Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft
File:                     2c2ae48f-475b-42b3-9a56-ce8852515055.mft (raw, json)
Hash identifier:          ya8M9XBA6iemSMVmMeHU3yHZnrbz8bvXWXj4T0wUVv4=
Subject key identifier:   4D:43:A7:55:E1:76:B6:AA:F3:74:78:14:1D:8A:47:EA:24:51:42:B4
Authority key identifier: 84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C
Certificate issuer:       /CN=2c2ae48f-475b-42b3-9a56-ce8852515055
Certificate serial:       010D0C9F4328584981214053AB58C8406C0B6940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft
Manifest number:          010D0C9F4328584073A820E5D101BA56C1927592
Signing time:             Sat 12 Apr 2025 19:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 19:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 19:00:00 +0000
Files and hashes:         1: 2c2ae48f-475b-42b3-9a56-ce8852515055.crl (hash: PFPIQfMRFPSaBV/uzeyCyclMkAfWgOpHhLnSELBe0g0=)
                          2: 4a19c062-d227-31d7-b0dc-2f525567d3c1.roa (hash: vr0y8YQjsOAwasCEq7JYNJHGChAFOHEP8XCO8MmBHSo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:21:40:53:ab:58:c8:40:6c:0b:69:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2c2ae48f-475b-42b3-9a56-ce8852515055
        Validity
            Not Before: Apr 12 19:00:03 2025 GMT
            Not After : Apr 15 19:00:00 2025 GMT
        Subject: CN=1e7ffbd5-023b-45f8-8b68-6d2a557eb311
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:93:90:4e:b3:21:1c:d3:34:6c:67:5f:14:fe:
                    5e:92:92:c2:4a:7a:a7:e8:6c:b6:a2:4a:81:c8:41:
                    37:42:0e:cc:9e:9e:99:f9:96:7f:4b:9f:51:8a:85:
                    5b:1f:b4:2f:c0:89:89:b9:a5:09:17:0e:9e:7e:4b:
                    87:06:d5:a4:42:f8:34:46:9e:44:c5:8c:af:12:da:
                    81:de:b8:13:96:af:0c:97:70:5a:3d:2b:c7:27:b3:
                    02:68:b4:88:b0:dd:7d:c3:f9:a7:d1:45:cc:d2:82:
                    dc:0f:31:5a:7f:42:cb:d5:f9:ff:44:28:37:cb:14:
                    d8:26:8b:e9:3e:9e:70:6e:dd:c3:0c:27:e3:b4:a0:
                    e1:08:3c:41:03:13:d7:2c:b7:4b:68:5f:0e:f0:7a:
                    24:ba:72:d6:4f:33:cd:cf:ec:db:9f:e7:e3:db:ea:
                    c4:fa:8a:02:40:22:3f:93:50:b4:1a:44:52:00:fc:
                    6a:da:ed:5c:63:81:ad:64:dd:5f:2c:e4:70:3e:b6:
                    96:13:db:91:f1:8a:93:60:49:9c:0d:a5:c7:63:1e:
                    ec:0e:70:e8:aa:e0:b6:94:f6:1c:ad:2d:d8:8a:af:
                    5a:71:04:d8:f2:4a:24:63:d6:29:17:9b:1f:50:df:
                    8f:56:e8:b4:ac:cd:95:68:12:97:13:2d:73:49:70:
                    ff:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:43:A7:55:E1:76:B6:AA:F3:74:78:14:1D:8A:47:EA:24:51:42:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055/2c2ae48f-475b-42b3-9a56-ce8852515055.crl

            X509v3 Authority Key Identifier:
                keyid:84:1B:35:49:23:84:0F:18:28:95:15:1C:83:D2:9C:DA:30:ED:E4:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2c2ae48f-475b-42b3-9a56-ce8852515055.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:38:a3:2f:08:80:20:99:69:73:1f:f5:ee:d1:9b:fe:ec:8b:
         a4:34:de:f4:5a:ab:36:3d:00:fc:c6:32:e4:d6:d8:4c:0f:3a:
         2a:f6:51:57:37:71:81:16:f6:7b:aa:86:21:e4:59:be:b9:b2:
         85:1c:c2:5e:a0:63:5a:6a:a8:d7:4e:bc:c3:c0:17:a6:b1:b7:
         b2:86:f0:6f:05:b7:7c:94:12:7f:b7:d4:9d:81:fd:8f:41:d6:
         af:94:2a:e2:1c:b6:61:30:29:07:05:61:bd:92:63:e8:9e:d7:
         67:77:89:23:36:30:01:51:85:56:17:42:6f:c1:39:b7:14:7a:
         ff:9e:a5:99:9c:52:10:71:40:54:13:9b:0b:2b:ae:8c:01:01:
         02:dc:23:88:f4:4b:bd:0e:a2:32:6b:96:12:6f:c7:e8:0f:ad:
         fe:00:a9:f0:5f:d6:a9:2a:be:0d:f9:ad:30:e9:5f:11:d6:97:
         58:c2:ec:de:2d:42:95:45:fe:13:5b:67:5c:78:09:09:95:c3:
         7f:d4:52:b7:8b:0c:cd:0a:11:cf:a2:f0:85:53:c9:0d:c4:0a:
         e9:3c:1a:5a:79:41:f8:11:7f:18:8d:a7:9f:c4:16:5d:aa:55:
         e6:5d:86:ed:48:40:9a:7d:9e:63:a1:50:30:b5:ca:f4:0c:15:
         08:4d:19:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----