Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
File:                     3bfea78e-552c-46d0-a7b4-60f999223238.mft (raw, json)
Hash identifier:          kvYO85KDFoyt30QrLZ9nqmesbBhkoGM1WbYcggJrE3M=
Subject key identifier:   09:CD:14:0B:F1:A3:1C:29:F4:21:3F:D0:B0:EF:46:EE:17:DB:CE:FA
Authority key identifier: D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96
Certificate issuer:       /CN=3bfea78e-552c-46d0-a7b4-60f999223238
Certificate serial:       010D0C9F4328584980E5BB8569071EF930FEDA5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft
Manifest number:          010D0C9F43285845DC7F251890046E2B090F5546
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 3bfea78e-552c-46d0-a7b4-60f999223238.crl (hash: LDjTDcFUNy2vWkOoAfuKY75dXVLVvBLy9g/LJsRpNgc=)
                          2: b07aee0a-5e02-3527-90d1-9ec6e19a26e3.roa (hash: /gJWqB+S10GldL9fpBE/sHoDJH1O/Mh16d8MMVIhEos=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:bb:85:69:07:1e:f9:30:fe:da:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3bfea78e-552c-46d0-a7b4-60f999223238
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=1a5e5fc6-c81e-46c7-a49c-c9f5596d6d0b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:42:07:6d:27:c7:aa:a4:fe:f9:54:8a:54:cf:
                    73:78:7a:6e:f8:c7:77:df:d5:4f:53:6d:50:d5:f2:
                    ba:92:f7:d8:2d:3d:c8:0b:d0:5b:86:8e:bd:72:12:
                    8a:8b:e8:84:72:fe:fe:24:c5:40:60:dd:cd:3a:80:
                    46:c3:a6:28:49:99:30:99:12:91:25:5b:06:f6:be:
                    31:52:b2:8a:06:51:8a:30:5b:c3:a6:1a:72:a6:de:
                    7a:27:6d:58:e3:56:0f:75:5b:a3:cc:b8:eb:6f:97:
                    9c:4d:06:16:af:d9:44:3c:7f:63:ef:bd:cc:8b:6b:
                    bb:d2:00:18:51:28:98:1c:a2:72:16:9a:98:00:5b:
                    4d:01:c6:55:74:45:d0:19:9b:7c:c1:bc:68:0f:7a:
                    23:a8:1a:33:ce:25:b2:c3:3e:22:eb:81:3c:38:a0:
                    4c:9d:f4:1e:30:09:04:6e:62:fc:92:2d:71:67:d5:
                    59:95:79:71:ab:b8:aa:1d:87:51:f4:74:d4:e6:2e:
                    3c:bf:7e:90:90:38:47:c0:ab:bc:fe:0d:09:5d:c7:
                    2b:30:63:33:ed:aa:35:fc:ad:9a:48:67:77:c0:18:
                    75:46:6b:45:6c:d1:f6:90:0f:af:a1:d6:79:3c:da:
                    b5:53:98:27:aa:94:13:78:c4:aa:dd:0b:ce:04:5f:
                    37:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CD:14:0B:F1:A3:1C:29:F4:21:3F:D0:B0:EF:46:EE:17:DB:CE:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238/3bfea78e-552c-46d0-a7b4-60f999223238.crl

            X509v3 Authority Key Identifier:
                keyid:D7:A9:E9:5F:B8:85:26:BB:3C:57:88:CD:07:2A:BF:B7:6B:2E:8A:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/3bfea78e-552c-46d0-a7b4-60f999223238.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:ac:70:b0:0a:d2:f1:c3:ac:63:7b:32:c3:f8:49:71:f2:f9:
         3e:57:d5:a4:f3:6c:d8:c7:82:50:3e:47:d4:17:8a:fa:1c:9a:
         79:2e:87:58:1f:7d:d0:0b:e2:94:59:47:04:05:ff:bf:c8:77:
         c2:57:34:94:e9:9c:33:e0:2e:da:06:4c:17:bf:4d:37:35:57:
         14:d0:0c:28:52:c7:e2:89:7c:93:0a:0a:e9:02:cb:de:97:5a:
         d1:aa:ba:ed:56:e0:04:98:71:61:e9:7b:fb:d4:13:87:39:d5:
         66:d7:67:f3:6a:87:da:ef:9c:9a:ed:ad:80:bc:9f:6a:5e:d4:
         96:84:96:49:51:38:6c:f9:e9:1a:ce:bb:eb:b4:0c:08:2a:7d:
         34:a9:16:43:b9:4b:4d:b1:66:3d:02:ae:eb:2e:dc:e9:4d:c8:
         7b:8d:57:51:0e:3e:d2:dc:00:83:d3:53:43:48:20:aa:89:35:
         dc:aa:79:c7:0a:3e:c5:53:25:66:a5:d3:c9:77:9e:69:74:9d:
         03:9f:a1:fb:9c:e2:77:ec:73:55:7f:4a:75:96:5e:cb:3c:f9:
         f2:2e:bf:07:a2:96:26:2c:36:97:cd:4d:ca:ea:93:79:ce:4c:
         f2:4a:ea:58:21:1c:d0:c7:a8:e7:f1:e6:48:0f:21:ab:8a:eb:
         b1:00:3d:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----