Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
File:                     4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft (raw, json)
Hash identifier:          YBIfdajNHvzQgZgEBry5c3MPZLIjCS1NkEa+VRBh2f4=
Subject key identifier:   ED:AF:4B:92:8C:97:B7:A1:0D:BC:BD:BB:18:38:0A:B8:0F:08:BF:F0
Authority key identifier: E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52
Certificate issuer:       /CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
Certificate serial:       010D0C9F4328584989814C0B3D74C15EF4122E40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft
Manifest number:          010D0C9F4328584073A824EC58D249ECCDE6D0AB
Signing time:             Tue 15 Apr 2025 19:00:03 +0000
Manifest this update:     Tue 15 Apr 2025 19:00:03 +0000
Manifest next update:     Thu 17 Apr 2025 19:00:00 +0000
Files and hashes:         1: 16782b21-eed6-3014-9710-b3c789353a34.roa (hash: zjfMRLRJyXHvvFDx3nOxYnzL4LmNOr4E6uEVUgOoaew=)
                          2: 4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl (hash: PA1KT+RGGbEYENsZsKynTukJYkXDlLizlh7Be8jAsWA=)
                          3: 80691033-d2ac-30a6-b14b-7e3d2d14a10e.roa (hash: GYzy1wqwJ0dvaQnC851D7bBYSk4I8NG5XsPa93OcFRA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:89:81:4c:0b:3d:74:c1:5e:f4:12:2e:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4ae503fd-2b6b-43ba-ac2e-4fd4697ac452
        Validity
            Not Before: Apr 15 19:00:03 2025 GMT
            Not After : Apr 17 19:00:00 2025 GMT
        Subject: CN=fa3552c2-b5c2-4f57-b7d0-92368482cd1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b9:f7:b4:26:7d:7e:67:e6:a7:6c:45:8c:dd:
                    28:c6:da:77:e2:ed:c4:e7:48:65:76:f0:58:bf:39:
                    a8:e7:3b:7f:37:85:3a:6f:91:68:da:f4:17:d4:96:
                    be:2a:d0:a0:58:16:db:d9:44:2a:4d:6f:21:af:46:
                    c2:00:24:c9:02:b6:6f:23:bd:5d:fa:c2:2f:71:b7:
                    9a:bf:b2:7e:20:ac:55:ce:8a:c7:1d:1a:9e:eb:70:
                    28:8b:10:ac:43:f6:2e:b8:0c:11:d7:a9:ec:3a:3e:
                    e1:6e:7a:07:88:a8:37:20:90:95:e4:6b:56:b2:7a:
                    32:23:01:bd:39:3e:3f:df:18:7c:15:91:f8:f7:2b:
                    17:ee:2d:04:c2:c6:1f:49:8c:ef:e6:90:72:c3:71:
                    ad:52:98:b5:b2:0a:33:c7:f8:af:90:b3:bb:2b:80:
                    b8:b8:16:0e:84:73:c8:01:2f:40:e8:89:21:21:2e:
                    07:28:1c:2b:84:b9:34:13:79:4c:5e:93:99:12:69:
                    a7:fc:58:b8:75:1b:9d:9e:63:82:49:b0:67:0e:3f:
                    fa:81:5e:66:f8:a9:09:e5:63:d1:81:6c:59:44:cf:
                    9b:8f:48:73:b4:e7:5a:2c:e8:a4:e4:2a:ad:e1:83:
                    d3:a7:c5:9b:43:31:f5:d8:3e:e4:ba:16:10:db:7a:
                    b9:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:AF:4B:92:8C:97:B7:A1:0D:BC:BD:BB:18:38:0A:B8:0F:08:BF:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.crl

            X509v3 Authority Key Identifier:
                keyid:E9:3C:60:69:99:6B:F1:8A:71:BE:7E:79:B6:AF:01:FA:8A:A1:3B:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4ae503fd-2b6b-43ba-ac2e-4fd4697ac452.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:45:bc:da:f0:0f:67:c8:c4:6c:1c:fc:67:2d:0f:ed:af:0e:
         c6:b5:1b:90:50:9b:76:d5:75:42:5a:5e:f9:15:83:4c:3a:e1:
         34:e8:d1:9d:c8:4f:df:28:9d:56:77:81:a3:67:7d:34:3d:24:
         97:2a:d9:ad:7e:bc:56:60:e3:71:7b:e8:55:59:94:d5:d0:d9:
         29:c0:3a:da:65:03:15:26:84:13:70:a1:a4:7c:80:26:32:4e:
         df:11:cd:21:11:31:c8:e4:34:1a:89:71:d7:b3:90:cc:f5:1e:
         27:a7:c1:27:17:5c:29:80:9e:c6:5b:e7:dc:b4:af:e3:c5:c0:
         f1:37:75:62:17:32:e3:82:f9:c7:b5:7e:90:35:25:f1:d6:ea:
         a7:09:d6:0d:b7:f4:14:a8:a2:37:9c:3d:a4:0e:f4:c9:6e:ab:
         37:05:ef:c5:a9:11:77:f7:15:4b:3c:be:80:31:c2:0b:a9:71:
         ca:35:ef:b5:d5:e4:a6:f4:73:0d:f7:4f:3f:e8:24:ef:6a:44:
         35:21:a5:69:31:fa:f6:c6:1d:88:99:39:60:8b:ec:2a:e4:8b:
         06:c5:b7:34:76:8d:20:49:a4:a3:98:9f:54:e1:ee:b8:ea:b6:
         7e:14:08:c5:76:94:0b:36:5e:3e:89:56:ab:ae:3d:3d:a8:43:
         2f:f8:75:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:24 2025 by rpki-client on console.sobornost.net