Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft
File:                     dac9cb7f-b46d-477e-8698-95f66c423aab.mft (raw, json)
Hash identifier:          8S9y1BXdtVD41BGhCtq4Ee+awbqa8pfYRZsnFQo8Cjc=
Subject key identifier:   79:05:53:D0:88:2A:F2:1A:06:06:94:3D:D9:78:46:98:0E:DD:BA:BD
Authority key identifier: A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70
Certificate issuer:       /CN=dac9cb7f-b46d-477e-8698-95f66c423aab
Certificate serial:       010D0C9F432858498357167738CB25CB5CDF0B00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft
Manifest number:          010D0C9F4328584531EAF5125504A8C8FE00779A
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 02062a13-ddc4-3a24-911a-1b037896e1c4.roa (hash: rYYl/jl3+8CZgtoPQgVLItigdSymjY9oOPdsCKlqtsE=)
                          2: 30639e22-62de-31fe-a7e8-90514fad41ce.roa (hash: 9mERJTfJMHCzh9gYE7QQTB1TUaO5tUuYc3BYCyJmdac=)
                          3: dac9cb7f-b46d-477e-8698-95f66c423aab.crl (hash: gCPwHAs/CdLjUq4mPCdL1H1hdlBocVSL67OGwtB6imk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:16:77:38:cb:25:cb:5c:df:0b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dac9cb7f-b46d-477e-8698-95f66c423aab
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=79cf2af1-a572-456f-8e33-29889e735513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:27:b0:ad:10:b5:80:46:64:ce:2a:dd:a0:b9:
                    44:05:b1:e1:9c:99:e3:22:d3:a3:94:ee:f7:ce:d0:
                    6b:71:ba:2c:64:45:60:12:87:73:6a:32:ca:62:3d:
                    a5:46:d8:de:89:c0:8a:25:d2:04:05:45:29:2b:d1:
                    37:ab:4f:b0:d9:68:5d:22:a7:91:f8:a6:4a:36:b4:
                    d3:c6:68:24:e8:a9:a4:8d:29:22:a7:89:28:1c:3f:
                    b9:5c:5e:b4:9b:87:fe:f2:5c:c4:18:20:e6:8c:f3:
                    6a:64:39:59:46:9c:14:62:3f:16:dc:3e:5b:35:53:
                    d1:bc:b0:ec:77:b8:12:60:c7:7a:16:38:a6:06:7d:
                    65:88:7e:8a:ad:98:18:ed:5c:36:97:09:8f:8a:1f:
                    c3:0c:8f:70:31:f3:65:99:3a:22:df:6d:e4:14:5e:
                    26:0e:9a:f9:70:92:b2:e8:20:04:27:6e:26:33:0c:
                    0c:c4:c2:86:34:49:3b:bc:9e:49:9e:2e:9b:bf:16:
                    44:3f:97:a9:ab:d0:e9:d7:98:f8:8d:dd:6b:cb:bd:
                    14:f7:7c:03:65:da:5a:35:9a:61:4a:63:f4:80:19:
                    26:98:c5:be:a0:a5:b1:ca:9b:c9:a4:61:4b:f8:f8:
                    44:f7:1d:23:70:2a:ab:2a:df:35:92:2a:1f:84:2c:
                    42:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:05:53:D0:88:2A:F2:1A:06:06:94:3D:D9:78:46:98:0E:DD:BA:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab/dac9cb7f-b46d-477e-8698-95f66c423aab.crl

            X509v3 Authority Key Identifier:
                keyid:A9:64:71:5B:F3:C2:52:FB:05:C5:52:3B:AE:67:29:68:CB:6E:37:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/dac9cb7f-b46d-477e-8698-95f66c423aab.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:a0:8e:58:76:f4:15:0f:a1:e3:d5:78:cb:52:bc:0e:37:7d:
         6e:e1:f6:ef:16:bc:22:80:e3:c7:65:ad:d3:a4:5c:a3:f3:da:
         4f:fb:64:8d:9c:ee:5f:a7:a5:ee:51:cf:6f:53:e3:8d:ae:cb:
         13:a9:ee:6f:c8:1f:b8:16:24:f6:37:f7:46:66:ce:dc:77:a4:
         5e:7c:34:2c:67:43:87:bc:79:4a:8d:81:8f:30:f4:cb:89:fb:
         bf:88:f5:70:7e:f4:9f:7f:50:d7:b6:46:73:c1:94:2e:c8:15:
         e3:43:5e:b4:e2:e1:59:08:3d:97:62:18:fa:ef:a6:f3:f9:31:
         ed:1d:2d:72:a0:65:cd:86:d8:cc:64:ef:b1:e9:52:5a:4c:1c:
         57:a5:5b:20:e4:94:a0:49:a3:2f:cc:69:a7:ec:3b:47:b9:60:
         1f:c4:c4:9e:d6:08:3f:49:b0:6f:04:05:e5:47:25:fe:54:24:
         43:84:23:69:44:99:ff:74:7a:40:f1:30:20:22:53:29:f4:79:
         80:0e:61:24:2b:64:65:b3:17:17:7e:c7:1e:bf:76:62:b6:50:
         23:42:38:c5:7b:f2:fc:11:99:6f:98:1f:a4:aa:2e:4e:5c:e9:
         a3:8e:b2:9a:c1:7b:ff:69:57:ae:c2:3d:00:69:a9:9f:eb:98:
         39:31:b5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:11 2025 by rpki-client on console.sobornost.net