Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
File:                     d886f3a2-7325-4b74-8802-19528a9f380c.mft (raw, json)
Hash identifier:          l75qzDSoHWxoZQ+TTh1qvAXTNNl/4yEHjfHO45VAVns=
Subject key identifier:   0B:57:2C:08:89:60:C8:E8:C0:53:57:0F:F6:BC:B2:3F:F3:0A:2D:32
Authority key identifier: 70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A
Certificate issuer:       /CN=d886f3a2-7325-4b74-8802-19528a9f380c
Certificate serial:       010D0C9F43285849835716CBBEDDA8C76272F440
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft
Manifest number:          010D0C9F432858421E942BC6BDF40AE91C1CBFC0
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: a4ae1ebe-985c-33c8-ae90-8ca338a4ec52.roa (hash: +MHDzx8k0TOeSlCoPWTrq1YM4p0Xrj7lCvpTY2nK8Po=)
                          2: d886f3a2-7325-4b74-8802-19528a9f380c.crl (hash: 6nHO8vZRYhhJ5YzE4CyTwBVOTeQcE3691hTEC4YHTbc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:16:cb:be:dd:a8:c7:62:72:f4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d886f3a2-7325-4b74-8802-19528a9f380c
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=ae95ed6c-62c1-4f3c-8589-980120efe394
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:04:e1:8c:40:45:48:f8:33:86:56:19:9f:0b:
                    e0:fa:02:15:28:e0:86:72:a5:40:5a:d6:4a:a5:43:
                    e4:c0:6c:1d:72:d2:74:b2:c4:39:01:f7:ff:b8:18:
                    47:07:37:56:2b:05:e0:73:f9:92:64:f3:16:0f:62:
                    d6:9f:52:c2:4d:7b:8d:62:10:c6:2b:e6:bd:f4:bb:
                    06:ae:2e:72:48:c3:04:e0:72:8e:af:bb:ea:85:b1:
                    c2:f0:5f:ad:09:81:75:7e:45:4d:2d:26:3c:4d:10:
                    36:ac:7a:26:47:86:d8:59:3e:ca:e5:59:1a:0a:48:
                    6b:39:e1:a2:05:1f:6a:8f:06:48:22:66:0c:78:dd:
                    12:b8:d3:85:85:af:be:e9:2f:31:d2:34:12:76:5c:
                    d6:4a:65:38:dc:bf:8d:bb:59:f0:4b:07:38:2c:56:
                    37:29:37:49:0c:71:6f:50:5e:6a:86:34:73:b1:b9:
                    a7:1a:0d:7f:e9:d5:60:79:bd:44:f4:40:14:71:73:
                    f7:26:fb:4d:f6:6b:fc:5a:0a:7b:5e:22:49:48:e0:
                    06:fa:ee:c0:e7:c6:29:5b:2c:50:0c:a9:2a:5f:58:
                    1d:af:79:ff:79:69:c6:c5:6d:3c:bb:ac:be:a3:ad:
                    be:f7:2a:06:81:f5:86:de:b9:16:e5:0e:bd:60:c3:
                    0f:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:57:2C:08:89:60:C8:E8:C0:53:57:0F:F6:BC:B2:3F:F3:0A:2D:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c/d886f3a2-7325-4b74-8802-19528a9f380c.crl

            X509v3 Authority Key Identifier:
                keyid:70:9B:AD:F1:42:CD:12:10:59:1D:C9:FB:36:1B:32:19:4A:12:B3:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d886f3a2-7325-4b74-8802-19528a9f380c.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:f7:91:47:13:f4:95:cd:ae:f0:44:33:4a:c5:94:01:fb:5a:
         de:c2:5e:40:7a:71:36:e5:80:f5:2e:eb:96:25:37:82:8c:4f:
         65:6b:86:5e:4d:cb:37:7d:ec:38:f9:38:7c:94:23:b9:17:0b:
         78:35:c0:6e:e1:58:31:5b:05:37:cf:d4:9e:dd:b9:91:b3:03:
         3a:08:9e:a1:a1:00:b2:5d:5b:3f:42:f6:57:93:50:ec:02:ef:
         d2:e6:70:86:73:03:43:1a:52:ae:dd:32:1e:58:64:20:4f:d1:
         cb:58:fc:d9:37:60:b8:b9:3f:d0:d7:39:b0:0d:ae:5e:7c:a9:
         e3:49:89:9f:75:42:b1:62:0a:fa:55:23:92:a6:fe:db:ed:7a:
         dd:52:1f:04:d0:fb:33:d0:7b:9e:1f:d6:9d:13:40:79:62:ed:
         e0:93:52:1a:b2:ea:60:21:cb:c0:53:e7:b0:19:f6:05:6e:d3:
         09:ae:c8:f8:f3:c1:e1:c1:68:cb:3b:15:a8:c1:90:95:e3:eb:
         f0:71:19:7c:ad:a1:11:64:29:16:9f:63:25:c5:ee:73:d7:cb:
         f9:a2:77:ca:e3:ee:17:da:65:da:0b:d6:3c:df:57:21:83:16:
         00:4c:6d:ff:01:44:45:21:f2:d7:e4:91:13:d6:43:62:cc:f3:
         18:2e:fe:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net