Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
File:                     911afcc4-db22-4282-acca-e1e676a5ae20.mft (raw, json)
Hash identifier:          rCctOmwditU8ZLY9OmFXp34jBpgkU8e7JASi1AZTSsQ=
Subject key identifier:   C7:40:6F:A6:CA:0B:9D:C0:A9:73:E2:7A:F7:C1:CF:8B:4B:7B:02:B7
Authority key identifier: 69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB
Certificate issuer:       /CN=911afcc4-db22-4282-acca-e1e676a5ae20
Certificate serial:       010D0C9F4328584982DFF905FAABC8FE046C1400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft
Manifest number:          010D0C9F4328584073A84DDAA286C2660F6DC775
Signing time:             Sun 13 Apr 2025 10:00:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:08 +0000
Manifest next update:     Wed 16 Apr 2025 10:00:00 +0000
Files and hashes:         1: 002ed6c4-e61c-3a97-af55-7ffb373d99c1.roa (hash: MVQ0TjjzU/PAe2DzjFngaDUNDJlpAXx1BrgH5Dnli7c=)
                          2: 007f24cc-fba9-31c7-874d-1e34664494bf.roa (hash: ffEwQ5ZeiF/LehfPxrhi/8w5KvoLCuYIJvWRZzVOwBs=)
                          3: 10aaa60f-ffd9-340c-9d46-88664e1a56e9.roa (hash: RbDMsTG5kIUQB0FuZYsgs06SqkeXQJ3ZN3H5y8zJyaM=)
                          4: 1e037bf1-9def-3932-a561-95b8d52d55f2.roa (hash: gWTg26emKeBj2z7w1dnXlDbV4W3gilPBxr1+QOEzkIA=)
                          5: 3cbd2192-dd50-3039-9b40-d591803b93fc.roa (hash: wA4fuw60mFn7TWEuB97+fmmFObJNTaJbPyuTTRyVF6o=)
                          6: 641e164e-8773-327a-bab7-d5897c169df2.roa (hash: a4DTroAtesEfxvR469nalwp6NXTDp7AjOXYP2rMZHcM=)
                          7: 8bb079ff-aaa1-3ccd-bbaa-6c0d52ae96ad.roa (hash: 0WVJLSbesu3e/NjuwjPVJh19DBQwHfQhLfmSyorcjMw=)
                          8: 911afcc4-db22-4282-acca-e1e676a5ae20.crl (hash: qi/YWSfjjZI0vfIvy9BLCvR1shZrI4WFFwN9vzl8o6k=)
                          9: 98b9ddef-eaa6-3d4e-bad8-3b155e8e7e29.roa (hash: 4+NbmZux5PwfxwdG2iIuZ4fmg99wN7Frhl4RcjOrHpk=)
                          10: a12a55cf-685f-3fb4-b1b4-933c00ed8020.roa (hash: 9TD24/S7arZjPF60GH/bfmNFDAARqrkW+nF3eVNSv8A=)
                          11: a3fc6399-f603-3a63-a6c5-7fb9584d4d41.roa (hash: wKdPcCHwSXrAB0W44GaMEiDhN2nCOVflUxhkhAbRYNQ=)
                          12: c727e6f4-ca9a-3b1b-88d6-63500df77a16.roa (hash: IVfGITze3Q+PZZ7BwDwlVfpWl9AVYtUnMKpZPEYvcH4=)
                          13: e518fa9f-e1eb-30af-8eaa-b1efa8c32640.roa (hash: 1YilD/zh8PoYbKI/L3MHI+JOVZtV3dKFeYOPoXOulJc=)
                          14: f3c15ef5-39c9-3101-9296-aaa5c219fa00.roa (hash: oFvj5edq3Lo/6lHvyc0KdfxQ9JIUYoEn4XPhnBByGIk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:df:f9:05:fa:ab:c8:fe:04:6c:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=911afcc4-db22-4282-acca-e1e676a5ae20
        Validity
            Not Before: Apr 13 10:00:08 2025 GMT
            Not After : Apr 16 10:00:00 2025 GMT
        Subject: CN=270b8436-59c6-44f2-8e45-d6932d529e8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:97:92:e5:68:a8:7a:05:13:e3:61:15:76:a6:
                    df:57:73:4e:ea:49:1a:61:bf:ed:22:86:73:d9:c4:
                    b5:12:c5:7f:dc:10:65:8e:74:06:6d:f2:12:e5:70:
                    f9:ac:73:37:ae:49:cd:b8:0f:fa:4f:f5:15:1d:8e:
                    af:19:6f:dd:63:9b:02:17:1d:bd:16:af:74:a1:f1:
                    a9:c5:f9:0d:77:10:36:f8:b1:7a:dc:77:89:d3:1b:
                    31:62:79:4a:26:af:d4:26:dc:b1:2e:b6:62:6e:a8:
                    cc:df:6f:65:c7:f3:29:a4:5d:13:e1:e5:79:bc:bd:
                    50:6b:84:c2:75:cd:11:43:74:58:97:66:de:cd:7d:
                    b2:77:89:45:99:1d:f4:08:81:f6:4b:b9:ac:35:2c:
                    da:80:78:15:03:d2:fa:53:70:4a:ea:95:e2:0b:08:
                    62:4a:d7:f3:ca:77:47:4f:4e:1d:a2:1e:45:2b:bd:
                    99:6b:0a:ed:d8:fa:62:ed:e3:ff:36:c0:53:65:02:
                    f3:8f:e3:72:19:df:32:e0:77:b1:a4:82:72:9d:72:
                    d7:1c:f6:af:96:f0:7a:5d:65:65:02:d5:e9:ab:07:
                    61:b1:07:1a:4a:85:63:2a:39:45:f9:30:02:4f:44:
                    01:fd:0b:c8:21:7a:ea:a0:7f:0d:2c:56:ab:08:f1:
                    5c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:6F:A6:CA:0B:9D:C0:A9:73:E2:7A:F7:C1:CF:8B:4B:7B:02:B7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20/911afcc4-db22-4282-acca-e1e676a5ae20.crl

            X509v3 Authority Key Identifier:
                keyid:69:1A:B6:E8:3E:67:94:46:39:E2:EF:D1:4C:D5:E4:75:69:36:90:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/911afcc4-db22-4282-acca-e1e676a5ae20.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:2e:f0:c4:a3:33:ad:4d:f4:9c:04:d0:51:0a:c5:6b:47:a8:
         88:01:48:34:5b:cb:39:59:8a:67:c0:05:5d:69:8c:7f:af:61:
         17:3a:2a:21:c2:44:c7:b2:f5:42:76:af:ec:f5:8e:09:4f:ba:
         c8:e4:72:b6:b3:f3:6c:c6:ac:fe:e4:06:54:44:dd:94:96:e8:
         f3:50:47:9a:26:dd:25:f3:83:2a:77:c9:3a:2d:9e:c7:c7:6a:
         fd:4e:97:31:fa:64:cd:d3:2e:ee:66:56:f1:ed:64:96:6a:40:
         75:bc:33:f4:99:6a:79:ba:68:f8:35:eb:e5:2f:16:35:b1:ef:
         3e:1c:19:cb:ef:5b:17:0a:24:db:a0:5d:79:ec:cc:d7:b9:88:
         58:0f:32:0c:f9:13:b9:2d:03:14:7c:1c:b5:31:8c:f7:e4:48:
         88:13:2a:44:9d:9c:d7:47:ca:e8:7a:0c:a6:dc:9f:de:c9:6f:
         ec:9d:c5:ef:0d:a0:46:9b:65:22:64:82:11:93:8b:e8:39:22:
         de:8d:43:d2:e9:dd:73:04:d9:04:c1:2e:9c:1a:34:87:c8:50:
         51:31:fe:e9:c7:23:b4:54:8f:4b:73:a2:40:fc:09:4f:13:88:
         dc:97:e7:af:92:97:6b:26:35:a1:87:55:e9:e1:3b:4f:26:d2:
         d7:03:c8:5f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmC3/kF+qvI/gRsFAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTExYWZjYzQtZGIyMi00MjgyLWFjY2EtZTFlNjc2YTVh
ZTIwMB4XDTI1MDQxMzEwMDAwOFoXDTI1MDQxNjEwMDAwMFowLzEtMCsGA1UEAxMk
MjcwYjg0MzYtNTljNi00NGYyLThlNDUtZDY5MzJkNTI5ZThiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJeS5WioegUT42EVdqbfV3NO6kkaYb/tIoZz
2cS1EsV/3BBljnQGbfIS5XD5rHM3rknNuA/6T/UVHY6vGW/dY5sCFx29Fq90ofGp
xfkNdxA2+LF63HeJ0xsxYnlKJq/UJtyxLrZibqjM329lx/MppF0T4eV5vL1Qa4TC
dc0RQ3RYl2bezX2yd4lFmR30CIH2S7msNSzagHgVA9L6U3BK6pXiCwhiStfzyndH
T04doh5FK72Zawrt2Ppi7eP/NsBTZQLzj+NyGd8y4HexpIJynXLXHPavlvB6XWVl
AtXpqwdhsQcaSoVjKjlF+TACT0QB/QvIIXrqoH8NLFarCPFcsQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMdAb6bKC53AqXPievfBz4tLewK3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85MTFh
ZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2NzZhNWFlMjAvOTExYWZjYzQtZGIyMi00
MjgyLWFjY2EtZTFlNjc2YTVhZTIwLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTExYWZjYzQtZGIyMi00MjgyLWFj
Y2EtZTFlNjc2YTVhZTIwLzkxMWFmY2M0LWRiMjItNDI4Mi1hY2NhLWUxZTY3NmE1
YWUyMC5jcmwwHwYDVR0jBBgwFoAUaRq26D5nlEY54u/RTNXkdWk2kOswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MTFhZmNjNC1kYjIyLTQyODItYWNjYS1lMWU2
NzZhNWFlMjAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBLLvDEozOtTfScBNBRCsVr
R6iIAUg0W8s5WYpnwAVdaYx/r2EXOiohwkTHsvVCdq/s9Y4JT7rI5HK2s/Nsxqz+
5AZURN2UlujzUEeaJt0l84Mqd8k6LZ7Hx2r9Tpcx+mTN0y7uZlbx7WSWakB1vDP0
mWp5umj4NevlLxY1se8+HBnL71sXCiTboF157MzXuYhYDzIM+RO5LQMUfBy1MYz3
5EiIEypEnZzXR8roegym3J/eyW/sncXvDaBGm2UiZIIRk4voOSLejUPS6d1zBNkE
wS6cGjSHyFBRMf7pxyO0VI9Lc6JA/AlPE4jcl+evkpdrJjWhh1Xp4TtPJtLXA8hf
-----END CERTIFICATE-----