Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft
File:                     448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft (raw, json)
Hash identifier:          cdaPfFzK0Ibb0RCDqeJgH0K6HqH+74NIgLISu+NIc/Y=
Subject key identifier:   34:A0:10:06:7D:BB:39:A0:38:D2:8E:60:97:33:CF:F8:F4:3E:35:CA
Authority key identifier: 32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D
Certificate issuer:       /CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
Certificate serial:       010D0C9F43285849833A4BA9CBFB548D9290C040
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft
Manifest number:          010D0C9F432858427B6F5B9E83FB518873D9D2F4
Signing time:             Sun 13 Apr 2025 13:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:02:07 +0000
Manifest next update:     Tue 15 Apr 2025 21:00:00 +0000
Files and hashes:         1: 2f160a0e-a123-3a72-99e1-d669496bd1e0.roa (hash: bxn1/sgeLbo6i2dHm9u8/IWz4mOj3mp1Qwxp1A2MbMg=)
                          2: 448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl (hash: ixSHxaOV/nHX0l0MUWrjFgf+k/U/lEneE/+hFb4YlRs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:4b:a9:cb:fb:54:8d:92:90:c0:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6
        Validity
            Not Before: Apr 13 13:02:07 2025 GMT
            Not After : Apr 15 21:00:00 2025 GMT
        Subject: CN=42415e52-8c0f-4d1e-ba96-885cfb81480d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:09:24:d3:44:c3:0b:48:bf:f6:f8:49:90:
                    99:20:3c:1b:52:cb:8f:73:3a:10:da:e9:5c:57:c2:
                    5a:ce:02:15:7d:a0:b6:05:96:56:7b:e2:04:49:70:
                    69:3c:d8:59:76:55:80:60:3f:4c:fa:f2:d8:a2:ce:
                    17:56:f8:45:6e:55:62:da:8b:f8:7e:eb:7d:00:71:
                    5f:ae:7e:ec:e1:83:f8:85:28:e9:01:a8:36:8c:5b:
                    06:fd:d2:56:89:27:87:75:a2:46:e7:92:5d:c4:bb:
                    22:26:7d:01:d3:9c:18:45:e8:6e:51:80:d3:b0:05:
                    50:a4:75:cb:e5:42:c3:95:90:9b:69:f0:df:01:24:
                    c6:04:62:60:79:37:a1:d1:d6:68:5c:b1:c6:2b:6f:
                    ae:7e:02:f6:d0:e2:89:cd:a5:8f:a8:58:22:bd:59:
                    11:78:78:e1:8b:95:5d:1e:73:82:97:ec:27:d8:e3:
                    dd:2f:22:6c:a4:bb:d3:44:e3:ad:60:dc:72:90:40:
                    6e:a9:24:2d:13:02:c2:01:9c:b0:d1:28:a0:0a:23:
                    3c:ce:b8:43:37:e6:67:93:84:40:84:92:84:2d:e2:
                    f7:9d:7a:dd:8e:8a:6b:6b:b1:ec:a6:d9:f3:6c:19:
                    03:a7:5c:c6:db:32:8b:fa:58:c0:b6:7e:3b:3b:dd:
                    4b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:A0:10:06:7D:BB:39:A0:38:D2:8E:60:97:33:CF:F8:F4:3E:35:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.crl

            X509v3 Authority Key Identifier:
                keyid:32:9C:D3:4D:64:2B:8A:AD:95:02:93:0D:6C:19:90:78:23:D6:69:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/448bf2c8-7f2b-4e2b-a653-1e89ed2ca8b6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:e6:ce:b4:71:8d:c2:f4:38:08:f5:7d:c6:f1:d3:03:5a:97:
         72:e6:23:08:1e:4e:2c:a9:5a:f5:00:c5:1e:1c:0d:6c:18:cd:
         cc:9a:52:72:d9:05:49:80:6c:e3:20:99:03:b9:96:fc:c9:ab:
         30:b1:2a:36:ee:72:bd:33:f6:64:21:8e:26:9b:7e:b2:d0:f0:
         1d:ce:43:58:35:bd:7c:04:0a:2f:d3:0d:c6:20:b4:4e:96:f3:
         61:8d:9e:6d:d9:47:a2:65:fe:c5:62:d8:f7:76:8b:d6:2e:a0:
         aa:61:f2:ec:31:73:1c:fe:f9:c7:7e:10:92:4c:5c:8c:f7:bc:
         5e:b9:d8:46:26:ee:e3:31:4d:2a:c0:01:79:50:a4:b2:6b:30:
         24:7e:cc:63:dc:5e:c6:1a:48:55:36:96:d4:42:63:83:76:82:
         a0:95:6a:1c:03:00:8a:b0:13:c1:7e:74:3a:3c:88:4f:b0:98:
         99:61:ba:78:d4:c3:f1:05:c6:12:81:60:d0:97:b7:39:1d:8b:
         92:c4:0c:48:01:32:4e:36:8d:d0:35:ae:23:cf:7a:3f:94:49:
         cb:59:20:18:3c:b3:bb:c2:2d:88:45:f7:0a:86:0f:dd:07:e1:
         83:2f:e7:03:0d:7c:c9:a7:2c:90:03:43:18:5c:b0:e1:c7:0f:
         40:24:d7:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:49 2025 by rpki-client on console.sobornost.net