Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
File:                     654fbbab-11f5-4ada-bd8c-77eec4615c91.mft (raw, json)
Hash identifier:          VXb4grgR9zvtIGRTpAB7w02P+/WSw586dwpSInB6FV0=
Subject key identifier:   05:11:43:CD:FD:CD:22:99:5B:A3:16:8F:25:C5:B8:3F:1F:6C:4C:68
Authority key identifier: A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54
Certificate issuer:       /CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
Certificate serial:       010D0C9F432858498374DFE4723E08F1450821E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft
Manifest number:          010D0C9F4328584250EC4E633773DDA93EEC1AB2
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 511b6f7f-8a8a-3ecb-a475-ac970b33cbe8.roa (hash: pMY2JWMfgs60fkNJ/ll17UOGxeW84lfZq/vyxjzF6K8=)
                          2: 654fbbab-11f5-4ada-bd8c-77eec4615c91.crl (hash: 1h+mBMo4CwjUwylRxTn5i5h2k2wOLVHgYBFTT3u3ev4=)
                          3: a2b21db6-eaa6-338d-9a0c-498e8bb096cb.roa (hash: N5jCv+mHT0eIX847JNdbwKnOcOujjuIKC+v3CO/DHaA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:df:e4:72:3e:08:f1:45:08:21:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=654fbbab-11f5-4ada-bd8c-77eec4615c91
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=cef1102d-8f7f-402b-ae09-4ba4d13e3c52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0b:35:84:08:d1:bb:3f:8d:b3:f0:08:6e:37:
                    29:96:27:56:61:f7:d7:f5:87:c9:9b:80:e4:90:f9:
                    0d:19:61:47:ec:e9:06:88:92:86:df:54:0e:c4:ad:
                    6f:09:8a:9f:11:26:80:60:83:ae:65:83:98:ed:e2:
                    82:58:ea:5b:1b:5b:49:21:af:be:24:e2:55:07:96:
                    28:3d:d0:02:05:11:ec:33:3a:30:a6:d3:fd:c3:8f:
                    b5:9e:ad:64:e6:90:b3:37:63:0d:7e:47:45:af:71:
                    5f:15:7a:28:6f:ed:b2:ff:e7:a3:b5:68:fb:91:5d:
                    a4:12:dd:76:c2:e0:49:be:5f:77:6c:b3:8a:d9:47:
                    e3:76:58:80:74:a2:d1:49:86:e9:99:8a:c8:1c:39:
                    a2:65:99:9e:c1:6c:b2:1c:d1:ac:d2:7d:5c:3d:03:
                    b3:1d:d9:1b:d3:76:72:80:a6:70:07:b1:c7:05:ac:
                    33:c1:2f:2e:3b:b8:48:7d:70:46:ee:c9:a4:2e:38:
                    fb:63:0d:aa:03:d1:01:0e:1c:86:ca:f0:62:18:51:
                    9f:9f:11:c3:a7:72:91:a0:6b:83:df:fb:ad:c7:4e:
                    79:d2:5d:3a:3f:af:bd:0c:85:82:8f:9d:54:d9:81:
                    fb:48:8d:93:64:bc:c0:54:08:be:0b:b5:76:e2:b3:
                    48:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:11:43:CD:FD:CD:22:99:5B:A3:16:8F:25:C5:B8:3F:1F:6C:4C:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91/654fbbab-11f5-4ada-bd8c-77eec4615c91.crl

            X509v3 Authority Key Identifier:
                keyid:A2:E1:81:0E:2E:B5:14:6A:80:75:C4:0B:2E:F9:56:3C:30:D2:39:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/654fbbab-11f5-4ada-bd8c-77eec4615c91.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:eb:c6:61:68:89:ff:38:ff:be:08:fc:02:9e:e2:08:4d:8d:
         10:0d:27:c9:31:89:5a:e4:de:63:56:67:37:6d:34:4d:09:90:
         88:5d:69:8a:bf:61:dd:0b:62:e5:d6:11:f6:20:5e:d1:ed:25:
         5c:ab:a6:32:4b:22:a4:4f:58:cc:ae:03:80:24:f8:6d:86:28:
         2f:16:6e:60:3f:20:52:0a:42:31:e7:6d:c4:76:05:4f:a8:31:
         0a:dc:32:47:38:39:06:d5:7e:4f:53:10:04:59:fd:bd:c5:a7:
         7f:dd:f1:95:12:53:88:79:9a:20:43:34:b0:10:41:57:b2:59:
         0f:40:a5:9f:dc:fa:97:3d:84:cd:e1:be:3e:fe:8c:58:80:74:
         b0:fa:73:7c:2a:2e:ad:6d:7b:31:9d:c8:24:82:92:d3:f2:76:
         0e:1e:12:30:17:40:3c:a6:62:e8:0b:d2:6c:d3:dd:a6:67:d5:
         55:20:3c:42:14:e8:63:c0:a0:20:84:ff:2b:51:4e:6d:9c:49:
         86:0d:5b:ef:dc:f1:b6:28:3a:96:8a:49:be:52:b9:9d:50:ca:
         f6:03:c1:72:46:e0:7b:5c:eb:71:e3:b3:36:82:db:33:a8:e3:
         6c:7a:2b:fc:b3:af:91:47:aa:01:b2:8e:30:81:17:65:06:f8:
         3c:43:31:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:50 2025 by rpki-client on console.sobornost.net