Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft
File:                     3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft (raw, json)
Hash identifier:          vOD+qtBOYUAdoUp06k/lqICwIHV410HPTslTC88EVtg=
Subject key identifier:   77:F6:1B:ED:6E:73:A2:44:70:76:C3:24:E9:0F:91:00:FE:D0:F7:7D
Authority key identifier: 89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35
Certificate issuer:       /CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
Certificate serial:       010D0C9F43285849817A97033BCCB4002502C100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft
Manifest number:          010D0C9F4328584073A82B47310678490807D9D1
Signing time:             Sat 12 Apr 2025 22:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 22:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 22:00:00 +0000
Files and hashes:         1: 3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl (hash: jCZRyPNQ//ZykETZlSVERy38CnRfVtxFhz8kmMxgvd8=)
                          2: 43eb8afb-4ec0-3a7f-8c9a-2ca2cbff4cc8.roa (hash: Q+i9RcGItOWyML/3lE21fDh3+gtkLiLCbpfkyYAq6Gc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:7a:97:03:3b:cc:b4:00:25:02:c1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a11a85f-8f37-4b54-8fa2-d6bc09673711
        Validity
            Not Before: Apr 12 22:00:03 2025 GMT
            Not After : Apr 15 22:00:00 2025 GMT
        Subject: CN=c247c94f-c57e-4c42-95cc-6342d30a61fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:69:95:78:7a:43:9b:26:9b:f9:f3:54:15:
                    fe:5d:3c:22:75:36:f0:2b:1b:5c:fc:f0:b7:8f:fc:
                    c4:d9:60:ea:68:04:ac:06:57:d5:33:12:a2:1f:1d:
                    89:c1:ce:65:5b:ba:2b:ed:44:1f:fe:0d:fe:68:83:
                    29:f9:3d:43:04:70:fe:9c:14:70:22:c8:98:8d:16:
                    0b:11:29:2c:d9:ad:34:48:57:ee:cd:5d:b2:15:1e:
                    ef:28:a2:8d:59:1f:89:f9:86:5d:3b:c7:c8:d5:9e:
                    a5:4d:6e:56:32:dc:5f:15:e5:11:f2:a3:1c:57:ce:
                    63:63:5c:a6:5d:fc:1b:41:a4:e5:70:5f:90:62:38:
                    f2:c1:b7:48:78:bb:06:14:4d:31:a5:98:33:d0:65:
                    13:16:3d:16:a7:5b:f3:d7:d4:6c:42:e8:aa:28:a0:
                    a3:bb:a7:32:d4:eb:76:d2:64:96:b5:97:8f:e4:a5:
                    84:e8:a3:f7:1e:fe:15:08:52:13:72:f1:28:b4:12:
                    40:f6:b9:49:55:75:6a:3f:49:66:71:fd:1d:ca:98:
                    3d:e9:b1:0b:ed:3a:b7:44:05:87:52:38:a0:e0:24:
                    d6:9b:f0:84:0f:73:40:ee:10:33:73:77:af:1d:a8:
                    0d:85:19:93:c1:97:a4:8a:73:ea:96:70:cd:a4:4c:
                    79:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:F6:1B:ED:6E:73:A2:44:70:76:C3:24:E9:0F:91:00:FE:D0:F7:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711/3a11a85f-8f37-4b54-8fa2-d6bc09673711.crl

            X509v3 Authority Key Identifier:
                keyid:89:F4:56:85:95:09:74:C6:CC:B8:36:F8:BF:F4:B5:F7:67:DB:FF:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3a11a85f-8f37-4b54-8fa2-d6bc09673711.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:e7:27:29:f2:17:9f:57:85:4d:eb:3a:8e:47:64:c9:ad:28:
         17:20:c6:d0:94:18:4a:e1:a0:75:bd:7d:35:ed:0e:fa:91:cb:
         b8:88:29:01:e2:df:93:6c:ab:fc:d5:59:e9:ba:7c:d6:75:13:
         89:b7:d7:c8:b7:86:bc:30:e4:b5:b9:66:8d:88:6d:17:ee:94:
         cc:f8:78:3d:27:b8:ff:be:f8:9a:65:9b:b5:dd:fe:83:88:de:
         fb:52:15:87:49:4e:b2:06:98:75:38:7e:c6:b5:08:92:94:42:
         fa:fc:e3:a7:9e:c3:61:61:6e:12:ac:de:94:2b:ad:9b:20:29:
         d4:7a:4b:11:73:68:b1:cf:28:1c:52:68:81:5a:cb:74:75:de:
         2c:05:da:bf:28:bf:7c:e7:2e:dd:df:ea:62:19:f2:a8:7b:1b:
         6c:ac:f7:f2:c5:fa:2a:84:56:65:0e:0f:c1:b4:f7:9d:30:2c:
         a5:57:b7:3b:14:d6:21:95:02:98:de:b5:24:a5:53:dc:c3:4e:
         57:b5:fa:2b:2a:cc:63:85:e4:b7:94:ab:6f:3c:71:c2:65:29:
         71:c9:59:6f:02:75:25:51:f7:d2:d9:7c:f4:8b:83:64:a1:dc:
         fb:08:d4:41:ab:68:da:df:12:5e:63:64:d4:51:ec:f7:a6:b2:
         68:62:6f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 13:59:40 2025 by rpki-client on console.sobornost.net