Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
File:                     39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft (raw, json)
Hash identifier:          eSZbnXJRHoSOBV7dufP/0o31eJOVUIo3FmG/YHC6kiU=
Subject key identifier:   82:B3:81:B0:49:E2:BA:06:83:73:95:5D:75:A0:B4:C9:52:E0:4C:5A
Authority key identifier: 30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D
Certificate issuer:       /CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
Certificate serial:       010D0C9F43285849822D41AD88CC09345F491B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft
Manifest number:          010D0C9F432858453383E948707D908C515BCF53
Signing time:             Sun 13 Apr 2025 04:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 04:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 04:00:00 +0000
Files and hashes:         1: 1e8b69ab-04ee-3cba-b00f-b7406365ceca.roa (hash: YGDKvwhol2NFcuLqeC4AxPikSNpz7eRqKfMr0Q5kTdY=)
                          2: 39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl (hash: e76inWK3AftFcx67myGp36LzBmSHJF37I/1EUE9MvOs=)
                          3: d3b41c9f-5a98-3dc9-908e-8b4c10ee844e.roa (hash: i1MuFNeoiCHRGa4BzCB82IaQtr3qi1jXvwtNzxPpQSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:2d:41:ad:88:cc:09:34:5f:49:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=39667f8b-e7b7-4c34-aaa0-00fddbeef48d
        Validity
            Not Before: Apr 13 04:00:03 2025 GMT
            Not After : Apr 15 04:00:00 2025 GMT
        Subject: CN=a6c8afe1-03dc-43c2-90e4-a110ba616fb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0c:82:af:49:e1:0d:30:b8:db:44:fc:38:c8:
                    5c:18:ef:6c:07:93:1e:fe:e0:91:ad:93:cf:1d:76:
                    96:08:a7:c8:43:27:78:f4:60:5d:91:13:32:3c:4a:
                    e6:c9:62:44:eb:be:06:14:0f:8b:db:f2:f0:7b:6c:
                    5a:87:46:94:33:ad:5e:ea:9d:27:c1:b5:e0:21:19:
                    c0:30:3c:58:ee:ba:08:49:d9:d7:5a:43:e9:6c:5b:
                    4a:72:43:93:f6:57:95:68:69:63:cc:1a:32:17:23:
                    3e:80:59:68:e2:96:89:49:0d:51:d6:7f:9e:ee:b9:
                    f8:9f:6b:55:5c:d3:21:19:61:2d:58:24:c0:11:01:
                    b7:6b:08:bc:9c:6d:44:63:68:53:ef:7c:5d:4b:ed:
                    f9:f9:d3:da:7f:cb:e6:3f:d9:91:cb:18:74:58:80:
                    1f:1e:87:1c:c6:d4:61:6e:7d:46:bb:dd:10:cc:cf:
                    25:1f:8e:ea:62:f3:4a:f0:4b:16:61:b5:98:3c:27:
                    5a:c9:75:b6:45:92:c1:f4:f2:5f:ab:19:9f:1c:97:
                    0d:1e:50:50:40:4b:ae:b2:9f:bf:d4:2e:1d:88:fc:
                    60:35:d8:d8:cf:ec:02:d3:ad:87:af:d9:9e:f6:34:
                    a7:34:d6:64:9b:31:68:8a:df:10:1c:0f:40:1c:12:
                    84:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:B3:81:B0:49:E2:BA:06:83:73:95:5D:75:A0:B4:C9:52:E0:4C:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.crl

            X509v3 Authority Key Identifier:
                keyid:30:DF:1A:E4:43:D8:56:06:DE:21:D1:57:3F:18:32:63:7A:B9:6F:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/39667f8b-e7b7-4c34-aaa0-00fddbeef48d.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:9a:6f:fe:4d:a0:91:c9:0c:ac:36:1d:80:87:16:7e:30:46:
         d8:c4:00:e3:c2:0a:e2:c7:70:85:76:75:08:ab:19:c0:7a:4f:
         49:73:bb:01:2b:2e:01:b0:b0:88:b0:e0:04:b5:f4:e2:94:1d:
         4b:9e:89:95:33:77:f8:73:6d:c6:e2:05:25:66:e2:7e:7c:1a:
         c0:03:bd:15:26:85:00:fd:38:da:08:29:55:00:fc:0f:14:0a:
         54:fd:2d:c2:c0:4b:bb:c3:f4:2c:ed:95:34:83:03:b5:03:32:
         30:f7:ae:cd:4f:b0:5d:8b:81:c3:3d:4e:ce:0b:e3:de:61:8b:
         eb:2d:21:06:37:1d:d3:33:a5:b8:bf:fa:14:86:0c:82:08:76:
         46:01:89:7e:29:da:32:af:0a:04:b9:f2:1d:65:21:a8:89:c9:
         9f:31:9c:90:6b:47:91:a2:ea:ff:68:ba:59:f1:86:43:4c:71:
         17:9f:2f:5b:bd:84:93:3e:93:00:d3:92:54:f8:c7:4b:36:b5:
         2f:76:2e:79:01:af:0c:4f:16:f4:dd:c8:77:65:ab:41:99:e8:
         03:cf:09:2e:c6:b7:85:39:9a:80:1b:dc:9a:07:15:eb:91:15:
         27:09:5f:a8:bc:df:c7:2c:85:16:6f:12:27:a6:4d:85:92:a2:
         69:25:e4:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:02 2025 by rpki-client on console.sobornost.net