Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft
File:                     438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft (raw, json)
Hash identifier:          oIC5CkvAdIGMTP+qaf3p+7r/1SB5axlbJ0KJ8aznFag=
Subject key identifier:   B2:D0:30:E1:0A:83:C5:5E:24:3E:EC:40:71:A0:13:F2:17:B5:BA:8B
Authority key identifier: B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC
Certificate issuer:       /CN=438b28e8-b7c9-4bb1-aec2-234f758dfa5e
Certificate serial:       010D0C9F43285849815CDA1B6B349CF692FC9E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft
Manifest number:          010D0C9F4328584073A82A0414D349C2D70C7869
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:00 +0000
Files and hashes:         1: 438b28e8-b7c9-4bb1-aec2-234f758dfa5e.crl (hash: sEYZEaWeyWID+XajsOlCx+GX3lA/Zc9uqLKGS2G/Ods=)
                          2: ff5e1e6f-9000-3a66-b478-c1dff7f45989.roa (hash: 6C/3bmq7KE41zwGVknexQnL/KVZ8hN2rxAnmYuysDjA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:da:1b:6b:34:9c:f6:92:fc:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=438b28e8-b7c9-4bb1-aec2-234f758dfa5e
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 15 21:00:00 2025 GMT
        Subject: CN=14cf0d15-36e3-485b-9397-7f5a0a57965b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:4d:0b:b7:47:82:7a:54:4c:5e:9f:e0:24:b9:
                    26:1b:9e:c7:df:cd:3e:18:0b:39:05:a7:8e:28:d7:
                    15:4d:43:17:27:9b:6c:5f:30:45:47:0c:79:e4:a0:
                    db:22:cc:8f:43:c3:fd:25:2a:1b:83:f1:23:1f:e9:
                    dd:fc:b8:f6:52:35:3d:fe:e1:eb:01:49:ba:50:50:
                    30:af:10:ec:f4:1b:f1:3c:f6:1b:70:20:53:9b:87:
                    a9:7d:86:00:d5:6f:9a:9d:2a:e2:87:18:a2:b7:7c:
                    6d:cf:8a:da:b0:f4:5d:af:91:5a:70:8a:3c:f8:55:
                    d0:eb:16:4d:5c:50:85:f5:18:9f:a1:b4:8b:d8:77:
                    37:c5:a3:6e:e8:d9:93:9e:a8:4b:9c:b2:eb:a3:9a:
                    06:f9:7e:41:9c:9a:d7:b9:49:7e:df:42:f6:e3:4b:
                    2d:dd:c8:c9:81:6b:39:44:3c:64:c9:61:62:ee:18:
                    05:a3:b5:52:cc:48:ca:56:0e:8b:ab:9e:30:f3:a4:
                    e0:1d:84:e4:a7:4b:d2:f5:02:d1:49:0d:d5:8d:a4:
                    16:f8:58:82:5f:76:c8:2c:03:78:5e:76:37:bf:4a:
                    32:c8:fb:cc:4b:2b:7d:6a:b2:da:77:28:56:51:b6:
                    cd:60:93:0e:59:cb:8c:49:6c:ab:66:37:55:9a:bc:
                    fa:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D0:30:E1:0A:83:C5:5E:24:3E:EC:40:71:A0:13:F2:17:B5:BA:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.crl

            X509v3 Authority Key Identifier:
                keyid:B2:60:93:23:B8:B0:88:91:08:42:73:EE:12:76:1C:1B:6C:7F:AE:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/438b28e8-b7c9-4bb1-aec2-234f758dfa5e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:12:f9:c1:d3:41:df:5c:87:8e:3d:7c:21:23:75:bd:54:3c:
         8f:48:3a:24:7f:8c:28:ad:da:18:e8:a6:c7:5b:34:48:b0:64:
         40:18:50:a4:8c:4f:75:25:47:6e:0c:a8:f7:cd:ae:c9:c7:52:
         15:ac:91:89:a9:06:a1:04:33:e0:b6:15:fa:99:b4:54:f6:33:
         34:43:7e:15:0c:cd:3a:e3:49:d1:31:10:16:dd:0a:6a:40:2f:
         57:38:59:8c:5c:89:4b:6d:22:80:19:34:d8:43:d2:68:22:a6:
         07:08:eb:be:d5:35:6a:22:71:64:a5:45:fb:07:15:e3:b3:11:
         09:57:c2:04:e8:98:f5:27:d7:a4:26:14:a8:36:fb:5c:89:4a:
         e7:36:e8:9f:f1:5d:d1:21:bb:87:8c:83:d1:08:9e:1c:dc:eb:
         e6:24:26:7d:84:5a:6e:35:b5:53:7d:a5:28:23:2e:5c:01:d8:
         57:5f:79:c3:c3:8e:f0:78:26:91:fa:18:05:8e:55:82:95:a2:
         86:3b:dd:65:ef:13:33:9c:c7:9f:5d:0d:cd:f8:6b:b6:4e:26:
         50:c8:db:e8:41:f7:c1:78:48:04:c9:90:06:f2:f2:15:3c:ed:
         9e:04:49:a3:e3:8d:22:f3:00:8b:30:74:ac:dd:da:59:d8:8e:
         3f:0e:77:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----