Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft
File:                     711a04de-db2a-4e54-8693-ca6a2c107ab4.mft (raw, json)
Hash identifier:          sAUlUIaa8+mbl05EDcU64gAgFwdb6PN9rKm7UuM9wYc=
Subject key identifier:   ED:47:7E:32:07:93:4C:CE:9C:EA:80:D9:CE:48:C1:64:EB:E2:18:C5
Authority key identifier: 9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D
Certificate issuer:       /CN=711a04de-db2a-4e54-8693-ca6a2c107ab4
Certificate serial:       010D0C9F43285849812140766064DB439F63D580
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft
Manifest number:          010D0C9F43285844FD45352A7B442523E9D1C4A9
Signing time:             Sat 12 Apr 2025 19:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 19:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 19:00:00 +0000
Files and hashes:         1: 38cc9063-fc37-349c-9675-3e8f6dafcc2a.roa (hash: kXjBUo1c3FGnbcpAdfkzolDM2dP6/R/GA3E7JymMRuY=)
                          2: 711a04de-db2a-4e54-8693-ca6a2c107ab4.crl (hash: VEXLl1lll8sjPF7PBYQUrXsfDMoV6t76t06KlSliA3s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:21:40:76:60:64:db:43:9f:63:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=711a04de-db2a-4e54-8693-ca6a2c107ab4
        Validity
            Not Before: Apr 12 19:00:03 2025 GMT
            Not After : Apr 15 19:00:00 2025 GMT
        Subject: CN=df424e35-b248-4ae3-9307-df60f0133742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d2:ca:fc:42:03:d0:f4:54:22:93:35:a5:96:
                    52:40:b0:45:b0:e7:76:26:32:d6:25:c1:07:fd:df:
                    42:47:f7:43:12:64:ed:b2:ed:15:a5:58:0c:46:5c:
                    02:72:0f:95:7a:19:c9:2c:cd:df:db:15:77:a8:50:
                    58:d9:69:9e:26:86:64:be:5e:b7:ec:a6:e5:fc:ac:
                    f8:f6:4b:6d:ca:06:fd:b2:0c:f6:b4:df:d8:b3:44:
                    c4:81:4d:e4:71:03:a4:54:cd:4a:68:b1:62:85:a7:
                    51:e3:69:d2:3a:cc:ed:54:12:3f:85:82:0a:0b:2c:
                    56:14:4b:61:a0:f7:80:5a:28:c3:d5:0f:54:c8:1a:
                    b3:2b:48:37:86:2b:ac:dc:ba:34:cc:ce:be:74:c5:
                    89:6a:6b:80:af:2d:53:de:17:63:d8:26:eb:99:af:
                    53:88:d0:9a:3f:1c:cb:41:0c:43:86:08:90:8a:03:
                    96:b2:65:c1:c7:82:7e:5b:8f:54:69:c8:9a:b9:c6:
                    94:3e:79:19:e8:d6:0d:25:a6:80:0f:d4:05:ae:81:
                    90:e4:81:fa:b7:09:ea:cf:0f:36:26:58:86:59:ae:
                    09:af:3c:f1:0c:77:3e:74:04:67:52:3d:be:3a:69:
                    ba:ff:24:f1:36:77:2c:16:c5:46:37:90:98:22:ff:
                    0a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:47:7E:32:07:93:4C:CE:9C:EA:80:D9:CE:48:C1:64:EB:E2:18:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4/711a04de-db2a-4e54-8693-ca6a2c107ab4.crl

            X509v3 Authority Key Identifier:
                keyid:9E:4C:B6:A1:BA:B0:AD:5C:D2:C8:7D:DA:CF:9C:C2:79:6E:0B:36:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/711a04de-db2a-4e54-8693-ca6a2c107ab4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:03:8b:67:f5:eb:1a:28:38:f4:78:66:90:bc:e4:03:6e:f8:
         e4:a9:e8:84:bd:7a:22:38:57:c7:50:46:2e:e9:75:d4:14:87:
         ed:ac:b0:2d:64:31:9c:aa:e6:fb:11:12:0e:a7:3e:04:5d:5e:
         a0:c8:6a:ee:3b:3c:fd:4e:1a:cc:02:8c:95:8a:5f:17:8d:d4:
         1e:ab:ac:15:1f:ce:d6:b9:09:ff:a4:90:8b:c2:d7:d5:d1:0e:
         7c:60:8d:5e:6b:45:52:8e:b1:f9:62:9d:e1:81:f6:83:52:ab:
         01:97:66:0a:e7:a8:3a:f6:69:1d:cc:46:60:64:f7:1a:c5:bd:
         b7:0d:b4:79:50:29:60:dc:db:0e:b9:c3:d9:28:a5:7e:2b:c4:
         b0:55:ff:ee:84:9c:b8:90:15:2c:0a:6a:c4:1b:7f:64:84:40:
         83:5f:16:f6:28:4a:d4:25:6b:04:45:da:7f:13:74:cf:0e:57:
         a4:0b:4a:d5:f5:93:9d:f8:49:dd:95:c8:97:fb:22:3c:86:4b:
         30:5a:e5:b2:2f:cc:5a:e7:9d:1a:b5:71:36:76:7b:c6:d9:9a:
         65:02:b0:4f:66:ad:13:71:1f:49:0f:b1:e0:dd:10:50:66:35:
         a1:f4:21:a3:bc:76:c3:5c:0f:06:56:aa:04:47:24:a8:d2:19:
         70:e4:11:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:08 2025 by rpki-client on console.sobornost.net