Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft
File:                     3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft (raw, json)
Hash identifier:          U8m5Q6jhvkLzgdLYBDLyQ4t86acQQGkM+tG8BBskXR4=
Subject key identifier:   05:A6:B2:A0:E4:12:0C:80:11:B8:B6:D1:D0:E4:BA:15:B6:D4:E5:99
Authority key identifier: 0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50
Certificate issuer:       /CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7
Certificate serial:       010D0C9F432858498121423ED44CD289CEE10E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft
Manifest number:          010D0C9F43285844D615D248DD853730ADA3F9BA
Signing time:             Sat 12 Apr 2025 19:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 19:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 19:00:00 +0000
Files and hashes:         1: 3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl (hash: Gdk7Gf85rJHCFNNGHlItxF6ZEM8/knWLvzELkbg+Snc=)
                          2: 7dae22f8-939a-3a54-b81c-8890233bc71a.roa (hash: mxdQX7Y619irzFGa/cUMI2xlhFeHtx9Od/Lt9rFaBxE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:21:42:3e:d4:4c:d2:89:ce:e1:0e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7
        Validity
            Not Before: Apr 12 19:00:03 2025 GMT
            Not After : Apr 15 19:00:00 2025 GMT
        Subject: CN=e57982d3-3630-4780-b258-f16a062aec3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:1e:2d:4e:06:99:81:20:2b:50:c5:1c:9f:1e:
                    6e:04:e8:b6:7a:51:ab:fa:85:60:e5:03:82:f9:a5:
                    04:1c:3f:c2:db:cf:43:f5:79:fd:18:60:25:c2:e4:
                    d5:ee:48:85:bb:6d:04:85:d5:bc:3d:6e:7e:0f:99:
                    37:34:48:8d:ef:06:b6:7d:c2:0e:d1:df:2a:53:75:
                    28:47:3d:87:7a:ec:e0:45:3b:e2:38:e9:d4:ad:5f:
                    cb:70:de:e4:37:09:ac:13:93:e9:47:cf:b0:e8:32:
                    f4:37:e6:db:f4:a1:1a:22:29:ed:9d:b5:cc:85:0b:
                    5e:99:09:68:c2:4d:a0:52:8d:57:da:41:0e:87:45:
                    15:d9:7b:b2:20:fb:81:e6:16:36:c4:ef:63:1d:47:
                    00:5e:ee:20:8f:13:f4:63:9d:3e:f1:70:8e:19:f6:
                    3b:5a:31:ff:b3:61:68:92:c9:8d:ff:0d:0c:ee:7f:
                    fc:3a:4f:87:97:ee:90:ab:fe:67:aa:c9:cd:85:d2:
                    cd:21:06:70:97:60:ad:b0:66:71:30:bd:b0:eb:2f:
                    0d:d0:9b:5c:b3:99:2e:b3:3a:34:fa:07:17:72:e7:
                    cb:c0:62:de:2e:83:b8:75:42:9a:39:8e:72:60:b6:
                    05:04:7a:36:77:95:d3:73:e6:a3:ee:55:7b:dc:3e:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A6:B2:A0:E4:12:0C:80:11:B8:B6:D1:D0:E4:BA:15:B6:D4:E5:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.crl

            X509v3 Authority Key Identifier:
                keyid:0A:AA:92:08:33:0F:0A:CE:C8:0E:39:69:7F:E1:85:63:D1:49:4A:50

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3f2d378d-20e1-4b5f-85b9-e8c4cba5d5d7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:d0:32:69:fc:f0:08:f5:12:b1:39:a3:6f:59:3e:a5:5d:77:
         a2:10:91:81:31:8f:5d:9c:0b:03:55:d9:30:5f:ad:9e:87:d0:
         5c:97:62:03:f1:e7:90:1f:09:c3:05:c5:67:da:db:53:8b:cd:
         26:73:ad:98:6c:40:24:e4:f8:09:99:2f:aa:19:46:ca:d4:97:
         22:18:98:19:f9:30:e1:f7:fe:49:94:e9:7a:ab:36:82:2c:91:
         dd:8c:09:6d:32:70:3e:ea:e8:c9:75:fd:af:e9:77:27:46:c6:
         33:fc:c0:c5:1a:21:ee:8c:79:c6:d1:6a:2d:a1:ea:10:df:b1:
         d2:1d:8c:f2:28:0c:2a:a8:29:68:02:fb:64:34:e5:3a:e3:a8:
         78:85:13:35:5c:e8:4e:05:cf:0e:86:83:09:de:8c:dc:fa:47:
         26:a5:61:94:9c:7a:35:72:69:aa:1b:5f:fe:17:1a:f5:00:40:
         75:9b:bc:8c:36:11:dc:19:4b:f9:a3:a2:a0:ad:a2:65:c3:66:
         ca:71:cf:43:3c:65:5c:c6:9d:b7:30:b5:aa:3d:83:a7:cf:0b:
         bc:3c:c0:17:8f:49:1c:72:73:af:6b:dd:ec:9b:53:dd:74:9e:
         1c:54:cf:23:8b:e4:ca:5b:3c:40:57:0d:1f:58:a0:3e:cd:6f:
         a0:52:61:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----