Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft
File:                     2a093e3f-1d9b-4e68-9317-1de77daf9698.mft (raw, json)
Hash identifier:          WIoZuD9/1YEAzG2wDPmQjQOGlDYPgQ7BICT+Df9Xk+c=
Subject key identifier:   05:F5:84:85:33:B2:39:21:E5:8F:17:05:B7:24:C5:A5:0F:37:B9:E7
Authority key identifier: C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77
Certificate issuer:       /CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
Certificate serial:       010D0C9F43285849819867102E34EF9ADD826500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft
Manifest number:          010D0C9F43285843E9795D6A0F89BC0E7A98B616
Signing time:             Sat 12 Apr 2025 23:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 23:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 23:00:00 +0000
Files and hashes:         1: 2a093e3f-1d9b-4e68-9317-1de77daf9698.crl (hash: aKmEH+1rGua7+x1NHzHYnmjsVYnD1bbfcH4tPovPMnA=)
                          2: 4a053d94-f778-3cf3-98a9-c6ea0a32091f.roa (hash: yWLm/fDqWiAlt0JWyX02c66FLvzXOouDTrl1OlMj5vw=)
                          3: ef3392a6-ef96-3774-8bd4-9944157036c5.roa (hash: vzBz9vXPG/xNLSu844zqahCOhQb4pOvQL2NlnBiGG5I=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:98:67:10:2e:34:ef:9a:dd:82:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a093e3f-1d9b-4e68-9317-1de77daf9698
        Validity
            Not Before: Apr 12 23:00:07 2025 GMT
            Not After : Apr 14 23:00:00 2025 GMT
        Subject: CN=775a9610-2dcb-43d1-901e-48834ddbadf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e6:05:83:4a:4b:b8:6d:86:1d:6f:a3:c7:f8:
                    52:a2:fa:8f:ef:c9:80:9c:c4:f5:6b:79:98:13:e2:
                    b9:2c:1a:1b:37:04:9f:cc:60:f5:cd:21:94:73:b8:
                    51:db:02:d3:97:d0:be:da:92:2c:f0:d7:cb:a1:a3:
                    bc:0c:15:d9:87:ce:b4:44:2b:e9:d4:cb:23:a4:80:
                    ee:7d:20:81:4d:51:1f:b3:96:9d:88:33:3b:df:79:
                    06:46:d0:e4:bd:12:3e:3f:5e:77:90:a6:df:7a:7a:
                    dc:fc:25:62:16:21:cd:94:2e:e9:f1:00:a6:a5:e6:
                    fa:d0:97:4b:f4:5a:a4:b1:be:62:ee:0e:bb:79:1c:
                    6a:10:08:07:9d:a8:21:df:64:7f:40:44:0f:00:15:
                    b6:92:0f:6e:78:48:2a:4c:24:b4:be:45:4b:08:17:
                    1f:62:e2:4a:a3:f5:06:c4:06:23:fa:ab:07:86:8c:
                    90:95:3a:7a:df:90:1c:a3:3c:2a:9d:b0:6c:05:40:
                    42:68:4a:cc:90:c9:8f:03:4c:07:0a:08:8d:87:05:
                    bb:8c:87:4e:d5:19:7e:f2:cd:c5:d8:27:52:17:ac:
                    f5:50:12:f6:0d:f1:fe:1f:aa:82:6a:be:5b:3b:4c:
                    2b:26:7a:a3:72:d3:bc:2f:51:13:f6:a3:d2:c2:8e:
                    d5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F5:84:85:33:B2:39:21:E5:8F:17:05:B7:24:C5:A5:0F:37:B9:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698/2a093e3f-1d9b-4e68-9317-1de77daf9698.crl

            X509v3 Authority Key Identifier:
                keyid:C7:0D:B9:10:59:F5:11:FC:55:91:52:6C:72:82:C1:EA:45:45:A7:77

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2a093e3f-1d9b-4e68-9317-1de77daf9698.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:7a:d0:ed:50:d8:26:f5:c3:82:40:b9:13:da:94:d9:d1:b9:
         df:20:c1:2b:34:04:e4:1e:3c:04:91:eb:5b:0c:93:ed:e1:97:
         4b:35:8a:34:e9:8b:4d:63:c3:cf:6d:44:36:49:0b:35:56:b0:
         1c:11:ae:fc:ed:9d:f1:81:af:a6:9f:82:77:4d:e2:11:8c:3a:
         07:c1:1d:c7:88:49:d5:93:8e:91:2c:a5:d1:0b:1a:e4:ba:d5:
         3b:8b:28:d5:ed:14:65:0a:88:95:ae:e3:c4:e0:cf:e9:f3:18:
         20:0e:a4:80:96:12:3f:90:bc:04:bb:d4:67:13:47:86:85:87:
         2e:e3:02:f1:db:da:5c:70:49:75:02:5e:f5:63:25:4c:8f:45:
         f1:34:8e:6c:0c:12:c6:a0:cd:63:f6:fb:4b:ca:e9:86:15:2b:
         87:40:a8:61:22:4b:61:59:a8:20:b3:cd:1e:ff:e2:e5:29:46:
         6b:80:c3:95:a7:bc:1e:46:9b:c1:35:d8:40:cd:73:96:13:2f:
         c8:4d:8d:80:17:b1:8a:63:94:de:b5:c0:0c:1b:7a:e3:74:5e:
         d4:96:c5:43:23:fd:ea:b5:54:b0:3d:cc:97:0a:b7:ef:35:a1:
         3e:3a:f9:0a:25:c0:07:81:24:b2:74:07:c0:22:9c:94:52:52:
         b8:9f:02:1e
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBmGcQLjTvmt2CZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEwOTNlM2YtMWQ5Yi00ZTY4LTkzMTctMWRlNzdkYWY5
Njk4MB4XDTI1MDQxMjIzMDAwN1oXDTI1MDQxNDIzMDAwMFowLzEtMCsGA1UEAxMk
Nzc1YTk2MTAtMmRjYi00M2QxLTkwMWUtNDg4MzRkZGJhZGYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuYFg0pLuG2GHW+jx/hSovqP78mAnMT1a3mY
E+K5LBobNwSfzGD1zSGUc7hR2wLTl9C+2pIs8NfLoaO8DBXZh860RCvp1MsjpIDu
fSCBTVEfs5adiDM733kGRtDkvRI+P153kKbfenrc/CViFiHNlC7p8QCmpeb60JdL
9Fqksb5i7g67eRxqEAgHnagh32R/QEQPABW2kg9ueEgqTCS0vkVLCBcfYuJKo/UG
xAYj+qsHhoyQlTp635AcozwqnbBsBUBCaErMkMmPA0wHCgiNhwW7jIdO1Rl+8s3F
2CdSF6z1UBL2DfH+H6qCar5bO0wrJnqjctO8L1ET9qPSwo7VQwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFAX1hIUzsjkh5Y8XBbckxaUPN7nnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5
M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3N2RhZjk2OTgvMmEwOTNlM2YtMWQ5Yi00
ZTY4LTkzMTctMWRlNzdkYWY5Njk4Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmEwOTNlM2YtMWQ5Yi00ZTY4LTkz
MTctMWRlNzdkYWY5Njk4LzJhMDkzZTNmLTFkOWItNGU2OC05MzE3LTFkZTc3ZGFm
OTY5OC5jcmwwHwYDVR0jBBgwFoAUxw25EFn1EfxVkVJscoLB6kVFp3cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yYTA5M2UzZi0xZDliLTRlNjgtOTMxNy0xZGU3
N2RhZjk2OTguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAEetDtUNgm9cOCQLkT2pTZ
0bnfIMErNATkHjwEketbDJPt4ZdLNYo06YtNY8PPbUQ2SQs1VrAcEa787Z3xga+m
n4J3TeIRjDoHwR3HiEnVk46RLKXRCxrkutU7iyjV7RRlCoiVruPE4M/p8xggDqSA
lhI/kLwEu9RnE0eGhYcu4wLx29pccEl1Al71YyVMj0XxNI5sDBLGoM1j9vtLyumG
FSuHQKhhIkthWaggs80e/+LlKUZrgMOVp7weRpvBNdhAzXOWEy/ITY2AF7GKY5Te
tcAMG3rjdF7UlsVDI/3qtVSwPcyXCrfvNaE+OvkKJcAHgSSydAfAIpyUUlK4nwIe
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net