Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
File:                     8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft (raw, json)
Hash identifier:          XSJlZLyeAn0K7JZMGHAlebc4qBQK/Zs39taPvGMHVfg=
Subject key identifier:   9E:03:54:3A:22:7A:62:76:74:98:29:BE:DA:4B:25:C8:BF:D4:57:B8
Authority key identifier: FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52
Certificate issuer:       /CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
Certificate serial:       010D0C9F43285849819865A72469EA504C7D4480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft
Manifest number:          010D0C9F4328584073A82ECFF3C7E129C67B3742
Signing time:             Sat 12 Apr 2025 23:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 23:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 23:00:00 +0000
Files and hashes:         1: 82d04256-69e2-330e-8e16-321e8a747b4e.roa (hash: JUhhRH5jnBa+5Dm9OUSOeQZjlSjd+2VR7PVJqHDAHDI=)
                          2: 8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl (hash: n9Zgow36oaubz1w0y2PNiMoYgXOlpocLQtsGJkrHQIo=)
                          3: 9b457f5e-c29c-3e0c-95e2-54c237208382.roa (hash: K/LX5n8FPXZsQwkR35V1kELbkobQxSEW+82+9qxkbAA=)
                          4: ca52a1f7-d7c4-3750-bda5-9dd11d8b2fcb.roa (hash: b3pHpnx1xanKNaFHvR7BELrY/k5wGVKzsoRlxNN73JQ=)
                          5: df74d0e2-1fc6-3773-8f05-90bbbafabbd8.roa (hash: LxfxQ+m06rqz4wgdYSRpbdHC8qPjjfKZQWvgLF0aqP0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:98:65:a7:24:69:ea:50:4c:7d:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810
        Validity
            Not Before: Apr 12 23:00:07 2025 GMT
            Not After : Apr 15 23:00:00 2025 GMT
        Subject: CN=4e97f419-f6f1-4690-b4a6-6ad97e4a722b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:9d:73:e0:b6:3e:93:21:ee:69:31:ef:05:39:
                    76:ca:bc:87:c4:25:e9:20:fb:bb:92:21:f8:e9:3e:
                    15:56:73:76:58:62:a6:65:78:8a:fa:c5:e9:f7:bb:
                    17:79:57:7c:d3:8c:42:c6:87:76:9b:56:0a:a6:04:
                    49:07:92:67:d8:b3:67:b1:79:6e:8e:b5:56:1f:e7:
                    cd:58:e9:66:91:65:de:b7:dc:49:d4:6e:48:2f:b8:
                    68:e3:4c:f7:24:06:71:a3:b4:64:09:e2:4b:5c:b2:
                    eb:93:e1:67:03:d3:1d:26:24:1d:95:fa:b2:15:63:
                    12:99:28:81:a2:5e:f8:f0:fa:a4:d9:47:31:11:76:
                    df:f1:a5:6a:8c:47:1e:4a:e8:74:86:2b:39:5e:e2:
                    dd:11:4a:3e:eb:14:d0:c0:1e:b6:34:24:9c:2e:0f:
                    ba:04:d3:b1:83:d0:83:1b:c2:a4:86:51:1a:53:b1:
                    49:c5:f9:e8:a4:ad:e0:37:7f:1d:2a:19:45:48:55:
                    8a:aa:b4:54:e2:17:c0:a7:42:53:bd:9d:87:11:69:
                    8f:fa:d6:ae:b4:ca:fc:2f:e8:f1:e7:b4:17:f6:65:
                    d8:f8:3d:db:55:53:c8:05:50:53:2f:c0:4f:dd:b4:
                    65:a9:dd:d2:15:3f:77:90:45:32:d6:50:d3:0b:07:
                    cb:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:03:54:3A:22:7A:62:76:74:98:29:BE:DA:4B:25:C8:BF:D4:57:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.crl

            X509v3 Authority Key Identifier:
                keyid:FF:C4:B2:E8:4F:33:E8:04:B2:61:B3:8D:82:01:03:6B:BE:73:CE:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8bc0f2db-ecbc-4cc7-88af-ac1e8a77b810.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:9d:34:68:ee:be:47:df:a1:62:b0:54:14:9a:0e:99:4c:31:
         41:8a:9c:c5:65:f1:0d:3b:a9:cd:fe:f8:11:c1:6d:af:79:5a:
         94:f4:73:c5:d4:ad:75:e9:61:d2:79:4d:e2:f8:7e:e4:45:0f:
         54:e3:d1:6c:8b:e9:7e:b2:ef:dd:ff:32:87:ec:76:30:16:f7:
         96:e3:be:35:a8:09:11:72:2f:37:a0:09:7e:69:0d:85:f8:f8:
         12:18:eb:a0:11:ac:6c:fb:43:5b:3e:80:43:f8:8b:6c:9c:b6:
         08:6c:2c:29:37:b9:b2:8f:ea:c0:4c:d9:02:3d:b5:3f:0b:c2:
         ea:93:22:35:14:66:d2:d7:ca:99:b4:d3:a8:31:83:ef:38:7e:
         41:53:54:2a:a4:70:a8:c2:42:97:b0:d2:75:63:b1:53:54:0c:
         aa:1a:ae:cf:77:e3:fe:23:36:d5:b7:ef:1c:e5:03:7a:8d:5d:
         18:82:c7:63:b1:60:94:60:4a:56:07:96:3f:97:84:8b:46:56:
         58:c9:0e:e4:e7:20:db:66:db:51:40:21:b5:1c:28:99:f3:5d:
         c6:28:09:f4:fd:ec:5e:4d:9c:ec:b4:fd:67:85:c8:12:c3:2e:
         de:81:2d:7b:8e:0a:d9:e9:a7:77:e6:4e:22:6b:7a:94:d2:e6:
         2d:a8:a9:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----