Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft
File:                     99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft (raw, json)
Hash identifier:          2kLJCq6Ja8Oe23SRrtiSbjd5P9ygw55FQHvpXexZnX0=
Subject key identifier:   AC:8C:3D:DA:B8:BC:D2:A3:94:90:A3:FD:35:DE:E8:40:92:95:3D:41
Authority key identifier: A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1
Certificate issuer:       /CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
Certificate serial:       010D0C9F4328584980E5B9F07B7CF4237FCFFF80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft
Manifest number:          010D0C9F432858411599BB6BCA2A10368C220EB9
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 14f73e52-7825-3f57-b7ce-56bda9756aa4.roa (hash: L79TTXUpODuG+gtbtSLCEoE+iFvF0ThOKeOFTHlBgio=)
                          2: 99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl (hash: lr4WXfcHWJQpT/jY655SQkEBw5p1G0beaPGCGBbcfZY=)
                          3: b4ab16ba-7c8a-3678-b656-6d2c38ecf39a.roa (hash: MfSnXkzSTLAKjNaZ0d0n5Ik7XHjd/PJiYV4RgV/Ftgk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:b9:f0:7b:7c:f4:23:7f:cf:ff:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99a38aa9-eea9-4da3-9c7a-9ed1c2340b83
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=2c2bfd8a-b1b8-4a26-91a8-c21a88e80b01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c2:2f:5c:0c:02:68:e9:6a:70:a5:d0:c1:6a:
                    1d:d3:38:4b:7e:f8:c0:72:fa:09:e5:fe:f1:be:6a:
                    a5:92:25:37:74:f3:a2:97:5c:74:38:dc:12:35:bd:
                    af:5e:1f:55:0e:ba:1f:1c:de:59:17:71:fd:83:06:
                    5d:9b:84:db:ab:28:2a:a1:f7:50:eb:2e:e8:3c:71:
                    d9:ab:bf:b4:1a:b7:66:56:75:ce:f2:47:21:48:4d:
                    12:6b:91:92:bf:52:c8:ea:14:77:54:dc:72:96:f7:
                    b2:85:74:78:dc:d0:55:05:82:c5:f2:ed:c5:da:39:
                    81:c8:92:df:9c:a8:29:02:25:17:58:0a:e4:a8:e2:
                    00:7d:58:77:1f:ba:6e:93:c7:ce:c9:21:42:26:f4:
                    6f:dd:b8:7c:90:a1:62:93:26:db:d2:7c:a0:04:08:
                    75:06:32:c9:af:f3:60:de:50:7d:a1:28:68:79:9f:
                    f8:ed:03:7a:e5:c8:4d:16:ea:03:62:22:47:58:e6:
                    e9:42:81:af:d0:7c:4c:c4:4d:03:e1:f0:35:bb:bf:
                    9e:68:6a:15:66:1d:87:45:7c:a4:6d:2b:0d:9e:88:
                    88:65:68:66:96:e4:2d:3f:68:25:b5:79:e5:6f:98:
                    33:ec:b8:98:a9:98:b8:fe:48:b4:54:ec:cc:84:29:
                    95:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:8C:3D:DA:B8:BC:D2:A3:94:90:A3:FD:35:DE:E8:40:92:95:3D:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.crl

            X509v3 Authority Key Identifier:
                keyid:A6:B5:FC:79:B9:80:25:57:27:40:80:8D:9E:D3:E2:79:2F:31:75:F1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99a38aa9-eea9-4da3-9c7a-9ed1c2340b83.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:0d:9f:37:ab:da:f8:d7:29:44:72:a4:8b:14:38:97:91:0a:
         da:95:9f:d2:79:7a:ac:5e:04:bb:25:11:1c:52:92:d6:e3:51:
         56:dc:1a:c3:03:40:3e:bc:06:90:be:20:04:8f:d1:37:4e:18:
         50:11:d5:11:e5:e7:be:62:27:11:5b:d8:b3:7a:2e:e1:74:d9:
         c3:ab:bd:8f:be:58:d2:00:b0:84:86:6f:89:e5:f9:4c:1f:28:
         ef:5d:25:bd:5e:97:10:93:5e:cb:9e:85:fb:5b:6f:f4:7d:9d:
         54:18:40:55:82:68:82:7c:00:11:ae:57:64:63:8f:66:67:d3:
         0d:27:3a:ec:bd:12:31:ab:e2:0b:aa:44:d6:c5:b3:26:b4:a3:
         24:f4:b9:38:39:7f:9f:3c:af:4b:87:bb:16:8a:95:31:de:9e:
         3e:8d:e7:f6:93:9b:7d:56:22:28:5a:d9:d6:44:b1:0e:e2:df:
         e6:60:22:11:bd:32:5e:6c:9a:31:88:79:31:04:6a:c6:cb:28:
         06:30:bc:2c:d3:96:1d:19:a4:e3:f5:12:7e:ef:ad:2d:98:82:
         16:53:85:fb:40:85:86:a7:90:00:09:c0:17:98:87:17:79:9b:
         1d:31:2f:af:e2:e3:54:90:0c:d0:6e:f9:fe:b6:31:53:8f:47:
         68:50:b2:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:06 2025 by rpki-client on console.sobornost.net