Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
File:                     4021c43f-b78a-496f-a8cc-814abc11a7e9.mft (raw, json)
Hash identifier:          6fDez7A7oox1yoNUqx2RfeFnaEIZEg2189DKNvf0/ZE=
Subject key identifier:   82:93:2C:45:9C:B9:07:F0:5B:7B:2A:63:44:85:64:28:27:0F:C8:11
Authority key identifier: 19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C
Certificate issuer:       /CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
Certificate serial:       010D0C9F43285849AAA83A784861987CFC9AE870
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
Manifest number:          010D0C9F43285847D01FCC0535325B8D91E28F98
Signing time:             Sun 27 Apr 2025 16:00:07 +0000
Manifest this update:     Sun 27 Apr 2025 16:00:07 +0000
Manifest next update:     Wed 30 Apr 2025 16:00:00 +0000
Files and hashes:         1: 00815a99-a458-3091-a374-a6e5d843be86.roa (hash: eOA1A6IUxxlikJUbWC6vl7xha7DO4Ol6BZFL+mguJkA=)
                          2: 2455ae16-e22c-38fe-8c06-719fb9bee946.roa (hash: ht/rntuLUU8IgHZMTkKiSMCSIyoR2k7kZ0flX6b/H80=)
                          3: 4021c43f-b78a-496f-a8cc-814abc11a7e9.crl (hash: PM/ZVedPpGUVEAYiQwqOInNFiUDkl9b0u1zBTtItfSg=)
                          4: 47c2089f-a8d9-3ab0-9033-ff13d22e0a25.roa (hash: 1EE87DaLEBMgNRFfaECIVa2yUmLAFWrVQUhtQHlpoSM=)
                          5: 4a42fb5f-b644-37be-b039-55b5dbcabadb.roa (hash: BbzvdMVEnaFCMGrAX0vySLuqiDBmglH5JNtnMREhuM8=)
                          6: 4f1a4496-1068-3479-8ff5-e4d8cdc81709.roa (hash: Z2nlUR6rTR9Sygc49W/pMjvg8hoTYWquR8kjHdOy2mU=)
                          7: 6ceddbe0-a59e-3c94-9e96-08f0396c815b.roa (hash: W7NlC7QCGkZRMlB5uz1oGPDd260pLRQK1atUiN0gla0=)
                          8: b7848456-9ae9-33ac-ae99-b4fd1ee821c3.roa (hash: YGhA0IgLVDJChF6v/10wgw9cQ8AWJCuYaxEfo4eQHJU=)
                          9: c7e8382c-9b60-35b0-a35c-9dc928aca465.roa (hash: rWpeNH2KiiEIUlzu+6tYqtIh7z3FvB34Xo79h1r+dP4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:aa:a8:3a:78:48:61:98:7c:fc:9a:e8:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4021c43f-b78a-496f-a8cc-814abc11a7e9
        Validity
            Not Before: Apr 27 16:00:07 2025 GMT
            Not After : Apr 30 16:00:00 2025 GMT
        Subject: CN=a46626f6-abf1-4ebb-b413-66e80f043974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:85:ab:bf:58:21:29:f6:3d:75:d4:d7:1f:
                    35:28:f4:8a:cf:7d:11:63:68:5b:a5:59:93:a9:97:
                    1e:dc:65:89:0c:51:a1:44:9d:59:0a:7b:31:b3:4e:
                    00:66:34:a9:d4:e8:85:e1:58:bd:ec:5d:d3:6c:b0:
                    0e:34:72:41:1c:c3:1c:c0:01:25:b9:0b:96:fc:fe:
                    fa:40:9d:c9:b1:b5:12:a7:3d:70:52:4d:4a:e8:94:
                    96:fb:6d:ed:e4:cf:6d:17:86:12:3c:b8:e1:ed:45:
                    9b:ae:4b:a5:0c:01:32:7d:6a:04:49:19:27:24:82:
                    e1:93:96:c2:2a:c8:5c:46:ba:0f:c8:df:df:16:fd:
                    a6:34:05:09:7a:15:a3:cc:b0:bd:7a:06:59:97:62:
                    6f:65:fa:d2:07:3e:c5:08:09:82:77:59:a7:b1:36:
                    5a:cb:00:0e:6f:18:c3:65:3c:0a:69:18:9b:f3:55:
                    8e:94:f9:5b:e6:37:04:61:b8:84:6a:00:63:ac:5e:
                    47:55:6d:02:13:95:03:17:84:6b:0b:b7:8e:a2:48:
                    e5:85:85:8e:fb:a0:a4:4c:b3:2c:16:4d:66:84:34:
                    47:d4:4c:ad:3d:a8:f4:84:f2:22:28:e9:d8:0f:79:
                    db:b7:da:f4:e9:78:79:79:1c:00:c2:c8:b5:58:3b:
                    68:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:93:2C:45:9C:B9:07:F0:5B:7B:2A:63:44:85:64:28:27:0F:C8:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9/4021c43f-b78a-496f-a8cc-814abc11a7e9.crl

            X509v3 Authority Key Identifier:
                keyid:19:CD:4C:5B:6C:5B:37:AB:35:E5:06:00:A3:E3:17:AE:2F:83:53:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/4021c43f-b78a-496f-a8cc-814abc11a7e9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:98:0f:0f:b8:ca:31:91:06:f7:42:58:ea:65:f0:c7:85:55:
         33:60:fa:56:3e:f2:6a:70:f8:f4:b0:f8:27:bb:4c:60:fb:2a:
         85:48:82:94:b5:ef:7e:23:3e:46:f1:cd:b7:ef:48:e2:8e:4f:
         a7:4c:1d:b6:d9:bb:62:9c:b3:7b:fa:c9:87:6e:b7:2a:31:ea:
         c8:59:0b:19:e7:39:33:14:75:5d:f4:68:fb:44:70:46:e3:17:
         ce:bb:ab:4a:df:f3:9e:d0:e8:ab:76:20:ac:04:27:3c:7a:de:
         97:aa:74:dd:98:ef:50:88:aa:d0:a3:b8:af:06:c7:6a:5f:60:
         75:01:10:81:74:d9:f2:e9:ea:bd:7f:93:30:63:9d:52:61:d3:
         24:e4:75:c8:33:e7:17:1d:89:79:15:ee:a5:79:c5:1a:15:a1:
         48:81:44:9b:cd:df:96:4c:0c:32:43:73:e7:84:f3:cc:87:ef:
         e0:50:9f:dd:bc:16:e6:d2:fd:d8:64:18:16:04:a5:f8:ea:fd:
         c5:49:74:90:ae:d0:81:e9:ce:9b:f1:86:c7:fa:3d:32:9f:ab:
         42:71:d0:65:b2:68:e8:e3:b1:e1:0d:a8:de:1c:28:19:13:69:
         b4:6a:af:11:a7:79:fc:7d:e5:02:0f:45:60:55:4a:17:59:54:
         6c:9a:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 23:42:57 2025 by rpki-client