Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
File:                     de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft (raw, json)
Hash identifier:          lMcS46pWikyGVbCmBxqMg2Y46Gj3fOF1QXxXLPvO6WA=
Subject key identifier:   A5:3D:0C:63:25:68:36:6D:C2:48:1C:70:E7:AE:44:56:CB:F2:52:1C
Authority key identifier: 1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59
Certificate issuer:       /CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
Certificate serial:       010D0C9F4328584982C231CFC184F67BC892DF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft
Manifest number:          010D0C9F432858429BADF4FB5F626CF87013B20A
Signing time:             Sun 13 Apr 2025 09:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 09:00:00 +0000
Files and hashes:         1: 101dc82f-fc97-31a5-91b4-27b864fd35bd.roa (hash: KDUHZ6FoIXs/3FHQGj8P3GXlrC48j8nlNZ85sxIaS7Y=)
                          2: 1711e95e-2066-3100-8a2c-668f2e327b41.roa (hash: mkI7vTDnZhujGXEdXK1G9QYFqiMR/ySCJnDb83abPHI=)
                          3: de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl (hash: jhTCbsb9Et7D6rEad0SPEsHxspoqvFVC9p4CdK+kAQU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:c2:31:cf:c1:84:f6:7b:c8:92:df:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=de5f810d-f2f5-43b1-88e2-7f7aa486b8d4
        Validity
            Not Before: Apr 13 09:00:07 2025 GMT
            Not After : Apr 15 09:00:00 2025 GMT
        Subject: CN=e375eaf3-6165-4afd-9a8e-d669e92a7604
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:04:94:56:15:e3:9f:aa:ab:e1:e8:41:39:55:
                    c1:a1:20:5a:f1:87:98:06:71:bb:9c:9a:92:ac:04:
                    fd:82:45:91:39:dc:af:83:3d:e9:bc:40:fd:f3:a6:
                    48:d7:48:be:a9:8e:aa:10:19:96:6f:55:c2:a3:6c:
                    68:5e:de:90:6b:68:21:92:7c:f1:42:4d:29:87:18:
                    50:f2:94:38:56:46:b9:69:ae:91:dc:f3:cf:57:13:
                    74:21:2c:11:19:d5:c0:dc:81:a0:c7:7d:5e:e3:a5:
                    c2:b2:61:24:72:f2:5b:76:84:43:c1:44:f6:15:c8:
                    6a:2b:b6:27:32:16:d5:61:d5:49:ef:4c:9f:bb:b8:
                    d1:97:b0:61:94:a1:dd:64:0d:11:2b:00:2d:f4:18:
                    43:c3:71:31:4f:3d:02:fc:74:1f:cf:87:38:79:94:
                    eb:e8:9f:ce:3f:75:fe:ac:d1:5e:e4:b0:92:bc:69:
                    d4:23:e9:2d:d8:78:3e:47:17:1a:7c:f3:53:88:a8:
                    54:d0:12:26:9c:ca:95:0d:29:f2:86:5a:e9:5a:8d:
                    15:cf:66:a1:71:c2:5f:d9:17:28:67:d7:60:46:f0:
                    cf:80:1a:98:93:5d:e4:38:f9:c0:4f:c4:e4:ac:e0:
                    f2:e1:5b:cf:b4:04:b0:8c:dc:67:70:9f:fb:31:53:
                    9d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3D:0C:63:25:68:36:6D:C2:48:1C:70:E7:AE:44:56:CB:F2:52:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.crl

            X509v3 Authority Key Identifier:
                keyid:1B:AD:F1:C4:3B:E7:17:F0:DE:DE:97:CC:CC:0E:9F:1D:FA:B7:3A:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/de5f810d-f2f5-43b1-88e2-7f7aa486b8d4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         53:f5:b4:6d:34:84:e8:ae:13:00:f5:23:21:f0:29:36:b0:d3:
         dd:23:fc:42:8b:3b:9f:34:1b:df:4e:3e:d0:0e:13:0d:a1:29:
         89:37:28:d3:ab:38:5a:fb:66:00:67:83:22:a9:59:07:5f:f5:
         8f:ed:e2:a1:0e:cd:79:41:a1:b6:64:c9:0f:90:90:46:fb:21:
         8a:fa:70:06:07:60:f5:26:49:b9:f2:08:7b:9d:f0:52:8c:a5:
         11:93:77:39:39:7d:52:57:3f:1f:c1:8f:43:9c:ed:7b:b9:51:
         c0:f0:0f:cc:f7:ab:76:8f:a1:b2:1c:f7:f6:dd:2c:8f:24:9f:
         55:04:da:c8:28:f5:d4:0e:02:d2:d0:7e:e5:50:d6:64:5b:49:
         30:00:e9:94:6b:23:3f:32:b6:99:8d:28:5f:f3:ce:3b:c1:ab:
         23:c2:fa:4d:a8:35:d1:ad:f4:8b:32:40:54:d1:58:f8:84:75:
         e4:c6:53:9f:63:24:41:6e:e4:42:5c:04:08:a5:cc:08:8d:7f:
         e7:66:b1:b0:e6:c1:62:81:e8:6e:e4:a5:69:b0:6b:66:21:cd:
         c5:b1:fd:de:91:0c:90:02:dc:a1:75:f2:44:76:c8:0e:ab:e6:
         2d:56:e2:f9:63:c6:88:37:f0:f2:49:25:5a:a9:1f:e8:1e:7e:
         fe:1d:70:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:44:58 2025 by rpki-client on console.sobornost.net