Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.mft
File:                     9a8caad5-fdb4-41bd-bd4e-3b0251daede6.mft (raw, json)
Hash identifier:          sr8tM6ChnF5KdkQkEqYd/NKkHhdd/mteQENzFduYuz0=
Subject key identifier:   4D:6B:F2:71:34:3B:BC:36:3D:3E:FB:18:64:B7:C2:AA:9E:CE:D5:C6
Authority key identifier: 84:C6:F6:34:D5:6F:59:02:BE:3A:D2:41:33:64:C9:CF:AD:25:78:51
Certificate issuer:       /CN=9a8caad5-fdb4-41bd-bd4e-3b0251daede6
Certificate serial:       010D0C9F4328584980C7F5BEC19F444B68566B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.mft
Manifest number:          010D0C9F43285847A083739EA888C774E116A031
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 16:00:00 +0000
Files and hashes:         1: 06788f0d-13fa-321d-ae23-695683ebdc4f.roa (hash: ZqX+XQbBtqrZ3f8oliav5X+IL+xsw+Zkr11rq00j/K8=)
                          2: 9a8caad5-fdb4-41bd-bd4e-3b0251daede6.crl (hash: n2//96sL3eQszi+1VvOMEQzGDhf18r2AexwBefMZZ4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f5:be:c1:9f:44:4b:68:56:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a8caad5-fdb4-41bd-bd4e-3b0251daede6
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 15 16:00:00 2025 GMT
        Subject: CN=8adbe0a0-8d11-4193-902f-717ac4fae18f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:62:10:1e:a6:f0:d8:62:e0:bd:50:a3:d2:5c:
                    66:fd:6e:9b:34:58:76:70:7a:c3:f3:3d:38:26:f6:
                    01:9c:3f:7a:e6:eb:4e:2e:2f:3a:95:e5:a1:75:82:
                    f6:44:fb:55:a3:30:0f:b0:01:e7:78:69:a4:11:49:
                    d9:b9:7e:ea:89:c8:64:2d:d9:d1:dd:48:45:b3:2f:
                    13:94:cf:29:1e:d9:4b:b9:7f:37:c0:77:07:72:4a:
                    72:af:bb:e3:f8:f1:48:37:05:21:1a:4f:22:16:88:
                    c4:1b:cb:42:69:dc:cd:b1:76:0a:99:ba:14:04:ec:
                    aa:7f:79:21:11:4b:44:41:5d:09:58:11:80:3d:de:
                    40:99:51:84:1f:ee:6a:19:bc:80:66:bb:b5:9c:21:
                    6c:53:40:55:f8:bb:5d:c7:f9:c1:e6:51:f6:6c:7a:
                    b8:80:d8:08:03:de:52:89:b4:cd:eb:d1:fa:4b:fc:
                    0c:5a:f1:80:31:3e:bb:60:fb:1f:25:bb:b2:d8:83:
                    df:d3:5d:4f:d0:25:51:da:a6:b4:42:61:11:e6:92:
                    64:c2:ed:59:4a:0a:b9:55:fe:01:57:3f:32:90:f2:
                    35:26:d2:f4:13:77:f8:fd:ec:9d:11:cb:be:9c:e5:
                    6f:37:97:94:85:5c:53:2a:fa:43:6f:f7:e9:f7:ab:
                    57:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:6B:F2:71:34:3B:BC:36:3D:3E:FB:18:64:B7:C2:AA:9E:CE:D5:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.crl

            X509v3 Authority Key Identifier:
                keyid:84:C6:F6:34:D5:6F:59:02:BE:3A:D2:41:33:64:C9:CF:AD:25:78:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9a8caad5-fdb4-41bd-bd4e-3b0251daede6.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:c2:9b:57:27:9b:02:65:8d:0a:27:89:56:ca:54:0d:e8:21:
         2d:ba:a7:9e:a2:e7:eb:66:81:ed:5f:42:9a:58:a6:7f:88:cc:
         4e:46:fc:56:d0:4f:ad:8e:5a:4a:6f:3b:48:32:6c:5f:df:6a:
         70:e4:bb:5e:ba:a0:88:1a:74:e3:e5:ce:bc:94:8e:f1:24:51:
         e0:99:85:dd:5b:07:79:38:92:4c:d2:4f:59:9e:18:24:fe:70:
         96:af:1e:92:4b:77:8c:64:36:5c:72:75:3e:44:a9:e4:24:8a:
         c2:fe:20:6e:a6:27:02:df:1d:77:a4:68:de:9d:c3:5e:d3:ed:
         33:e0:e6:64:6b:7b:a2:dc:06:24:ad:98:90:5d:f9:4f:81:1f:
         b4:a0:c2:ab:8f:70:dc:60:aa:a2:a0:00:b0:4a:96:4c:7a:46:
         85:6c:07:1f:d4:92:6f:83:96:c7:c6:38:24:0e:d4:c9:a2:ef:
         3c:e2:89:fd:b4:34:0b:0f:c3:03:98:8e:cb:ed:39:49:46:7c:
         5c:31:e8:e8:9c:da:03:9d:0f:0f:7d:08:31:30:af:5c:9f:37:
         21:b7:f1:46:90:b5:04:d1:1f:09:1d:f2:76:52:da:48:2d:9d:
         f4:c3:f3:29:e2:5f:8a:37:2c:26:7d:d4:82:59:74:23:4d:86:
         ad:69:b1:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:15 2025 by rpki-client on console.sobornost.net