Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft
File:                     5c9821b2-602d-4808-a33a-b2390c4ea020.mft (raw, json)
Hash identifier:          UryD6sG1I2MQwyqdCl11AvxYTonv/jYdJq2/24JsVWw=
Subject key identifier:   0B:4A:4C:AF:5E:98:3F:70:F4:C1:E1:0A:DC:F8:D2:60:2E:DD:F7:F8
Authority key identifier: AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85
Certificate issuer:       /CN=5c9821b2-602d-4808-a33a-b2390c4ea020
Certificate serial:       010D0C9F43285849835716B83BBE1667BD3B8BC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft
Manifest number:          010D0C9F43285845BD7146F2F5C7C7F88399B664
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 5c9821b2-602d-4808-a33a-b2390c4ea020.crl (hash: PA8pKed+k06YUIVnS3CD5DeLgtit4krfSeQOpVhQh84=)
                          2: cb6eb617-0bbe-30e3-b5b4-57836fcc5e67.roa (hash: 8O4CDpacpDxfAbsDMUOAs6lG1ls84PNtcd3etnv/LFg=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:16:b8:3b:be:16:67:bd:3b:8b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c9821b2-602d-4808-a33a-b2390c4ea020
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=21b46c00-10b7-4e2a-9cc5-3c613ee29db8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:ee:c0:67:3f:a4:e5:96:c5:93:f3:19:72:83:
                    2a:aa:c2:ab:52:fb:69:cd:ed:f7:6f:d4:9f:e8:36:
                    b5:8f:04:3d:2b:fa:b8:3e:86:a6:dd:c6:39:2f:3a:
                    3f:59:d4:67:32:7b:af:2b:87:a7:a5:6d:7a:53:06:
                    17:f5:a5:34:6e:c9:f2:1f:d6:96:fa:73:44:99:14:
                    a3:cc:76:ad:6b:81:01:00:b2:78:d0:c8:37:c5:98:
                    ba:d9:a2:46:7e:53:cf:f8:93:c6:1e:44:d0:5f:44:
                    1c:46:cb:f0:41:a1:89:ea:d1:94:06:59:6f:30:a3:
                    c0:ad:96:9c:6e:38:11:8c:2e:45:7f:a9:7b:60:1e:
                    f6:71:fe:83:82:a4:07:8f:fa:3c:6c:2b:e8:ea:f7:
                    ac:87:3c:42:01:67:2c:b3:a6:49:4c:25:9a:57:1f:
                    32:e1:42:2e:84:64:ee:69:14:82:8d:d9:0e:5a:4d:
                    ed:0d:56:0d:55:f8:a7:38:e7:cb:bf:d7:2d:38:b0:
                    8a:a5:19:01:e4:1b:99:5e:d3:13:5a:c4:b8:02:67:
                    c3:51:2a:a0:27:6d:78:30:cd:a9:80:68:40:68:2e:
                    05:fc:bc:17:ef:59:e6:35:52:f1:50:f1:8b:8f:e7:
                    ad:37:c8:d8:ad:c0:ec:eb:95:48:aa:9e:18:81:5a:
                    38:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4A:4C:AF:5E:98:3F:70:F4:C1:E1:0A:DC:F8:D2:60:2E:DD:F7:F8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020/5c9821b2-602d-4808-a33a-b2390c4ea020.crl

            X509v3 Authority Key Identifier:
                keyid:AF:66:D3:67:41:8C:19:F4:CC:35:CC:01:7B:B6:81:8F:8B:D7:4E:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5c9821b2-602d-4808-a33a-b2390c4ea020.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:21:c9:ef:4c:66:39:9b:ef:23:24:ab:5c:5e:9f:99:06:71:
         e5:93:e0:68:56:98:1e:ea:50:82:93:88:bc:46:f6:1d:fe:04:
         5d:41:9a:4a:ca:09:44:cd:f2:45:72:a8:31:82:d3:18:bc:26:
         80:fc:b2:ba:26:85:10:e5:a0:75:82:f9:60:ac:40:66:75:5d:
         72:4c:6e:49:0c:61:54:51:7f:d3:f6:1a:0b:65:7c:7d:cd:68:
         99:3b:e4:49:c1:48:45:54:b9:2c:ed:18:1f:9d:2e:00:84:32:
         9a:8f:eb:ee:03:7b:a9:ae:96:bf:d2:f6:4f:7e:b1:c6:ff:e5:
         2a:cb:90:23:91:fe:9d:7a:f8:bb:e3:33:87:49:d5:a4:dd:c6:
         e0:91:f7:5d:91:db:e2:e8:8c:97:23:00:fc:54:cf:ae:92:bc:
         c0:f5:bf:3f:c5:24:ae:b6:e4:25:dd:7c:72:ca:22:55:ee:56:
         23:18:98:56:ba:a7:51:30:dc:2e:27:7c:b4:d5:27:a6:9d:3e:
         d7:21:4c:cf:5e:7e:15:40:0e:f3:40:10:e2:2b:6b:b5:8e:b1:
         f5:61:7d:46:00:26:33:60:27:f9:2d:66:ed:b0:72:6a:10:7e:
         53:6b:94:37:0e:d6:82:ba:31:bb:cd:dc:e7:c1:1a:10:14:cf:
         a5:69:32:b6
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmDVxa4O74WZ707i8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM5ODIxYjItNjAyZC00ODA4LWEzM2EtYjIzOTBjNGVh
MDIwMB4XDTI1MDQxMzE0MDAwN1oXDTI1MDQxNjE0MDAwMFowLzEtMCsGA1UEAxMk
MjFiNDZjMDAtMTBiNy00ZTJhLTljYzUtM2M2MTNlZTI5ZGI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhu7AZz+k5ZbFk/MZcoMqqsKrUvtpze33b9Sf
6Da1jwQ9K/q4Poam3cY5Lzo/WdRnMnuvK4enpW16UwYX9aU0bsnyH9aW+nNEmRSj
zHata4EBALJ40Mg3xZi62aJGflPP+JPGHkTQX0QcRsvwQaGJ6tGUBllvMKPArZac
bjgRjC5Ff6l7YB72cf6DgqQHj/o8bCvo6veshzxCAWcss6ZJTCWaVx8y4UIuhGTu
aRSCjdkOWk3tDVYNVfinOOfLv9ctOLCKpRkB5BuZXtMTWsS4AmfDUSqgJ214MM2p
gGhAaC4F/LwX71nmNVLxUPGLj+etN8jYrcDs65VIqp4YgVo4WQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFAtKTK9emD9w9MHhCtz40mAu3ff4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81Yzk4
MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5MGM0ZWEwMjAvNWM5ODIxYjItNjAyZC00
ODA4LWEzM2EtYjIzOTBjNGVhMDIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNWM5ODIxYjItNjAyZC00ODA4LWEz
M2EtYjIzOTBjNGVhMDIwLzVjOTgyMWIyLTYwMmQtNDgwOC1hMzNhLWIyMzkwYzRl
YTAyMC5jcmwwHwYDVR0jBBgwFoAUr2bTZ0GMGfTMNcwBe7aBj4vXToUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81Yzk4MjFiMi02MDJkLTQ4MDgtYTMzYS1iMjM5
MGM0ZWEwMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBmIcnvTGY5m+8jJKtcXp+Z
BnHlk+BoVpge6lCCk4i8RvYd/gRdQZpKyglEzfJFcqgxgtMYvCaA/LK6JoUQ5aB1
gvlgrEBmdV1yTG5JDGFUUX/T9hoLZXx9zWiZO+RJwUhFVLks7RgfnS4AhDKaj+vu
A3uprpa/0vZPfrHG/+Uqy5Ajkf6devi74zOHSdWk3cbgkfddkdvi6IyXIwD8VM+u
krzA9b8/xSSutuQl3XxyyiJV7lYjGJhWuqdRMNwuJ3y01SemnT7XIUzPXn4VQA7z
QBDiK2u1jrH1YX1GACYzYCf5LWbtsHJqEH5Ta5Q3DtaCujG7zdznwRoQFM+laTK2
-----END CERTIFICATE-----
Generated at Tue Apr 15 19:20:16 2025 by rpki-client on console.sobornost.net