Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.mft
File:                     6cb8f884-845d-445b-8a8b-1c50ef7b1a80.mft (raw, json)
Hash identifier:          dyJK29tqcR5joVkZK5CSSF39TR5N0W92SEa8T+xhpug=
Subject key identifier:   1F:0D:94:BF:81:1F:82:BA:35:E8:AD:39:37:F6:A5:BE:C1:DA:D6:C8
Authority key identifier: 83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70
Certificate issuer:       /CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
Certificate serial:       010D0C9F43285849810386BF805299D5845D7180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.mft
Manifest number:          010D0C9F43285847E376F6037A9AB6F03161CC97
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: 6cb8f884-845d-445b-8a8b-1c50ef7b1a80.crl (hash: X1rTnKXFlTZ/VhqnzlAXOzfw1ReIFWcK/jcyx/7OsP8=)
                          2: c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa (hash: vnP7vS0hT1eKGVSqvZCxabBV5X2QKz99t7nDu/oOwzs=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:86:bf:80:52:99:d5:84:5d:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=dff2e839-9af2-4771-987a-aa2eb51d1e26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:21:8b:fe:ef:da:66:97:0f:86:8f:1f:69:
                    ce:cb:57:59:cd:5f:34:02:36:81:26:3a:1b:71:de:
                    15:67:81:dd:7c:ff:f9:72:16:46:f6:02:b9:81:b2:
                    80:0a:50:79:d3:a8:fe:23:0f:48:9d:4e:30:ae:b5:
                    07:16:4b:62:86:43:e2:0c:41:9d:7c:7e:4b:06:0f:
                    ec:a2:a0:97:9a:79:5b:3c:04:e7:fb:96:b5:5b:1c:
                    90:cb:9f:13:f8:9b:50:af:44:28:13:cd:9f:70:03:
                    7b:a3:8e:2b:b7:e2:c0:66:c5:79:5e:8c:75:f8:b8:
                    80:3c:55:57:51:bc:15:5f:cf:b9:b0:98:c4:74:2e:
                    8b:a4:c0:e4:89:ef:e0:ce:69:dc:e4:6d:d0:2a:84:
                    6c:b9:21:a3:8a:8b:ce:dd:42:ce:3d:99:d0:9b:57:
                    f3:03:39:07:e2:37:4f:d7:b1:1e:d6:12:3d:da:10:
                    e8:81:d2:41:48:5e:6f:e8:89:56:5a:1c:bb:ee:2a:
                    c2:6a:e9:ca:97:6c:de:11:f4:c7:bb:fb:e3:3c:a4:
                    c7:60:cf:e7:6d:d1:97:48:b1:fe:b4:d9:4f:bb:a2:
                    75:66:53:8b:78:91:4d:7e:a0:59:39:6c:bd:43:d8:
                    d2:33:21:4e:05:4a:6b:0c:16:8f:95:c7:c8:16:2a:
                    75:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:0D:94:BF:81:1F:82:BA:35:E8:AD:39:37:F6:A5:BE:C1:DA:D6:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.crl

            X509v3 Authority Key Identifier:
                keyid:83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:bb:4e:5e:78:11:71:a5:4e:85:29:3d:6d:98:78:5f:2f:c6:
         71:3c:df:7c:9e:1f:e2:ff:8d:9d:13:ef:05:2e:6e:d2:6e:c3:
         04:e6:de:cc:27:3e:6f:f6:6e:b6:19:3f:18:54:5c:ee:12:c0:
         3f:fc:5e:be:2e:c2:7e:5f:b9:3d:a4:ec:87:d1:8c:76:7e:f0:
         ca:26:67:fa:e7:42:c3:89:c4:a1:68:43:a2:db:c8:4f:59:c5:
         d7:46:1a:72:16:d5:32:d4:2a:77:b9:fe:4f:8e:14:00:7e:4f:
         cf:26:2c:7d:90:c7:6b:6e:99:9d:c5:3b:bb:08:68:6b:a2:9d:
         b5:36:6f:af:15:67:e5:1a:cb:1c:0b:7f:db:ae:12:cf:a2:af:
         9d:e9:b3:f0:6b:11:85:ad:6a:c0:93:ed:e5:c7:66:9e:2b:5b:
         1b:f0:34:a6:50:be:21:70:53:df:20:0e:a1:66:c3:f5:7e:d2:
         98:34:63:aa:66:37:b0:2b:03:9b:59:c9:40:ce:96:0a:82:ce:
         8e:4e:1f:57:ca:a5:8b:33:6a:68:dd:2a:d2:34:3a:c5:79:19:
         e0:29:0a:d8:49:12:26:0f:cc:df:a2:9b:b9:fd:f1:2f:2e:68:
         ab:b1:49:a7:8c:34:4c:11:4a:2e:59:dc:7b:44:b3:6a:0d:5d:
         8f:a1:04:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----