Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.mft
File:                     68da87f2-77b1-4965-8477-aac285a6686d.mft (raw, json)
Hash identifier:          dW/yde9tkvaT+15BZUg5Qgy11G6JWSI1vtoog9i98V4=
Subject key identifier:   E2:B7:EF:0C:73:11:E4:39:F2:FC:F5:77:7B:30:30:95:00:B0:E7:1F
Authority key identifier: 07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3
Certificate issuer:       /CN=68da87f2-77b1-4965-8477-aac285a6686d
Certificate serial:       010D0C9F43285849824B13989CDA69BF991BB050
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.mft
Manifest number:          010D0C9F4328584073A83E4AB3F4085D3550F1C2
Signing time:             Sun 13 Apr 2025 05:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 05:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 05:00:00 +0000
Files and hashes:         1: 428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa (hash: RhSVbSS+ZhDkwuXcwA0NBMnX/f4ApZkl/hgUgODP5bk=)
                          2: 68da87f2-77b1-4965-8477-aac285a6686d.crl (hash: YhdODOtDXdmVhZiuI4gNZbsYIVqeMBvtLGt+qyygylw=)
                          3: b0e8801d-2b87-3e3c-a957-e5009ba71bd9.roa (hash: +8uN8BU0o7DkxyRbtLXaikNtHOACsaa2MHoS26TPYyM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:4b:13:98:9c:da:69:bf:99:1b:b0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68da87f2-77b1-4965-8477-aac285a6686d
        Validity
            Not Before: Apr 13 05:00:07 2025 GMT
            Not After : Apr 16 05:00:00 2025 GMT
        Subject: CN=31c216e0-5026-4640-9003-cb9f373cfe06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:db:a7:d6:69:54:3c:73:d1:04:64:86:f7:42:
                    b7:b5:c3:0d:01:48:d0:9c:94:88:fa:e4:50:2b:35:
                    25:7e:85:24:be:75:66:51:e1:8d:2c:26:8a:67:d9:
                    7e:d3:f1:c4:04:fc:96:e8:ab:fd:66:9b:2a:e7:b2:
                    45:f6:35:9f:d1:f2:56:f8:b2:d4:9d:ad:3e:70:e9:
                    5d:b4:f6:0e:af:d6:55:ae:f1:e9:f5:09:75:70:11:
                    02:5f:3d:0c:e8:73:ba:ed:ca:63:a2:52:ef:5a:9a:
                    aa:99:7f:03:54:fc:72:da:e9:4f:a6:bd:49:65:f2:
                    da:e0:c8:94:d5:58:f7:f2:7d:6c:6d:43:bd:fb:cf:
                    81:b9:4e:95:a5:8b:d6:b9:ab:db:4d:ed:3f:85:ba:
                    2f:06:4d:63:28:2a:02:b1:e6:12:c3:4a:f4:52:82:
                    e4:94:76:3c:d5:fe:9b:d9:cb:d6:c2:90:71:91:26:
                    9a:ab:a4:27:47:57:8d:f4:92:c8:7e:53:95:61:1e:
                    78:f7:b7:be:3b:f3:2b:95:3b:c6:2a:22:ab:60:39:
                    01:6f:a4:7e:43:78:39:c8:d9:a4:50:6a:0e:a3:d4:
                    83:be:be:c0:44:35:bf:dd:09:b3:a9:bf:0e:d8:c5:
                    93:ef:69:c4:9e:85:27:5a:83:1c:40:8c:f4:c4:47:
                    71:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:B7:EF:0C:73:11:E4:39:F2:FC:F5:77:7B:30:30:95:00:B0:E7:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.crl

            X509v3 Authority Key Identifier:
                keyid:07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:63:33:0b:a7:7f:87:55:f2:42:be:7f:b0:65:3c:1a:6a:c3:
         75:18:66:84:5f:fb:5a:b5:c4:6a:37:be:90:42:a6:36:ea:1e:
         8d:2d:e5:6c:56:5a:77:7c:c5:70:35:95:11:c3:ac:da:49:df:
         a2:fc:c8:ee:a8:e0:92:15:42:42:08:34:7b:90:1a:b3:b3:13:
         7e:eb:28:fe:bd:be:23:be:7c:4e:85:a8:38:fe:f1:d2:eb:60:
         b4:b9:17:d1:9a:88:ea:0d:d0:f5:4d:c2:d0:e3:71:74:7a:f0:
         67:ee:66:d1:e7:48:8f:de:e1:25:28:7a:01:38:56:2f:e7:f8:
         da:cc:7a:3f:6f:0a:d8:34:72:55:da:06:32:8b:c3:2d:ac:2c:
         7a:b6:83:ad:0b:3d:9d:be:52:c1:3c:4a:18:e9:18:b7:62:2f:
         38:03:07:5e:93:19:41:55:7c:44:06:63:03:9d:b9:9c:75:d6:
         e0:a9:7b:58:08:5b:d1:80:d2:a1:7a:3e:cf:14:26:b2:33:83:
         fc:85:74:e4:fd:36:37:57:3c:42:2c:c9:31:d9:a7:29:a0:9f:
         a3:1d:88:bc:8f:97:cc:92:1d:e3:3f:af:a8:00:0f:1b:85:15:
         9b:99:e1:29:a7:85:c4:e4:19:4d:41:ab:d2:34:63:68:4f:76:
         a4:22:01:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:31 2025 by rpki-client on console.sobornost.net