Manifest

$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
File:                     48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft (raw, json)
Hash identifier:          N15UL1vtuV+PAOJGj08oLkRsOR7X6TDfdm5WnqGBLpc=
Subject key identifier:   D4:24:A6:6A:F3:BC:5A:02:F2:B9:39:F5:D7:9D:A9:4F:8F:32:63:23
Authority key identifier: 95:7F:80:DC:D2:C2:C8:F8:5C:60:9E:E0:B0:33:E4:32:74:E8:45:D1
Certificate issuer:       /CN=48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb
Certificate serial:       010D0C9F4328584FD1A95922BED7540C71C70156
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft
Manifest number:          010D0C9F4328584C9FB0A743C63FC0021278A726
Signing time:             Thu 12 Nov 2026 20:00:24 +0000
Manifest this update:     Thu 12 Nov 2026 20:00:24 +0000
Manifest next update:     Sat 14 Nov 2026 20:00:00 +0000
Files and hashes:         1: 48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl (hash: BrxvkRC/YUbCWElgo/uTTpDkFARNU1GwLFdwRK6L3H0=)
                          2: a431edd56562684ecd4be848d93f0b586ff8e207fa767c6dd9.cer (hash: C3NCIlmsujqfWUyFpbRJaRDayDWrUvNGMo5XNLlQI1E=)
Validation:               Failed, CRL has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4f:d1:a9:59:22:be:d7:54:0c:71:c7:01:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb
        Validity
            Not Before: Nov 12 20:00:24 2026 GMT
            Not After : Nov 14 20:00:00 2026 GMT
        Subject: CN=83d989cf-9aa4-45a1-95c9-66ff5dd5bb72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:37:7d:87:99:74:ae:c1:1d:fe:12:3d:e1:0c:
                    dc:c2:ea:8b:86:3a:fb:b1:5b:82:de:bc:c2:11:c4:
                    8f:58:cb:72:2d:dd:c1:b7:6b:57:d8:63:b3:08:22:
                    0f:bd:15:66:d4:36:47:e2:49:2a:56:b5:37:db:4b:
                    5a:4f:88:04:ae:1c:93:8b:70:d5:83:4a:58:b3:93:
                    aa:78:52:72:69:b9:19:05:d7:cf:0a:ee:bf:42:49:
                    da:80:4b:ee:da:d7:3c:e2:a0:75:09:6e:3e:1b:d1:
                    a3:ef:76:81:7f:36:12:5f:90:17:89:e3:d6:5e:71:
                    30:a9:bf:ef:e9:1e:d1:38:9a:31:b0:11:35:5d:45:
                    97:2a:83:8d:5e:50:8b:89:d1:40:13:48:fd:e9:5e:
                    35:55:70:aa:fc:12:64:84:fe:ac:3a:fa:ee:03:56:
                    38:14:d8:44:c4:6e:e3:9f:9c:f9:4a:d4:0d:ab:9d:
                    69:08:ff:a3:1e:97:27:c7:a8:41:4c:eb:91:6c:12:
                    ad:8f:ca:d8:50:c5:7a:3b:ae:6a:1b:39:5b:54:9e:
                    20:3b:05:26:bc:ca:17:01:90:48:34:8f:02:63:d2:
                    16:93:54:3e:14:9d:31:ef:58:7d:7d:4f:ce:41:18:
                    21:da:30:6b:5f:65:3e:33:28:eb:46:b9:ef:b1:df:
                    64:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:24:A6:6A:F3:BC:5A:02:F2:B9:39:F5:D7:9D:A9:4F:8F:32:63:23
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.crl

            X509v3 Authority Key Identifier:
                keyid:95:7F:80:DC:D2:C2:C8:F8:5C:60:9E:E0:B0:33:E4:32:74:E8:45:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/48db9f37-ebb1-4e58-8232-ff9d9bcf5ceb.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:1b:5a:ca:ee:db:24:cc:c5:29:35:2c:86:9f:04:aa:71:0d:
         6e:e5:09:18:ff:24:01:6d:ea:57:7c:db:2b:8c:cd:15:09:35:
         91:b7:ac:a8:29:3b:10:c4:07:bc:e1:5b:a7:43:d3:89:27:ad:
         8a:6b:66:c7:d2:ba:9e:88:ba:62:5c:25:d0:23:b3:29:b2:ce:
         08:2a:a9:a6:92:d9:73:87:3e:21:8f:3c:58:9a:4f:1c:c5:86:
         1a:b7:a1:88:ac:14:43:aa:92:bd:ce:5d:57:e8:0b:1e:3c:9c:
         b6:41:8f:e9:65:02:59:94:29:ab:be:3d:06:0c:a7:0e:28:a9:
         01:6d:79:df:68:bd:07:bb:f4:41:61:c1:eb:2b:46:0e:46:ee:
         41:0d:a4:31:f3:eb:a3:78:2b:be:f6:3b:a2:c1:66:3f:f6:d2:
         bf:a6:e8:6d:35:34:d7:71:47:d5:3f:74:29:87:68:70:b4:c0:
         bd:03:8f:b8:d7:32:3b:59:8a:38:e6:31:67:b5:1a:9e:db:52:
         4f:3b:13:6f:4c:a2:70:07:6e:ad:6c:44:2f:48:e9:e4:24:86:
         c8:41:74:3f:12:a4:0f:e2:7f:8e:a4:2d:9a:52:b6:cc:e5:95:
         4e:de:26:83:e1:97:be:58:f7:af:63:c8:d1:2e:27:61:d0:cd:
         f3:7c:b4:36
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWE/RqVkivtdUDHHHAVYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhkYjlmMzctZWJiMS00ZTU4LTgyMzItZmY5ZDliY2Y1
Y2ViMB4XDTI2MTExMjIwMDAyNFoXDTI2MTExNDIwMDAwMFowLzEtMCsGA1UEAxMk
ODNkOTg5Y2YtOWFhNC00NWExLTk1YzktNjZmZjVkZDViYjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjd9h5l0rsEd/hI94QzcwuqLhjr7sVuC3rzC
EcSPWMtyLd3Bt2tX2GOzCCIPvRVm1DZH4kkqVrU320taT4gErhyTi3DVg0pYs5Oq
eFJyabkZBdfPCu6/QknagEvu2tc84qB1CW4+G9Gj73aBfzYSX5AXiePWXnEwqb/v
6R7ROJoxsBE1XUWXKoONXlCLidFAE0j96V41VXCq/BJkhP6sOvruA1Y4FNhExG7j
n5z5StQNq51pCP+jHpcnx6hBTOuRbBKtj8rYUMV6O65qGzlbVJ4gOwUmvMoXAZBI
NI8CY9IWk1Q+FJ0x71h9fU/OQRgh2jBrX2U+MyjrRrnvsd9kXwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFNQkpmrzvFoC8rk59dedqU+PMmMjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80OGRi
OWYzNy1lYmIxLTRlNTgtODIzMi1mZjlkOWJjZjVjZWIvNDhkYjlmMzctZWJiMS00
ZTU4LTgyMzItZmY5ZDliY2Y1Y2ViLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDhkYjlmMzctZWJiMS00ZTU4LTgy
MzItZmY5ZDliY2Y1Y2ViLzQ4ZGI5ZjM3LWViYjEtNGU1OC04MjMyLWZmOWQ5YmNm
NWNlYi5jcmwwHwYDVR0jBBgwFoAUlX+A3NLCyPhcYJ7gsDPkMnToRdEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80OGRiOWYzNy1lYmIxLTRlNTgtODIzMi1mZjlk
OWJjZjVjZWIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCIG1rK7tskzMUpNSyGnwSq
cQ1u5QkY/yQBbepXfNsrjM0VCTWRt6yoKTsQxAe84VunQ9OJJ62Ka2bH0rqeiLpi
XCXQI7Mpss4IKqmmktlzhz4hjzxYmk8cxYYat6GIrBRDqpK9zl1X6AsePJy2QY/p
ZQJZlCmrvj0GDKcOKKkBbXnfaL0Hu/RBYcHrK0YORu5BDaQx8+ujeCu+9juiwWY/
9tK/puhtNTTXcUfVP3Qph2hwtMC9A4+41zI7WYo45jFntRqe21JPOxNvTKJwB26t
bEQvSOnkJIbIQXQ/EqQP4n+OpC2aUrbM5ZVO3iaD4Ze+WPevY8jRLidh0M3zfLQ2
-----END CERTIFICATE-----
Generated at Sat Nov 14 22:27:34 2026 by rpki-client