Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
File:                     c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft (raw, json)
Hash identifier:          +jksWsgfbmTAcL6pYkTK92igGI56wPoH1h452xTJ+y4=
Subject key identifier:   E8:08:3F:58:61:E4:25:94:8B:A9:CE:EF:E0:E3:7D:91:C8:7E:BC:49
Authority key identifier: EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F
Certificate issuer:       /CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
Certificate serial:       010D0C9F4328584980E5BE88D738E5A304884500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft
Manifest number:          010D0C9F43285846E020CAC93C43AC355C24DDF1
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 17:00:00 +0000
Files and hashes:         1: 03982157-61b3-3065-ae38-53829dc9dce4.roa (hash: 1lW+ZsKIU6NxHp3tP1nOI42zytV/XHPVhCnZtX+ZnAQ=)
                          2: 408381c8-6830-38f5-9c88-6356ab563ec5.roa (hash: ThI6MvxK315r7no8x2V30AVnou1joEbGa4yhwW0GZ90=)
                          3: 5b2b6e75-8a8e-3d0d-8e73-fb0d7972356f.roa (hash: 4hb6vhtG1H8QQAW+Zs2et/AOLDtnZ4RVlPwiN9gIC7U=)
                          4: 688b41be-4635-3543-940d-180df78be3b0.roa (hash: 0QlnXFvCeih9Zip6rKiKu1VMS2pJywyOUFjDq7GLF50=)
                          5: b8400ae4-c32e-32eb-863d-6abffbace522.roa (hash: 3ePpUOcbKltHdoKWjCSqDWPF1sVq0ZccFx762M0vops=)
                          6: c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl (hash: PF811Ed6BLLJ6kojNTjZkBN1W+nIo1beRHbjgLEk99g=)
                          7: d0812d54-f0d3-311e-83ad-e1bce560e63f.roa (hash: o8G14YkC0sIowVMcW2UoldIOLmvxOousoP31exk6QPc=)
                          8: fe7c4442-addc-3ce4-8135-8acde6c9345d.roa (hash: kud5I9z++qD2jF5FJk5ZTWAh5o40axFSr2ONxSbiG+I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:be:88:d7:38:e5:a3:04:88:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c40e3e4f-94a7-4a3f-9584-e7e6222e0948
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 14 17:00:00 2025 GMT
        Subject: CN=69a5b137-7c66-400f-a9dc-82612290c377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:82:7b:ea:ae:8e:91:86:6a:8b:21:13:b8:ab:
                    a7:a0:ca:80:6f:0a:09:c1:eb:ec:e6:f1:2c:53:44:
                    af:ca:91:b0:cf:c2:51:2d:02:8f:b5:8a:ff:5c:8c:
                    4b:5a:80:a5:ea:e0:27:2f:b4:86:02:21:28:ce:d9:
                    a6:61:38:f5:ea:93:a1:69:af:cf:e1:3c:4e:55:2e:
                    6d:ac:65:92:af:ae:3a:e6:ec:d5:8a:ff:b5:b6:65:
                    a5:3a:93:5e:bd:9c:9c:5c:19:00:57:ac:58:e7:98:
                    79:2b:18:88:b6:33:30:c3:aa:35:a3:ee:62:1d:b8:
                    a6:c2:53:94:25:80:39:ce:04:5b:ae:39:60:45:02:
                    fb:ae:23:41:64:90:0a:e9:e4:75:39:02:a1:67:a7:
                    f4:b3:a9:42:7b:a3:ec:a4:59:74:9a:55:18:b9:e7:
                    73:66:37:74:35:ff:48:77:4b:ce:54:5d:41:d9:3a:
                    34:57:59:75:de:fb:f8:8d:a2:3c:be:32:f0:b4:96:
                    d4:f8:97:aa:5c:6b:05:fb:c1:ce:60:49:d0:55:12:
                    70:61:aa:52:5a:1e:15:9d:8f:8d:6b:43:34:16:12:
                    4a:5c:40:f3:bd:14:50:30:0c:9a:fd:f1:c5:07:77:
                    62:9f:b0:6f:8d:5d:7e:e8:55:ba:84:c0:65:6d:23:
                    c8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:3F:58:61:E4:25:94:8B:A9:CE:EF:E0:E3:7D:91:C8:7E:BC:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.crl

            X509v3 Authority Key Identifier:
                keyid:EB:D3:6B:1F:1D:B8:34:82:BF:3F:A7:2C:77:0C:BA:E1:77:AE:67:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/c40e3e4f-94a7-4a3f-9584-e7e6222e0948.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:79:07:d0:07:af:6a:b2:a5:e8:1a:9a:da:8c:11:b1:0a:ac:
         4e:2d:7a:35:98:1b:23:75:e2:2a:ea:3e:27:b9:f1:b0:44:ec:
         14:11:2b:8d:0c:5e:4f:00:0b:59:c8:88:49:15:6b:af:a1:3c:
         c9:a9:2d:fe:d8:c5:f9:6f:a7:20:51:cb:88:4a:10:e9:08:19:
         7f:33:fa:9f:b1:6f:04:16:f3:f4:d4:a3:8a:cc:8a:0d:db:f7:
         2e:0b:93:89:3d:58:de:3f:00:71:a8:f4:00:15:48:65:51:1a:
         8c:7e:1d:50:da:ba:e2:5a:9f:12:44:07:fd:47:76:97:fe:81:
         ab:e6:30:36:fb:09:59:32:dd:1f:b1:e2:35:f0:1c:1a:06:6f:
         94:bc:6b:af:1e:15:a2:95:38:74:47:97:63:b1:c0:3a:3b:91:
         4e:cd:2c:ad:5b:33:4c:d7:40:06:c7:d6:93:cc:24:80:f6:92:
         7e:4c:77:1f:a0:40:35:23:39:a4:e6:d1:2c:8c:5d:fd:2c:3c:
         29:35:13:86:d2:4d:a8:ff:28:67:44:fe:35:6a:d9:be:a2:86:
         76:3d:b9:38:1d:87:f9:f1:82:0d:34:ba:80:e6:f0:53:b7:29:
         66:68:8f:d5:37:2f:43:30:62:a2:ce:42:12:e8:ae:d3:53:d3:
         be:d1:2d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 02:25:16 2025 by rpki-client on console.sobornost.net