Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft
File:                     65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft (raw, json)
Hash identifier:          STAjERIeVrM3EdWXajYcxMg6vH0MIXeYy8Gc4lyVT4w=
Subject key identifier:   76:13:93:CD:68:42:4D:D1:02:00:96:F8:E4:C1:C1:3B:CB:42:95:26
Authority key identifier: C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87
Certificate issuer:       /CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f
Certificate serial:       010D0C9F43285849815CDA75665E1C419E3A9800
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft
Manifest number:          010D0C9F43285844F54B65B05CB04CA1726A8C6B
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 21:00:00 +0000
Files and hashes:         1: 65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl (hash: N4qJp0NwTebETVYj5d0yDkplLhR5Veko/Iv3WGBtxpk=)
                          2: a27e26db-c05d-3eea-a6d8-73b657f3d5ab.roa (hash: FZR5JZr7JbJ+KvuiBE29qGo3Z0Y5v7GztIeiotY7vg4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:da:75:66:5e:1c:41:9e:3a:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 14 21:00:00 2025 GMT
        Subject: CN=a99a681b-2607-405a-b13c-502fb430ff32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4c:d4:59:0e:97:af:d1:fb:85:99:89:13:ce:
                    6e:5c:b4:96:91:5e:69:e1:aa:11:ef:f3:96:61:25:
                    f4:6b:40:90:a3:99:56:68:2f:1f:37:82:92:14:aa:
                    9e:75:59:47:e3:27:cf:83:7f:97:c5:0c:50:d4:02:
                    8e:3f:4b:64:a6:bb:e7:64:42:44:60:77:bb:ae:b1:
                    17:de:84:ee:ce:67:1d:b3:e4:be:07:eb:c4:68:95:
                    b1:cb:34:31:d1:2d:f5:df:81:73:7b:1d:e9:ba:59:
                    65:2f:86:7b:88:89:56:1a:8a:0f:c7:81:7d:ba:66:
                    2c:75:69:a9:2d:21:22:5c:62:50:23:50:64:48:f8:
                    90:19:92:db:8c:8f:1f:ad:91:e7:3d:54:eb:39:4d:
                    94:27:ae:a0:4e:79:39:f6:bc:80:5d:c6:af:9a:96:
                    66:f7:fc:38:17:49:57:c0:ed:30:f8:54:65:76:06:
                    24:a2:a5:c1:5c:c3:cf:de:8a:e2:57:ae:c0:e3:45:
                    37:51:42:88:55:11:d9:27:91:0e:c4:f4:7a:ba:97:
                    32:1b:63:be:14:35:eb:b6:5c:7a:f7:18:d2:80:28:
                    66:4b:a8:91:a0:e7:ec:3a:62:8a:06:34:aa:31:f7:
                    87:98:ea:36:c3:e4:fc:80:fb:64:e9:e9:2f:33:b1:
                    05:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:13:93:CD:68:42:4D:D1:02:00:96:F8:E4:C1:C1:3B:CB:42:95:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.crl

            X509v3 Authority Key Identifier:
                keyid:C9:97:C7:21:6D:F4:C0:99:BB:AC:5D:99:54:1A:9E:B2:9A:C9:48:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/65f6599e-f0cc-4641-b7cd-9e0a2eb2bc9f.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:d2:2f:d6:5f:0a:b5:1a:86:f2:1d:4b:01:40:40:31:96:1f:
         38:dc:9a:91:24:68:2b:ea:c3:4e:50:2e:2c:8f:ce:3b:66:de:
         f6:81:48:02:b3:b8:3d:9f:0d:d5:93:ab:b2:20:64:f3:35:27:
         2d:ac:6a:1a:bb:02:2e:84:f6:d1:10:76:3b:30:4f:f3:c9:19:
         2d:27:e8:fb:b6:4d:a6:d8:da:a7:65:65:5d:bd:71:17:bd:75:
         85:32:50:aa:28:9d:5f:21:3b:65:d3:7d:67:79:dd:35:87:8e:
         ca:88:d8:1c:1d:80:b9:06:02:c1:cd:e9:50:9e:45:26:96:11:
         7d:1f:f5:bb:0d:e4:9e:4b:c9:dc:97:c5:cb:f8:c6:fc:94:39:
         e1:90:7d:06:87:49:e5:24:66:99:ee:cf:05:76:16:ca:f5:28:
         d0:85:ae:8b:88:bc:33:78:dc:e0:b7:2e:e4:3c:f7:81:f5:bc:
         21:a9:db:6a:80:70:7f:09:f6:b6:79:83:e7:f5:bc:6e:d8:e1:
         40:e3:6c:d7:df:7c:7e:6c:6a:2f:c3:69:8e:b3:7d:f4:11:2a:
         c6:a3:91:a5:89:cc:08:ad:5e:e0:a4:db:19:61:89:68:23:11:
         a3:7b:ea:9a:5b:0f:ea:5e:70:1b:61:cc:ac:82:7c:47:10:91:
         2f:b1:30:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:07 2025 by rpki-client on console.sobornost.net