Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft
File:                     a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft (raw, json)
Hash identifier:          896L+7lu3ebwEBiG5GMBcrBt3k+SRa4obR7LMyTel78=
Subject key identifier:   96:7C:64:0A:90:F8:7E:B6:9B:AD:ED:0A:82:8A:F2:CF:D1:0B:5D:0B
Authority key identifier: 95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1
Certificate issuer:       /CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0
Certificate serial:       010D0C9F432858498374E0CE156AFCEE1DC55BAC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft
Manifest number:          010D0C9F4328584073A85A17F676A8EC1A3168D2
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 796a8503-13ba-3800-8978-3da85e63b13a.roa (hash: zyE78vMm9DUhUpuTq/OoAhlGXO5NaV2X4IWgs6rd9L0=)
                          2: a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl (hash: iSDGpRdNppi4+rlhb2dGWfJNaEy2prSChhQwMOvqXAM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:e0:ce:15:6a:fc:ee:1d:c5:5b:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=ab18c4df-3bd1-479f-8d40-74808cab3a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f4:93:7e:20:8d:29:e7:ee:48:9f:1f:20:48:
                    74:43:79:fa:f3:61:db:b7:e8:82:cc:a1:2b:ad:27:
                    6d:f1:71:1a:70:1b:24:fe:4f:74:d4:11:e6:4e:42:
                    42:fe:86:f7:13:1e:29:fc:55:fd:e2:79:0e:7b:cf:
                    1a:f2:03:a3:4c:a8:3f:9f:84:78:71:80:31:ae:38:
                    e7:67:27:11:14:9f:1d:80:b2:b5:11:32:5f:91:fb:
                    32:47:60:fe:d8:e2:d8:f5:00:79:21:b0:4f:f5:91:
                    a1:8d:8f:74:0f:7a:f6:e4:a4:c7:b4:29:38:16:8d:
                    ea:ed:91:2d:46:33:4f:52:87:34:c8:78:54:5a:af:
                    ad:31:f1:26:1d:5f:c4:0b:24:77:82:6e:a0:ae:8b:
                    af:9e:6d:76:e5:57:b6:86:7a:6f:36:64:9a:cc:28:
                    96:57:96:42:48:38:6d:82:22:14:6d:15:2f:63:ee:
                    10:9a:59:33:6c:1d:a6:d3:a2:1d:a2:0c:f0:eb:46:
                    14:94:22:fb:d3:84:ba:77:a8:38:0d:d9:db:cd:d6:
                    9b:8c:23:26:8f:bb:c6:93:b1:52:13:f8:17:95:83:
                    5e:9e:43:73:4b:30:df:e5:ac:6f:67:b1:c1:18:68:
                    b1:a9:b5:e9:ed:49:c8:d8:6d:dd:6a:54:ef:43:68:
                    b7:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:7C:64:0A:90:F8:7E:B6:9B:AD:ED:0A:82:8A:F2:CF:D1:0B:5D:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.crl

            X509v3 Authority Key Identifier:
                keyid:95:0E:F3:FC:09:32:41:BA:87:2F:DD:36:4C:32:2D:CA:15:15:3D:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a60fbd0d-1e0a-4b8a-b467-0b6197d8b5d0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:05:12:17:83:7f:cd:11:7e:6e:5e:b7:c4:fc:e5:22:bf:9c:
         54:04:62:ad:98:41:ca:9a:30:cf:02:d3:99:fc:53:e5:70:58:
         0c:7d:d8:14:6b:e7:d1:c6:bf:1c:67:e4:bd:04:4b:aa:0d:a7:
         f3:df:bd:1d:79:a9:ca:61:90:db:1e:85:cd:d9:dd:4a:73:4d:
         c5:2d:eb:f3:a8:88:8b:a3:9a:ab:6a:1b:94:95:44:cf:2e:97:
         36:ba:48:a3:1f:49:a0:c0:37:95:94:ba:f9:da:47:cc:59:49:
         1e:6b:b0:bb:61:51:6d:42:e7:c4:f2:a2:c1:cc:61:ed:64:38:
         3d:2c:f4:df:2d:74:e4:48:7d:37:be:27:97:09:1f:8b:9d:00:
         d1:51:1b:0c:26:c0:79:6e:47:0e:09:41:95:75:a2:00:82:bb:
         79:df:72:a2:9c:0b:4f:d8:c1:bf:1a:c0:a5:aa:bc:fe:0e:92:
         ac:4a:e0:32:05:0f:f1:ed:c6:cf:40:fe:51:9e:6b:5a:93:a5:
         16:3e:30:24:c5:7f:51:e1:e7:c1:ce:87:97:d7:8c:96:26:59:
         68:28:67:90:47:34:08:b6:f4:32:04:ec:40:2e:65:d8:a6:e3:
         89:7c:ed:01:2f:90:48:93:12:69:fd:a7:e1:87:2d:6d:39:63:
         0e:ee:ec:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:39 2025 by rpki-client on console.sobornost.net