Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft
File:                     3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft (raw, json)
Hash identifier:          sVJd3o+soUgvo80xcVEFmMxuxfCIXHj/kOCd0Y/Uxb0=
Subject key identifier:   BE:C1:5A:B5:7F:02:A5:44:1B:CD:07:A6:CD:90:BD:82:AB:22:82:68
Authority key identifier: 44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61
Certificate issuer:       /CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f
Certificate serial:       010D0C9F43285849812142865CEB9C2C706E6640
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft
Manifest number:          010D0C9F4328584755A601D46D9953E701C722B8
Signing time:             Sat 12 Apr 2025 19:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 19:00:03 +0000
Manifest next update:     Mon 14 Apr 2025 19:00:00 +0000
Files and hashes:         1: 0a8bf32e-5cd1-3122-963a-91125458622e.roa (hash: g2VyTS2H7ndOgKi7qV82oQHnoguelT3s18veJMLhYz8=)
                          2: 3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl (hash: 2IAFE2hTU0hR0o1uW7Kk9Mn2QlYU/9+5//OrD1X7Fhg=)
                          3: 55bded14-4b97-3a05-ac2d-4064fef8d4a3.roa (hash: +KOuEWjHquwVDl9jNq1LcIlPIAkXTRuPjijQrlhjBwk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:21:42:86:5c:eb:9c:2c:70:6e:66:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f
        Validity
            Not Before: Apr 12 19:00:03 2025 GMT
            Not After : Apr 14 19:00:00 2025 GMT
        Subject: CN=f30a2523-b70d-4ce8-8f4e-c144bc5a20a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:8c:9e:f0:31:27:ec:6c:f2:ad:a2:ad:80:69:
                    0b:07:95:59:6c:d4:c1:b3:97:f1:49:bc:83:77:8c:
                    d6:60:35:0b:a7:41:32:52:8c:ba:c5:6e:f8:2a:d9:
                    ed:be:35:71:5c:87:8b:6d:82:3b:8f:a7:33:62:05:
                    0e:4c:e8:4c:85:29:57:7f:8a:7a:57:fd:0d:59:6a:
                    0e:97:fe:96:89:03:42:fc:7f:31:0b:aa:14:8c:45:
                    f2:67:e0:c0:94:18:84:19:1a:de:94:bc:e7:ca:7a:
                    43:69:88:85:ef:88:16:43:38:f5:73:21:55:f5:9f:
                    a4:6b:2a:74:1c:09:b4:5e:3a:dd:a1:4d:fa:aa:11:
                    b8:47:9d:67:4e:48:d4:14:11:8f:62:81:72:9b:d3:
                    62:50:a4:d6:54:4c:37:36:10:d2:5b:c4:d3:60:67:
                    50:ea:5e:d1:2d:0a:21:d6:d7:6e:32:5a:56:f5:d5:
                    d3:97:8b:4b:ba:e1:5a:5c:85:c7:fa:ab:7e:6d:d8:
                    4f:3b:13:ae:b2:a4:3e:6e:06:f5:69:54:6b:b8:8e:
                    17:72:f5:7a:d4:7f:8c:8a:dd:83:b5:ab:3f:97:97:
                    31:51:5e:c7:a5:39:56:00:4a:81:bb:84:43:40:37:
                    bd:e3:f7:2b:c5:11:ca:e0:f8:98:87:ed:0b:98:1e:
                    c0:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C1:5A:B5:7F:02:A5:44:1B:CD:07:A6:CD:90:BD:82:AB:22:82:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.crl

            X509v3 Authority Key Identifier:
                keyid:44:D8:08:BE:65:B2:3D:54:D0:2C:EA:50:56:50:09:BB:D8:D5:7D:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3dc66c5e-23ab-44cd-878a-4e76cb0d7b4f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:6b:8b:77:01:fd:e8:f1:ab:c7:73:12:0d:b7:e7:29:8a:ce:
         8e:62:36:eb:ae:f0:a9:22:8d:0c:62:68:4e:bd:46:ce:59:d5:
         c6:28:6f:cf:43:1a:ae:44:fd:76:71:76:a7:f4:d8:0d:31:0c:
         8f:c5:74:e2:53:52:74:4a:a5:ed:a4:c0:c4:e0:b3:f0:09:2f:
         fc:a3:a0:88:d2:9d:a2:62:2c:5b:fb:bd:53:3a:f7:b1:f8:4a:
         da:95:a7:fc:52:2b:41:ea:fe:23:19:8a:68:b7:94:f2:a6:9a:
         cf:d5:e5:19:8b:42:ed:f7:06:dd:72:19:86:14:07:9e:94:88:
         2b:df:dc:a0:2c:86:16:68:cf:55:65:9a:71:57:70:73:f5:4a:
         87:a9:b4:7f:60:ce:4c:db:b5:7f:9d:28:08:6b:84:80:12:98:
         d2:35:31:90:bf:6e:d2:37:b7:64:c6:26:a0:af:e5:00:45:b6:
         c9:b1:f3:92:5b:89:8f:50:dd:88:64:7a:a8:9d:23:c2:f8:56:
         1e:67:87:d2:9b:5b:1a:8b:c6:50:68:ae:7d:81:2c:99:97:ef:
         12:dc:9a:c5:2b:1b:96:49:f8:af:79:9c:cc:ca:c8:d9:44:ac:
         88:88:9b:4a:11:66:93:34:ce:1c:84:93:80:fc:1c:07:55:7e:
         35:a4:48:54
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBIUKGXOucLHBuZkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RjNjZjNWUtMjNhYi00NGNkLTg3OGEtNGU3NmNiMGQ3
YjRmMB4XDTI1MDQxMjE5MDAwM1oXDTI1MDQxNDE5MDAwMFowLzEtMCsGA1UEAxMk
ZjMwYTI1MjMtYjcwZC00Y2U4LThmNGUtYzE0NGJjNWEyMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp4ye8DEn7GzyraKtgGkLB5VZbNTBs5fxSbyD
d4zWYDULp0EyUoy6xW74KtntvjVxXIeLbYI7j6czYgUOTOhMhSlXf4p6V/0NWWoO
l/6WiQNC/H8xC6oUjEXyZ+DAlBiEGRrelLznynpDaYiF74gWQzj1cyFV9Z+kayp0
HAm0XjrdoU36qhG4R51nTkjUFBGPYoFym9NiUKTWVEw3NhDSW8TTYGdQ6l7RLQoh
1tduMlpW9dXTl4tLuuFaXIXH+qt+bdhPOxOusqQ+bgb1aVRruI4XcvV61H+Mit2D
tas/l5cxUV7HpTlWAEqBu4RDQDe94/crxRHK4PiYh+0LmB7AWwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFL7BWrV/AqVEG80Hps2QvYKrIoJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2
NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2Y2IwZDdiNGYvM2RjNjZjNWUtMjNhYi00
NGNkLTg3OGEtNGU3NmNiMGQ3YjRmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RjNjZjNWUtMjNhYi00NGNkLTg3
OGEtNGU3NmNiMGQ3YjRmLzNkYzY2YzVlLTIzYWItNDRjZC04NzhhLTRlNzZjYjBk
N2I0Zi5jcmwwHwYDVR0jBBgwFoAURNgIvmWyPVTQLOpQVlAJu9jVfWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGM2NmM1ZS0yM2FiLTQ0Y2QtODc4YS00ZTc2
Y2IwZDdiNGYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA3a4t3Af3o8avHcxINt+cp
is6OYjbrrvCpIo0MYmhOvUbOWdXGKG/PQxquRP12cXan9NgNMQyPxXTiU1J0SqXt
pMDE4LPwCS/8o6CI0p2iYixb+71TOvex+Eralaf8UitB6v4jGYpot5TypprP1eUZ
i0Lt9wbdchmGFAeelIgr39ygLIYWaM9VZZpxV3Bz9UqHqbR/YM5M27V/nSgIa4SA
EpjSNTGQv27SN7dkxiagr+UARbbJsfOSW4mPUN2IZHqonSPC+FYeZ4fSm1sai8ZQ
aK59gSyZl+8S3JrFKxuWSfiveZzMysjZRKyIiJtKEWaTNM4chJOA/BwHVX41pEhU
-----END CERTIFICATE-----
Generated at Wed Apr 16 02:26:44 2025 by rpki-client on console.sobornost.net