Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft
File:                     917bf66f-fa51-48f2-813c-8b0191c1aa76.mft (raw, json)
Hash identifier:          6X+u6Hs/ofCX2zIrJ0j6HbwaOZMon5W1bnxJajhRAmY=
Subject key identifier:   4F:7A:D3:DB:37:9C:45:B9:BE:12:2F:62:A3:F1:ED:93:82:48:93:13
Authority key identifier: DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61
Certificate issuer:       /CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
Certificate serial:       010D0C9F43285849819865A9DCAB427B0A628200
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft
Manifest number:          010D0C9F4328584073A82F3667A373495E505239
Signing time:             Sat 12 Apr 2025 23:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 23:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 23:00:00 +0000
Files and hashes:         1: 917bf66f-fa51-48f2-813c-8b0191c1aa76.crl (hash: oITOG3O90iURVUk3ZESTFewWS/DbH+sdB7S49OXB8sI=)
                          2: d442156c-4d4b-307b-9416-612333104ee4.roa (hash: tsz4OExeslerhqEEipYOQ9fN2qLDyKTXGw3SB6xHXhU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:98:65:a9:dc:ab:42:7b:0a:62:82:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=917bf66f-fa51-48f2-813c-8b0191c1aa76
        Validity
            Not Before: Apr 12 23:00:07 2025 GMT
            Not After : Apr 15 23:00:00 2025 GMT
        Subject: CN=e5357e27-3d45-4e84-bc29-da2cd661ad54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d6:1e:a7:fb:bf:f8:5b:49:7f:d4:76:15:d7:
                    e5:1d:57:e9:51:f5:bd:b0:ce:2d:bd:ff:3f:1d:85:
                    05:b2:ba:eb:1f:ad:f4:19:f4:50:cd:a4:86:f9:f6:
                    5b:6f:22:6b:96:d7:bc:2f:b5:9a:c6:23:c0:00:95:
                    4e:a3:13:b1:e9:23:a5:62:e6:7a:36:0f:b1:9f:10:
                    96:dc:69:63:2a:ab:e2:0d:43:36:c4:14:67:22:ea:
                    b9:53:75:0f:3d:7e:b1:0d:78:af:0c:ab:c5:68:fe:
                    e6:36:14:e7:f3:f6:60:c1:38:db:6c:31:59:14:c9:
                    d7:1b:ee:cd:2c:65:85:e6:c2:28:91:e6:0e:c2:bd:
                    33:29:56:23:6c:c8:51:34:4e:77:38:53:30:b0:63:
                    59:1d:e3:fb:dd:34:89:bb:ea:68:05:60:1e:ef:83:
                    aa:b9:08:65:a1:03:0e:ca:28:8c:4f:d9:a3:6d:d8:
                    89:61:a5:46:28:de:be:95:09:6f:76:5e:f0:4f:aa:
                    d5:b1:fa:d0:22:68:0d:e7:9b:95:71:43:db:c6:63:
                    5f:61:a5:a8:b3:60:ae:4e:6a:4f:fb:c5:57:e9:a0:
                    5e:95:1e:65:c3:47:36:8f:1d:73:2d:41:b6:be:05:
                    ab:4b:98:96:a0:64:52:15:75:9a:17:d0:e3:f2:40:
                    1f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:D3:DB:37:9C:45:B9:BE:12:2F:62:A3:F1:ED:93:82:48:93:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76/917bf66f-fa51-48f2-813c-8b0191c1aa76.crl

            X509v3 Authority Key Identifier:
                keyid:DD:43:56:99:72:BB:27:1F:0F:3A:19:36:38:E8:D0:FA:84:20:D0:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/917bf66f-fa51-48f2-813c-8b0191c1aa76.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:f5:fb:25:f6:9d:22:32:bb:5e:a5:31:45:fa:c5:18:f0:56:
         3d:75:52:a5:48:21:91:63:51:4e:13:4e:46:e4:aa:0f:37:26:
         d3:71:63:07:67:ff:78:ed:7e:d5:cf:37:d4:ac:d0:a3:bc:bb:
         e5:56:22:15:6f:07:c2:53:c0:b4:b1:5d:8b:f4:8d:05:c1:1d:
         90:e9:ee:92:c2:1e:81:d2:46:11:3e:36:95:f3:59:d6:3a:db:
         6b:52:56:9b:bf:5b:3d:23:e9:cf:01:cb:80:09:e2:d3:f7:90:
         dc:f1:f3:3e:25:21:b4:c6:26:96:e3:4e:43:e6:7e:2d:5c:80:
         a9:bc:ac:7f:dc:b5:e4:49:fa:da:cf:a6:10:4e:13:ee:fd:a5:
         83:c4:24:f7:b0:0d:e7:38:2d:c6:0e:ba:0e:e3:48:bb:00:91:
         62:10:a3:7d:3f:98:6c:5b:28:eb:05:19:4a:90:c0:45:8d:11:
         35:4c:50:39:43:91:bb:8f:37:6b:27:57:bd:29:0c:ec:d2:79:
         7d:5b:02:c9:8f:8c:89:be:e3:42:a7:18:8c:3d:12:b9:33:34:
         9f:ad:b6:7f:02:fe:cc:67:8f:26:97:7d:f1:fa:9d:fa:6b:35:
         08:96:20:30:26:03:23:08:b3:da:f4:37:d8:b1:f0:71:6d:be:
         f8:e6:ba:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 17:21:26 2025 by rpki-client on console.sobornost.net