Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft
File:                     cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft (raw, json)
Hash identifier:          4EKifm3gP0pNU1vtKzHIXravFIEvX0CBRSNXqHo65fA=
Subject key identifier:   F3:DE:7A:3F:6F:25:0F:09:1B:69:A9:9C:EF:7C:C5:AF:50:C5:FF:72
Authority key identifier: 35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49
Certificate issuer:       /CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
Certificate serial:       010D0C9F432858498374E12D85B87AA404EC3B40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft
Manifest number:          010D0C9F4328584073A859CEC19FCE8AA2AA4025
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 7145082f-864e-3c24-b935-e8369e7fa47e.roa (hash: fOAn4uVxQf8gxkbOb1COAEQz1igUhrttvWeikjPqb/g=)
                          2: 75b40b6a-2ebd-3c0b-990b-9a161629f87e.roa (hash: ynTqDAgkIEhAXWBic4MQEwg4UVaUDBUZ52kp2gO/qB0=)
                          3: cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl (hash: /f3c0LZ+TTGV6a57UuSXNKTJDKLHzw8YjdZ/9P2JS2w=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:e1:2d:85:b8:7a:a4:04:ec:3b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cae558d5-5cb1-461b-9c33-43f664d3b3b1
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=005391e1-7f69-456e-81d7-443db8e817b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:76:79:fc:54:93:f2:c4:dd:2e:30:85:18:5f:
                    d8:60:bb:63:9b:ed:ec:b3:26:a0:5e:60:de:9d:e1:
                    30:f5:9a:34:7d:e0:53:88:eb:fe:ad:75:96:05:05:
                    d0:37:72:f9:20:1c:a1:ee:9c:eb:6c:9e:9d:68:e1:
                    cc:e2:24:fa:57:0c:32:2c:6f:c3:bc:b6:18:58:e2:
                    2a:46:73:89:48:08:63:90:55:6c:7c:be:30:f6:3c:
                    93:f4:bc:9d:d5:cb:80:30:e3:41:58:07:65:9f:1b:
                    63:cc:bc:5c:07:8f:ed:2c:96:92:14:c7:02:28:46:
                    49:3d:31:8c:32:80:4f:74:cc:3a:f4:59:3c:3d:8e:
                    db:13:59:09:4f:cd:74:4f:ed:3c:63:ba:d4:70:3c:
                    7f:26:c5:7c:74:68:c5:86:58:09:7b:32:33:21:1e:
                    c9:58:8d:be:e8:ad:15:88:33:e6:4f:e5:e7:c1:95:
                    b2:7c:f4:22:93:d0:ad:3f:03:f3:53:5a:65:a5:6c:
                    f0:16:98:4b:0f:45:56:3f:07:71:b4:72:d3:2d:e6:
                    a0:a2:b7:41:ec:22:54:c3:9d:98:ed:db:d9:a0:3e:
                    f6:38:4d:74:23:72:6d:8b:50:05:b1:e1:eb:98:55:
                    c0:40:03:19:4c:26:06:98:54:13:da:cf:24:c0:6a:
                    52:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:DE:7A:3F:6F:25:0F:09:1B:69:A9:9C:EF:7C:C5:AF:50:C5:FF:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1/cae558d5-5cb1-461b-9c33-43f664d3b3b1.crl

            X509v3 Authority Key Identifier:
                keyid:35:50:74:0B:AF:F9:63:BE:9F:E7:D2:B1:D1:16:33:BB:AD:46:52:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/cae558d5-5cb1-461b-9c33-43f664d3b3b1.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:a3:26:6f:2c:b9:f1:e2:e0:b2:b9:1f:44:3f:93:00:36:95:
         a7:dc:99:a9:88:93:60:64:0e:0d:70:ef:17:8e:dd:45:4d:6d:
         b2:6e:f3:8e:42:b7:96:0f:33:f5:86:bd:1d:b9:a0:a1:a5:44:
         ec:b6:a0:e0:96:25:5f:ae:c4:a5:e6:6c:b7:dc:98:90:13:5b:
         f5:81:1c:74:76:7c:5b:7d:36:dc:8f:18:9c:b6:2a:c1:40:3d:
         65:64:bc:c2:4a:ca:bb:95:c5:90:c6:33:a9:a8:34:d1:83:d2:
         32:27:6e:5a:7d:6c:c1:88:1e:86:ae:50:3b:96:70:a8:a3:26:
         bb:d3:d7:ee:87:61:81:41:09:bd:b4:2a:18:06:f6:0d:a5:12:
         eb:f5:a4:eb:14:81:96:75:55:ae:4a:fa:2d:c5:c9:aa:c9:75:
         00:39:2e:2d:ce:4e:e4:3c:dc:9a:67:e1:96:07:9d:44:7f:85:
         fb:15:6f:89:85:32:a4:c7:ae:24:b2:f5:7a:f8:6c:5d:b3:23:
         07:dc:fb:be:c0:53:eb:6e:65:a0:d4:92:bc:b3:e0:f1:eb:8b:
         79:44:50:b8:6c:85:63:6e:b4:57:48:f5:bd:13:2d:22:45:3b:
         b4:85:61:bd:e4:61:ad:1e:d9:ac:a2:fd:e4:d2:6c:cb:69:9a:
         72:7a:a0:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:47 2025 by rpki-client on console.sobornost.net