Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft
File:                     d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft (raw, json)
Hash identifier:          lal6v/IjtKNbIhHWIZONTiAdEERmaLhBzN8t1euAqlY=
Subject key identifier:   9A:80:B6:52:85:A1:AD:E8:DB:72:74:FC:93:F2:BA:16:E8:1A:8B:66
Authority key identifier: 01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4
Certificate issuer:       /CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a
Certificate serial:       010D0C9F43285849835716561FEA03FB33DBA440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft
Manifest number:          010D0C9F43285844E3BFCCCE9B4B84D0FFE66072
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 3b4f080a-93ea-356c-9216-559219ab2f01.roa (hash: zizUVDgo704PFI0Zzc1qtuGYMRqRFS4s7J00i8td47U=)
                          2: d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl (hash: PJNkE9nx3txHArY0LCbVN4c5suCkdX/6C5VxoRz4P7I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:16:56:1f:ea:03:fb:33:db:a4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=734e90e7-3df7-47f9-a9f9-6732965cf03e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:97:2d:05:47:ac:30:53:2d:7f:e7:9c:d5:a7:
                    e1:3c:b5:22:89:e8:2d:92:aa:c9:9f:44:1c:68:6f:
                    27:f0:97:26:38:a3:74:9e:ff:54:5c:77:f1:48:66:
                    68:dc:63:39:e6:87:4f:03:37:02:e6:85:42:2c:4e:
                    c7:60:d7:6d:a8:53:26:b2:5e:1e:64:23:62:15:ce:
                    db:bf:a5:83:65:23:ac:44:26:d8:7c:c0:ec:6a:24:
                    cc:45:dd:54:fa:b5:ce:d1:ad:0a:f3:05:78:96:c5:
                    dc:bf:21:e8:8e:04:5a:db:c9:66:09:84:5f:5b:39:
                    de:ec:69:11:8f:97:9b:fe:b5:75:8c:68:21:ad:53:
                    7b:20:e4:86:4f:4c:e7:a0:df:cc:21:a9:28:33:3c:
                    18:03:71:04:83:53:69:cd:cf:6f:7f:8a:8d:b1:0b:
                    bf:cd:48:ea:80:d7:69:d5:b9:1b:d7:74:9e:8e:63:
                    7a:bd:d7:68:77:66:8b:ee:8f:ec:ba:f0:9e:e1:dd:
                    78:12:17:a5:4d:fe:26:0e:47:73:68:b5:06:d7:6e:
                    7e:da:92:24:ff:30:71:4c:36:d2:02:2e:e1:d6:a4:
                    4e:da:fd:79:c2:ae:ad:18:28:d0:9a:2e:67:f8:19:
                    37:bf:51:2f:c4:a5:54:bf:d7:67:9d:c8:2e:0d:3f:
                    10:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:80:B6:52:85:A1:AD:E8:DB:72:74:FC:93:F2:BA:16:E8:1A:8B:66
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.crl

            X509v3 Authority Key Identifier:
                keyid:01:A9:95:D9:E9:D6:D2:87:84:1D:CE:8D:87:67:9D:A4:CD:D1:FE:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d8fbf8b2-d2bc-4ed8-bd57-2a5e43a30f3a.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:ea:f9:8a:d5:7e:c7:0d:d7:ee:2e:58:7a:ff:cb:76:a6:f3:
         35:f1:d8:07:2b:f3:f6:14:31:7d:f5:47:5b:23:23:a8:f9:bf:
         eb:c8:2b:c6:b0:01:1d:02:28:ee:f0:d5:3f:61:0b:cf:a7:6c:
         09:c3:5e:08:8e:8b:91:ab:f6:99:f2:5d:15:5c:7f:c1:36:c4:
         88:1e:c1:c6:40:35:93:ef:00:4a:82:9e:db:f7:28:62:b4:52:
         41:cb:9e:74:99:81:82:87:02:02:3c:14:c2:ad:46:04:fc:99:
         43:2d:5f:2f:14:98:09:1f:83:b1:a3:ad:b3:ce:0a:9d:6a:c3:
         e4:e7:87:29:e3:a3:d1:cf:5b:18:7e:ad:5c:5d:9a:c6:5a:38:
         03:5e:ca:d0:e8:e8:95:3b:4e:81:59:87:18:5a:f3:f3:0c:94:
         8f:b8:0d:2c:11:44:c2:b1:27:c5:6a:99:f8:3a:db:64:e7:3c:
         f3:31:db:95:68:94:55:5c:75:40:81:2b:8d:46:2e:14:7e:28:
         b8:95:3f:3c:a9:ae:00:18:1c:13:9e:9f:ec:04:54:d5:53:8a:
         28:7f:4c:3d:95:40:17:d9:5d:bf:0d:ac:33:81:9d:83:a7:82:
         34:7d:01:3e:87:00:25:69:b8:88:d9:11:9e:c8:56:ef:d4:e4:
         75:0b:c8:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:11 2025 by rpki-client on console.sobornost.net