Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
File:                     72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft (raw, json)
Hash identifier:          zB+0YrhWBPUT1hsihMiB8mE5G4tFKyrcUM770LcKGA4=
Subject key identifier:   54:5F:3D:E7:3F:CA:D5:68:55:80:61:4F:BE:D5:EE:5F:21:43:64:5A
Authority key identifier: 24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4
Certificate issuer:       /CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
Certificate serial:       010D0C9F43285849810385AD2FBA4DED5CF6F140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft
Manifest number:          010D0C9F43285847F1DB8F44F9E8EC5CBB79D1D2
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 18:00:00 +0000
Files and hashes:         1: 72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl (hash: f7Y318o0dK6EPaHSIHjvksHGNfX+FP2glxgi/pjKjQ0=)
                          2: f70b4207-9d81-343c-8366-de84e2638a1c.roa (hash: ThF03bdm5yc2Vs+0EHUzNH2dn9+DNRwTgUkae0sv3PU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:85:ad:2f:ba:4d:ed:5c:f6:f1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72d490f0-44a0-40e3-afc2-d9f43534d7ea
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 14 18:00:00 2025 GMT
        Subject: CN=e0f317e1-d914-4233-b37f-5a560d4209fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:61:93:77:68:53:33:82:84:7b:f2:8d:20:fb:
                    4f:2b:a2:97:85:73:85:d0:eb:28:d0:13:23:cd:4d:
                    4b:2f:5d:33:a5:06:96:8d:39:18:40:b2:2a:fc:b6:
                    99:45:73:31:2d:75:3a:d6:da:97:83:87:ac:39:ca:
                    3c:7a:76:2f:73:97:7d:c6:51:88:a5:fd:83:3c:dd:
                    52:be:da:7c:a6:4e:0d:48:a3:7a:fe:46:7c:0e:4b:
                    a2:23:42:48:01:4b:b5:da:fd:89:7a:ea:bc:35:98:
                    da:e5:df:ac:70:f6:92:31:85:30:78:a7:cf:8b:05:
                    ed:7d:82:3a:19:df:32:29:d0:3d:08:4a:08:46:f3:
                    3c:54:58:40:7f:a4:b8:25:de:86:e3:3a:23:9e:9b:
                    18:10:4e:67:97:dd:78:54:d5:c2:a8:51:84:99:a5:
                    f8:4e:69:2d:7a:eb:95:9b:f4:dd:64:11:4a:f9:8e:
                    db:59:6d:15:09:a0:dd:62:ce:64:d4:3f:73:9b:32:
                    dd:e1:a6:dd:24:ec:7a:5a:29:b7:b7:c0:3a:53:4a:
                    10:0c:fe:ed:91:ba:b4:ed:4d:0d:2e:be:79:95:72:
                    db:e9:a1:40:44:69:71:40:b1:c5:a4:20:dd:8d:80:
                    fa:2b:49:f8:97:3f:82:c4:40:78:95:4d:74:95:34:
                    c8:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:5F:3D:E7:3F:CA:D5:68:55:80:61:4F:BE:D5:EE:5F:21:43:64:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea/72d490f0-44a0-40e3-afc2-d9f43534d7ea.crl

            X509v3 Authority Key Identifier:
                keyid:24:EC:87:BB:05:C1:7A:60:5F:26:0A:AC:B7:AB:B8:DC:92:89:51:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/72d490f0-44a0-40e3-afc2-d9f43534d7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:4e:75:ea:f9:5d:63:d4:58:2b:55:ad:f8:7d:c6:14:1b:3f:
         20:f1:a2:d4:a9:9c:d9:6a:c3:09:eb:06:a6:1b:3f:16:74:da:
         ca:c1:8a:d0:f4:01:c0:cf:e4:6b:2e:9c:bb:04:05:a9:7c:47:
         d7:10:56:11:bc:49:bb:72:bc:c1:7e:21:8b:0d:60:f7:5b:a0:
         43:85:47:ee:98:12:b0:cd:3d:77:7a:b5:f8:35:3e:8d:6a:bf:
         0e:62:7b:af:e4:75:e1:76:1d:a5:9b:d9:12:79:10:a8:7a:63:
         81:b8:13:3d:3c:ef:41:21:1f:bc:19:31:ae:bf:32:05:6c:96:
         f6:f6:6c:61:85:d2:3c:ee:65:b6:ce:b2:14:c7:de:4a:7c:ad:
         0b:da:3a:de:f1:dc:46:dd:02:50:e0:fc:e8:21:f5:99:56:57:
         ac:84:ff:e5:cd:39:eb:fe:2f:fc:33:16:32:39:e9:56:1f:97:
         e7:2f:5f:1f:2e:9b:b1:c1:3d:39:50:e4:b9:3b:81:12:69:c0:
         09:05:6e:ea:01:e6:85:0f:78:b5:77:52:a8:5f:53:ec:23:00:
         bc:f5:49:5d:4f:f5:a6:50:13:85:c1:85:df:ef:bf:b2:71:90:
         b2:a2:d0:f1:b1:39:de:90:a6:83:63:e0:1a:f1:43:1d:25:ad:
         39:e8:4b:2c
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBA4WtL7pN7Vz28UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzJkNDkwZjAtNDRhMC00MGUzLWFmYzItZDlmNDM1MzRk
N2VhMB4XDTI1MDQxMjE4MDAwN1oXDTI1MDQxNDE4MDAwMFowLzEtMCsGA1UEAxMk
ZTBmMzE3ZTEtZDkxNC00MjMzLWIzN2YtNWE1NjBkNDIwOWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGGTd2hTM4KEe/KNIPtPK6KXhXOF0Oso0BMj
zU1LL10zpQaWjTkYQLIq/LaZRXMxLXU61tqXg4esOco8enYvc5d9xlGIpf2DPN1S
vtp8pk4NSKN6/kZ8DkuiI0JIAUu12v2Jeuq8NZja5d+scPaSMYUweKfPiwXtfYI6
Gd8yKdA9CEoIRvM8VFhAf6S4Jd6G4zojnpsYEE5nl914VNXCqFGEmaX4TmkteuuV
m/TdZBFK+Y7bWW0VCaDdYs5k1D9zmzLd4abdJOx6Wim3t8A6U0oQDP7tkbq07U0N
Lr55lXLb6aFARGlxQLHFpCDdjYD6K0n4lz+CxEB4lU10lTTIAQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFFRfPec/ytVoVYBhT77V7l8hQ2RaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0
OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0MzUzNGQ3ZWEvNzJkNDkwZjAtNDRhMC00
MGUzLWFmYzItZDlmNDM1MzRkN2VhLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzJkNDkwZjAtNDRhMC00MGUzLWFm
YzItZDlmNDM1MzRkN2VhLzcyZDQ5MGYwLTQ0YTAtNDBlMy1hZmMyLWQ5ZjQzNTM0
ZDdlYS5jcmwwHwYDVR0jBBgwFoAUJOyHuwXBemBfJgqst6u43JKJUaQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83MmQ0OTBmMC00NGEwLTQwZTMtYWZjMi1kOWY0
MzUzNGQ3ZWEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBPTnXq+V1j1FgrVa34fcYU
Gz8g8aLUqZzZasMJ6wamGz8WdNrKwYrQ9AHAz+RrLpy7BAWpfEfXEFYRvEm7crzB
fiGLDWD3W6BDhUfumBKwzT13erX4NT6Nar8OYnuv5HXhdh2lm9kSeRCoemOBuBM9
PO9BIR+8GTGuvzIFbJb29mxhhdI87mW2zrIUx95KfK0L2jre8dxG3QJQ4PzoIfWZ
VleshP/lzTnr/i/8MxYyOelWH5fnL18fLpuxwT05UOS5O4ESacAJBW7qAeaFD3i1
d1KoX1PsIwC89UldT/WmUBOFwYXf77+ycZCyotDxsTnekKaDY+Aa8UMdJa056Ess
-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:14 2025 by rpki-client on console.sobornost.net