Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft
File:                     32f4e84a-4abf-4422-8d26-57083e3e17cd.mft (raw, json)
Hash identifier:          xeRd613JjNa1CTxrGZTDog2q20qUiZ8x9uW4w1YJlOQ=
Subject key identifier:   90:DE:F2:FD:45:B0:85:A3:AE:65:F1:89:27:11:CB:0F:4D:A6:12:34
Authority key identifier: 5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3
Certificate issuer:       /CN=32f4e84a-4abf-4422-8d26-57083e3e17cd
Certificate serial:       010D0C9F43285849835716688B14F690D904DE20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft
Manifest number:          010D0C9F43285847015292E43AF8658719E684EB
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 32f4e84a-4abf-4422-8d26-57083e3e17cd.crl (hash: Z1XCqPDfZM9ZMXJM8cc97wbIMPp1l+6ObulK7iUzqQk=)
                          2: ab7e32d7-51d9-3045-92d7-e746bf6bfa7c.roa (hash: qNdXVujv0QmHH+HeHWwI7wU1l9QUEe5D13GfIYM3FEA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:16:68:8b:14:f6:90:d9:04:de:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32f4e84a-4abf-4422-8d26-57083e3e17cd
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=3ed77edf-8219-45f0-9885-5a138db76a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d4:dd:b2:f9:16:b0:88:a7:16:8c:48:f0:57:
                    9b:ec:9a:e4:50:61:dd:a8:67:20:bb:c0:d9:91:51:
                    37:af:de:43:a8:30:03:b7:a9:3d:5c:7c:2b:fa:64:
                    e2:80:db:17:c2:c6:eb:68:5c:b5:88:dd:cb:c0:c5:
                    f5:ac:ad:01:77:5a:29:b1:00:88:81:f9:06:7a:4b:
                    61:d4:84:c5:59:f6:23:af:a4:37:72:fe:1e:fe:8c:
                    4e:19:36:7b:5f:e0:83:77:ab:73:e6:d9:29:fb:3f:
                    98:bd:fe:ec:84:e7:4b:36:c2:8f:9d:82:80:73:53:
                    76:a7:47:04:80:40:45:ed:51:f8:7c:ef:d1:0b:ef:
                    80:7a:e3:a4:3f:a4:a2:09:fc:8e:53:92:b6:83:c2:
                    47:da:8f:e5:f9:02:17:4b:bd:e7:a3:6d:83:60:78:
                    d9:ca:9d:e7:e6:6c:d9:33:13:08:e5:16:0b:1a:52:
                    bf:13:25:69:e8:97:e2:86:e4:74:02:47:dd:2d:e8:
                    05:39:60:bd:96:c4:75:60:87:9b:28:0f:b2:b5:3b:
                    6f:80:63:fa:9c:64:80:cf:0c:0a:3e:09:ad:e4:da:
                    f4:9a:4a:33:31:a4:8a:95:01:74:2c:65:44:8a:41:
                    53:09:1e:61:1b:f4:5d:2b:8d:00:cf:4c:ca:65:e3:
                    13:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:DE:F2:FD:45:B0:85:A3:AE:65:F1:89:27:11:CB:0F:4D:A6:12:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd/32f4e84a-4abf-4422-8d26-57083e3e17cd.crl

            X509v3 Authority Key Identifier:
                keyid:5B:AB:87:92:61:62:53:C8:04:15:3A:3F:D8:2B:16:49:58:A1:AE:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/32f4e84a-4abf-4422-8d26-57083e3e17cd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:4e:e8:00:55:92:3e:d8:a4:b7:62:a6:be:4b:33:c5:c7:05:
         15:98:3a:ae:c5:de:45:c7:28:59:d0:23:5e:9f:67:26:6b:26:
         44:11:79:c7:1b:cd:63:ca:83:65:5a:1b:48:ee:f7:b9:e8:d0:
         10:68:57:d2:a7:af:5f:5f:89:b4:56:ea:c9:18:de:2a:d2:1b:
         52:7e:2a:83:94:ec:43:f3:b5:4d:03:6f:21:a5:73:c7:c7:5c:
         25:fe:94:cb:6f:5d:09:9e:c3:0a:dd:93:0f:87:29:08:54:f2:
         d7:ef:0e:d9:40:fd:8c:e9:4a:af:6c:be:07:cb:5c:e7:da:5b:
         ae:50:0a:6c:5a:0c:e3:72:5b:86:22:f0:92:d3:1d:d1:a6:5b:
         24:63:c4:21:9a:40:d4:76:66:42:c2:5e:9e:d5:45:54:86:a7:
         93:78:53:87:6e:28:c8:06:eb:05:dd:8e:c3:7d:f4:f7:77:f4:
         e9:d0:59:af:ff:16:58:7e:a8:ca:a3:b5:bc:12:53:83:da:c8:
         d2:d2:77:d7:ab:2e:36:de:c9:d0:42:8f:b0:3d:b7:35:b7:f2:
         2a:4b:60:14:8c:86:36:66:62:11:93:4e:bc:f0:ac:f8:dc:e4:
         02:06:a3:37:2c:24:b0:70:bb:2e:b5:7a:84:2a:8f:31:da:1f:
         be:ab:27:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net