Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft
File:                     40a485a4-e936-4174-8999-571e03203823.mft (raw, json)
Hash identifier:          2abvN8K7QvRXtd8vszHTVpZRghOTnhJbAtNs5XiknQw=
Subject key identifier:   FA:B6:75:5C:B2:87:D4:CF:BF:CF:A7:FB:E5:4C:2D:5C:05:F8:C9:25
Authority key identifier: 8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01
Certificate issuer:       /CN=40a485a4-e936-4174-8999-571e03203823
Certificate serial:       010D0C9F43285849813F1015D41D8C99E42C5700
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft
Manifest number:          010D0C9F4328584073A825D34C38BD0BF05689D2
Signing time:             Sat 12 Apr 2025 20:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 20:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 20:00:00 +0000
Files and hashes:         1: 3296796c-a812-3fd9-8b79-c617f853bf28.roa (hash: wFQpabxSlzipCp7/qETD7I2A0TPXkBN3zdpzTeohceM=)
                          2: 40a485a4-e936-4174-8999-571e03203823.crl (hash: xHGMPuEDyPFeeef5JXem2MOE/vQn+BQCGiL5EgjzSAI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:3f:10:15:d4:1d:8c:99:e4:2c:57:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40a485a4-e936-4174-8999-571e03203823
        Validity
            Not Before: Apr 12 20:00:07 2025 GMT
            Not After : Apr 15 20:00:00 2025 GMT
        Subject: CN=8d25b731-72e7-4667-b57b-4de6a13c8a4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:bb:c9:17:8f:38:bf:77:26:d1:12:05:63:d2:
                    00:b5:45:0f:01:fc:bc:13:b5:b6:b8:1d:ee:e5:ac:
                    98:2a:27:13:74:e4:4d:ae:32:b9:a3:e3:ef:7d:79:
                    d5:23:c7:d7:b7:5b:e9:82:5e:81:d1:9a:1a:9c:8b:
                    1d:9f:6d:d0:d6:d9:ed:b8:58:a8:9a:2d:a7:c0:1f:
                    15:1b:69:42:e7:ad:cb:8e:32:34:05:04:00:06:ef:
                    d7:20:e2:2d:dc:84:1b:bf:57:fd:2b:ae:41:c6:a6:
                    77:45:86:a0:f5:3d:48:e6:fd:11:ff:66:2d:a3:0a:
                    f5:6b:39:6d:ea:45:93:35:25:95:19:e3:af:42:f2:
                    3e:c4:db:9b:ba:44:98:1f:61:c8:4e:40:20:a9:74:
                    5f:1d:5e:98:78:b8:ac:89:45:3a:23:a0:c6:5f:a8:
                    e5:b7:33:39:8e:2b:da:00:ea:30:87:91:4c:0b:07:
                    0a:97:8c:b4:7f:d5:58:8e:11:7f:59:e2:95:53:55:
                    d5:46:2e:76:b6:83:fb:07:30:c1:11:de:71:07:50:
                    29:9f:4c:03:24:38:cc:08:1a:da:e9:68:4f:8a:5b:
                    69:94:b1:b8:01:9e:db:e7:60:3e:fc:9b:40:ff:ae:
                    f1:32:4c:ca:fb:31:cb:6b:5b:c9:43:60:be:e3:5d:
                    2d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:B6:75:5C:B2:87:D4:CF:BF:CF:A7:FB:E5:4C:2D:5C:05:F8:C9:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823/40a485a4-e936-4174-8999-571e03203823.crl

            X509v3 Authority Key Identifier:
                keyid:8E:DB:72:14:EC:37:6A:68:7B:79:16:21:24:27:B4:B0:40:42:49:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/40a485a4-e936-4174-8999-571e03203823.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7f:d7:55:80:f6:9f:a7:e8:e8:12:42:b5:e1:aa:5d:fb:27:4c:
         09:a7:ba:3e:4f:ca:a6:57:67:84:7e:a5:f0:28:ab:a0:fb:59:
         af:d8:9f:f6:f4:34:df:9b:71:25:4d:6e:3f:0a:fd:14:d5:c4:
         3b:1e:e1:ca:ff:03:d9:dd:ef:14:1d:c0:46:bc:4b:24:84:70:
         7f:f6:2c:c8:60:d4:a8:c8:77:08:3d:a4:68:8c:e6:15:a2:1d:
         e6:17:c1:15:3a:ec:02:09:a9:5c:01:f4:10:c7:e1:2e:a0:77:
         9a:78:58:f9:63:53:21:ce:bb:27:1f:e7:8c:e6:2e:02:cf:ca:
         46:7b:a3:e5:14:1a:7c:6c:34:9e:b2:dd:94:c1:fc:ee:63:ea:
         cd:e5:e5:b2:b9:a7:f5:ac:85:e9:d7:7a:f5:70:4d:ee:8b:9e:
         2b:c7:d2:9f:74:87:f4:3c:b9:74:43:53:29:8c:20:eb:31:5f:
         b7:5c:f8:c1:38:41:31:c2:8e:d4:e2:f0:4f:1d:42:2f:e6:b6:
         c5:49:2d:15:1a:31:09:a7:65:6c:37:e4:bd:91:c1:7a:4c:ee:
         69:49:ee:e4:bd:9a:c5:be:00:95:d0:43:a5:ed:7e:e8:77:cf:
         d5:7c:d2:91:2d:ce:f0:00:a0:1f:2d:ff:8e:b6:e6:03:f1:ae:
         95:12:55:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net