Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft
File:                     d8e4c881-0377-49f5-9af5-410d30fb5527.mft (raw, json)
Hash identifier:          PjF9Q+mZUCVRgy1YQ9rtFl5RnFqBJWtHUDNclmjIBSE=
Subject key identifier:   46:4B:0B:EE:5E:9C:DE:2E:89:7B:9A:97:38:8C:B6:1C:7C:54:D7:FC
Authority key identifier: F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E
Certificate issuer:       /CN=d8e4c881-0377-49f5-9af5-410d30fb5527
Certificate serial:       010D0C9F43285849A8726E352655AF7AA038B080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft
Manifest number:          010D0C9F4328584813A931C3CB6154C48367AE35
Signing time:             Sat 26 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 26 Apr 2025 21:00:07 +0000
Manifest next update:     Mon 28 Apr 2025 21:00:00 +0000
Files and hashes:         1: 0bb8b992-e69b-3f68-9228-3d2a8870d832.roa (hash: CvLcWlYhfhxaZptTuzGzXoXcP28FAH+hF7FwtqkMLa4=)
                          2: 39b21eff-11aa-3f46-9161-0f08c58454cb.roa (hash: XdGD29B5T9NHdObenfPuCzmFjS1TYsKjb1SAkD9EiBU=)
                          3: 9cb8e192-fc5c-34ae-ae54-e5aa11da0a78.roa (hash: OwQKvF3tvWNADeoscVIEaeJDut1G0lxkIjn0cHwdLAU=)
                          4: d8e4c881-0377-49f5-9af5-410d30fb5527.crl (hash: IQJISR8LFWra84VdPnINuI54PNZgltkKofFcQTFp+n0=)
                          5: dfff354e-32d5-3edc-9f59-69429128c70f.roa (hash: VMo8WHUB24PO1bOq49yoY0GVeF5jrfkNwlMxSMLZ5y8=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a8:72:6e:35:26:55:af:7a:a0:38:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8e4c881-0377-49f5-9af5-410d30fb5527
        Validity
            Not Before: Apr 26 21:00:07 2025 GMT
            Not After : Apr 28 21:00:00 2025 GMT
        Subject: CN=bdf3a167-de9a-4020-aa72-a042225e39cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b8:2b:09:24:cd:07:4a:42:38:ec:0a:69:48:
                    83:c8:d0:43:f7:ad:46:c5:7c:9b:4a:21:7a:39:99:
                    fd:0f:5a:73:81:1c:e5:be:3a:3f:1d:02:7f:f2:2a:
                    96:44:41:06:39:43:80:bd:1b:24:ba:9e:9e:b3:52:
                    27:c2:47:2d:9d:34:b1:32:e4:21:21:c7:5f:62:15:
                    0f:0d:63:68:b2:ae:79:ee:53:76:be:34:16:d0:00:
                    68:17:d8:a4:a9:7b:41:6f:86:e2:84:5f:d0:2f:1a:
                    12:cb:e8:80:ee:02:11:37:dd:2c:4d:11:d9:29:80:
                    af:75:b5:30:43:21:76:73:61:b8:13:1b:d4:50:03:
                    f9:15:7f:53:f1:f7:dd:76:e1:7b:27:7a:34:3d:7a:
                    77:bb:84:1e:f5:04:d3:c7:fc:9c:2f:ef:63:b7:e1:
                    66:4a:b0:c6:9e:91:be:90:42:29:cf:93:56:e7:97:
                    3e:96:f7:98:46:a8:82:1c:08:54:4c:ae:cd:f4:d1:
                    1d:55:53:6a:53:12:69:7f:66:9b:7e:93:cc:40:4c:
                    d5:f1:2b:4f:21:8a:cc:cc:87:e8:f3:59:63:b8:18:
                    eb:9e:eb:cd:5b:50:81:6c:14:b0:3d:05:15:de:19:
                    4e:b2:2c:2f:32:c0:9d:7b:81:2c:55:e1:ca:96:66:
                    6d:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:4B:0B:EE:5E:9C:DE:2E:89:7B:9A:97:38:8C:B6:1C:7C:54:D7:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527/d8e4c881-0377-49f5-9af5-410d30fb5527.crl

            X509v3 Authority Key Identifier:
                keyid:F8:65:15:9D:DF:4F:3D:56:24:B0:0A:D9:62:F4:FB:4F:82:E2:D3:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d8e4c881-0377-49f5-9af5-410d30fb5527.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:10:2f:ce:dc:8d:b7:76:dc:13:78:93:8e:01:13:0c:74:c6:
         0b:a6:5b:31:2d:64:6a:cd:d8:8c:30:e6:bc:da:0a:7d:df:b4:
         f5:12:3e:aa:25:ad:7d:db:2b:51:6b:b8:0c:a4:ec:e0:d6:fe:
         ae:ab:f1:f2:11:dd:f8:d6:f6:12:85:a2:9f:42:75:58:67:e7:
         53:a0:c5:be:2b:ab:f4:eb:04:93:63:2b:f4:b0:c5:2d:ce:7d:
         4d:a6:e8:f3:54:95:52:90:a7:ba:82:99:d6:87:32:86:d7:8f:
         90:fb:03:a8:f3:1d:9b:2b:3e:cb:aa:8e:1b:46:c6:34:ce:13:
         ff:76:bd:0f:03:05:f9:ae:c3:62:30:36:83:10:8a:ca:02:a5:
         54:44:41:30:d0:ba:57:00:c0:7c:93:46:76:c3:eb:56:cf:1f:
         6f:b1:be:e8:32:cf:7b:a4:01:85:73:59:42:39:d0:b6:c6:bd:
         a6:ca:a7:e2:f8:4b:a2:75:39:18:ba:1a:ea:1e:d2:de:23:11:
         61:1c:c5:f6:ac:36:12:c0:06:44:9a:95:88:6c:6d:ca:64:24:
         5f:06:12:80:8f:cb:f9:6d:75:ef:aa:d6:ee:1e:92:3e:2d:0b:
         47:35:ab:ef:c9:27:54:36:69:ca:00:82:8b:86:6d:30:ff:07:
         8d:35:3b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 27 07:15:51 2025 by rpki-client