Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
File:                     3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft (raw, json)
Hash identifier:          e7p1igrM8fngNW97NAKbvEQXJeFFpUc4ibPom6D6zqI=
Subject key identifier:   99:AE:BA:B9:A0:08:F5:5E:34:73:8B:7C:38:A8:41:1A:E4:19:A8:C7
Authority key identifier: E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0
Certificate issuer:       /CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
Certificate serial:       010D0C9F43285849AE7EE9D36A7FBF530EBBD340
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
Manifest number:          010D0C9F4328584073A835AFA5101C25568B821B
Signing time:             Tue 29 Apr 2025 01:00:07 +0000
Manifest this update:     Tue 29 Apr 2025 01:00:07 +0000
Manifest next update:     Fri 02 May 2025 01:00:00 +0000
Files and hashes:         1: 01c82124-3be2-3457-bbcb-37774f6f3c39.roa (hash: Llyxz+kshqvlH1+HXWDF3XpkKZansV4SFaw1Pv+nuiE=)
                          2: 29a894ee-0080-3a49-8b91-a01e1bbbbdd0.roa (hash: 64qOQ4GqmHdXhgUTCwbrPLahQSkaQciCmJb9P8FyXOA=)
                          3: 3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl (hash: XYNo+kw+dr+Fy27PMlSGz3dCFkIKh7bxK86teax9oAU=)
                          4: 684c8408-e1d6-3109-9a08-0ec671566794.roa (hash: FoNnKaEnWnriSCIynT1D0fdntBfe/v05F6qmWwvtiVg=)
                          5: ee65ad11-73c6-378b-9f9e-179df4feaa37.roa (hash: F2aM9z2s9zrRUwRCHz+lN7N6pkRE90KOi/IZW09+1O4=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7e:e9:d3:6a:7f:bf:53:0e:bb:d3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cbb085b-8c58-48f1-a7b9-d446d3f961bf
        Validity
            Not Before: Apr 29 01:00:07 2025 GMT
            Not After : May  2 01:00:00 2025 GMT
        Subject: CN=2fbbbd5a-4dc5-4bd5-9a60-4b9f5ed5ebd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:21:93:2c:54:09:94:87:0e:1f:d0:96:ee:e3:
                    fd:54:03:a9:19:b9:c3:24:98:8a:bb:e9:cd:e9:62:
                    2d:d5:b0:cd:2a:85:52:0b:9c:ad:eb:c6:da:fa:0d:
                    25:4e:c7:5b:0a:ed:71:ca:15:00:14:0b:f6:67:3f:
                    b2:55:2b:fa:fa:11:f6:9a:bf:07:8c:40:58:98:81:
                    84:16:47:cf:17:85:69:0a:60:87:75:af:dc:ea:26:
                    3b:6c:3b:cf:68:f7:ab:f5:d6:78:04:57:39:56:bf:
                    cb:c6:64:cd:18:97:9c:27:e6:6d:f3:2b:5d:e6:9c:
                    c4:17:61:c6:aa:9c:66:c4:fc:e1:80:8b:e9:1d:c7:
                    da:22:57:41:1f:94:1f:be:a3:8d:08:c8:46:6b:51:
                    20:b9:74:2e:8a:10:81:46:06:02:28:6d:f0:a2:a3:
                    20:94:2f:f6:f5:4c:6b:7b:a2:91:86:55:57:3f:f7:
                    a7:23:db:7b:88:e4:d2:19:5c:08:6a:cf:71:f8:f3:
                    47:0c:e0:df:8b:9b:b8:3d:04:87:14:93:73:c0:7a:
                    e5:b9:05:85:8b:2a:40:85:57:94:9a:84:88:8d:39:
                    cc:90:f7:54:a1:2c:78:fd:3e:01:a1:ca:89:36:90:
                    36:6e:f1:50:c1:f1:ae:f8:9d:4c:82:f7:c7:34:de:
                    bb:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:AE:BA:B9:A0:08:F5:5E:34:73:8B:7C:38:A8:41:1A:E4:19:A8:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.crl

            X509v3 Authority Key Identifier:
                keyid:E1:ED:F1:F0:07:BC:85:33:E5:BF:5C:FE:5F:8B:EC:CF:2F:21:97:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3cbb085b-8c58-48f1-a7b9-d446d3f961bf.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:ed:18:32:00:59:fa:82:45:73:db:6d:1c:4b:99:67:f7:08:
         b1:f8:02:5d:c9:5b:d9:06:15:70:22:f9:6f:80:fb:56:a4:94:
         1a:f6:22:bf:b5:bb:c5:b1:2e:53:a2:10:3d:2a:17:97:25:ac:
         11:56:59:0d:56:3e:f8:de:a7:71:e1:01:d8:41:d5:40:cb:02:
         2a:eb:d5:cf:3a:c0:e3:ec:53:f3:7a:39:69:16:e3:a5:91:45:
         b6:53:b3:77:27:5c:57:1a:8c:4e:35:f6:7e:3f:64:a6:71:43:
         d6:da:b2:55:04:f1:6b:01:35:1c:e1:77:f2:cc:4a:bf:65:10:
         1c:42:74:a2:2a:94:ca:3a:23:53:ce:85:60:c8:28:92:c2:b3:
         e1:53:27:7e:cd:84:cd:f5:5d:b4:b4:5a:ad:d0:a8:25:af:4f:
         d2:66:a0:df:17:8c:1b:84:21:63:35:7d:db:ac:3e:e3:8c:a4:
         aa:f1:07:62:01:ef:d7:bd:b4:5d:ee:17:7b:73:8c:e5:64:14:
         a6:e5:bc:94:ab:f9:0f:1e:7c:0b:27:1a:4f:b4:87:d3:66:24:
         0c:b7:32:76:b9:c9:d8:8e:ec:55:db:c4:8f:06:78:2a:dc:bb:
         5a:6e:81:2d:00:8e:43:5d:95:d4:05:3e:f0:00:61:99:6a:ad:
         fb:7b:e5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 29 23:32:49 2025 by rpki-client