Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
File:                     2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft (raw, json)
Hash identifier:          FJl8kdhPuCizalQF3J1P3t3Hos9DqduGc+/w22kE9B8=
Subject key identifier:   9C:27:BD:D3:4C:55:05:48:1D:64:B0:31:4F:C7:41:50:F3:6F:C8:12
Authority key identifier: B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09
Certificate issuer:       /CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
Certificate serial:       010D0C9F43285849833A49FE187C77F1B77D1980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft
Manifest number:          010D0C9F43285845E22B58E68B5943D84FAD7496
Signing time:             Sun 13 Apr 2025 13:02:07 +0000
Manifest this update:     Sun 13 Apr 2025 13:02:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: 02b155af-a5ea-3439-823e-69a59b8f01a8.roa (hash: 41yr/9EA76uw3B7752XFM4D0colLtor2EA8dNVzNYVY=)
                          2: 2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl (hash: XVlIkbnnokbGKyLf3o8nhaZK2pe8PORepbNawc3jOhk=)
                          3: 64958442-b8ef-36f5-930e-f098a97dd0eb.roa (hash: GEz4AkEyoJKCUKKnefMT7EJ14HvvVUF/uT37B287bko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:3a:49:fe:18:7c:77:f1:b7:7d:19:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2977dd84-2e60-4aa2-8c59-ffc1b7659b9e
        Validity
            Not Before: Apr 13 13:02:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=8f7e806b-8ff4-49b2-9d70-abdd776d8161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cc:29:5f:04:ed:67:60:b7:d5:2a:ae:df:e6:
                    85:c8:91:5c:f9:01:33:33:b5:65:ee:e7:3d:cb:eb:
                    ae:65:2a:29:2e:78:2c:f2:ff:e9:40:a5:cc:64:1a:
                    fc:da:28:3f:c8:f9:bb:2a:8e:fb:2b:32:42:18:17:
                    43:fa:c0:f6:c2:45:03:7c:ff:22:dd:2f:c2:b6:42:
                    62:f6:16:88:87:d0:18:4a:c5:67:4d:18:26:d7:28:
                    17:5c:3e:b3:49:68:ed:d6:28:95:93:55:56:2e:e1:
                    6e:e1:2b:21:d6:63:00:92:6d:9b:a2:8b:a3:fc:7e:
                    cb:b6:4a:03:2a:4a:50:e0:91:0c:ed:64:5d:04:a3:
                    46:22:ea:7a:ee:19:ae:5a:d8:3c:b2:45:73:65:00:
                    11:1f:83:1b:bb:36:90:5e:84:6d:bc:47:9c:05:05:
                    7a:26:f6:87:3f:42:65:60:72:71:4a:c9:f1:18:54:
                    98:09:32:cc:4f:6c:6a:e1:cd:61:79:e5:fe:ca:bb:
                    5b:4f:c7:e3:b7:c7:27:47:f3:65:f8:da:be:6a:c9:
                    04:ca:bb:95:47:3a:31:d8:c6:b5:f9:84:ab:28:1f:
                    f8:9c:07:be:67:38:e2:d3:1f:f8:0c:f1:0e:4a:a8:
                    dd:a4:a0:e1:3d:d6:d5:41:37:21:0a:25:1f:2b:fe:
                    77:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:27:BD:D3:4C:55:05:48:1D:64:B0:31:4F:C7:41:50:F3:6F:C8:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.crl

            X509v3 Authority Key Identifier:
                keyid:B9:C8:33:74:1F:B6:EE:54:E5:CF:25:08:38:2F:48:86:0A:4A:99:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/2977dd84-2e60-4aa2-8c59-ffc1b7659b9e.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:ef:ca:75:f7:06:42:55:42:e3:1e:0b:bc:26:35:eb:88:d2:
         5d:ec:8f:d5:df:fc:fd:e9:d5:16:4c:66:33:81:ee:97:6c:43:
         6e:f6:8a:90:42:be:9c:59:63:6e:c4:5d:9e:10:b1:0a:e2:d8:
         dc:88:7e:f5:84:a1:7f:8f:42:11:e8:d1:f5:a6:91:2d:6d:24:
         b3:0c:2c:88:5f:6b:5d:ab:f2:e5:1c:a6:b7:e6:b7:36:b4:0d:
         64:a2:8c:f1:d6:1f:db:ee:cf:4a:6a:ca:93:4b:65:e5:f6:fe:
         80:dd:10:f7:c1:f1:e0:61:c1:d0:1e:74:30:e9:77:ed:8f:2b:
         a9:00:63:b8:02:20:aa:24:03:c1:83:89:8b:82:79:03:5d:1c:
         f7:cc:86:2b:be:40:67:93:0e:e7:ce:e5:70:92:17:e6:19:fa:
         43:ff:9f:8a:f9:99:75:a7:45:a6:07:2e:64:e8:16:94:d3:35:
         cd:9d:a8:08:48:1b:08:b3:6e:20:fd:e4:68:96:0e:49:0c:d4:
         7c:c4:11:26:20:74:25:1f:38:b4:bb:f6:a2:e0:12:76:14:5c:
         53:a0:e6:98:15:60:67:36:dd:60:0e:95:e3:fa:ac:cc:4b:18:
         8e:df:b3:0f:df:28:e9:2e:61:90:35:be:7e:ca:02:0c:7d:9e:
         7f:64:7e:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----