Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
File:                     ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft (raw, json)
Hash identifier:          jVrndvK+jZF3fWsxPvzYfwBAfql5E8d/2VFjnHemEL4=
Subject key identifier:   D7:49:A0:CE:4F:83:C1:BA:3C:B9:D5:DA:3F:B4:C5:FD:79:F0:B5:BD
Authority key identifier: 31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38
Certificate issuer:       /CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
Certificate serial:       010D0C9F4328584982869749B5980A58BE010E00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft
Manifest number:          010D0C9F4328584073A8457395EA9169BFDF7CD8
Signing time:             Sun 13 Apr 2025 07:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 07:00:00 +0000
Files and hashes:         1: 21945cb7-acae-3edc-9a34-60c668bc2e9b.roa (hash: l4bemMSi6jBRXbMM68kH+sjErjTCPSZCDp508zshoRs=)
                          2: 5ec91f7d-562b-385f-beb7-d8819c9a22a4.roa (hash: xK5sV1UB4Hpg/XMWktTL+IRlrxW4k6YGtbITBVWoFTk=)
                          3: ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl (hash: xrlEfWbaxamFRqeyfYsedkmUCeUmgDEW5lRLFyJ9DB8=)
                          4: abc03ea6-f529-3aa9-8649-ff39d4312020.roa (hash: T7gVlcEH6uicc++heYpva2uUkA9KtelZd6iOxBKFJc0=)
                          5: c680d96c-ff82-375e-822b-e0d09613fa44.roa (hash: yx3wYsVq5sLI/b2YRQyWdGtPUFoaxKzbxafBP0eJLfc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:86:97:49:b5:98:0a:58:be:01:0e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab3da1ca-a302-436a-bd5f-0a5b75baeadd
        Validity
            Not Before: Apr 13 07:00:03 2025 GMT
            Not After : Apr 16 07:00:00 2025 GMT
        Subject: CN=d08f5b73-4b48-4cce-b396-484d7a9c1060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a3:b8:98:97:84:78:9c:fd:3d:19:11:b2:51:
                    c1:6d:b9:ce:51:ae:68:0a:bb:3e:e9:27:21:8f:f1:
                    86:b2:21:2b:14:37:88:78:dd:86:fb:f5:99:96:59:
                    d8:63:e1:74:1c:f5:97:26:87:b0:8d:37:2a:46:60:
                    b7:25:65:06:79:4e:4d:63:aa:d8:fd:8e:e0:69:a7:
                    bf:c4:1a:cc:56:2d:ac:d9:b7:fb:4a:29:4f:0f:3a:
                    21:fa:cf:53:28:b7:78:49:05:9f:39:ab:89:f5:fa:
                    0f:7a:06:3e:06:4f:37:e0:a1:08:be:a1:b7:3e:6f:
                    0f:6a:69:bd:71:9a:25:d4:75:b2:cd:09:83:fe:2a:
                    36:c7:0c:19:40:52:99:3d:22:40:77:cc:32:3a:73:
                    38:d9:b6:79:ac:a2:54:2b:87:1d:21:fd:47:2b:01:
                    10:ed:b2:21:7e:e1:ff:5c:69:bd:b9:64:14:d8:42:
                    35:d9:74:38:17:cc:7d:64:e0:d8:db:fe:11:d1:87:
                    39:21:74:ea:01:e3:ed:10:bf:8c:22:43:94:9d:10:
                    78:95:46:33:81:05:d8:9f:69:89:4c:f9:32:f5:8b:
                    44:d6:33:87:a3:1e:38:9a:42:ac:30:85:e4:f8:4a:
                    b5:1d:40:73:b5:d7:d3:d9:58:62:36:b1:45:58:ff:
                    c8:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:49:A0:CE:4F:83:C1:BA:3C:B9:D5:DA:3F:B4:C5:FD:79:F0:B5:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.crl

            X509v3 Authority Key Identifier:
                keyid:31:5F:04:8A:1F:94:A8:A0:82:25:47:5E:42:00:A1:87:1F:A8:89:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ab3da1ca-a302-436a-bd5f-0a5b75baeadd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:8e:5d:65:0b:bd:8f:93:e2:9f:6f:d4:45:fe:b9:93:f4:b2:
         17:80:95:97:5d:05:8d:e6:03:79:e4:4e:10:ac:63:98:2e:6a:
         3a:cc:76:61:aa:70:19:71:7b:d8:09:c7:dd:d1:e5:a0:aa:ba:
         50:76:b7:04:9b:de:7f:c6:4e:b6:90:05:46:a4:bd:3b:a6:83:
         9d:ce:db:89:d6:fa:d4:43:f7:1c:e2:c1:60:a5:34:74:f3:81:
         c7:be:c4:c0:59:89:c7:b8:77:c4:4d:3a:41:09:30:ec:5a:d4:
         e4:10:db:48:2a:b6:8f:5b:0b:5b:cf:6b:ce:67:8c:08:31:88:
         91:77:e3:2b:40:46:6e:ed:8f:b2:8b:f7:15:d4:bd:9a:f3:49:
         46:b9:3c:e1:17:3d:04:e9:3e:cd:3e:23:20:df:b7:9a:ee:67:
         71:1e:ca:27:d1:c9:b4:6a:a9:f3:b2:e3:b9:dd:d6:e3:98:58:
         ac:26:80:d2:e0:f3:c8:81:9a:95:76:59:8c:80:73:ad:e1:8c:
         29:22:ac:af:39:d3:5f:c0:5a:40:00:91:d2:a4:eb:84:70:c3:
         f2:52:b0:33:9a:6d:75:a1:4b:ba:67:a1:8e:ca:dc:19:47:e4:
         61:9f:ff:81:77:fc:10:33:b4:d7:3a:5a:f4:75:96:66:85:b3:
         e9:3f:b7:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 03:26:00 2025 by rpki-client on console.sobornost.net