Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
File:                     baff326b-1f24-468c-b9c6-fa089a461350.mft (raw, json)
Hash identifier:          X4Y1AAK6dCtl8aBw9Mv+ERWRmjTBDubttJzUXSNNOXI=
Subject key identifier:   BE:08:42:99:F4:BC:F4:D6:9E:57:C7:03:90:D8:84:58:2E:4E:D7:31
Authority key identifier: 05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32
Certificate issuer:       /CN=baff326b-1f24-468c-b9c6-fa089a461350
Certificate serial:       010D0C9F4328584981B623C1D03892FB81946D80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft
Manifest number:          010D0C9F4328584073A830D864F9AE9DDE3D8DC3
Signing time:             Sun 13 Apr 2025 00:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 00:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 00:00:00 +0000
Files and hashes:         1: 5c9511ee-140a-3e15-aa57-d189e7ae07d5.roa (hash: bTgcHPUxUuBikeOTj16r809pPAhyIIRMM549jAM8PZM=)
                          2: baff326b-1f24-468c-b9c6-fa089a461350.crl (hash: sfUCEH5kbKbyzCsLGPb36Of9jGrrP7FRrp/k96QOYa0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:b6:23:c1:d0:38:92:fb:81:94:6d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=baff326b-1f24-468c-b9c6-fa089a461350
        Validity
            Not Before: Apr 13 00:00:03 2025 GMT
            Not After : Apr 16 00:00:00 2025 GMT
        Subject: CN=d0c06187-280c-4971-9cec-f8cd30519288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d8:dd:18:3f:9f:a5:3c:93:ca:ab:5b:32:34:
                    00:56:a2:8f:f2:58:a0:0a:5d:8f:db:08:24:13:5f:
                    01:1e:d5:72:24:1e:57:35:b6:e2:fb:b3:eb:43:e7:
                    67:4d:7b:86:1d:00:46:cf:d4:ac:81:c7:b7:34:3b:
                    e7:ec:dc:4b:65:6e:c1:af:3c:4d:71:99:c1:20:d3:
                    76:86:a9:8c:0b:b3:5c:21:28:98:a7:a7:34:a8:31:
                    f1:0b:2e:79:13:ca:bf:31:f3:0a:62:d2:2a:45:14:
                    6c:67:2e:23:28:57:3c:e7:4c:58:f8:6b:e9:70:4f:
                    52:e7:75:32:da:bf:c1:3c:16:49:69:cc:f0:57:ea:
                    a6:82:ae:74:d5:3f:e9:9f:02:e0:69:bc:5c:f4:98:
                    e8:38:d3:34:67:50:19:7d:2f:43:c8:24:a0:40:01:
                    ea:af:8b:19:fd:f8:55:74:41:ca:b1:7e:16:10:8d:
                    8d:18:86:72:8d:c8:2b:1e:df:f8:95:75:17:a7:20:
                    e9:da:c3:1a:a7:5b:b2:0a:ce:83:ee:8f:be:d9:2e:
                    ba:6c:9f:ba:97:9f:e7:0d:07:85:40:57:fe:d5:a9:
                    de:77:4d:1f:0a:ec:b7:6d:ff:b5:65:e1:f7:6d:2e:
                    37:88:48:6f:de:30:0f:f4:c9:8e:ae:bb:00:0f:41:
                    06:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:08:42:99:F4:BC:F4:D6:9E:57:C7:03:90:D8:84:58:2E:4E:D7:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350/baff326b-1f24-468c-b9c6-fa089a461350.crl

            X509v3 Authority Key Identifier:
                keyid:05:2D:96:20:77:4E:FD:BC:47:2C:1C:A1:09:8E:5B:31:5D:1C:FC:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/baff326b-1f24-468c-b9c6-fa089a461350.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:c8:c5:a9:93:c7:f6:c3:bf:25:54:4e:03:85:4a:82:3d:e1:
         cc:19:29:f6:71:33:b7:50:14:71:13:3c:af:65:bb:b0:3d:a1:
         59:80:1f:f0:f7:4c:87:55:7a:9b:6c:f2:32:11:79:50:ae:78:
         5c:98:9b:00:c0:d6:05:4d:c3:fa:8a:ae:73:19:3f:7c:81:fc:
         70:de:09:51:19:48:bc:f7:5e:26:ee:e6:52:ba:45:6a:2d:b3:
         66:6b:4b:a0:37:df:ec:96:05:b0:8c:b7:1b:a5:b8:dc:ac:af:
         9f:85:a5:fa:94:80:56:17:24:60:ba:c5:1b:fe:d1:5b:d2:76:
         d5:77:dd:c2:54:fa:68:9a:60:30:fc:cd:34:21:3c:6c:08:1d:
         ec:f0:5b:21:83:46:bf:d8:05:53:18:e2:3c:39:c5:f8:ee:91:
         b7:7f:9d:82:e5:e9:4c:a7:fc:d0:1f:be:a5:b3:63:a1:f7:00:
         2f:ec:6f:6c:ee:69:9b:96:ba:6f:be:dd:37:59:5c:3d:53:e2:
         10:95:56:51:fc:3d:32:65:4d:32:aa:cf:49:ed:de:68:07:23:
         de:ed:6d:6f:2d:9c:63:17:31:33:c6:e6:07:31:6f:4f:6a:51:
         24:af:aa:02:26:36:b7:97:e7:f9:60:7b:8c:43:b5:ac:5b:ab:
         50:47:c0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:56:40 2025 by rpki-client on console.sobornost.net