Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
File:                     8f815aac-9800-4d5f-b3d8-192e59cd145c.mft (raw, json)
Hash identifier:          8CyY02le/vrqs3C9ey7PnEaNRiGZmMSo+UibCQIGFxg=
Subject key identifier:   5C:99:E8:A4:35:53:E2:44:BE:65:17:52:32:AB:C5:1A:0D:F4:D8:C4
Authority key identifier: 76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC
Certificate issuer:       /CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
Certificate serial:       010D0C9F4328584981D3F44C8955D6D92EA0C180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft
Manifest number:          010D0C9F43285842F6CB7618C721E39B8312D169
Signing time:             Sun 13 Apr 2025 01:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 01:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 01:00:00 +0000
Files and hashes:         1: 2ffdcdc2-b6bd-3733-bc98-893fda0ec6f2.roa (hash: Tx6zSY16fqgPCzVUvSv/A8PonhyI1TUA7d61Ew1EYcI=)
                          2: 8f815aac-9800-4d5f-b3d8-192e59cd145c.crl (hash: 29evH2U0fNBS0HemivLdCvBOH57a0E1NdneaQnJfo5c=)
                          3: a9f78e60-7120-3da6-9e5b-9c85920dd2a1.roa (hash: CSLchaU+5XB1V9dV6pmlgyiWyMmEPpAjOz+Q8D6f2yQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d3:f4:4c:89:55:d6:d9:2e:a0:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f815aac-9800-4d5f-b3d8-192e59cd145c
        Validity
            Not Before: Apr 13 01:00:07 2025 GMT
            Not After : Apr 16 01:00:00 2025 GMT
        Subject: CN=16a36ac1-1be9-4d26-9ce5-e250f47952e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:87:5a:a9:08:3a:0f:1f:27:a7:1e:5e:ac:64:
                    ab:a5:9e:0d:19:46:84:18:3e:f4:2f:5c:4c:2a:59:
                    5c:5e:80:44:fc:d4:6b:84:e7:a1:3a:dd:73:b6:90:
                    22:b6:46:e4:35:ff:b9:fe:81:c1:33:30:c9:89:f6:
                    90:68:4c:51:a5:0f:db:cf:6b:62:31:67:c6:60:b2:
                    25:20:67:08:1b:af:57:aa:89:aa:e4:54:19:82:5e:
                    73:a6:fd:16:47:42:3f:7d:bc:6c:76:41:15:60:9f:
                    d9:27:7a:05:d3:f4:99:8d:6b:2e:12:ac:1d:5c:56:
                    64:ff:39:97:c8:69:60:51:10:01:63:d0:4f:40:51:
                    6f:31:d7:64:48:3f:ad:a3:b9:ac:a8:03:db:57:35:
                    04:97:c0:58:2c:60:45:b9:a6:a6:31:0f:44:aa:1d:
                    b2:92:e0:31:0e:e0:bb:1f:59:51:80:84:a8:43:8e:
                    64:ae:9d:2e:34:b7:18:68:93:d1:5f:23:1a:13:e9:
                    0c:30:7b:a0:c4:c6:e0:31:4d:e9:1f:7c:8f:09:49:
                    e5:94:57:ca:c8:81:3b:b3:a0:96:a4:e2:5f:0d:11:
                    bd:13:67:bc:89:3b:a2:2c:97:95:dc:fa:42:57:b5:
                    57:76:0b:1f:fa:16:7f:72:0a:ab:fd:4f:ae:2e:9f:
                    c5:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:99:E8:A4:35:53:E2:44:BE:65:17:52:32:AB:C5:1A:0D:F4:D8:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c/8f815aac-9800-4d5f-b3d8-192e59cd145c.crl

            X509v3 Authority Key Identifier:
                keyid:76:D8:42:D7:24:E3:6B:E3:50:FC:81:B8:BF:F1:6E:CF:88:8E:8D:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8f815aac-9800-4d5f-b3d8-192e59cd145c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:20:5d:e1:8d:69:45:2a:c8:91:9b:41:2b:ef:70:49:9c:c0:
         61:f2:ee:91:9f:dd:d8:f5:33:c1:f9:44:d7:1d:4f:df:e2:da:
         39:64:4a:bb:ec:b7:ac:ef:5b:86:3c:a7:d4:35:a1:fc:d4:39:
         6c:40:d2:90:80:36:f4:30:bf:67:35:a1:7d:0e:85:07:56:03:
         64:50:65:4d:10:7f:5d:d8:04:2f:ea:73:03:21:1e:c1:c7:b0:
         81:db:48:a3:81:c4:cd:0c:50:af:18:03:4e:fa:b6:24:ff:4c:
         f7:8f:d1:5c:70:f7:b6:1b:bd:5c:01:d0:29:eb:d8:90:11:68:
         f1:30:ce:20:4d:45:2c:a2:d3:22:7a:49:fa:9c:89:00:34:a1:
         bb:3f:25:09:c3:ae:77:81:06:38:fa:7c:9d:99:d3:50:1c:d0:
         1b:a8:5b:70:ea:77:07:3c:1e:db:51:88:a2:dc:9f:14:38:9d:
         aa:22:e9:b6:0f:92:4b:ba:87:75:85:3e:b2:10:a7:ce:e7:3e:
         d3:ca:a0:ef:ab:2d:d4:2e:80:92:93:d2:b3:1e:8a:35:ea:33:
         c2:7b:a1:c1:aa:bf:c9:65:de:91:cd:2a:60:3f:f3:ae:f6:69:
         c1:8c:a9:5f:21:be:f4:3e:95:f4:e9:65:ca:2c:43:08:b2:20:
         d8:04:6c:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----