Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
File:                     99f49497-e145-4e4e-895c-2a7825ca6508.mft (raw, json)
Hash identifier:          G/JVtfFl2bUMs/KmHiwjq0oBIHTY2Td3Yz/aFqsY50c=
Subject key identifier:   85:8E:21:12:B7:53:02:3C:6D:5B:B8:35:0C:FE:46:63:48:CE:99:83
Authority key identifier: 2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4
Certificate issuer:       /CN=99f49497-e145-4e4e-895c-2a7825ca6508
Certificate serial:       010D0C9F4328584981B62426A2E155373F35FC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft
Manifest number:          010D0C9F4328584073A8325C8176E326DB58B332
Signing time:             Sun 13 Apr 2025 00:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 00:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 00:00:00 +0000
Files and hashes:         1: 014954f3-7dc1-3b60-8859-d30dcbd1f4c3.roa (hash: LekX8KlV960+ELPIoUioLVI6QOZ8HEaS1gyVK7foKg4=)
                          2: 99f49497-e145-4e4e-895c-2a7825ca6508.crl (hash: fPZPr/etoiSdGXXqEUX1pXmVTdrkOGGs3F8SdzyAEes=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:b6:24:26:a2:e1:55:37:3f:35:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99f49497-e145-4e4e-895c-2a7825ca6508
        Validity
            Not Before: Apr 13 00:00:03 2025 GMT
            Not After : Apr 16 00:00:00 2025 GMT
        Subject: CN=71490d89-4704-49b0-a484-32085ee8fbb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:92:2d:cf:c8:f1:45:90:1a:19:05:4b:8d:bc:
                    4c:bf:6b:59:dc:9e:78:80:ac:4e:c3:9a:fc:10:8c:
                    1c:df:6f:09:22:49:3e:be:d4:d8:68:0a:96:15:8a:
                    09:15:f6:a5:d5:cb:44:3a:59:de:57:9d:66:2d:45:
                    57:ee:d9:59:ee:b2:70:4d:91:0a:43:c2:86:57:bd:
                    47:4a:2e:39:ba:0e:72:68:e7:44:d6:d1:be:c3:2b:
                    e2:c7:e2:6d:96:59:59:7b:24:8d:00:9f:23:8a:fd:
                    a9:40:4b:05:dc:85:91:ab:67:0d:b5:9d:03:52:93:
                    c1:63:57:6a:c1:3d:0a:ac:a0:bd:3d:c2:1b:0c:bd:
                    66:35:1c:12:e7:d9:ad:66:60:25:a2:aa:a8:ea:e3:
                    42:c2:93:39:80:0f:94:68:dc:87:37:fb:96:3b:62:
                    c9:ac:31:2f:a1:a4:b7:f0:ac:71:c6:a3:a1:56:8f:
                    29:3f:f6:4c:c7:43:3a:9d:21:5c:c3:4a:e4:2c:50:
                    fa:94:aa:c6:9c:db:34:8a:09:52:4c:25:7c:c2:58:
                    8e:d3:cf:91:13:8b:91:13:03:bd:a8:7f:fa:79:7a:
                    c4:d6:3e:8e:7d:88:59:4f:a9:40:73:11:10:62:9e:
                    e3:68:2c:83:b9:2a:7e:e8:f9:5e:bb:db:a8:d6:c4:
                    9c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:8E:21:12:B7:53:02:3C:6D:5B:B8:35:0C:FE:46:63:48:CE:99:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508/99f49497-e145-4e4e-895c-2a7825ca6508.crl

            X509v3 Authority Key Identifier:
                keyid:2E:21:56:94:21:EA:A7:3F:43:08:43:7F:A4:6B:37:3C:50:4F:97:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/99f49497-e145-4e4e-895c-2a7825ca6508.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:86:89:3f:07:bb:e9:26:44:8f:53:70:8a:01:34:c2:ed:a2:
         6f:e0:dc:74:1c:34:aa:7d:e0:e5:90:71:6d:60:21:82:7a:37:
         a7:0b:d3:3f:1a:6e:83:cd:8e:f0:84:0d:d4:90:01:49:77:02:
         14:eb:07:71:27:c5:69:ff:16:f5:42:d5:93:71:4b:b7:01:f4:
         4a:e2:4a:36:80:49:33:94:48:d5:75:53:45:88:d5:47:dc:32:
         9e:42:00:d2:0b:45:a8:9a:f5:d4:3f:35:c0:82:4a:69:96:77:
         c9:7a:14:67:53:88:46:2f:05:4d:4d:7b:68:33:75:4b:7e:70:
         6f:16:e5:4c:0f:8d:12:d0:57:29:b1:8e:c2:48:5b:2f:f4:19:
         d3:6f:06:53:13:c7:bd:67:24:aa:4d:0d:38:02:88:a3:70:93:
         f1:50:0c:25:b8:cf:61:8f:ac:0d:32:2a:ba:5d:30:4e:fa:27:
         0a:0c:9f:8d:f9:72:00:8a:8b:e7:fc:63:1d:89:24:ee:d2:9c:
         43:1a:d8:7e:5e:f9:da:cd:7b:2e:b7:a9:dd:15:78:c5:02:c5:
         d9:cf:a5:e4:c2:8a:30:37:4d:da:9b:d3:d5:79:4d:bd:86:d7:
         1a:da:e3:27:83:fc:1a:65:ac:6e:66:9e:f6:be:b8:65:55:48:
         da:ff:be:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:38 2025 by rpki-client on console.sobornost.net