Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft
File:                     3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft (raw, json)
Hash identifier:          j88C4XmTe237IVgaRIADA/EEbGj6b5riEf4soKSzkKc=
Subject key identifier:   27:4B:12:A3:3B:91:6C:C1:34:B6:0E:C9:1B:2D:D7:EA:E6:CF:BC:11
Authority key identifier: 30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA
Certificate issuer:       /CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60
Certificate serial:       010D0C9F43285849819866F0BECD7FB55E1F8C40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft
Manifest number:          010D0C9F4328584073A830446585399912628252
Signing time:             Sat 12 Apr 2025 23:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 23:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 23:00:00 +0000
Files and hashes:         1: 3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl (hash: nil4LkHOKzBCdc84rh82zad/T6kKkvONxjyHu1yktxs=)
                          2: 3c3380ea-82d4-3054-9c73-9089c1d05edf.roa (hash: IYlzVyGDwWTlKzyiBFzxf3E6pMEj+eK30NQMgR73r+0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:98:66:f0:be:cd:7f:b5:5e:1f:8c:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a743fdc-dd84-4ed2-9614-4d92d306fa60
        Validity
            Not Before: Apr 12 23:00:07 2025 GMT
            Not After : Apr 15 23:00:00 2025 GMT
        Subject: CN=f8790bd8-0b19-4103-9825-bd52d47b1176
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:20:52:0f:53:81:3d:5d:59:6e:9d:82:c1:
                    b2:93:d0:a5:33:fe:4f:86:9d:92:0b:64:fb:63:4e:
                    d9:23:28:31:bd:14:56:3c:62:b7:38:03:16:f7:d4:
                    82:5f:11:7c:2f:cb:0a:8e:3b:40:bc:41:30:c8:b2:
                    5f:17:8c:bf:49:4d:2f:47:aa:e5:28:80:b8:b4:a8:
                    4f:68:0d:68:65:38:4b:da:28:bf:f1:8c:a0:d9:04:
                    33:3f:b9:6f:3a:32:01:04:c7:84:de:8c:50:d4:7a:
                    b0:ac:ee:22:5c:e4:c1:84:32:18:78:54:28:4e:6d:
                    8b:1c:03:7d:ab:fe:be:d5:18:3f:6a:43:d6:ab:60:
                    be:7b:1c:12:5b:16:c6:3c:3d:b0:71:e0:eb:d8:1a:
                    08:4e:8c:2b:5f:44:9c:43:44:b6:74:14:30:70:8f:
                    a4:f8:1c:f5:6e:89:8f:0a:f6:49:76:58:00:2a:8b:
                    92:89:8b:93:d5:83:de:d8:64:50:b3:ab:40:64:49:
                    1b:41:d9:a0:0b:da:b5:95:57:ed:14:55:c2:99:58:
                    f5:2f:1c:dd:ee:51:37:a5:f2:22:26:49:c2:29:40:
                    01:a3:2d:69:71:e7:1b:14:d3:9e:db:48:91:78:2c:
                    7f:c5:c0:2b:1f:3b:a4:7b:d5:e1:77:3b:b9:f6:d6:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4B:12:A3:3B:91:6C:C1:34:B6:0E:C9:1B:2D:D7:EA:E6:CF:BC:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60/3a743fdc-dd84-4ed2-9614-4d92d306fa60.crl

            X509v3 Authority Key Identifier:
                keyid:30:59:3D:CD:9B:0D:D9:3F:D9:F7:01:85:66:DF:AB:81:8D:C4:E1:EA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/3a743fdc-dd84-4ed2-9614-4d92d306fa60.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:98:1b:17:29:bb:df:e6:25:bf:57:a7:9f:f6:4d:d1:a8:a2:
         ef:7c:12:56:71:8e:6e:79:50:f1:23:b5:65:84:ea:71:49:e7:
         3d:e9:4d:62:96:04:b2:d8:b6:12:05:c0:e0:f6:cc:f5:b1:60:
         a8:b2:87:f4:43:d6:f4:d2:31:6e:f9:62:be:65:d1:3c:d1:36:
         e4:58:7b:e5:5c:8d:87:c0:e5:c5:c4:15:e6:90:31:49:5d:3a:
         6d:99:37:82:37:7f:ce:c0:f6:e6:d1:1d:41:7c:8a:df:4d:e0:
         4a:af:c7:a6:a5:04:2e:03:c3:13:92:48:12:31:2e:31:2e:a2:
         47:0f:08:6e:47:92:15:63:5d:8d:ac:92:ed:ac:cb:51:fd:4d:
         a7:0e:f6:77:38:f4:88:b2:4c:8d:49:27:5a:39:08:11:dd:f7:
         8f:6e:50:db:31:aa:24:3a:d0:05:d1:50:e3:12:a5:a3:86:89:
         70:be:bc:d7:30:d5:e5:32:7d:e3:89:77:86:54:bf:ba:ca:45:
         0d:dc:79:e8:a3:cb:85:b1:91:7e:37:54:c2:fa:87:b4:8f:45:
         a5:a5:d2:fb:de:10:96:4c:45:26:96:5c:51:f3:68:42:3b:86:
         d0:c3:59:f0:f5:b1:3f:66:1e:ca:e6:06:6f:20:76:2d:62:59:
         4a:65:36:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:27:52 2025 by rpki-client on console.sobornost.net