Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
File:                     3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft (raw, json)
Hash identifier:          BAD68m2xmFzA1TYae5s8QXlOFOPgjJID2+MjhG3R3l8=
Subject key identifier:   95:71:9A:62:B6:6B:10:BE:8D:A6:46:24:C6:FB:23:0C:AE:66:EC:75
Authority key identifier: A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC
Certificate issuer:       /CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
Certificate serial:       010D0C9F432858498374DF051DEEFD0ED79EB380
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft
Manifest number:          010D0C9F43285844C25D5F9F916F49B5BE7418FE
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl (hash: Wox+0Jzr0cvwGQi0HshGFY93mrPUQ81O8i5cvCrPu8I=)
                          2: 82188834-19d0-34be-9f3c-13ee797db6fa.roa (hash: 1UyvgByPe06koxHZ4pN7e7NzupTHFyJLg43ieEyfc+U=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:df:05:1d:ee:fd:0e:d7:9e:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3cc14fdf-ab56-412d-b3de-39cbbd96d12f
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=1a0902cf-3923-45de-9d95-de9d60a52f36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1d:47:e0:f3:21:03:c7:2d:e7:0b:e4:b3:00:
                    d0:05:2c:68:65:db:e7:b3:f7:27:79:3b:ec:47:dd:
                    a1:4a:8c:c7:22:0d:37:cd:a7:6d:16:31:6b:9a:3b:
                    82:44:4c:bb:d6:41:b3:8e:83:d1:72:2b:e5:ac:b6:
                    c3:6c:ec:f9:40:fc:49:0d:b4:24:56:32:54:ae:a9:
                    f3:a8:0d:0d:06:74:fe:5a:93:9e:0b:6b:5f:14:6b:
                    65:84:7d:df:fa:09:b4:03:8f:d0:35:dc:0c:27:ab:
                    be:fc:b7:c9:7e:d0:8e:29:ee:64:b0:c4:54:83:85:
                    a5:54:4b:51:6f:82:29:b3:57:64:81:31:fa:d9:07:
                    2b:53:dc:96:6b:94:0d:65:a3:7d:2c:5a:bc:72:d1:
                    85:75:37:ee:0f:7a:05:a6:7d:6b:3f:c4:a7:18:86:
                    bc:a2:03:43:41:a7:d0:ca:25:e3:c5:2d:1c:e8:bc:
                    4b:15:b8:3c:86:8e:6c:21:51:6a:16:f5:cf:f8:ab:
                    42:69:d3:d1:54:b0:77:14:6c:89:b2:16:c9:01:b8:
                    7d:83:3c:21:86:27:10:b6:9d:cb:e2:39:4c:0a:c7:
                    41:e7:10:6c:99:06:e5:54:07:25:64:1a:64:01:e5:
                    d2:8d:0d:15:d0:e5:5c:17:8f:a1:10:b4:b1:c9:33:
                    97:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:71:9A:62:B6:6B:10:BE:8D:A6:46:24:C6:FB:23:0C:AE:66:EC:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.crl

            X509v3 Authority Key Identifier:
                keyid:A9:22:22:C2:6D:F6:4E:5A:AB:2E:F4:BC:1E:8A:AF:18:AF:64:AB:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3cc14fdf-ab56-412d-b3de-39cbbd96d12f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:38:26:18:73:01:95:fb:e3:ae:f1:22:09:1f:1d:41:2c:ee:
         00:58:6b:f0:3c:89:a5:61:25:e5:d5:fd:49:27:e8:c3:ff:1d:
         96:a7:8d:f5:ae:a8:8e:27:e2:8c:f2:87:d8:db:cf:36:31:75:
         b9:78:fd:50:92:fa:87:85:16:fb:da:69:06:96:07:ae:76:32:
         7b:b2:df:a1:7a:08:6d:48:84:fd:4d:c6:27:87:08:ea:94:7c:
         ee:76:9c:d9:7f:4e:50:18:3d:67:b0:78:db:5d:70:bf:48:25:
         81:56:58:2f:ee:8e:75:2a:ed:7f:37:a1:de:43:b0:a2:e4:73:
         f1:6b:c4:eb:2d:68:f9:f4:41:d1:0b:75:fe:d6:55:72:e1:d1:
         24:32:3e:fd:73:b7:4a:6d:c3:34:bf:66:31:6d:29:88:c5:24:
         21:60:bb:52:1f:da:29:13:1a:26:08:34:92:5a:b3:e5:ec:52:
         74:85:85:a3:08:10:35:6a:22:55:bc:a9:6f:4e:74:d0:65:2e:
         8e:6a:85:99:57:15:a6:45:05:49:a3:22:0c:22:42:81:d1:8b:
         7f:e7:fa:6e:a8:66:39:e1:af:dd:7c:88:a0:42:09:76:24:ca:
         0e:2d:9c:95:f7:d7:47:a9:fd:fc:df:24:90:ba:66:06:1b:3b:
         b1:5c:1b:e5
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmDdN8FHe79Dtees4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2NjMTRmZGYtYWI1Ni00MTJkLWIzZGUtMzljYmJkOTZk
MTJmMB4XDTI1MDQxMzE1MDAwN1oXDTI1MDQxNjE1MDAwMFowLzEtMCsGA1UEAxMk
MWEwOTAyY2YtMzkyMy00NWRlLTlkOTUtZGU5ZDYwYTUyZjM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAix1H4PMhA8ct5wvkswDQBSxoZdvns/cneTvs
R92hSozHIg03zadtFjFrmjuCREy71kGzjoPRcivlrLbDbOz5QPxJDbQkVjJUrqnz
qA0NBnT+WpOeC2tfFGtlhH3f+gm0A4/QNdwMJ6u+/LfJftCOKe5ksMRUg4WlVEtR
b4Ips1dkgTH62QcrU9yWa5QNZaN9LFq8ctGFdTfuD3oFpn1rP8SnGIa8ogNDQafQ
yiXjxS0c6LxLFbg8ho5sIVFqFvXP+KtCadPRVLB3FGyJshbJAbh9gzwhhicQtp3L
4jlMCsdB5xBsmQblVAclZBpkAeXSjQ0V0OVcF4+hELSxyTOXsQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJVxmmK2axC+jaZGJMb7IwyuZux1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zY2Mx
NGZkZi1hYjU2LTQxMmQtYjNkZS0zOWNiYmQ5NmQxMmYvM2NjMTRmZGYtYWI1Ni00
MTJkLWIzZGUtMzljYmJkOTZkMTJmLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2NjMTRmZGYtYWI1Ni00MTJkLWIz
ZGUtMzljYmJkOTZkMTJmLzNjYzE0ZmRmLWFiNTYtNDEyZC1iM2RlLTM5Y2JiZDk2
ZDEyZi5jcmwwHwYDVR0jBBgwFoAUqSIiwm32TlqrLvS8HoqvGK9kq8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zY2MxNGZkZi1hYjU2LTQxMmQtYjNkZS0zOWNi
YmQ5NmQxMmYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCDOCYYcwGV++Ou8SIJHx1B
LO4AWGvwPImlYSXl1f1JJ+jD/x2Wp431rqiOJ+KM8ofY2882MXW5eP1QkvqHhRb7
2mkGlgeudjJ7st+heghtSIT9TcYnhwjqlHzudpzZf05QGD1nsHjbXXC/SCWBVlgv
7o51Ku1/N6HeQ7Ci5HPxa8TrLWj59EHRC3X+1lVy4dEkMj79c7dKbcM0v2YxbSmI
xSQhYLtSH9opExomCDSSWrPl7FJ0hYWjCBA1aiJVvKlvTnTQZS6OaoWZVxWmRQVJ
oyIMIkKB0Yt/5/puqGY54a/dfIigQgl2JMoOLZyV99dHqf383ySQumYGGzuxXBvl
-----END CERTIFICATE-----