Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft
File:                     a3e437f7-1e43-4bb4-be78-da876ad33518.mft (raw, json)
Hash identifier:          rWhCnfH6MLI48BoF8crVf5qkOds+EnglhtJKyXtlI80=
Subject key identifier:   B1:58:84:21:AF:28:7F:FD:8F:E1:8A:4D:CD:4D:DC:C0:70:7D:A1:EA
Authority key identifier: 2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90
Certificate issuer:       /CN=a3e437f7-1e43-4bb4-be78-da876ad33518
Certificate serial:       010D0C9F43285847BCC0B105ED20D9559325A6B0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft
Manifest number:          010D0C9F432858423B010B6BFE0B47C41C0559C9
Signing time:             Fri 01 Nov 2024 18:00:07 +0000
Manifest this update:     Fri 01 Nov 2024 18:00:07 +0000
Manifest next update:     Sun 03 Nov 2024 18:00:00 +0000
Files and hashes:         1: a3e437f7-1e43-4bb4-be78-da876ad33518.crl (hash: fn+2UHDbpENdoEjs3R4D26yRQLD9B3tH+FD23pdfs0U=)
                          2: a580f3dd-272d-3e80-87fa-7b0f87ccca77.roa (hash: TbXEmADESXAm3dDkjrpaqK45ekI0wAyefMqVJ8KOlAs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:47:bc:c0:b1:05:ed:20:d9:55:93:25:a6:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3e437f7-1e43-4bb4-be78-da876ad33518
        Validity
            Not Before: Nov  1 18:00:07 2024 GMT
            Not After : Nov  3 18:00:00 2024 GMT
        Subject: CN=6bbf7013-0fae-4cbf-9ea6-54161ba4385f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a4:63:16:b7:c8:a6:6d:a2:1a:3f:86:eb:96:
                    6d:10:48:68:ff:6f:b8:28:64:48:95:9e:60:c6:4a:
                    7d:33:40:38:b8:4d:14:2a:76:ce:89:8d:d7:88:f6:
                    61:e6:89:d6:44:6f:50:d8:31:e4:4f:05:72:2d:e8:
                    6d:13:0c:41:1c:77:28:20:74:46:08:dc:c6:c9:8b:
                    93:6f:72:80:a1:eb:13:e9:fc:c8:ab:5e:8a:37:3a:
                    bc:c3:71:dd:7f:f3:3a:4f:57:47:50:9f:49:94:5e:
                    8e:2f:2d:e9:8b:54:dd:fa:24:8a:01:ec:48:d9:c8:
                    76:55:67:27:f5:c5:e9:06:d8:56:75:21:cc:da:25:
                    6c:01:74:91:ff:1c:c7:06:09:4b:9d:c1:d1:c6:35:
                    7a:2a:b8:0e:4b:40:c7:ee:79:46:b4:46:71:41:e9:
                    28:fe:d3:8a:dc:57:8d:31:cc:b5:7f:23:d4:2b:04:
                    8c:3e:ba:f6:d5:3c:fd:50:72:36:fa:f6:3d:36:7b:
                    14:c0:ea:b6:a2:0f:a5:e6:fe:72:37:c4:e2:aa:78:
                    bb:e0:64:94:9c:41:51:4c:a4:92:d8:23:2e:07:d2:
                    8c:33:d8:53:88:a8:86:f8:96:2c:56:62:e4:3d:df:
                    d5:3e:86:23:c0:49:73:b4:d4:26:2f:2c:16:08:6e:
                    b0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:58:84:21:AF:28:7F:FD:8F:E1:8A:4D:CD:4D:DC:C0:70:7D:A1:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518/a3e437f7-1e43-4bb4-be78-da876ad33518.crl

            X509v3 Authority Key Identifier:
                keyid:2A:D1:EC:BF:34:6B:36:3C:63:B4:5F:34:83:80:5E:91:F8:72:52:90

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a3e437f7-1e43-4bb4-be78-da876ad33518.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         93:1e:b6:fc:83:13:05:80:61:c7:f9:7e:bb:b1:4c:24:f9:e4:
         4a:28:d2:91:9a:5b:36:41:a8:3c:c8:86:36:18:57:db:55:74:
         0d:e5:3f:68:00:5e:af:5f:67:94:b7:dd:f3:86:fe:23:74:dc:
         c2:98:78:30:8a:ac:e0:ed:da:f4:11:e2:76:3d:a2:96:af:c5:
         be:bc:0c:2c:48:08:b3:bd:c7:02:ee:cb:54:71:ab:0e:b7:a3:
         9c:ed:6b:84:05:4b:f5:02:db:c8:7a:7d:c5:f5:40:60:5b:ee:
         ca:7a:70:d0:a1:91:65:aa:c6:65:4c:89:03:22:00:79:dc:04:
         eb:8a:af:b2:a4:f4:ab:49:13:07:16:33:a9:56:53:f1:48:68:
         c6:58:80:8b:19:e0:72:04:42:fe:44:31:ed:9b:af:41:82:4e:
         e7:0b:20:cd:a7:2a:34:2b:93:38:3a:90:fe:58:86:c9:b0:85:
         4a:1e:a2:c9:fc:25:6c:be:f2:6e:1b:d0:cf:08:d0:94:b3:f9:
         92:a2:0a:db:b1:ba:44:46:49:eb:dd:09:e7:16:69:83:03:41:
         99:21:c0:f3:b2:5b:d6:96:22:11:37:11:96:0c:3c:d8:e4:a8:
         5f:96:a8:b8:06:ad:34:d3:8f:1e:49:a6:4e:69:b6:99:2b:5b:
         ce:e4:26:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 8 04:28:41 2024 by rpki-client on console.sobornost.net