Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
File:                     B21BD1771A96D79F70796091512F278111148EF0.mft (raw, json)
Hash identifier:          OEHhiHjObXSTIY4noZGgwVViqx3Hm0ro9gDT6duOX9c=
Subject key identifier:   7C:3E:EA:85:F2:91:67:85:34:E8:EE:FA:63:E6:5A:61:08:D6:99:AD
Authority key identifier: B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0
Certificate issuer:       /CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
Certificate serial:       44D36E6E84C59B889FC87FC40A53178A773C818C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft
Manifest number:          048C
Signing time:             Tue 15 Apr 2025 16:50:32 +0000
Manifest this update:     Tue 15 Apr 2025 16:45:32 +0000
Manifest next update:     Wed 16 Apr 2025 19:24:32 +0000
Files and hashes:         1: 3230352e3231312e3135352e302f32342d3234203d3e203130373337.roa (hash: j9/nInW57uhcBfF6OVwoXmC5vrpOyOfO1s49XP1rLec=)
                          2: B21BD1771A96D79F70796091512F278111148EF0.crl (hash: qx/+2Xb1wo7CQI8Tmhryyww/Y2yBn1tuLR9Ps/46y6A=)
                          3: 3230352e3231312e3135342e302f32342d3234203d3e20383334.roa (hash: ydR1+DwOTXJsFHWx6voHhAnGbqOuPmls9v1tHohIIVA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d3:6e:6e:84:c5:9b:88:9f:c8:7f:c4:0a:53:17:8a:77:3c:81:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf
        Validity
            Not Before: Apr 15 16:45:32 2025 GMT
            Not After : Apr 16 19:24:32 2025 GMT
        Subject: CN=7C3EEA85F291678534E8EEFA63E65A6108D699AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:34:91:85:55:22:f5:d0:9a:93:d1:41:96:e6:
                    d6:7a:48:66:3a:f0:26:f9:9e:69:e7:29:3f:e8:e3:
                    ff:4b:89:5e:c6:d6:27:20:67:ed:39:38:de:54:0b:
                    29:dc:2f:3c:6d:55:b1:98:d6:1f:e6:d3:ab:82:00:
                    36:81:8f:c0:af:1e:77:5c:64:79:98:c7:12:92:0a:
                    65:e3:ed:f0:09:34:06:f0:02:c9:9b:f6:c9:35:4f:
                    41:5f:2b:c2:5f:96:d2:c8:84:cb:71:ef:b1:07:10:
                    37:55:f2:33:b4:d0:7a:54:a0:61:39:71:d1:dc:b5:
                    8e:48:83:9a:70:5d:80:27:b8:b4:ce:64:56:03:ab:
                    42:7e:43:76:ae:9b:e2:50:08:82:3a:c0:1c:79:59:
                    60:b5:59:48:23:6f:a6:3d:44:fe:4e:aa:55:9f:6f:
                    ca:da:d7:6a:50:04:6d:bb:a0:4b:92:fe:c6:d2:69:
                    a6:86:1b:fc:12:f1:60:d8:90:e6:83:2a:ff:dd:15:
                    4c:16:1e:d8:59:42:c5:c7:c7:de:08:3a:66:8c:d7:
                    16:66:b1:8e:9a:8b:67:dd:44:37:21:eb:d4:57:6c:
                    7c:26:2f:be:a5:52:b1:83:ae:0b:05:e5:1d:20:ca:
                    c2:77:ad:43:55:32:18:29:34:53:60:4c:a1:99:68:
                    9c:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:3E:EA:85:F2:91:67:85:34:E8:EE:FA:63:E6:5A:61:08:D6:99:AD
            X509v3 Authority Key Identifier:
                keyid:B2:1B:D1:77:1A:96:D7:9F:70:79:60:91:51:2F:27:81:11:14:8E:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8cabc1b4-9bdf-40a6-bbbb-66ae9d5a685a/37601393f78ee12fe7f73ae79bbfb74b431da7700cef2cf8cf.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade82d5de410184f2477fc40aab/0/B21BD1771A96D79F70796091512F278111148EF0.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:9e:f4:c3:e6:8f:3e:ba:d0:07:57:92:12:95:76:e0:58:fe:
         85:79:b2:6d:fe:de:eb:9c:55:09:be:5c:9d:a5:04:79:8c:1f:
         30:65:97:36:90:ee:5b:ab:5a:78:97:6f:27:0f:33:b6:4d:28:
         ad:15:d6:d4:37:3d:5d:4a:a4:96:00:e3:ef:25:1d:e7:90:a4:
         73:b3:92:a5:01:af:6d:73:2b:35:5e:4e:a8:0b:83:c8:a9:01:
         be:3a:36:e0:46:74:46:8b:1f:fc:ea:4e:45:60:30:7d:90:9b:
         d5:73:f6:1b:b9:2a:e1:3a:41:68:aa:e5:c7:db:1c:fe:0e:ef:
         4e:ac:1b:64:e2:58:d0:43:a7:04:25:b6:59:51:0e:c0:33:47:
         52:e9:1b:4f:ea:26:4d:ff:bb:2e:2f:33:62:36:70:3e:cf:98:
         68:91:4a:dd:04:c8:fc:9d:1a:4c:5d:cd:60:c5:83:c3:de:71:
         f4:27:78:6a:27:cb:33:fd:2b:36:76:b2:8f:eb:e4:18:6f:a9:
         b9:6b:93:9a:16:63:42:79:25:e2:95:04:a4:ca:78:ba:1e:95:
         0a:0b:6e:1b:00:1a:dc:f2:6c:15:ba:1e:92:1c:59:9d:11:41:
         9a:e5:5d:01:f8:ef:b6:2e:59:c1:90:4e:c2:5d:d0:01:81:5a:
         29:6f:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----