Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft
File:                     4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft (raw, json)
Hash identifier:          lhLQEaDs337HVBZd/yskKbTbqCD64Rg9T7Haif+454E=
Subject key identifier:   05:E8:51:3F:DA:9A:98:A0:99:64:A0:40:C1:75:7A:2D:B8:A1:C6:69
Authority key identifier: 17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91
Certificate issuer:       /CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
Certificate serial:       010D0C9F4328584983501F7A6C969815B4CA5580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft
Manifest number:          010D0C9F4328584571AD8D7F718608B9A8FAF3A0
Signing time:             Sun 13 Apr 2025 13:46:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:46:07 +0000
Manifest next update:     Tue 15 Apr 2025 11:00:00 +0000
Files and hashes:         1: 4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl (hash: Ei7keCoHZ7jazv3VzPVzb53RQdFJeRcmVUABaO4mntc=)
                          2: afe4eaec-855a-3198-8438-4f284572e247.roa (hash: KfKaQsKUlMvDMWHGTD79Eu8wZeHZk3+KguMWLBwezQs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:50:1f:7a:6c:96:98:15:b4:ca:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4418b7bb-7f1c-4333-9b8e-babf8b8fa391
        Validity
            Not Before: Apr 13 13:46:07 2025 GMT
            Not After : Apr 15 11:00:00 2025 GMT
        Subject: CN=0c94cd7e-5b5a-4499-8f80-e63451f0164f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:a1:86:57:6b:02:11:be:17:e0:1c:21:70:b9:
                    44:04:2e:f5:cb:8b:7b:77:30:31:1e:8c:4d:86:5a:
                    b3:8c:a4:22:14:8c:5a:4c:0f:65:23:01:ac:22:66:
                    4a:c3:2b:b9:7b:80:ba:f0:8f:b6:0b:07:3c:d9:e6:
                    36:f5:ea:a9:e1:4b:d6:c6:e1:9c:95:4a:22:d4:b0:
                    33:88:57:39:ea:cd:73:0c:4d:f0:21:65:13:8d:03:
                    6a:33:b2:b9:ff:b0:27:4b:51:58:ac:3f:a7:ce:0c:
                    12:80:93:0a:de:e6:c0:e5:ed:7f:54:93:5e:71:4b:
                    40:5b:bc:24:80:05:40:d5:8d:8f:be:9f:0c:71:e1:
                    81:63:b0:6f:94:5f:0d:29:ba:b8:5d:68:72:d0:9c:
                    cd:2f:ec:29:cf:19:40:8a:99:7f:dd:5a:60:ac:41:
                    da:0b:e2:c4:8f:ff:85:a1:21:2e:76:d0:be:01:a1:
                    ec:7a:12:69:a8:76:c6:9c:0b:03:2e:79:57:16:e7:
                    71:91:1e:8b:10:c4:42:79:a8:04:dc:77:61:e0:dd:
                    cf:f8:0f:64:34:74:cb:79:d1:4a:82:c2:d3:be:c2:
                    ad:b3:ff:05:58:19:f9:d4:5b:b4:b4:83:d6:f7:aa:
                    c9:19:cf:60:f1:82:31:40:8f:05:1a:1f:fa:f9:aa:
                    89:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:E8:51:3F:DA:9A:98:A0:99:64:A0:40:C1:75:7A:2D:B8:A1:C6:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.crl

            X509v3 Authority Key Identifier:
                keyid:17:E9:E4:BC:6B:9B:24:9D:73:30:0A:9A:89:6E:F3:7B:9C:E5:43:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4418b7bb-7f1c-4333-9b8e-babf8b8fa391.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:c2:ab:30:b3:f0:05:19:63:3d:b7:7e:03:f3:08:f3:fd:ff:
         f3:f2:b0:3f:0a:9d:dd:18:fe:08:c7:8c:1f:3d:a3:ad:e2:00:
         e6:e6:4a:26:04:21:01:33:2c:e9:e5:e2:78:88:d6:c3:ef:87:
         7d:b8:67:d8:85:0a:ad:98:ce:47:5b:7e:28:98:0c:d6:4a:8b:
         71:04:45:2e:92:f0:6d:0d:bd:61:e3:d0:d7:5a:61:f8:7e:24:
         c3:06:db:f4:b6:2f:6d:b5:b6:a4:00:56:4e:41:b1:ce:f5:ab:
         30:60:1e:a9:c5:3e:3b:c3:44:45:97:56:ed:ed:be:19:b8:c2:
         12:ad:6d:2b:54:29:9d:c0:8b:79:2b:6d:00:d7:46:47:82:d1:
         77:c4:b7:bb:06:bf:c4:1c:07:34:c1:f7:4d:48:3d:bd:c3:a5:
         e2:a4:4a:cf:91:1f:ff:2a:68:02:b7:6d:f7:1f:94:34:c0:7d:
         ef:12:70:40:30:be:f7:d7:f8:fe:ce:38:81:5d:57:28:47:fb:
         fa:05:39:af:02:e3:da:ab:91:83:0a:d3:09:db:c0:ad:19:6f:
         58:9b:e4:3b:9f:8a:0d:56:d1:de:58:39:98:19:47:86:31:a6:
         98:8c:b5:f4:b6:64:1c:7e:4a:e3:74:eb:1a:62:a0:0c:fe:10:
         1b:a2:6f:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:03 2025 by rpki-client on console.sobornost.net