Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
File:                     2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft (raw, json)
Hash identifier:          Kwepe/X9IXb3iUf37Ta6US+rGaSD0I66EFOJiHmo3f8=
Subject key identifier:   8C:32:59:FD:65:21:C6:09:DD:09:AD:95:7A:AC:A1:40:89:83:AA:F7
Authority key identifier: 5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A
Certificate issuer:       /CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
Certificate serial:       010D0C9F43285849B343CD3BAA2DB518315C3A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
Manifest number:          010D0C9F4328584073A81C9F4F6AE300898F4447
Signing time:             Wed 30 Apr 2025 18:00:03 +0000
Manifest this update:     Wed 30 Apr 2025 18:00:03 +0000
Manifest next update:     Sat 03 May 2025 18:00:00 +0000
Files and hashes:         1: 06aa229e-21d5-3132-8604-c88f6941821b.roa (hash: qRmHK0LSQVbr138CJDOxBL+bX1qbjRHky5y8ZfxFHC0=)
                          2: 2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl (hash: u1stHVlFa7TkgTJkeBz5X1YMN/+HvhiumJcqOPwshEQ=)
                          3: 4a7e1dbd-4704-342b-b741-56b0c8e759a8.roa (hash: wp0w2ae3bkSKx/kbEZCzrsvfwM8Y17Po2jbjIlFv+JY=)
                          4: 6109b9e9-9f14-3432-a350-4e2ba7f49d1e.roa (hash: wP9MXWJMkNQZSvMN7AngD5uemFBcyRHQ4l8N9ErLlm0=)
                          5: 638c64fe-64fb-347f-be0f-66a64d56454e.roa (hash: d7Qjxyr0Ggkl+0dZDVonPweV+CfJ67jqtuu2idMQZvk=)
                          6: 6aaf0b5d-0ce4-34be-91b8-468066365036.roa (hash: a6MzcfamPyWi0DN4WqG+rYyadOdwmHsr8+xLuVRHDgw=)
                          7: 944447fb-baad-3395-926c-c3422f01b462.roa (hash: pSySiv9BAnKdHkTob9cufI/Ij4qxXO4x/fM+ppmD/Gk=)
                          8: a4696e90-da7b-3ac8-b1cf-2351e43df747.roa (hash: 9cawTHyhxMTSxNZ+ZKUamOOCbXVxIqbJj1RsWNxNavY=)
                          9: a7244564-9404-3b6d-a87c-23f016c7e4c6.roa (hash: X9xHnapyPu8B7DtoDj4SBrju+95tXvmGRam6DyaqMc0=)
                          10: a943a62e-8af4-3728-ac21-db958b531f7a.roa (hash: yt+gl4elEbt7vC87b/VV4j5a0jre+foKXKQ3Zm19ezc=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:43:cd:3b:aa:2d:b5:18:31:5c:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2890f390-5e53-4d08-aa52-1de5ce7ffb85
        Validity
            Not Before: Apr 30 18:00:03 2025 GMT
            Not After : May  3 18:00:00 2025 GMT
        Subject: CN=09719b92-56a6-46ec-9f3f-b31c0ae78528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:c9:8a:e7:01:c7:e6:e5:b1:cc:2b:9e:9e:23:
                    8f:fd:e0:e7:09:47:ed:19:6a:9d:13:56:b7:fd:6b:
                    8f:27:80:d9:6a:5b:1a:97:c9:d4:9a:46:35:d9:45:
                    05:52:22:8e:65:3f:42:6b:a7:44:cd:b2:8d:2f:b6:
                    0c:24:51:11:c6:c8:d4:7a:22:f6:d4:a8:de:92:e3:
                    ea:ec:e1:fa:6c:6b:3d:d4:74:69:16:12:74:0a:40:
                    a6:63:ae:ec:62:92:6c:65:4c:91:60:6e:3e:21:43:
                    1d:9d:18:69:3e:c2:66:c1:3e:5a:a9:4e:02:07:19:
                    13:35:dd:36:61:0f:74:b6:5f:6f:a7:25:24:5f:4e:
                    af:b0:ea:e0:e8:92:9f:87:7e:7d:85:d7:8c:bb:d6:
                    cb:f7:e3:48:e8:9e:d5:db:e5:b2:24:e8:5a:16:8e:
                    34:3c:28:a2:ff:1c:db:19:7c:f1:ac:ec:6e:1a:a7:
                    84:7c:ac:20:3b:80:25:86:df:0c:2f:7b:07:f2:fe:
                    fc:e9:81:bb:5d:3f:e4:3c:8b:81:bf:16:84:d3:4a:
                    42:4f:ea:e5:86:3b:b7:b3:05:7a:f9:00:61:4a:14:
                    2a:ad:b0:0f:85:ae:c6:4c:b9:c6:ba:25:00:76:2a:
                    16:16:ee:f7:ec:a7:b1:19:97:cb:c3:43:f8:40:88:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:32:59:FD:65:21:C6:09:DD:09:AD:95:7A:AC:A1:40:89:83:AA:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85/2890f390-5e53-4d08-aa52-1de5ce7ffb85.crl

            X509v3 Authority Key Identifier:
                keyid:5E:73:23:98:FC:2B:64:32:AE:9C:D7:6C:D6:1F:5B:C0:7A:14:38:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2890f390-5e53-4d08-aa52-1de5ce7ffb85.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:27:73:aa:e6:b8:f8:e4:83:7f:9d:d4:06:f3:3c:e6:b6:2a:
         1d:f0:26:af:0e:c1:4d:75:bc:2a:33:39:1c:03:c8:2c:aa:c1:
         92:fa:72:4a:d3:b9:1b:48:d0:46:91:df:dd:47:57:d9:0d:0f:
         7a:79:ba:ea:6a:09:09:df:4a:f3:89:a6:1f:17:1e:56:ce:bd:
         a8:55:cd:a2:10:cf:83:02:ca:86:03:9d:ab:85:87:00:b1:fb:
         76:49:d1:36:0a:b3:1c:7f:45:41:ec:41:91:d3:42:5a:45:16:
         0b:59:0e:d5:36:a1:9f:c4:fb:5c:c2:e3:9a:eb:f7:44:75:ec:
         4a:b4:2a:14:12:3c:43:c4:cb:bd:83:47:e9:c5:8d:23:3e:66:
         84:e0:ab:40:01:dd:c0:a0:ab:50:37:3f:fa:05:71:19:db:e0:
         82:41:79:b5:54:0c:a9:f5:6b:d2:c6:52:46:e2:84:94:9c:11:
         3b:50:b2:47:76:bb:b6:f2:34:32:28:c7:2a:15:2a:44:ab:5e:
         14:90:8f:d2:14:9c:a8:09:7c:3a:14:a3:e4:df:8a:90:27:af:
         19:5e:43:33:a1:54:7d:96:f3:43:0b:99:93:a2:61:e9:43:4d:
         71:19:a5:b6:98:65:8e:93:41:4b:50:55:57:c2:8d:68:f5:81:
         d2:95:ad:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 1 11:10:39 2025 by rpki-client