Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft
File:                     1fe8849b-66cd-4afe-9b0b-970eafad1175.mft (raw, json)
Hash identifier:          DgMRkh6zG+7WZYUluwXaR6v3cAm1VdQaJobCcrGnfcg=
Subject key identifier:   03:D2:32:DF:E9:2B:17:F8:8E:A6:43:66:8F:D3:1D:44:61:E3:2F:82
Authority key identifier: BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95
Certificate issuer:       /CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
Certificate serial:       010D0C9F43285849831B87DD2F8AD03ABE5D86F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft
Manifest number:          010D0C9F4328584073A851780268C0AEA86E4EC3
Signing time:             Sun 13 Apr 2025 12:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 12:00:00 +0000
Files and hashes:         1: 1fe8849b-66cd-4afe-9b0b-970eafad1175.crl (hash: cflz8vEOXqDrA2684KJJ5fbsoDHHsXY7HUw1KDo6lIc=)
                          2: 31087add-e607-36b0-8d31-ad7c14d91fbb.roa (hash: +Ulu9FHXsIZ+dR2Hh3cgZOldSCf4HviZS1GV3NQ9vDQ=)
                          3: b997d817-4fa0-3f4d-b90b-0646406d600a.roa (hash: 2VcmOxK8Pr698T6GOYdjxpLCkJmLw9OHCvCutlGiZO8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:1b:87:dd:2f:8a:d0:3a:be:5d:86:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fe8849b-66cd-4afe-9b0b-970eafad1175
        Validity
            Not Before: Apr 13 12:00:07 2025 GMT
            Not After : Apr 16 12:00:00 2025 GMT
        Subject: CN=b6f32fdc-2661-4b08-ac93-a9fe3ebd73d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:be:0c:db:73:e4:65:7e:a3:23:c8:39:bb:9c:
                    f4:08:40:44:9d:f3:d6:47:0b:29:6d:e6:5c:30:a0:
                    82:bc:b1:52:84:37:77:0a:96:1e:c0:87:36:2d:a1:
                    83:68:e1:64:c3:e2:ff:f5:36:2a:2a:19:3e:80:20:
                    71:d0:19:d5:6b:b6:a8:8c:7e:ee:81:6b:4a:45:44:
                    27:e9:3e:6a:a6:13:0f:7a:61:f0:12:0c:39:4b:f8:
                    71:91:a6:75:07:45:78:ad:04:35:08:5f:ab:ee:1c:
                    98:15:96:d6:e9:a5:ad:d5:85:7d:09:cd:d2:19:64:
                    f2:c9:78:46:69:3f:ed:ab:6f:6a:19:a4:c4:92:a6:
                    46:a6:7b:9a:e1:e1:cf:d8:2e:de:36:69:cd:b7:4c:
                    46:94:b9:d0:90:e9:77:18:94:02:90:93:65:fd:3c:
                    98:81:a0:89:6c:16:40:2c:00:26:6f:87:6c:e0:35:
                    d1:76:f5:2a:e9:5a:d6:61:77:0f:c6:80:24:2b:a5:
                    ef:ea:0a:1f:32:3d:a2:93:8e:17:df:b6:08:1e:35:
                    0e:b9:af:f7:e5:8a:13:fb:d6:3b:e0:5d:cb:68:45:
                    4b:31:f1:cb:29:94:70:b3:56:40:a4:d7:20:0e:91:
                    6d:60:4f:b8:51:80:59:d6:b1:9b:69:4d:5b:e3:a4:
                    96:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:D2:32:DF:E9:2B:17:F8:8E:A6:43:66:8F:D3:1D:44:61:E3:2F:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175/1fe8849b-66cd-4afe-9b0b-970eafad1175.crl

            X509v3 Authority Key Identifier:
                keyid:BE:A8:20:9C:13:5E:FC:F9:EE:69:98:CE:84:4E:B8:E8:DC:83:F4:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1fe8849b-66cd-4afe-9b0b-970eafad1175.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:b0:8b:5c:e6:4e:4c:da:30:1f:2c:3a:b5:f3:b9:7e:ed:5e:
         b4:50:5b:36:22:d7:61:b6:2f:14:56:3f:44:79:9e:df:92:94:
         9c:00:26:8a:a3:91:11:b3:20:4e:48:70:8f:0b:df:51:a3:66:
         36:f4:fb:4e:e4:67:1b:f7:b6:aa:36:b5:73:68:2a:47:67:b9:
         67:ca:f3:f4:46:cc:5a:11:6f:9a:98:c5:d4:b2:20:0f:d2:5f:
         c1:00:12:ed:aa:48:1f:c6:26:bc:3f:50:7a:5e:15:28:30:42:
         c0:37:19:ab:bf:cc:a7:e1:b3:c6:fc:de:d0:de:8c:2e:e0:8d:
         07:0e:10:b0:4b:62:ce:a3:d5:45:4c:c5:35:17:89:93:a9:68:
         e1:c5:7c:40:50:44:6e:58:6a:db:6f:44:c7:2c:3d:11:99:c3:
         59:44:5e:3f:3f:14:6f:b0:58:0b:7c:8f:f2:18:76:82:9b:82:
         2b:f9:26:fa:0b:1c:93:1c:88:04:0a:ed:47:2d:70:ea:44:92:
         ed:94:9d:f7:9a:4a:09:82:ca:b5:8b:04:c8:ed:d4:da:2e:1c:
         57:d2:83:cb:2e:5a:fd:e2:ae:66:85:4f:03:d0:c7:62:a1:1e:
         68:18:fe:62:e3:d0:06:33:28:7d:71:a8:52:bb:90:ee:27:37:
         0a:18:ea:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----