Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
File:                     8a8a1a2d-c949-4896-93b9-71f917048e79.mft (raw, json)
Hash identifier:          s1YvvU7Cnlp1E81thimuipjVyuS4S9znamatPqEjNZs=
Subject key identifier:   4A:94:C4:D1:80:18:C4:09:94:75:15:11:5B:54:71:0B:C7:A1:EF:1A
Authority key identifier: CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB
Certificate issuer:       /CN=8a8a1a2d-c949-4896-93b9-71f917048e79
Certificate serial:       010D0C9F43285849AB9673E4BC30E35E25831880
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
Manifest number:          010D0C9F4328584073A831A891656E121B8A8B26
Signing time:             Mon 28 Apr 2025 00:00:07 +0000
Manifest this update:     Mon 28 Apr 2025 00:00:07 +0000
Manifest next update:     Wed 30 Apr 2025 00:00:00 +0000
Files and hashes:         1: 078b78cf-d953-3309-bbf3-6ddd55fee124.roa (hash: WlIz0KmlTFXCGFj1v3E66xjIx+bm0tWkCrNamgGaBos=)
                          2: 2f247cbb-2a74-3f35-b54f-a42a2616a74a.roa (hash: toJOJJl2jP7Ywbs/JQd2xGDP7D5tmc0CTB87lleFVtE=)
                          3: 8a8a1a2d-c949-4896-93b9-71f917048e79.crl (hash: wkZCHCgVk69+cNwTqyjZcEfXpY1L02aI6cccdyDVPPo=)
                          4: 8eefcb71-042e-3011-9c4c-a4c1dae3119d.roa (hash: xkohLur+Vhex5TZbmiDZ8m87kSa6x4typMFQgzNo61I=)
                          5: aa3aae4b-ef83-3d14-b9ad-eecfeadf11d1.roa (hash: bD4aAkuIKS8nx4MFp73/uIl3svtrIm2Y3nesVNzfIPc=)
                          6: af752bb6-5c49-322d-b8be-c43eb496a124.roa (hash: X5ENV6K/08Zive6SbvozIV4neOpUXvNBJ9PzAPfBDRw=)
                          7: d57c390c-9f0a-385c-a044-6ac60c35012d.roa (hash: VuYEGWE9nnjYw2utiBzM5WCOey2/8V6ehN6RCUZS4Zw=)
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:96:73:e4:bc:30:e3:5e:25:83:18:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a8a1a2d-c949-4896-93b9-71f917048e79
        Validity
            Not Before: Apr 28 00:00:07 2025 GMT
            Not After : Apr 30 00:00:00 2025 GMT
        Subject: CN=5d030f85-0f1d-4bc1-a7c9-d484ab3d55aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:d4:c1:57:87:44:b7:b6:65:de:cc:e7:a2:
                    cc:fa:0b:e8:d9:fa:30:49:55:34:ab:ca:77:3f:b3:
                    33:90:e9:5b:0a:03:c6:21:26:62:1b:21:8a:fd:1b:
                    d6:89:e1:97:53:d7:32:68:11:85:51:a4:8b:f5:39:
                    49:17:6d:92:ad:87:6f:35:3f:59:f9:a6:0c:ab:4e:
                    85:e8:04:42:f5:47:0d:f0:a4:c8:09:be:24:7f:80:
                    67:c5:d7:1e:65:a6:b6:51:3b:4a:31:f5:d4:f2:24:
                    a0:bd:70:c0:85:16:03:0d:a5:7f:a2:44:d8:f7:54:
                    5e:74:1d:d2:79:b6:b5:7a:f4:9d:f7:8b:b4:3e:e2:
                    31:d2:68:2b:c3:f6:b4:65:e5:ad:b6:81:ce:df:fc:
                    08:e7:4c:70:07:4d:1e:f4:cb:6f:12:3c:47:d7:7d:
                    ce:d0:68:9e:14:d8:02:d4:9e:3a:37:69:67:00:99:
                    4d:0b:9d:0d:7b:70:65:29:57:19:e2:58:87:c6:3f:
                    d9:5f:24:4a:88:20:83:ec:e3:d0:6a:81:31:25:70:
                    d3:a2:c4:fc:a9:f8:6a:d1:d5:f8:9f:3e:9e:01:96:
                    2b:51:95:91:3b:d4:56:98:8b:23:57:f2:f1:db:54:
                    13:b1:d8:f5:4c:e0:f9:3b:ac:c8:a5:b1:59:e2:d3:
                    2f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:94:C4:D1:80:18:C4:09:94:75:15:11:5B:54:71:0B:C7:A1:EF:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79/8a8a1a2d-c949-4896-93b9-71f917048e79.crl

            X509v3 Authority Key Identifier:
                keyid:CA:65:E2:79:44:A5:9C:CA:6F:1B:C6:65:BC:37:0B:8D:6F:B8:CF:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8a8a1a2d-c949-4896-93b9-71f917048e79.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:ad:a9:c2:02:c9:34:07:07:00:1a:89:b3:fb:f2:f6:ea:f8:
         cb:65:d6:6a:f0:89:a4:c0:2e:0c:d7:1c:bc:b6:2a:aa:92:d3:
         dc:db:56:3c:2e:9c:38:a3:e3:4e:69:61:97:fe:10:b3:53:1c:
         88:8f:6b:6a:7b:df:d6:b7:fe:53:4c:8d:3b:00:ad:41:57:61:
         ab:ef:fb:1a:d2:53:f9:c0:fc:8b:de:a3:eb:bb:38:9d:26:31:
         47:b9:ca:c0:1e:c1:fd:a7:b9:9a:22:41:16:d8:c8:1e:00:07:
         44:2c:d8:b3:9f:3c:04:22:94:e9:ba:94:e6:e6:eb:7f:88:36:
         ce:79:20:da:63:cf:7f:6b:77:4a:8d:82:83:59:7a:69:c5:7d:
         d2:2e:34:07:44:2b:ce:e0:be:f9:8b:d7:9d:2e:38:6f:34:36:
         95:bd:05:9f:8e:89:1a:48:14:a6:2f:39:b4:a8:62:e7:ae:42:
         25:94:f6:9a:1a:42:35:bd:bb:84:d1:51:fc:5b:67:bc:2f:0c:
         f1:eb:88:46:f3:5d:9c:cf:46:a8:f0:84:dc:c9:52:a4:1e:45:
         93:2e:20:5e:d3:c1:8e:57:61:e8:fd:35:cb:52:a2:b1:bc:ff:
         ce:f5:e2:5b:91:3e:70:6b:8e:bb:13:6e:e8:87:d5:f8:29:22:
         c5:fe:28:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 28 12:30:15 2025 by rpki-client