Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
File:                     1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft (raw, json)
Hash identifier:          kTwNqmI4+dgQxdnvFJCFI4noOhPpqpPcxRJZcmShgbc=
Subject key identifier:   C5:D1:8B:20:9A:67:4F:77:28:5B:B3:4C:A4:5E:C7:3E:D4:63:11:9E
Authority key identifier: 41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19
Certificate issuer:       /CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
Certificate serial:       010D0C9F432858498103818DBBF0192DEAA58F80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft
Manifest number:          010D0C9F43285843E05EB28794942A68FF0AE451
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: 1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl (hash: 0ykYjqtA+3vluCP5DjL+9afxASDmxhsXW7zfNraqqp0=)
                          2: 2681e094-c5f0-376d-abe2-47d9d9497306.roa (hash: aHUluA9RTiwDdNAt1I3rQNoVluhcoB/+XWx8tzJP6yM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:81:8d:bb:f0:19:2d:ea:a5:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cfae3ba-0f53-428a-93d8-6885c64c1fd8
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=a5cec05e-45c9-48f9-bfa4-f4ebf59c936d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f2:17:df:76:fd:c3:c0:01:15:32:ef:1b:2a:
                    3f:08:d3:ba:20:14:81:aa:10:d1:76:17:a9:0a:14:
                    dd:1f:46:3f:85:87:bc:2e:27:27:24:4c:f2:f5:a6:
                    b3:37:89:fa:78:60:57:86:55:1c:4b:39:03:16:8e:
                    0a:28:9a:88:73:e6:af:bb:68:98:55:ad:3e:ea:f3:
                    b4:f3:98:92:93:ce:3f:a4:48:b5:f1:a3:62:6a:60:
                    dd:3f:a9:ac:08:67:cc:2d:85:b6:dc:88:b7:ad:15:
                    61:c9:67:9e:d4:8b:67:40:d3:c2:6c:3f:09:8d:98:
                    0e:bf:6b:b7:35:16:dc:be:19:ac:17:00:1d:58:bd:
                    b9:d9:0a:bf:16:06:10:96:ba:f5:c7:5e:61:e9:9f:
                    b8:29:f3:53:47:7c:1d:9d:81:ce:e9:da:aa:50:b4:
                    45:71:b8:4c:ba:4b:43:7f:4a:52:1d:c0:21:a0:4c:
                    41:1e:2f:dd:1d:92:b3:e7:97:38:e2:ca:99:9c:89:
                    84:f2:d0:d6:52:89:f3:c1:4f:75:f2:df:48:b4:f1:
                    2a:1d:11:4c:c7:8f:64:17:20:d8:93:5e:dd:a2:02:
                    70:18:1c:cb:3c:49:46:48:ee:bc:63:a9:51:81:73:
                    dc:03:2a:b5:08:72:93:27:0c:a7:2e:0e:70:2c:e1:
                    9e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:D1:8B:20:9A:67:4F:77:28:5B:B3:4C:A4:5E:C7:3E:D4:63:11:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.crl

            X509v3 Authority Key Identifier:
                keyid:41:1E:04:61:12:96:D0:AD:5A:D3:F3:EC:9E:91:3C:E7:F3:1D:22:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1cfae3ba-0f53-428a-93d8-6885c64c1fd8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:42:64:14:85:47:4b:c1:00:ff:8e:c4:8a:b6:73:1a:57:95:
         f0:31:8c:5a:ae:f0:df:c7:ef:a2:31:c4:e8:25:16:1e:fe:b0:
         b3:1d:75:f4:ba:93:f0:c9:a2:82:3d:8d:55:9c:c9:55:ec:f6:
         75:3a:b5:02:ae:86:b8:f2:f9:d9:c7:b1:d1:99:84:e8:b7:8b:
         ec:a3:37:81:78:fd:86:26:38:b3:c6:28:2f:19:a1:ee:fa:a7:
         82:89:46:dc:4d:42:76:50:1f:bd:71:3f:f1:64:5f:6f:bf:8c:
         20:6a:72:ad:cd:7d:02:c3:0d:b1:66:e9:83:8d:1b:0f:8e:51:
         cd:f1:87:4a:fc:da:d4:f2:80:e5:14:44:50:b8:5e:8c:d2:74:
         2b:39:0c:e7:eb:12:99:2f:3d:f1:5d:23:50:4d:12:16:bd:a0:
         e7:8f:f8:79:8b:61:00:62:f7:cd:0d:34:c6:60:0d:40:e4:cc:
         e1:13:95:8d:1a:5d:a1:13:ef:db:d9:28:7f:6a:25:76:41:4d:
         c7:ed:24:e7:5a:86:86:d7:ca:e2:08:f1:6c:3c:5b:bc:3c:b2:
         3f:70:98:f4:48:51:d5:33:7c:39:e4:56:0c:09:54:53:ca:10:
         0a:aa:ee:a4:b7:da:8e:a9:5e:bb:8a:10:cc:ec:b6:a4:0b:6b:
         b9:bb:4f:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net