Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft
File:                     57da1f4a-da7b-44cf-8427-a74615d9a53e.mft (raw, json)
Hash identifier:          J8pbwadobVC5mJrIqQk5eBz0LVm6z9O42g0fr/RathY=
Subject key identifier:   E4:90:A7:F2:23:A4:CA:83:4A:2A:78:96:60:F5:22:76:68:63:09:65
Authority key identifier: DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07
Certificate issuer:       /CN=57da1f4a-da7b-44cf-8427-a74615d9a53e
Certificate serial:       010D0C9F4328584983394C1602FCA57B1664F080
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft
Manifest number:          010D0C9F4328584394910AAE776369E15CAEB9AD
Signing time:             Sun 13 Apr 2025 13:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 13:00:00 +0000
Files and hashes:         1: 57da1f4a-da7b-44cf-8427-a74615d9a53e.crl (hash: /IpJqJ5nJ5CVnMrOsoEWd7rEHSp40XGBTepuYk76JMU=)
                          2: 85ad93df-d449-3700-80f8-7bf056787ba3.roa (hash: 3CJVngzXttTYQfS30nzJSC0fOaejPUZ3fYm1EO9qe5g=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:39:4c:16:02:fc:a5:7b:16:64:f0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57da1f4a-da7b-44cf-8427-a74615d9a53e
        Validity
            Not Before: Apr 13 13:00:07 2025 GMT
            Not After : Apr 16 13:00:00 2025 GMT
        Subject: CN=5a4cc8bf-c630-476e-bd26-90d2675fe361
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:ea:da:63:66:c0:75:d0:f4:d8:d2:da:fd:
                    e9:9c:f0:42:36:0d:dd:8d:bd:3c:2e:99:7a:52:1d:
                    5b:91:fe:0b:de:6c:1c:d3:f1:96:47:64:a3:6d:b5:
                    b3:4d:87:fa:34:e4:4d:37:da:2a:28:22:ae:54:08:
                    81:41:5d:db:08:83:15:77:b7:e8:74:ef:65:2f:dd:
                    ba:f4:db:e5:33:13:57:68:37:2c:fb:ff:4d:5b:ea:
                    39:35:d6:10:ba:6f:6c:33:eb:94:e3:6f:c6:a2:2d:
                    b5:be:49:80:a4:9e:23:57:bd:1f:b6:97:28:ab:e6:
                    98:f1:f9:ad:0f:af:fb:e5:98:5a:ee:01:df:dd:b9:
                    6b:56:3b:29:e8:20:78:74:dd:26:c7:28:ff:94:3b:
                    90:55:94:c5:64:48:88:25:b4:a5:8e:e4:ae:59:d5:
                    80:80:03:69:ed:42:72:fb:60:bb:67:6e:a9:e5:07:
                    e6:06:53:88:5c:dd:b6:fa:5f:00:00:00:cc:64:b0:
                    b3:e2:bc:c2:87:93:05:f2:9b:9f:78:ab:32:02:4b:
                    05:ea:71:01:2b:9c:a7:0a:b5:81:36:7f:fc:ed:15:
                    b2:5d:bb:65:18:d6:6f:cd:59:88:a7:3b:1d:63:51:
                    b6:f1:c9:db:f6:d1:78:3e:c5:0f:49:c3:10:93:6e:
                    19:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:90:A7:F2:23:A4:CA:83:4A:2A:78:96:60:F5:22:76:68:63:09:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e/57da1f4a-da7b-44cf-8427-a74615d9a53e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:59:2E:AA:72:FF:6A:2E:5A:5D:16:DC:29:64:7D:F3:48:0C:2A:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/57da1f4a-da7b-44cf-8427-a74615d9a53e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:53:4e:cb:22:86:34:1f:39:db:ec:c5:b4:e1:0e:19:9d:e0:
         9a:01:ae:4a:08:16:44:ed:9e:04:7c:8e:97:1c:47:18:5f:29:
         40:d1:b3:60:dd:b2:88:ca:da:2d:4d:1d:63:b7:22:bd:23:2d:
         45:26:70:a3:5b:3b:10:5a:fc:98:95:d2:65:11:14:96:77:26:
         3c:54:11:65:44:48:4a:b9:16:a3:53:28:78:d4:e2:30:e8:39:
         01:f7:cc:c3:f4:f0:59:1b:e3:f3:5a:e7:19:be:4e:9c:fa:27:
         d1:2c:50:79:9e:6f:05:72:77:ca:df:e0:f7:2f:e5:6a:d1:8a:
         1b:43:57:64:34:de:ed:5e:cc:ac:e1:5b:80:9b:ba:81:96:08:
         38:ab:6b:b2:ff:3f:d3:7e:05:af:ee:6b:76:e3:9b:ce:92:24:
         c7:d6:de:af:b0:79:f0:a9:6f:1e:a1:c4:e8:2a:6d:ce:86:29:
         7a:73:49:7c:b7:e4:3e:c0:9a:df:87:45:32:c8:5d:2d:5f:26:
         4a:4c:7c:a2:0d:1d:c7:b7:4e:97:8a:e3:8e:00:96:ae:25:94:
         cb:ea:d2:8a:0e:61:84:b7:34:5f:e4:db:a0:65:87:b8:08:78:
         66:ac:b5:18:a6:68:e3:2f:1b:32:0a:9a:7e:36:d1:f6:61:dd:
         66:01:7f:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:25 2025 by rpki-client on console.sobornost.net