Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
File:                     2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft (raw, json)
Hash identifier:          n37Tu8od/feVPImEZQWzd+IEFejduNqvOzE+m8DABPU=
Subject key identifier:   9B:25:A5:6D:DB:6E:0D:B9:E9:3E:F7:CD:F3:A1:0F:EC:69:02:A5:B2
Authority key identifier: CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
Certificate issuer:       /CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
Certificate serial:       010D0C9F43285849813F12F3401C5A808E4F47F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
Manifest number:          010D0C9F43285845461D7ECE5D288C2CB9A93D0D
Signing time:             Sat 12 Apr 2025 20:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 20:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 20:00:00 +0000
Files and hashes:         1: 2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl (hash: L9Y3ZRsboLRkx61QkbHcnWdevMHHByxwZnlR+KnLpZw=)
                          2: 62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa (hash: 3DmZ9mGf1eUq11MdvZlyTaB3OdvJAlkmZUacYbUeW5o=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:3f:12:f3:40:1c:5a:80:8e:4f:47:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
        Validity
            Not Before: Apr 12 20:00:07 2025 GMT
            Not After : Apr 15 20:00:00 2025 GMT
        Subject: CN=10b8dafa-b199-4f0d-a5a9-9d2e76e01b44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:60:18:b5:cf:13:38:07:82:8d:44:4e:fc:3a:
                    06:ec:00:e4:60:0d:3b:05:1e:cf:f9:c3:8b:33:bd:
                    9d:06:a0:fa:c6:37:b1:ad:e9:ac:a9:f9:6c:10:e7:
                    0f:b2:38:eb:47:39:ee:23:6e:32:b6:b6:28:a9:f4:
                    2f:22:11:53:f4:9b:7a:03:cc:42:38:62:7b:b9:1e:
                    e8:c6:f1:0b:df:1a:c2:92:0e:2a:35:16:19:5a:b0:
                    5b:59:97:1b:6f:57:4c:13:55:90:18:05:4c:74:5e:
                    5e:23:da:88:ef:f4:2e:e8:65:25:2a:90:2d:4c:46:
                    4d:9d:9c:fe:e0:04:f2:f1:59:e6:be:29:42:46:fc:
                    29:c4:b9:59:5f:61:bf:b3:db:2f:fa:6c:41:49:8e:
                    10:e1:4f:9e:13:e1:97:59:1e:ea:40:92:bc:ac:ec:
                    e0:b9:b3:a3:ea:f0:56:d5:17:76:40:66:7e:f8:21:
                    3e:00:55:95:0d:9f:21:a8:94:d2:4a:0b:7f:19:ed:
                    1e:73:31:81:0d:7b:c6:86:a3:d8:38:3f:1b:72:3a:
                    43:33:53:14:3c:86:3b:9a:bc:73:98:a1:8a:be:46:
                    90:3c:cc:d4:50:3a:85:df:6a:ba:d3:6b:0e:39:9f:
                    e9:8f:f7:74:97:2a:35:12:fc:12:d1:bd:47:38:91:
                    cf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:25:A5:6D:DB:6E:0D:B9:E9:3E:F7:CD:F3:A1:0F:EC:69:02:A5:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl

            X509v3 Authority Key Identifier:
                keyid:CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:b7:31:f3:64:45:a5:b4:98:7b:76:b4:25:88:89:d5:c4:cc:
         f3:4c:96:21:a6:47:28:90:aa:a1:a7:b1:13:9a:6a:c4:55:00:
         f3:34:32:cb:38:57:bb:af:47:16:d5:ef:7f:5f:fe:d3:9f:b3:
         24:20:94:90:53:f5:47:c3:a8:58:43:75:6b:cc:d5:aa:82:9e:
         04:5b:f7:81:01:ff:75:3b:a8:11:b6:00:56:03:42:4c:d2:17:
         da:82:b3:0c:d0:53:54:8d:04:df:09:29:5b:bc:02:95:39:6a:
         c8:57:ba:7e:a3:c7:04:1f:3d:e5:81:8e:59:2d:e3:27:d3:4b:
         c3:f3:46:eb:f0:e1:b9:24:23:29:e0:84:27:ab:c4:e0:95:2e:
         f3:19:36:c0:22:3e:35:de:64:c7:b7:7e:e1:9b:ac:c3:93:88:
         5b:ea:3f:c9:14:59:a7:1d:4c:01:dc:c6:29:9e:03:ac:1c:37:
         be:d3:e1:58:67:77:ae:0a:72:33:d7:35:bc:4c:16:db:52:42:
         f1:4a:8a:59:48:50:67:25:87:a3:79:5d:9f:b9:78:e2:3b:b8:
         a6:69:26:c2:b3:90:9e:e6:28:09:d4:37:ef:aa:68:83:7a:81:
         2f:96:83:2f:52:f7:dc:22:df:89:0b:ea:30:b6:7b:04:19:f8:
         2b:c9:26:bd
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBPxLzQBxagI5PR/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk0MWY3YjQtNmRiYi00NTE5LWEzM2EtNDZkNzkyM2Nj
NzJhMB4XDTI1MDQxMjIwMDAwN1oXDTI1MDQxNTIwMDAwMFowLzEtMCsGA1UEAxMk
MTBiOGRhZmEtYjE5OS00ZjBkLWE1YTktOWQyZTc2ZTAxYjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxWAYtc8TOAeCjURO/DoG7ADkYA07BR7P+cOL
M72dBqD6xjexremsqflsEOcPsjjrRznuI24ytrYoqfQvIhFT9Jt6A8xCOGJ7uR7o
xvEL3xrCkg4qNRYZWrBbWZcbb1dME1WQGAVMdF5eI9qI7/Qu6GUlKpAtTEZNnZz+
4ATy8VnmvilCRvwpxLlZX2G/s9sv+mxBSY4Q4U+eE+GXWR7qQJK8rOzgubOj6vBW
1Rd2QGZ++CE+AFWVDZ8hqJTSSgt/Ge0eczGBDXvGhqPYOD8bcjpDM1MUPIY7mrxz
mKGKvkaQPMzUUDqF32q602sOOZ/pj/d0lyo1EvwS0b1HOJHPPQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJslpW3bbg256T73zfOhD+xpAqWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTQx
ZjdiNC02ZGJiLTQ1MTktYTMzYS00NmQ3OTIzY2M3MmEvMjk0MWY3YjQtNmRiYi00
NTE5LWEzM2EtNDZkNzkyM2NjNzJhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjk0MWY3YjQtNmRiYi00NTE5LWEz
M2EtNDZkNzkyM2NjNzJhLzI5NDFmN2I0LTZkYmItNDUxOS1hMzNhLTQ2ZDc5MjNj
YzcyYS5jcmwwHwYDVR0jBBgwFoAUzYcpJYvusLXy52ffHrgPgPw/1BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOTQxZjdiNC02ZGJiLTQ1MTktYTMzYS00NmQ3
OTIzY2M3MmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCmtzHzZEWltJh7drQliInV
xMzzTJYhpkcokKqhp7ETmmrEVQDzNDLLOFe7r0cW1e9/X/7Tn7MkIJSQU/VHw6hY
Q3VrzNWqgp4EW/eBAf91O6gRtgBWA0JM0hfagrMM0FNUjQTfCSlbvAKVOWrIV7p+
o8cEHz3lgY5ZLeMn00vD80br8OG5JCMp4IQnq8TglS7zGTbAIj413mTHt37hm6zD
k4hb6j/JFFmnHUwB3MYpngOsHDe+0+FYZ3euCnIz1zW8TBbbUkLxSopZSFBnJYej
eV2fuXjiO7imaSbCs5Ce5igJ1DfvqmiDeoEvloMvUvfcIt+JC+owtnsEGfgrySa9
-----END CERTIFICATE-----