Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
File:                     2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft (raw, json)
Hash identifier:          Huk4lxHqrM8OIX56g3Gf9/sCk6RmzUqAdt0Lf21T4mU=
Subject key identifier:   76:B9:E4:9F:15:65:0E:93:23:9E:F5:1D:B4:6F:05:FB:C3:3A:16:6F
Authority key identifier: 6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E
Certificate issuer:       /CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
Certificate serial:       010D0C9F432858498374E1E65A3B0BE03ABDA600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft
Manifest number:          010D0C9F43285840870142C2DFA716F6EA3A43CC
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 0397d616-845a-3a5d-9ca7-2d7583a9f252.roa (hash: EG2ACogHLdHnUMVX7fxE2HkvvLB9fM6nGjNduZJxMtM=)
                          2: 2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl (hash: kUvHXbmE1rSB7Fd3FshtplEK7nECGMcD5VvZwuk+H+4=)
                          3: 90d6e3e8-8976-3a11-89ab-7dc98f3531bc.roa (hash: /uAuvSdKOWqkx+UzpwxZjOQ2nB+HGS0taAsf476L5vA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:e1:e6:5a:3b:0b:e0:3a:bd:a6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cdc7434-e1cd-4dee-b0fa-1d7097306b9c
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=74d7e57c-12f2-4c72-b36c-f91fb999dd78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:86:0b:3d:b1:5c:55:a8:2f:37:42:65:64:b3:
                    3a:0a:2b:d9:60:d7:15:2c:6b:95:26:90:6b:79:a6:
                    ec:3f:20:9d:fb:64:57:f6:19:50:b3:c2:ad:94:27:
                    03:e2:ae:15:34:ab:66:75:1d:fb:4e:4e:48:de:72:
                    e8:37:39:6b:43:09:15:41:e1:05:41:3f:ff:cd:b5:
                    01:80:2a:8c:97:ed:65:77:1d:88:47:76:9c:ec:d9:
                    25:9e:8e:f3:a5:37:da:2c:8e:47:8d:1f:e3:62:06:
                    21:e3:17:2f:73:32:c1:bb:f7:19:d1:0e:1c:c6:05:
                    47:53:bc:3c:b2:eb:4e:52:5d:b7:90:42:10:21:a7:
                    28:bb:b2:59:30:d3:4b:ad:fe:8b:85:67:d1:4c:0f:
                    f1:fd:55:f5:72:67:5e:96:af:a4:5b:3f:be:37:85:
                    1f:e6:7e:9a:a0:3b:bc:c0:93:6c:82:b8:7d:85:82:
                    b6:be:5f:07:13:b6:81:53:ed:df:1f:ae:e7:b9:fb:
                    19:72:a9:dd:05:e9:00:01:e3:c9:85:d0:0a:4f:b4:
                    b4:ac:c7:81:f9:36:df:79:49:40:4a:ec:b7:03:9f:
                    4f:35:c5:4e:aa:5a:f8:98:d5:45:a1:46:c4:e8:9b:
                    a3:54:b0:0c:fb:5a:5d:e9:ad:7c:5e:73:70:54:35:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:B9:E4:9F:15:65:0E:93:23:9E:F5:1D:B4:6F:05:FB:C3:3A:16:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.crl

            X509v3 Authority Key Identifier:
                keyid:6F:CA:99:28:29:8E:36:15:9A:84:B9:A9:0D:76:8C:07:40:F1:F7:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2cdc7434-e1cd-4dee-b0fa-1d7097306b9c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:43:7e:ae:e1:54:b2:c7:e9:2c:bf:9e:3a:be:28:07:09:92:
         44:5c:7a:d6:e4:4c:fc:33:65:74:93:3a:9f:74:bc:87:b3:36:
         fa:97:9a:e4:65:bd:6f:7a:02:b2:df:b8:18:54:b0:08:ed:5c:
         e2:a1:7b:af:f2:fc:eb:f5:47:38:66:7e:b9:b7:8e:64:13:48:
         63:cf:e7:ae:72:b7:e0:c0:90:81:df:3d:fa:83:7a:9d:7d:25:
         f9:e5:d6:29:07:f6:5e:f5:da:eb:39:83:dc:60:a7:13:3c:b3:
         84:73:3b:bb:e8:df:66:40:3c:42:0f:51:58:0d:8f:42:47:fb:
         41:fc:f6:f2:9b:02:2f:13:6c:53:7f:88:cf:aa:44:20:49:ff:
         46:16:4c:e8:81:0b:19:83:69:23:9d:9f:f6:ff:24:fc:38:09:
         2d:d4:72:22:d8:c8:99:12:9a:68:5e:dc:d1:34:6d:53:3b:92:
         d9:07:04:be:cd:20:58:b8:b7:ae:2c:82:6e:ce:c4:2f:c3:67:
         1d:4b:25:7d:81:bb:1d:3c:93:60:8a:5e:4a:9c:08:20:62:9d:
         57:c0:b4:97:8c:03:ad:22:0a:42:a8:9c:27:ce:29:5d:f8:3d:
         9d:1a:b9:67:a8:1d:40:2b:78:4a:68:e6:31:08:49:15:5f:5e:
         e9:8b:6f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:12 2025 by rpki-client on console.sobornost.net