Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
File:                     3bb72fa3-359e-464d-be35-978a12d62998.mft (raw, json)
Hash identifier:          D15Yq9+LDljd/F/OAtNkLRcDf1orK3/J7Cde2/NRRK8=
Subject key identifier:   39:6E:47:D7:3D:15:F8:5B:18:C5:BA:96:CA:49:EE:D9:84:A9:42:CE
Authority key identifier: E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3
Certificate issuer:       /CN=3bb72fa3-359e-464d-be35-978a12d62998
Certificate serial:       010D0C9F4328584980E5BAF998B42B9CE8BECE00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft
Manifest number:          010D0C9F432858478216621AE1CF34A01FCA02C3
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 17:00:00 +0000
Files and hashes:         1: 3bb72fa3-359e-464d-be35-978a12d62998.crl (hash: bwOJZ+N/3las7fQ+CIaKOwV612g6MyJFaq6ubwnbHIs=)
                          2: 8a468e47-8a6e-3f96-b02e-a3434f12468a.roa (hash: 46+3a7ewDj+nbcmZOzHy9Wm+OIPEgFanGeiL4FaBW0A=)
                          3: c5c1ab9a-f99d-3b75-b7f4-98fbef315809.roa (hash: V2s3oBWGySBFMbB7LO+Y/G96iuuZfFj6TCu6SK21pv0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:ba:f9:98:b4:2b:9c:e8:be:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bb72fa3-359e-464d-be35-978a12d62998
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 14 17:00:00 2025 GMT
        Subject: CN=63e4384a-5924-4dba-ae97-001b4c6e4612
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:60:0e:8d:87:24:3e:34:bc:87:66:22:35:a6:
                    4a:56:38:9c:a5:c3:30:e2:5c:a8:a1:ab:16:bc:b0:
                    23:ab:66:b7:f7:01:c2:a4:3e:10:f3:5e:76:00:08:
                    51:9c:f5:ff:d8:d0:4b:b2:c3:3d:10:39:d1:04:2c:
                    ba:66:2f:7a:8d:a2:e6:3a:97:0c:09:8f:06:10:f8:
                    d1:ac:73:c6:0f:fc:78:38:a1:61:0b:53:f0:56:ef:
                    27:fc:21:d7:67:05:88:dd:ee:84:fd:b4:3b:7a:94:
                    5d:bd:e4:88:e3:4e:79:bf:38:55:5f:20:a2:87:fa:
                    0b:75:30:11:0b:f1:ec:25:ba:6f:09:dc:e1:9e:37:
                    7b:36:ea:ef:ae:ba:ec:57:05:10:8f:4e:68:6b:f2:
                    67:af:05:c6:7a:24:e0:16:ac:88:c0:16:f0:eb:2e:
                    ab:03:82:4e:77:39:64:38:35:d9:7b:ac:83:03:be:
                    cd:f8:d5:ba:6f:7e:38:ab:f6:9c:07:6c:56:61:ba:
                    97:04:4f:6d:a2:99:3e:a0:72:64:5f:90:13:4a:0c:
                    19:b3:e7:1f:89:c0:bd:20:9a:15:b9:b9:ae:4b:cf:
                    52:b3:c7:b4:43:53:fe:87:80:67:42:57:be:51:ff:
                    5e:3e:77:d4:f8:88:52:0b:63:7a:e8:d1:02:0e:20:
                    dd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:6E:47:D7:3D:15:F8:5B:18:C5:BA:96:CA:49:EE:D9:84:A9:42:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998/3bb72fa3-359e-464d-be35-978a12d62998.crl

            X509v3 Authority Key Identifier:
                keyid:E8:AA:4D:0D:AB:D9:92:99:F3:0F:A0:FF:30:AB:DA:03:66:45:90:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3bb72fa3-359e-464d-be35-978a12d62998.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:f6:6e:09:31:d6:82:11:78:5d:4a:88:b2:e6:89:fc:c5:76:
         38:8d:78:a7:8e:19:07:ba:4d:72:f3:d9:b3:2e:8e:f5:34:d6:
         84:44:fd:cf:23:c6:96:3d:6c:7d:0c:01:19:0d:0e:26:17:07:
         1d:1f:05:56:26:ac:96:1b:3a:c4:45:0f:57:ff:06:c5:10:a5:
         b6:70:c7:2d:98:ac:6e:33:f3:99:01:f4:2e:f2:52:af:71:29:
         0a:36:31:55:74:b1:79:8d:9c:ad:50:a3:a4:8b:b7:cc:a0:ef:
         f6:4a:89:39:9b:65:74:ae:37:d6:ff:7e:ab:7e:2b:79:f8:c5:
         6e:36:28:2f:43:e0:9b:26:29:fa:a3:b3:c7:86:2c:f2:56:c0:
         80:1d:3f:59:98:0d:e4:03:cd:c5:25:19:ad:12:ab:d3:8b:71:
         2b:1a:d3:7a:8f:69:c6:cc:91:ac:e2:60:26:04:78:12:8b:63:
         53:9f:a0:b5:e1:05:38:ba:ca:64:af:f5:04:9d:e1:e7:39:9b:
         b8:1a:ce:be:dc:b4:71:2a:14:15:42:74:a4:d2:82:31:56:7c:
         aa:cb:6b:68:66:9c:e2:2d:15:37:c3:9a:d4:35:b1:ec:1d:36:
         0b:6e:36:57:1c:b4:b2:ac:db:7e:e0:43:ce:83:e6:e0:d0:bb:
         f6:21:a0:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:13 2025 by rpki-client on console.sobornost.net