Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
File:                     2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft (raw, json)
Hash identifier:          1ydw0Jrlblcxd0nOZQmGjznC/6W98tL1crjyhkNX+oI=
Subject key identifier:   96:F3:72:D2:C2:40:6E:EB:BA:BD:B3:D0:90:7C:0E:0E:88:E6:80:7B
Authority key identifier: 2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C
Certificate issuer:       /CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
Certificate serial:       010D0C9F43285849815CDABE06B0FEA477D51840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft
Manifest number:          010D0C9F432858443763028D2974FCB784FD2931
Signing time:             Sat 12 Apr 2025 21:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 21:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 21:00:00 +0000
Files and hashes:         1: 2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl (hash: n7nqZAhJbe7/RJ/8xg55XmOYk2+YaIEMU0pEjN/6/gU=)
                          2: ce7a6a85-3400-3e97-a6b6-62644fe2fca4.roa (hash: 7M4zY4jjLQ09T7I8sJnevlE5k9D0MsHyX0ijeAWKPII=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:5c:da:be:06:b0:fe:a4:77:d5:18:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2aa49d03-db4a-4804-82dc-fc2c0fdb94e8
        Validity
            Not Before: Apr 12 21:00:07 2025 GMT
            Not After : Apr 14 21:00:00 2025 GMT
        Subject: CN=b6ce55c4-1400-42c1-a77f-ba5c8507659d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2b:4b:05:90:d2:50:7c:32:f8:c2:fd:37:46:
                    52:f8:d4:6c:6e:21:46:e9:f4:3d:6c:42:c5:4d:4d:
                    b4:63:d3:ca:fe:c8:db:7c:5b:17:01:1b:d3:d7:c3:
                    a3:2b:a6:84:ae:d1:4f:e7:6a:ee:54:c6:84:5e:a8:
                    be:01:a0:93:2d:d6:18:64:fc:34:1a:db:71:10:af:
                    cb:3a:e4:ff:b3:0e:0e:c7:bb:12:fa:cd:ce:2e:19:
                    4b:8b:eb:cd:c9:54:01:11:2d:95:fc:fc:52:03:0f:
                    e1:c4:8c:09:19:42:8d:75:0b:f7:e0:8e:7f:bb:51:
                    a3:10:54:16:4b:fd:b0:84:46:97:b4:71:1d:33:a6:
                    f5:29:f5:99:cc:63:2c:e9:0a:9e:8d:ec:a0:0b:5e:
                    01:c2:92:7d:db:e4:29:c0:a8:02:2d:81:3e:f9:45:
                    ac:53:e3:2f:75:0f:b3:fc:f5:f4:84:1b:8a:48:71:
                    08:8b:90:b4:58:1f:7a:da:97:35:86:4e:44:62:ff:
                    34:a0:9e:23:31:fd:f1:40:96:a0:04:bf:89:de:9a:
                    28:8a:b5:e1:c0:07:59:0f:fd:4f:70:34:9e:71:dd:
                    59:2c:66:69:33:75:dd:a8:91:1f:d3:e8:f2:c2:45:
                    8d:29:5e:f8:33:94:73:7c:5b:a6:4d:dc:b5:08:10:
                    f2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:F3:72:D2:C2:40:6E:EB:BA:BD:B3:D0:90:7C:0E:0E:88:E6:80:7B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.crl

            X509v3 Authority Key Identifier:
                keyid:2F:81:83:F2:A8:61:24:55:A8:AD:5D:BA:D3:85:A9:C6:E5:F3:28:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2aa49d03-db4a-4804-82dc-fc2c0fdb94e8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:a6:3a:af:b6:18:c2:8e:f0:52:56:ef:42:38:ec:f7:f0:91:
         5b:fb:88:ec:1f:17:d9:a2:8e:13:8f:6b:68:6c:da:6d:9f:16:
         29:73:dd:4d:59:80:a5:19:ed:c4:09:41:10:82:0a:ff:57:dc:
         8a:51:e2:27:e9:06:eb:f8:86:ee:1c:92:c0:6a:9f:ee:38:f3:
         16:41:dd:8f:1d:00:db:bf:50:3f:d7:40:3e:1c:02:f4:64:8d:
         63:9c:59:a8:7a:36:dc:a7:f0:c7:69:eb:e0:95:16:47:da:2d:
         76:c7:55:3d:7d:32:1f:62:02:6d:d8:2d:f3:a1:f8:2c:17:10:
         85:4d:b7:13:56:5d:69:9c:37:28:ce:3b:bb:75:be:fc:05:a1:
         77:86:6b:d3:fe:d7:ce:12:dc:26:2e:21:88:51:ac:73:d8:83:
         a6:62:aa:45:a6:7c:c9:85:4b:9a:c9:e5:7e:a7:12:6e:31:d1:
         3a:2f:b2:b4:ff:42:89:39:6f:1d:f9:51:ff:0d:aa:7f:2b:89:
         60:ab:87:ea:de:04:45:3b:f3:9d:de:11:ff:05:99:c1:0a:79:
         d1:77:71:5f:e8:5d:89:ec:a1:79:9c:6c:4b:0e:eb:8d:a1:2a:
         ec:d6:fe:c3:ee:39:d2:10:cd:cb:5b:1d:3b:94:52:8d:54:64:
         b3:5e:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:35 2025 by rpki-client on console.sobornost.net