Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
File:                     17e20fae-392b-4b22-b475-c6dff7142fa6.mft (raw, json)
Hash identifier:          rfLsxHtMWiJqiG2wPNX7RfOJ1TGShi0rfKAggnd0Q2c=
Subject key identifier:   5E:C7:8A:7C:C0:2B:47:7B:03:5E:8C:E5:89:67:83:73:96:11:2C:5B
Authority key identifier: A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B
Certificate issuer:       /CN=17e20fae-392b-4b22-b475-c6dff7142fa6
Certificate serial:       010D0C9F4328584980E5B9874C55DD2E094462E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft
Manifest number:          010D0C9F4328584073A81D8E5B49F1CE64DF8773
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 17e20fae-392b-4b22-b475-c6dff7142fa6.crl (hash: v6D3RHlxfxM5GcLlggIQZK4EZakf8ziNxXQb3mBLGqo=)
                          2: 4fbf2e6d-2935-36c0-8e49-fd5a8e002992.roa (hash: nITnXGx1i4ajesEpVbuonC4XfIDNKJr8eK8Ro7hNwQE=)
                          3: 7ed6dd62-2e69-372c-be0f-6a1e72260ee8.roa (hash: dtH6t/DoaT8Ob6Vr8T3vpCfMghf2dwSDVzdUTXDqXgw=)
                          4: 88284c80-4080-3740-a1d6-8df786cec5f4.roa (hash: WVYtUza8OSJ83H6AfZ5l76AfmsDk84Lr6Wz5Z1JOKkc=)
                          5: 9fb0e461-b76c-3855-80c1-e2c736d9d409.roa (hash: 6POW2GS2MEhfm0c7QGp8CEGVCt8ULBwzYGXWkLYSPLA=)
                          6: add640e1-3218-3150-9feb-8573100723ed.roa (hash: CrnC2ii5DuWyZ4MtOfcyRKN/AJnAHpqjrrOzrzxRkVo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:b9:87:4c:55:dd:2e:09:44:62:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17e20fae-392b-4b22-b475-c6dff7142fa6
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=25b1be81-3b25-4b89-90b1-7bd967be53d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:72:c2:56:38:f5:f4:ce:02:22:76:c8:d2:
                    82:b1:c6:56:19:a6:51:af:eb:d7:65:1a:3c:1d:8d:
                    5c:8b:09:21:54:af:d8:ef:4e:ed:45:90:15:b2:6a:
                    c8:97:64:a6:88:7b:81:0d:77:ca:ee:fe:f3:6e:85:
                    b6:45:7a:88:d5:21:89:f1:b3:85:7d:65:54:a5:99:
                    d7:d0:47:26:3c:0b:5c:8c:ea:78:b6:5d:ae:8c:e9:
                    b5:02:25:45:35:75:4e:88:41:3c:61:49:ff:4c:2d:
                    4b:19:10:c1:2d:71:ab:bb:eb:e6:1c:c3:c6:f7:70:
                    35:f1:10:a6:9e:cb:14:a2:87:a6:43:4f:ed:fe:f0:
                    e4:6c:cf:a1:1e:29:b6:61:d7:0b:aa:88:67:47:4a:
                    52:15:2a:08:fc:b7:a0:51:6f:92:bc:34:39:3b:b5:
                    c5:fb:07:fa:98:a5:a0:c3:0b:3a:96:cd:df:71:e6:
                    0d:fa:ae:00:69:bc:fe:95:d0:6b:c1:59:2f:af:c9:
                    7f:65:7a:3c:28:22:41:5f:c2:d2:f2:e2:0e:3b:57:
                    99:55:d2:18:f9:6b:9a:04:4c:46:38:61:a4:e3:0e:
                    99:41:1a:08:d5:51:6e:ee:5f:14:3a:c6:ed:b9:d8:
                    92:7a:fb:53:fb:d4:84:29:55:62:97:aa:08:99:0d:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:C7:8A:7C:C0:2B:47:7B:03:5E:8C:E5:89:67:83:73:96:11:2C:5B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6/17e20fae-392b-4b22-b475-c6dff7142fa6.crl

            X509v3 Authority Key Identifier:
                keyid:A1:92:8C:F9:58:DA:45:07:22:A0:BC:C9:76:E1:3D:EE:08:F7:66:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/17e20fae-392b-4b22-b475-c6dff7142fa6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:5c:22:ef:70:cd:9b:55:5a:b1:ef:96:24:f0:c0:01:f0:a3:
         2e:f0:a4:84:38:a5:83:77:48:18:e4:0c:18:c5:29:de:68:1b:
         cf:ab:ff:a9:06:84:1d:3c:c8:cb:3c:53:09:61:66:4d:99:a7:
         dc:8b:96:a9:54:a9:cf:4f:71:34:74:ce:59:a0:e8:05:66:f3:
         7b:e7:fd:4f:f0:cc:99:87:aa:59:be:29:4e:15:d4:78:38:e5:
         55:da:45:0a:5c:7b:60:6b:d4:64:cd:55:db:45:df:f8:69:4f:
         fc:03:78:e0:55:7d:56:ad:c1:b0:5b:f9:8b:a8:90:2c:03:23:
         ea:da:9b:84:d0:1b:cb:da:c4:5e:7b:f0:3f:ef:ea:04:d9:fb:
         e6:1a:41:b9:e2:04:08:2d:6c:84:21:0b:bf:20:6e:4d:91:28:
         af:ec:8d:3b:42:13:3c:f1:e0:f4:ea:d8:76:cb:47:3a:57:86:
         ad:e9:07:71:b8:5c:14:45:ef:c4:1e:09:99:58:c2:44:fe:29:
         49:53:e0:75:eb:42:32:db:03:7c:43:2a:0b:7b:40:5e:80:2a:
         71:56:85:e3:86:95:af:1a:93:46:3e:cb:d7:4a:3f:a0:f0:43:
         61:0a:5d:f1:62:04:97:6c:c5:36:a3:c8:b7:7f:1a:3d:6a:f9:
         32:a9:21:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:41 2025 by rpki-client on console.sobornost.net