Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
File:                     21a7c020-ebbc-4762-8841-54efb508a7c7.mft (raw, json)
Hash identifier:          sHtwGEAomXKzQHQFGHkzs755N17TnogRdKRSJ8T9B08=
Subject key identifier:   5D:98:57:94:A3:7D:3B:27:02:EF:08:8A:F5:D9:72:AA:3F:13:EC:3F
Authority key identifier: 22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95
Certificate issuer:       /CN=21a7c020-ebbc-4762-8841-54efb508a7c7
Certificate serial:       010D0C9F43285849833A495DA29BA3713D853400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft
Manifest number:          010D0C9F4328584073A83BD55261AAC0C84A2E8C
Signing time:             Sun 13 Apr 2025 13:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:02:07 +0000
Manifest next update:     Wed 16 Apr 2025 04:00:00 +0000
Files and hashes:         1: 16591207-7557-378f-91cc-68c03f1a278a.roa (hash: t58PX2sTJkZms7dbyb+3PTomheo7jPZHOtgKSxB2OOA=)
                          2: 21a7c020-ebbc-4762-8841-54efb508a7c7.crl (hash: oC/cgzfVlvlpi1rkRbBsMD0Mi3OdaP+bKr9bsx0EIbs=)
                          3: 4c31ef02-9049-3a69-bdae-e0e93a1e447f.roa (hash: CiP4ljIm2UZMVHbtMfuJf6YKEHOx5Vzu6apC7LMTJsU=)
                          4: 65b660a1-3975-385b-add8-d9b4f1e98a18.roa (hash: ffJc5kV7t5Nmr47cFbCb8XKBjvnAyQDTLUPHiKaRD5Q=)
                          5: a0ea587d-3661-3a92-985e-52bc85f90a1c.roa (hash: 4VY37HkiOAJVvqGz1zCXSsdyGMfecKKAIWjuc0D1xHE=)
                          6: ab2f321e-03b1-3793-839e-0511ef8aaa27.roa (hash: +qZrwMeb9OwZiCk8/+bTKtN/woluTI24P63dMhCL0Hc=)
                          7: b233c099-01b4-3727-a701-02cd60f48355.roa (hash: ejJ+JbsMxAGvBh/kGn1vw3AvBk/gFw/xz1/1zOA29tM=)
                          8: ed01e030-9725-3706-a152-4c292fbd1f32.roa (hash: DfJL9a61TUk8KpmeDfMyWdar/9BOShknMKNTJ0iPqo4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:49:5d:a2:9b:a3:71:3d:85:34:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21a7c020-ebbc-4762-8841-54efb508a7c7
        Validity
            Not Before: Apr 13 13:02:07 2025 GMT
            Not After : Apr 16 04:00:00 2025 GMT
        Subject: CN=12b9e5c1-17e3-46d3-8aab-979492185184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:40:0c:00:8d:01:b5:fc:d0:99:8a:60:ad:61:
                    cf:46:5f:29:c1:32:35:77:2a:4d:da:43:81:3a:df:
                    45:a8:1a:2b:55:1b:99:fc:b2:a3:a8:94:c7:07:44:
                    cb:a7:a1:6d:ef:2c:87:97:ce:4e:d3:ae:bb:99:4e:
                    9f:bf:7e:0a:94:ca:d1:0b:62:1e:29:68:40:75:34:
                    b2:d0:51:44:6f:fe:ef:cb:43:8e:02:a4:a7:db:24:
                    e7:1d:e7:82:d5:e8:53:32:4e:4e:bc:91:1e:75:f1:
                    fc:a3:3c:f0:02:8b:9d:d5:27:14:27:84:4a:1e:c9:
                    ff:e8:61:ff:b5:94:3b:40:7e:23:07:03:87:30:e2:
                    2f:64:c2:3d:60:9e:61:f8:40:2e:d4:4f:7b:bb:2f:
                    11:5b:13:08:4a:84:d6:3a:1a:fa:af:5d:ea:20:5f:
                    82:3f:c1:fa:01:bc:34:61:bb:6b:6a:5d:e9:98:b9:
                    d2:aa:ed:0c:02:bb:7e:90:14:8e:40:e4:fa:11:bf:
                    c7:d6:7d:ea:be:6f:02:d9:e2:57:6b:16:50:62:ae:
                    fa:fe:b4:dc:c3:92:0a:d0:40:f5:1d:8e:52:db:0e:
                    ca:ee:ac:51:e9:7f:2c:74:e2:8c:22:ab:4a:75:a0:
                    9f:f4:bb:31:87:32:25:ee:23:8b:3c:31:d0:2b:19:
                    15:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:98:57:94:A3:7D:3B:27:02:EF:08:8A:F5:D9:72:AA:3F:13:EC:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7/21a7c020-ebbc-4762-8841-54efb508a7c7.crl

            X509v3 Authority Key Identifier:
                keyid:22:6E:FF:16:97:FA:92:15:31:0A:E9:76:DC:D3:D8:46:D3:8F:61:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/21a7c020-ebbc-4762-8841-54efb508a7c7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f6:9b:a1:75:72:83:bc:31:1f:49:65:ff:21:c4:0b:21:83:
         33:ca:54:41:fc:5e:81:1c:98:bd:4b:5f:19:db:8f:cb:66:a7:
         a7:df:01:2f:81:8d:7d:2b:9b:db:1f:a4:94:44:97:2a:fc:14:
         c8:1e:08:76:4b:e6:3d:7b:80:04:2d:7c:f4:b8:e1:42:9d:45:
         99:c3:3e:82:f2:38:f1:51:02:dc:8a:5b:ec:c0:f6:6d:e5:99:
         70:aa:97:7e:a1:a9:95:4a:3d:cd:35:d1:f7:82:e3:5b:68:02:
         fe:21:10:72:86:f8:5d:25:37:6d:c7:c2:2c:ae:fb:cf:07:d4:
         58:f1:cd:46:c1:d8:5f:56:9d:e8:85:d5:ce:5f:a2:b4:be:52:
         b8:d4:b9:33:a4:a2:b2:57:d3:f9:07:91:b6:01:40:85:fe:45:
         7e:f5:02:64:ba:35:c7:7a:f2:41:d6:96:6f:6e:b7:66:e4:6e:
         eb:a2:96:12:22:4b:b8:7e:96:1c:8a:bf:a5:b0:c3:d7:aa:0c:
         e0:f1:f9:0b:98:6f:ce:7d:9c:72:1f:33:5f:50:3f:22:40:05:
         ca:07:b5:3c:bd:c3:0b:54:e9:f6:76:10:48:4a:6d:85:7f:c2:
         67:68:da:e5:45:38:17:48:fd:c9:e2:95:6a:a4:11:ba:a5:f9:
         ba:a4:6f:1a
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmDOkldopujcT2FNAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjFhN2MwMjAtZWJiYy00NzYyLTg4NDEtNTRlZmI1MDhh
N2M3MB4XDTI1MDQxMzEzMDIwN1oXDTI1MDQxNjA0MDAwMFowLzEtMCsGA1UEAxMk
MTJiOWU1YzEtMTdlMy00NmQzLThhYWItOTc5NDkyMTg1MTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkUAMAI0BtfzQmYpgrWHPRl8pwTI1dypN2kOB
Ot9FqBorVRuZ/LKjqJTHB0TLp6Ft7yyHl85O0667mU6fv34KlMrRC2IeKWhAdTSy
0FFEb/7vy0OOAqSn2yTnHeeC1ehTMk5OvJEedfH8ozzwAoud1ScUJ4RKHsn/6GH/
tZQ7QH4jBwOHMOIvZMI9YJ5h+EAu1E97uy8RWxMISoTWOhr6r13qIF+CP8H6Abw0
Ybtral3pmLnSqu0MArt+kBSOQOT6Eb/H1n3qvm8C2eJXaxZQYq76/rTcw5IK0ED1
HY5S2w7K7qxR6X8sdOKMIqtKdaCf9LsxhzIl7iOLPDHQKxkV4QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFF2YV5SjfTsnAu8IivXZcqo/E+w/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3
YzAyMC1lYmJjLTQ3NjItODg0MS01NGVmYjUwOGE3YzcvMjFhN2MwMjAtZWJiYy00
NzYyLTg4NDEtNTRlZmI1MDhhN2M3Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMjFhN2MwMjAtZWJiYy00NzYyLTg4
NDEtNTRlZmI1MDhhN2M3LzIxYTdjMDIwLWViYmMtNDc2Mi04ODQxLTU0ZWZiNTA4
YTdjNy5jcmwwHwYDVR0jBBgwFoAUIm7/Fpf6khUxCul23NPYRtOPYZUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yMWE3YzAyMC1lYmJjLTQ3NjItODg0MS01NGVm
YjUwOGE3YzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCL9puhdXKDvDEfSWX/IcQL
IYMzylRB/F6BHJi9S18Z24/LZqen3wEvgY19K5vbH6SURJcq/BTIHgh2S+Y9e4AE
LXz0uOFCnUWZwz6C8jjxUQLcilvswPZt5Zlwqpd+oamVSj3NNdH3guNbaAL+IRBy
hvhdJTdtx8IsrvvPB9RY8c1GwdhfVp3ohdXOX6K0vlK41LkzpKKyV9P5B5G2AUCF
/kV+9QJkujXHevJB1pZvbrdm5G7ropYSIku4fpYcir+lsMPXqgzg8fkLmG/OfZxy
HzNfUD8iQAXKB7U8vcMLVOn2dhBISm2Ff8JnaNrlRTgXSP3J4pVqpBG6pfm6pG8a
-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:11 2025 by rpki-client on console.sobornost.net