Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
File:                     8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft (raw, json)
Hash identifier:          ig/NiIBOCn2fYIIMOWkTQZIKQtJUK3A7FGOBgkKxdQ0=
Subject key identifier:   7B:A3:9F:20:F4:7D:24:87:54:94:F7:87:66:6F:4B:64:7A:F6:41:7B
Authority key identifier: 46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF
Certificate issuer:       /CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
Certificate serial:       010D0C9F432858498374DB3104330AF5B563DC80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft
Manifest number:          010D0C9F43285842EA6511F68AE8111CAA6097F5
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 15:00:00 +0000
Files and hashes:         1: 1bbbc362-e40a-3b08-b948-a507f3c68bc4.roa (hash: CemT6VqLRlqtb0Qb+BAb6xQktn0xxGPFEC8Nvf83AmI=)
                          2: 23f526c9-4036-38e9-b9d1-dcfd34b53a28.roa (hash: 6PFWDciVWbxYZD72dKqpaIpdF4iYIFVyDKOrrk8fGJ4=)
                          3: 8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl (hash: d8dPoQ4lUeuZI0YCwW9C7LOh4AsVGCITaSPo3dxZNs4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:db:31:04:33:0a:f5:b5:63:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c1d3b57-4da4-4452-8b5e-9b5248494b89
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 15 15:00:00 2025 GMT
        Subject: CN=5a064e88-0e69-4af7-b00d-4319c6db8200
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2e:fc:b1:13:a6:bc:42:c7:cd:73:70:da:0b:
                    8e:17:19:82:92:d4:e9:0a:8c:2f:94:e3:1b:49:58:
                    39:ec:36:9e:8b:1f:62:f4:88:a5:68:71:ee:97:18:
                    f4:2c:f9:e6:1d:4f:7e:83:02:ca:90:23:40:56:33:
                    df:15:3c:ee:34:39:da:99:d1:d4:bd:ed:38:d9:e8:
                    b2:9c:13:77:e0:48:37:5f:4d:f6:b7:8c:41:3b:47:
                    f3:ff:0a:aa:9c:8c:8f:70:1c:04:7b:a0:6d:73:8d:
                    60:96:bb:ec:a8:f0:51:09:2b:bc:e6:13:6e:99:3d:
                    8e:5b:be:66:11:96:9d:8b:0d:30:28:dc:1b:18:b2:
                    81:15:33:d4:25:88:f8:70:20:18:a9:8a:8d:f2:43:
                    62:bb:93:d7:04:78:91:94:a0:f6:fb:83:42:cd:ab:
                    5a:cf:50:6d:52:61:43:db:56:20:64:32:92:e8:f9:
                    8b:74:f2:b2:e5:26:d1:1e:fc:1b:b6:73:36:76:55:
                    00:46:96:d7:b5:b1:3c:6e:09:7d:23:f3:6e:62:c4:
                    b6:f2:48:63:9a:cb:b7:12:54:f6:87:e6:ea:e7:6c:
                    b5:64:77:dc:e6:c5:b5:5b:9e:2d:7a:58:61:be:62:
                    86:da:cc:1b:7d:3d:57:a9:64:38:24:b6:a3:c9:62:
                    74:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:A3:9F:20:F4:7D:24:87:54:94:F7:87:66:6F:4B:64:7A:F6:41:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89/8c1d3b57-4da4-4452-8b5e-9b5248494b89.crl

            X509v3 Authority Key Identifier:
                keyid:46:EA:F7:B9:84:1B:13:7C:CD:CC:1F:DD:91:4A:23:8D:30:F9:29:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8c1d3b57-4da4-4452-8b5e-9b5248494b89.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:c2:e0:e2:41:35:79:98:37:2a:a5:e5:0f:18:eb:ce:62:8b:
         2e:ec:a7:fd:01:44:d4:6e:60:bb:6c:20:fe:76:34:d5:c8:57:
         94:dc:79:03:9e:d1:b1:78:97:d4:e9:0b:f3:b1:31:c1:03:51:
         5e:56:a5:18:4a:ff:0a:d6:a0:61:dd:83:f4:b3:c3:af:62:b7:
         85:09:a4:b6:4b:8a:bb:e6:e4:c6:34:69:9a:0c:88:09:90:a7:
         d6:8f:df:c5:d3:89:47:5c:dc:2e:60:cb:d0:df:7e:ca:54:56:
         f2:f8:dc:6a:36:73:84:16:5d:d9:14:7e:90:31:55:eb:26:d5:
         5e:f3:56:99:dd:9c:4c:1b:71:f1:2a:91:e4:4b:7f:73:74:09:
         0d:6a:82:b4:27:b5:b2:27:89:8d:c6:d6:a9:5c:e8:51:28:44:
         10:3b:1f:37:d0:d5:36:1c:f1:84:99:2d:45:51:84:ac:2a:4d:
         0f:7e:74:05:a1:27:0d:0f:b8:01:32:e5:2a:4b:3b:c7:8f:09:
         5c:81:7b:50:18:68:f1:17:0f:b1:d5:08:d5:bf:12:95:d8:c2:
         95:0b:64:86:8a:31:cd:26:d6:a8:8d:65:bf:55:d6:12:71:b2:
         ef:ac:a0:ed:45:6b:a9:2e:df:2a:f3:69:ca:44:87:d7:d9:c9:
         89:dc:a7:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:51 2025 by rpki-client on console.sobornost.net