Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft
File:                     2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft (raw, json)
Hash identifier:          3eSSAHSz/g844qbxBAwrP8j8R+OfC41aigOcUsnt61w=
Subject key identifier:   09:27:7D:C4:F7:D0:7F:A9:E9:0A:5A:19:5E:CE:26:02:A2:12:D2:25
Authority key identifier: 79:9C:52:5D:AC:7A:2F:00:8C:67:A9:56:99:4E:A7:BA:EC:CC:4A:A9
Certificate issuer:       /CN=2ce6405b-c85b-4c9e-8e9b-14a468b42aae
Certificate serial:       010D0C9F432858498374DBC9E0F4364C64598400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft
Manifest number:          010D0C9F43285847F17C468B35E09EE4863337D4
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 2ce6405b-c85b-4c9e-8e9b-14a468b42aae.crl (hash: rMyUuIGTVHlrBjjRslIuL6gQty7IBSz+LB6eF9IiReg=)
                          2: c262ebe1-b72e-3217-aaf4-bff52c526e7e.roa (hash: OJafwih+uVPqCrGln7HKX2IDZFqxy4GngWnkvzCIKtc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:db:c9:e0:f4:36:4c:64:59:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ce6405b-c85b-4c9e-8e9b-14a468b42aae
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=58442448-3bd5-4e97-acb9-b0587a97e4c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:34:3a:7f:51:1e:2a:b5:64:c7:9b:f5:b2:2b:
                    6f:48:c0:de:12:ea:7f:2a:ba:fc:9a:3b:e3:19:a9:
                    62:97:57:d2:dd:0c:d8:8d:45:51:e7:cd:5b:d7:64:
                    d8:5c:58:3e:8c:9a:15:e4:ad:1f:d1:5d:d4:c3:44:
                    fc:07:0a:02:4c:3e:0c:94:36:80:37:ca:d3:d9:cf:
                    93:f2:0f:f4:6a:af:96:ac:1c:18:01:fb:92:84:cf:
                    6d:cd:dd:53:56:df:08:a8:ff:ce:87:9f:e5:7f:15:
                    a7:93:dc:93:39:5b:41:a3:96:b1:42:25:95:b0:93:
                    11:b0:62:41:00:02:ea:27:88:99:ed:00:b8:b1:74:
                    d6:df:d8:05:a3:32:81:b5:d2:f6:c6:30:5f:4f:0b:
                    26:f0:b5:c8:62:c0:2b:95:1f:6b:e2:3e:6b:dd:e6:
                    5b:11:3b:f4:94:8d:8e:95:e0:dc:e6:a2:fd:84:07:
                    5d:f6:45:c1:16:fd:f6:79:c5:95:56:ec:ac:61:42:
                    7b:7f:e3:51:5b:01:28:c9:eb:18:da:85:a4:34:7a:
                    12:69:e0:67:30:22:e2:94:2a:00:47:8d:83:d0:4d:
                    90:f1:47:b8:7b:9f:0e:78:2b:d5:2a:3f:73:4a:1e:
                    44:f0:78:92:50:20:00:58:23:d8:d9:03:95:7f:0c:
                    09:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:27:7D:C4:F7:D0:7F:A9:E9:0A:5A:19:5E:CE:26:02:A2:12:D2:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.crl

            X509v3 Authority Key Identifier:
                keyid:79:9C:52:5D:AC:7A:2F:00:8C:67:A9:56:99:4E:A7:BA:EC:CC:4A:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/2ce6405b-c85b-4c9e-8e9b-14a468b42aae.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:49:08:9f:c4:a7:0e:72:30:8b:c8:a3:a1:36:32:28:ca:9f:
         17:7d:0b:4a:5a:a8:2f:1c:6a:4d:b9:b9:fc:af:07:45:d6:f8:
         4e:f6:95:80:44:52:41:19:b4:94:62:bd:47:2d:03:58:fc:b9:
         5c:02:43:d4:d3:42:20:b6:24:a5:f7:32:ce:9d:28:36:78:cb:
         1d:0f:8f:33:9a:59:2f:0d:d3:2b:74:06:fb:10:8d:85:6e:69:
         6b:d3:b2:ca:27:cb:a4:56:2e:c4:76:df:dd:7a:19:48:c8:16:
         00:b4:97:ef:ee:05:2b:2b:4e:35:7b:0f:66:b0:85:d8:bf:b3:
         e8:bf:4d:e8:38:e4:d4:5a:e8:16:16:05:2a:37:c5:72:f6:59:
         6c:7d:b7:34:07:23:95:e4:da:e8:5e:fb:32:ed:a2:73:22:1a:
         4b:f6:97:12:ce:b1:19:7a:ed:f5:cd:80:a0:82:29:f4:9f:76:
         ae:07:ac:f8:3b:62:de:ad:d5:96:3d:b8:67:3e:b1:5e:ad:35:
         17:60:f1:4b:1e:75:eb:2b:10:24:53:fe:ce:72:91:36:30:c9:
         b9:9a:7a:d6:82:b1:fa:f0:7f:94:e8:90:45:13:80:5c:d8:3a:
         e4:1f:43:b9:95:d4:7b:fe:a0:46:0e:d9:a7:81:50:8a:ab:a7:
         26:c4:bb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net