Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft
File:                     09fb7d57-7876-4e3a-b055-3534010fc6a9.mft (raw, json)
Hash identifier:          SjvSLLw6M5cn0uMSapVKfIL3YN07VOO7nKHsRH9+JxQ=
Subject key identifier:   8E:07:C4:AA:F7:01:97:DC:67:44:3E:CF:BE:CA:D5:20:7C:46:DA:4E
Authority key identifier: 96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E
Certificate issuer:       /CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
Certificate serial:       010D0C9F43285849835713AB9C0003ED60456140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft
Manifest number:          010D0C9F43285842726296C4BA108C8E51C608A6
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 09fb7d57-7876-4e3a-b055-3534010fc6a9.crl (hash: DusFdizJWrpMs3d0QyIBMokKXXfvhVIL4Qkkdb4VtEQ=)
                          2: 30528c85-cc5e-3c02-b764-0e2ec04f69c6.roa (hash: 2V2KMpUo4UJ6Fu4YqI9n0eNAhSy4G/1Lkf0iQ3lLtiY=)
                          3: 5b9b1057-827d-3378-bedc-a67f58f97a5d.roa (hash: WlMIBNkgs5PHJqtZSBIR74QNdsl+kyh4JQXUnM0AlRk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:13:ab:9c:00:03:ed:60:45:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09fb7d57-7876-4e3a-b055-3534010fc6a9
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=aca3931c-cc2a-48e8-abb3-5ba7e874c4ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:f9:53:ad:10:3a:13:77:73:6f:04:d4:c8:00:
                    43:0a:19:d1:44:66:44:29:de:c8:c3:b9:be:a5:8d:
                    4b:1c:1c:a8:9b:e1:6c:24:5d:ea:54:f0:89:4a:32:
                    cd:38:6e:fe:cb:9e:43:35:d7:44:8d:56:a3:e2:26:
                    63:5b:75:20:ec:26:93:04:16:bd:98:ad:d7:d2:9d:
                    75:9e:11:87:ee:98:f5:04:5e:65:00:29:36:9d:b1:
                    de:04:d0:f6:f4:d3:73:50:4a:7b:45:d8:9d:76:f2:
                    ec:43:e2:1a:70:5a:71:04:08:da:69:8d:58:c1:8a:
                    9b:43:c9:46:f0:45:b9:3b:ab:6f:e1:31:0a:56:bf:
                    be:98:f0:1d:f7:fd:e6:c2:cc:b6:d2:9a:c3:3b:c6:
                    61:4d:8c:2f:d0:1a:df:de:2c:33:74:6b:4a:4d:39:
                    84:69:ab:8d:0c:85:91:0e:ad:1d:93:6a:89:ba:54:
                    0e:3a:f9:d8:55:e5:1b:55:91:a2:62:a0:ac:7a:4f:
                    f0:ee:5c:4c:d1:f1:89:8a:60:9f:7e:dc:77:e0:23:
                    45:07:b5:ff:d9:b7:c8:1d:f7:27:2b:d7:c0:c6:b5:
                    4c:db:e4:14:a2:69:87:12:98:cb:9e:a4:40:f1:45:
                    4d:fb:c1:59:62:14:11:b8:69:9c:36:82:37:c6:e6:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:07:C4:AA:F7:01:97:DC:67:44:3E:CF:BE:CA:D5:20:7C:46:DA:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9/09fb7d57-7876-4e3a-b055-3534010fc6a9.crl

            X509v3 Authority Key Identifier:
                keyid:96:72:1A:72:B1:9C:B8:2E:77:EF:D4:F4:1C:CD:C8:A0:BC:C9:AC:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/09fb7d57-7876-4e3a-b055-3534010fc6a9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:8a:33:3f:50:69:0a:9e:0d:d4:f1:69:2f:94:5e:e7:15:
         07:d4:11:d6:2f:a1:99:68:ed:4e:67:c4:5d:d8:4f:5c:45:ba:
         44:29:dc:03:17:67:f4:86:bc:85:0b:b7:f7:38:ca:21:c1:5a:
         aa:65:a7:da:63:5f:5b:fc:ad:41:e5:72:e5:8d:f7:64:ac:4f:
         d1:95:d0:d8:69:75:5a:4f:ca:7c:91:dd:f2:c4:11:22:1a:a0:
         23:b1:d9:bc:a2:63:61:aa:9e:14:f5:11:eb:61:04:25:a2:9a:
         b1:36:a7:e3:ad:0a:38:fb:23:dd:7d:6f:57:6c:32:c3:92:8a:
         f8:f0:c0:d8:1a:0a:28:d3:2e:75:a8:77:eb:df:70:71:d6:ba:
         66:55:17:14:eb:90:04:87:2b:50:c8:55:ed:6e:9b:de:38:2c:
         96:b7:46:a4:10:51:b3:79:17:6d:36:d6:ef:85:f1:8d:d1:16:
         ff:54:dd:54:80:15:49:98:7e:8b:c5:6b:80:c2:ff:f8:29:1f:
         1f:ca:c3:7d:75:a2:aa:a1:8c:42:4f:ab:06:ec:3f:de:32:dc:
         45:83:ec:14:04:70:89:f9:2f:5a:22:f0:43:e1:71:58:d9:32:
         29:6c:00:ff:94:48:cd:ad:b0:ac:df:48:dc:09:d1:e8:55:a5:
         a2:1a:f8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:48 2025 by rpki-client on console.sobornost.net