Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
File:                     cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft (raw, json)
Hash identifier:          CmVokLEuKvrSD62QvHA6p0rNOE5pBIERMK+il+MaMPQ=
Subject key identifier:   46:19:06:D1:6E:F3:47:CD:2D:3F:60:7D:40:B5:4F:84:61:CF:46:11
Authority key identifier: B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34
Certificate issuer:       /CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
Certificate serial:       010D0C9F432858498374DFEC080FFE8B83B95E80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft
Manifest number:          010D0C9F43285842E22DB7DDAE027F72685B876F
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 06c9f9a0-fe01-38c9-bbdf-309da400287e.roa (hash: grP8MgIHD5JqXDNJw1/sMMjjV4YQCB5d3A91VBwjGkk=)
                          2: 0d363d93-28e0-3322-8517-a1ebec3877d8.roa (hash: LqhKIx+0iYWl/t18xporbSW9UuycTbnGGlZYpMieezg=)
                          3: cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl (hash: cGq1Sxww5SmPNaM8sRKswwpmEfbMSBIn8iKBPPHUHGc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:df:ec:08:0f:fe:8b:83:b9:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdb747b2-b46e-4ac1-b6a1-94c273d0c828
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=b4cd31d2-88a5-466f-8e35-3aceb4f9c958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:15:b5:3e:f1:57:3b:86:0a:69:3c:29:5a:47:
                    5c:9d:b4:40:59:f5:0d:6f:a3:9b:ce:8d:b6:be:bd:
                    33:a2:93:8e:70:e0:f6:c8:32:9a:48:6b:0c:60:67:
                    c2:8f:9a:55:aa:a3:12:c7:d4:30:32:0d:77:7a:1c:
                    c9:bc:31:33:82:49:70:e7:e1:da:da:be:6f:7b:5f:
                    08:1d:8a:19:d4:96:18:17:8f:35:e9:96:8e:ad:20:
                    36:79:fe:a7:75:c5:8b:3d:de:75:95:24:50:1f:d7:
                    ca:1c:83:b0:9d:df:bd:01:39:a0:8d:b5:e3:af:b2:
                    61:11:b4:01:92:55:33:83:88:1f:5b:26:b8:29:90:
                    ba:90:ce:f3:88:37:6d:e8:1b:02:d7:91:84:57:61:
                    6c:e9:a9:5c:38:e7:ff:37:e8:1c:eb:91:4e:41:eb:
                    f3:98:c6:3a:ff:50:df:8a:b5:0b:90:2e:f0:ac:88:
                    95:2c:f7:a3:50:33:a5:ae:be:d4:9d:fd:ff:46:2b:
                    54:52:4d:84:62:a0:a1:44:2c:31:d5:3f:1a:bc:53:
                    97:a9:d2:3b:56:8b:21:c4:8d:0e:0e:cc:fc:52:d3:
                    07:af:31:c4:8b:c3:30:3b:c4:f2:5d:a3:59:62:b2:
                    cc:8b:1d:e0:7e:31:8f:1f:8c:48:0c:9f:27:a7:d2:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:19:06:D1:6E:F3:47:CD:2D:3F:60:7D:40:B5:4F:84:61:CF:46:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.crl

            X509v3 Authority Key Identifier:
                keyid:B7:81:C0:DD:8C:BE:84:EE:0E:75:93:D0:8C:C6:CF:86:3B:F1:54:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cdb747b2-b46e-4ac1-b6a1-94c273d0c828.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:cd:a6:cb:88:c1:45:98:71:02:d4:ac:73:da:20:9a:82:e8:
         02:e4:a8:8f:a1:f2:d9:d4:86:5e:34:ab:e9:19:ad:bf:ad:13:
         d9:0e:f1:d9:73:61:7a:c2:9d:cd:b1:69:b8:45:ef:a8:ae:4e:
         15:5f:ed:a1:5f:0d:20:0f:e4:a3:e5:51:b0:c6:f8:da:c6:f2:
         bc:86:f5:9d:bf:96:64:a0:19:83:47:1d:f7:13:89:5a:18:e6:
         13:c4:a3:74:2f:89:c7:dc:6f:86:55:19:31:65:3d:9d:12:38:
         57:2c:d6:fb:1b:36:76:f5:64:9e:99:13:4e:3b:06:12:b7:45:
         00:70:2b:33:8b:8f:61:a0:33:9a:0d:5d:34:bb:be:fc:df:13:
         79:bb:a9:ba:80:6e:d9:3f:55:3d:75:dc:3b:b9:d2:a4:72:fa:
         4c:b2:1b:41:b7:1e:2e:a2:08:fb:df:0b:d1:3e:22:93:1f:be:
         b0:87:fd:64:e1:83:a0:3c:e0:f4:ac:cf:e7:98:2b:1e:d8:cb:
         4d:b0:d4:a9:66:43:c6:ed:b9:ee:bd:9f:55:16:3a:7b:24:f7:
         76:ef:88:b0:a7:c4:02:de:89:0e:8a:05:72:a7:ae:84:fe:87:
         a3:02:cb:34:b5:50:38:ee:99:2d:c2:12:7e:91:bf:d1:70:c1:
         5f:57:df:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net