8b018ab95d1cec7a41/0/540B536AC1A2BB8FD1201662B430485BDE4FA6D0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:8e:d0:42:45:ae:5f:eb:71:62:e1:85:9e:08:01:54:79:b8:
         11:1b:34:e9:21:0f:6e:80:c9:ca:e4:0d:fa:9b:b5:b2:c4:1f:
         11:ab:44:1a:bb:f9:ce:cd:46:69:c7:f8:b1:6b:7e:ad:ca:dc:
         90:3f:3c:49:ea:29:7f:91:fd:02:4d:6d:d5:86:73:d0:6c:ed:
         d9:dd:5b:a5:d1:c0:0b:bc:1b:34:da:b5:79:d2:45:7e:b2:24:
         5a:5c:31:05:a9:2c:8f:8a:6a:2f:a1:55:c1:a1:57:7d:3f:ff:
         ef:7d:8a:ff:2f:44:68:1d:6f:c7:87:76:46:09:2c:cb:25:b6:
         a5:74:d1:15:af:6f:c1:6f:bb:71:2e:8c:74:b0:a1:5f:2c:59:
         26:81:3b:e0:69:ea:9e:7d:f3:42:b0:2f:40:d8:f4:5b:e9:17:
         ff:9d:a1:c9:3a:30:c1:84:40:e7:1b:c6:66:e5:4a:c6:fe:8f:
         c1:b8:cc:c9:47:d1:ed:9f:c0:20:7e:24:68:b6:cc:65:93:0b:
         07:f1:15:1b:3b:2a:62:bf:e5:42:12:de:30:cc:16:81:d7:9e:
         cf:87:2a:fb:fe:91:da:41:d7:32:83:ab:25:ac:de:61:18:21:
         43:47:2c:24:ca:19:db:86:38:78:a1:19:b8:d5:02:6c:30:d2:
         53:9d:cb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 16 15:42:46 2025 by rpki-client