Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
File:                     bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft (raw, json)
Hash identifier:          iJXVszOAa+HkF8EKvkmGp33EdQtgIVrh3Aaz1WoXbgg=
Subject key identifier:   12:CF:DE:BB:C2:30:B9:13:E5:79:83:3A:C2:B4:05:A9:78:B8:87:88
Authority key identifier: 95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12
Certificate issuer:       /CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
Certificate serial:       010D0C9F432858498121432AA125B8A3153BFB00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft
Manifest number:          010D0C9F4328584073A822FBCDC0E3BE8107DF52
Signing time:             Sat 12 Apr 2025 19:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 19:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 19:00:00 +0000
Files and hashes:         1: 4b6d73da-18fa-3002-9862-6b1cb9d8de61.roa (hash: Gxz2OQXdiE35JIx0PTdtXLJHKv5bMihaXE+amoxJcUs=)
                          2: 69e7bb45-303a-3a64-b6aa-813f620b77b9.roa (hash: 6RBaCTPCt3OZKPtv0fGhe6A3d2Tg0K07Zk4dGsXM20w=)
                          3: bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl (hash: Mrr6yYyAMY1RJ05b7gNYihhsq5Xg0AdQ4azj25tu2nQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:21:43:2a:a1:25:b8:a3:15:3b:fb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bca48ad0-f613-4c66-b07a-6473d8a5aa26
        Validity
            Not Before: Apr 12 19:00:03 2025 GMT
            Not After : Apr 15 19:00:00 2025 GMT
        Subject: CN=d8a2a56a-ae54-48d5-9f6d-927c6843ca2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:27:03:13:4c:b9:2d:05:a6:0e:5e:42:f6:88:
                    cb:4f:56:07:3a:9d:e5:c8:01:b7:4a:2a:05:f5:98:
                    fd:b0:39:a3:fe:e5:86:85:bd:f6:66:bc:99:cc:23:
                    1e:c3:6c:38:1b:c5:e8:08:fd:f4:1b:8c:fc:da:47:
                    41:81:5e:cb:39:24:79:97:ac:7b:45:a9:3c:8c:5b:
                    92:16:49:6b:f0:8a:fe:6a:c3:88:b2:87:fa:67:f5:
                    ac:de:e4:53:c6:b4:eb:59:84:e8:18:43:4c:33:e3:
                    ea:2b:bf:8d:66:dc:e1:df:7b:9a:71:8a:99:a6:97:
                    c8:0a:85:fc:09:89:3f:82:28:2a:fd:dd:84:f7:86:
                    e2:2f:7c:32:df:20:f3:68:a7:d5:6c:6c:2e:78:31:
                    3b:7c:28:c0:62:15:30:19:ca:4e:3e:e0:29:b2:b6:
                    aa:d3:02:e2:47:5d:1d:01:04:64:a1:db:9e:1f:ca:
                    90:aa:da:70:3e:7f:f3:6e:21:eb:1c:8a:32:b7:c5:
                    77:b3:46:4e:74:27:ee:f0:b0:42:4d:51:e2:e0:c6:
                    9a:01:44:c9:4a:1a:74:d8:28:24:a1:76:7a:02:25:
                    0f:33:40:e9:78:57:60:e7:23:9a:a9:fa:e4:b6:ba:
                    53:28:75:45:62:b0:53:60:ed:67:8d:e8:07:62:6a:
                    f4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:CF:DE:BB:C2:30:B9:13:E5:79:83:3A:C2:B4:05:A9:78:B8:87:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26/bca48ad0-f613-4c66-b07a-6473d8a5aa26.crl

            X509v3 Authority Key Identifier:
                keyid:95:5B:53:3D:4E:AA:A3:E9:E0:E7:45:FD:FC:E6:48:59:27:4B:2D:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bca48ad0-f613-4c66-b07a-6473d8a5aa26.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:3f:ae:7c:e6:1a:3d:95:ee:95:57:a4:d0:7e:b2:49:98:54:
         74:36:a8:be:7f:ac:77:2c:80:12:02:6d:c1:33:f1:cb:c5:cd:
         15:51:99:8f:f6:41:7a:f8:2c:99:b3:a5:98:7d:e7:4a:38:1a:
         57:e9:cf:75:a9:e6:e3:b4:a4:ae:b1:c9:82:a6:4a:db:1f:61:
         53:a9:52:15:51:74:2f:e2:25:cd:e7:15:b3:84:33:5b:6d:a4:
         f6:41:34:9e:ca:0d:ff:0c:eb:5f:e5:6f:ec:b8:fa:9e:d6:a4:
         ee:fa:ba:ce:8a:e2:78:d8:c4:c7:1b:4b:c9:d7:bc:e3:fd:e1:
         2b:98:d3:b2:f0:2a:3c:83:27:3c:ee:06:27:36:0d:78:75:ef:
         74:78:c0:8a:ae:a5:cc:dd:38:9e:d4:7f:26:cf:0e:64:25:84:
         1d:6c:2c:9f:da:9e:6b:63:c8:23:5e:34:a1:8a:31:2d:79:03:
         93:d8:a3:6d:d0:57:cd:45:a0:bb:1b:76:84:16:56:d6:18:6e:
         75:d8:4b:e4:57:fe:0d:55:fa:6c:31:94:fe:40:09:3c:cc:ff:
         f9:63:30:62:eb:83:72:22:fb:6b:04:52:59:2d:ad:5e:72:97:
         d7:41:f7:a5:f4:0f:25:13:e8:c4:95:32:e5:4e:aa:59:b9:25:
         cf:70:c6:78
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBIUMqoSW4oxU7+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmNhNDhhZDAtZjYxMy00YzY2LWIwN2EtNjQ3M2Q4YTVh
YTI2MB4XDTI1MDQxMjE5MDAwM1oXDTI1MDQxNTE5MDAwMFowLzEtMCsGA1UEAxMk
ZDhhMmE1NmEtYWU1NC00OGQ1LTlmNmQtOTI3YzY4NDNjYTJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoScDE0y5LQWmDl5C9ojLT1YHOp3lyAG3SioF
9Zj9sDmj/uWGhb32ZryZzCMew2w4G8XoCP30G4z82kdBgV7LOSR5l6x7Rak8jFuS
Fklr8Ir+asOIsof6Z/Ws3uRTxrTrWYToGENMM+PqK7+NZtzh33uacYqZppfICoX8
CYk/gigq/d2E94biL3wy3yDzaKfVbGwueDE7fCjAYhUwGcpOPuApsraq0wLiR10d
AQRkodueH8qQqtpwPn/zbiHrHIoyt8V3s0ZOdCfu8LBCTVHi4MaaAUTJShp02Cgk
oXZ6AiUPM0DpeFdg5yOaqfrktrpTKHVFYrBTYO1njegHYmr0FwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFBLP3rvCMLkT5XmDOsK0Bal4uIeIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0
OGFkMC1mNjEzLTRjNjYtYjA3YS02NDczZDhhNWFhMjYvYmNhNDhhZDAtZjYxMy00
YzY2LWIwN2EtNjQ3M2Q4YTVhYTI2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmNhNDhhZDAtZjYxMy00YzY2LWIw
N2EtNjQ3M2Q4YTVhYTI2L2JjYTQ4YWQwLWY2MTMtNGM2Ni1iMDdhLTY0NzNkOGE1
YWEyNi5jcmwwHwYDVR0jBBgwFoAUlVtTPU6qo+ng50X9/OZIWSdLLRIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iY2E0OGFkMC1mNjEzLTRjNjYtYjA3YS02NDcz
ZDhhNWFhMjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAmP6585ho9le6VV6TQfrJJ
mFR0Nqi+f6x3LIASAm3BM/HLxc0VUZmP9kF6+CyZs6WYfedKOBpX6c91qebjtKSu
scmCpkrbH2FTqVIVUXQv4iXN5xWzhDNbbaT2QTSeyg3/DOtf5W/suPqe1qTu+rrO
iuJ42MTHG0vJ17zj/eErmNOy8Co8gyc87gYnNg14de90eMCKrqXM3Tie1H8mzw5k
JYQdbCyf2p5rY8gjXjShijEteQOT2KNt0FfNRaC7G3aEFlbWGG512EvkV/4NVfps
MZT+QAk8zP/5YzBi64NyIvtrBFJZLa1ecpfXQfel9A8lE+jElTLlTqpZuSXPcMZ4
-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:12 2025 by rpki-client on console.sobornost.net