Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft
File:                     a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft (raw, json)
Hash identifier:          BZawJbYcD0VylVMcVIDf1Yr7EgEiYlRIZz75kHoujAA=
Subject key identifier:   AD:B3:46:18:C4:99:C3:17:FA:B1:74:81:E1:BF:1D:ED:D1:C1:0D:20
Authority key identifier: 72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7
Certificate issuer:       /CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
Certificate serial:       010D0C9F43285849817A96083A87F2581CB9DA80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft
Manifest number:          010D0C9F43285844EA3B75C49737B709317983F0
Signing time:             Sat 12 Apr 2025 22:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 22:00:03 +0000
Manifest next update:     Mon 14 Apr 2025 22:00:00 +0000
Files and hashes:         1: 58910c8c-d0fa-30e9-a2fd-18e1b80b12ab.roa (hash: AGiPGe04ldNdDaw77s3510DtyL/bglMBQCjNs6SkPsg=)
                          2: a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl (hash: dSnBaRQBnNjqlN/sf3KeWOZ0+/3zelCoX8TzYbGHHOs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:7a:96:08:3a:87:f2:58:1c:b9:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7
        Validity
            Not Before: Apr 12 22:00:03 2025 GMT
            Not After : Apr 14 22:00:00 2025 GMT
        Subject: CN=c48d9f97-1df1-453e-8089-a0cf83c749fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e8:4c:5e:06:c9:6e:4b:57:9a:98:8b:2f:40:
                    1d:e5:0f:39:7e:df:66:cd:2f:a2:8b:67:dc:e3:88:
                    e4:8b:24:12:44:55:11:f0:74:66:7b:e4:dc:eb:88:
                    08:7a:28:ad:ed:80:eb:9c:6d:ff:e5:11:2c:ac:01:
                    eb:a5:36:79:bb:e5:e6:32:a4:c1:9a:b4:40:cc:09:
                    7d:e3:9b:05:f6:62:72:a9:d6:49:88:fd:72:6e:aa:
                    ce:2d:50:29:2c:8f:03:ad:29:ae:c2:2d:b9:68:05:
                    f0:0b:48:56:00:ce:fe:4a:1b:f9:46:2a:62:0f:c4:
                    3d:62:2e:cd:d8:d0:a3:f3:6a:0b:71:87:0b:62:9a:
                    1a:25:b3:ab:3e:6e:86:4e:36:42:a2:f1:c6:7e:24:
                    86:9a:77:b6:a3:9a:3e:29:b4:93:e7:de:09:bb:77:
                    ce:d2:b6:5f:6f:68:36:79:77:78:6a:a9:dc:bb:f5:
                    02:a2:fd:24:81:61:5d:cb:a3:4a:49:79:f5:17:2e:
                    38:53:56:55:82:14:0d:29:7b:4a:75:17:dc:13:c5:
                    c9:16:c9:70:19:5a:2c:fc:d7:87:03:77:fd:e6:30:
                    d9:7a:9c:f4:a6:a8:74:99:19:31:df:85:69:2f:ce:
                    79:95:ab:2f:a8:06:d5:39:4a:0d:8b:be:d0:86:b1:
                    49:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:B3:46:18:C4:99:C3:17:FA:B1:74:81:E1:BF:1D:ED:D1:C1:0D:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.crl

            X509v3 Authority Key Identifier:
                keyid:72:97:B1:4E:30:CE:D9:7E:2E:B8:0E:8B:95:8A:B7:1D:37:5D:45:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/a1b1fb43-db0c-42e4-ad62-4e086ca2f4d7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:51:aa:86:1f:db:b0:eb:16:8d:88:59:54:66:8c:bb:2f:9d:
         0d:ff:37:cd:47:8a:4b:66:f2:f9:b1:c7:0d:2c:8c:a8:43:13:
         d4:5b:dc:ea:9b:e1:56:74:42:95:95:32:67:b8:9f:df:5a:87:
         46:92:d0:60:cd:d0:8a:c0:2d:66:48:08:84:7e:90:9b:32:7f:
         81:23:18:61:8c:5c:09:ad:64:f2:15:98:52:94:af:41:36:d5:
         f0:38:1e:2a:a4:c0:f0:10:66:80:38:b0:81:e0:1b:08:7a:28:
         59:1d:85:28:d9:87:e0:1f:60:b9:1e:68:e8:2e:db:2e:4f:c2:
         1d:a6:b5:a5:76:1f:93:b1:f7:c6:92:91:6a:f4:6d:9e:6a:d0:
         eb:37:c3:3b:da:3d:8f:5e:bd:bc:63:6c:9d:1a:06:93:cd:bb:
         52:36:dd:df:f6:3f:cf:b1:5a:c7:49:5c:b2:26:2c:e0:54:7f:
         cb:c8:e8:4d:da:21:0b:e3:63:b4:76:fa:85:ce:49:72:36:98:
         d0:95:45:fd:53:67:bf:ff:13:e6:a4:e2:34:ea:76:01:76:3f:
         6a:3d:1c:f5:6c:a0:c9:76:e1:8e:12:f1:27:61:95:52:ef:6f:
         06:dc:52:52:6f:06:34:5b:1f:17:78:9e:e2:ca:42:c1:b3:f1:
         b0:49:2c:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:09 2025 by rpki-client on console.sobornost.net