Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft
File:                     3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft (raw, json)
Hash identifier:          vy4BDLX2zGEBSQi0xrRRtzck5qlr20YldC6GEEIqotY=
Subject key identifier:   FF:2C:6C:30:39:0D:EA:2B:AA:73:E1:A6:20:5C:E4:33:F3:3E:E6:E3
Authority key identifier: C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86
Certificate issuer:       /CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae
Certificate serial:       010D0C9F43285849828697821CEE7697C6A6E500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft
Manifest number:          010D0C9F4328584073A845B1E7CF882A25356392
Signing time:             Sun 13 Apr 2025 07:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 07:00:00 +0000
Files and hashes:         1: 3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl (hash: PY8zDrITuidbjWooq8MRLKznfzDh7xXBF6XbQApxDUk=)
                          2: 44e6412a-ad9a-3379-a2fe-2eda7500f614.roa (hash: iZO4hAPfbpFGZ2TeoYliSa8cKubl440HCmDv4jRGMrU=)
                          3: d73a5915-ee1f-33f2-8b70-f050ef95069f.roa (hash: dxTBBR6Nf8SxBuuxCUJgTZ5+0QkLXyBn3FD/WkXS+rM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:86:97:82:1c:ee:76:97:c6:a6:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f28b62c-7c50-4ccf-bac5-a6ced9c510ae
        Validity
            Not Before: Apr 13 07:00:03 2025 GMT
            Not After : Apr 16 07:00:00 2025 GMT
        Subject: CN=09f9b11d-92ea-4f0c-a607-07553572cc90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:05:95:11:95:62:97:ae:1e:ea:7b:ed:dd:a0:
                    87:7b:82:99:64:67:6a:8c:51:7a:25:4b:e4:0f:e3:
                    98:89:ef:41:2a:e8:39:f8:13:db:2b:5b:40:06:12:
                    ba:cf:1f:3d:f7:09:f4:95:65:4a:58:da:6a:d4:b3:
                    8c:4b:d9:5a:19:6b:ec:eb:6b:b7:78:ba:b6:9b:cb:
                    06:17:66:83:23:ba:2e:f7:90:87:c3:5c:02:21:ed:
                    59:f4:bc:51:dd:32:41:55:b5:be:e2:4c:e2:82:95:
                    0b:0a:40:c6:3c:69:18:e5:87:d9:03:5e:8f:59:0c:
                    ab:20:ef:28:a3:b8:63:7f:f2:4e:4d:11:52:bb:a7:
                    50:c6:0a:48:a7:9c:e8:75:2c:c5:30:9a:76:02:57:
                    00:cb:41:2b:0b:a9:ef:8e:44:1e:37:49:9f:ac:24:
                    55:af:12:80:83:15:fd:44:6b:8b:ae:64:71:2b:7c:
                    9c:24:fc:5e:c3:d2:bc:2a:b7:53:35:e2:73:4d:54:
                    72:f7:c0:69:56:81:b2:19:02:b3:97:02:29:73:ff:
                    03:e6:78:97:c6:83:a9:5e:c4:50:36:c2:70:94:43:
                    9b:95:f5:49:eb:c0:0c:bd:b8:71:a6:1d:67:d6:95:
                    e3:ca:ba:ee:4f:1f:a7:3f:30:b7:a4:3d:59:47:a2:
                    b9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:2C:6C:30:39:0D:EA:2B:AA:73:E1:A6:20:5C:E4:33:F3:3E:E6:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.crl

            X509v3 Authority Key Identifier:
                keyid:C7:8D:60:91:0A:7B:BA:39:22:7E:BE:6C:E6:2F:05:8E:D2:66:FD:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/3f28b62c-7c50-4ccf-bac5-a6ced9c510ae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:af:0a:3e:46:07:bb:d4:c6:e3:b5:5c:64:e4:0c:aa:fd:89:
         ba:58:31:9e:41:64:1c:96:bb:bd:d8:fe:3e:84:26:93:fb:45:
         db:b9:78:33:75:11:a3:55:7e:f2:10:9f:fc:c8:b3:a3:ee:26:
         89:31:54:75:f7:d0:82:c5:57:1a:fa:8e:38:da:38:7e:f4:92:
         d6:80:08:17:12:79:ac:ae:82:37:81:eb:2a:a2:82:5f:46:b1:
         62:c4:0b:ff:a9:72:41:83:a7:53:3e:4e:7a:82:cf:f4:5f:92:
         70:3f:27:cf:1a:c6:a5:7d:26:c3:48:b4:02:90:42:93:44:59:
         ae:89:6d:34:e3:46:e5:b1:06:09:12:29:75:55:a2:34:20:2b:
         2e:b8:ae:55:8d:3c:52:6f:0f:24:48:cb:c3:26:fe:89:2e:55:
         b0:33:1d:20:82:1a:56:da:9f:c9:dc:82:9c:c5:d5:60:ec:f3:
         47:91:49:10:a0:94:0f:47:f6:b4:e0:65:8f:f8:6e:df:5d:b7:
         58:83:14:72:74:b8:b0:25:a9:1a:3f:19:3f:d6:24:4b:cb:51:
         ab:34:0e:fc:6f:dc:4a:7d:ca:fb:bb:46:35:70:81:cf:8b:98:
         84:fa:4f:44:7b:82:bc:29:f3:a8:3d:8e:c4:8f:e8:1b:3e:4a:
         1f:0f:23:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net