Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
File:                     a04b5188-7d31-4ad3-8474-090b809c8408.mft (raw, json)
Hash identifier:          dkkT/ChgdvYuZh/UFiaXbUd2q0+lVB1wBLMAcuw9MHo=
Subject key identifier:   95:4C:D3:32:6F:C2:ED:5F:F2:ED:EB:F5:F3:83:1F:C0:AD:AF:DE:A2
Authority key identifier: B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0
Certificate issuer:       /CN=a04b5188-7d31-4ad3-8474-090b809c8408
Certificate serial:       010D0C9F43285849831B8415958C686036681180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft
Manifest number:          010D0C9F432858439CCF59387CA45DDA152B28EA
Signing time:             Sun 13 Apr 2025 12:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 12:00:00 +0000
Files and hashes:         1: a04b5188-7d31-4ad3-8474-090b809c8408.crl (hash: 0L+va/nGm9qkSMtZwhKR4zw5Y5HhKKYVVEAqf7k045g=)
                          2: db950819-2bed-3fee-879b-ea294d2abbe5.roa (hash: 2NfVqkwkqqojnpAIMKxFmRBqrnP3w8vDqsiPls0Ipqk=)
                          3: f2d37b6c-01db-38f2-a7d6-c2e13f7c3ca3.roa (hash: rpu6ZotgqErzffrr6wua2D80LWeyPGV5KhCbU5q1490=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:1b:84:15:95:8c:68:60:36:68:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a04b5188-7d31-4ad3-8474-090b809c8408
        Validity
            Not Before: Apr 13 12:00:07 2025 GMT
            Not After : Apr 15 12:00:00 2025 GMT
        Subject: CN=f01b8ddd-048a-4e39-ba3e-754eda8af4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:50:02:b8:fb:51:2f:a7:39:22:fb:28:4f:25:
                    3c:83:34:30:b7:15:11:92:c9:ee:2c:60:83:15:81:
                    06:12:42:c3:66:17:61:8e:7c:3a:29:28:7e:75:18:
                    eb:2e:4d:15:f0:de:0b:bf:e6:7d:cb:fc:5c:e9:6a:
                    a7:0f:3b:b4:ac:9e:a0:00:50:c5:b0:cd:4b:00:9f:
                    d3:f7:ab:c0:63:e9:9a:c4:2a:fb:d7:e5:3e:e4:35:
                    2a:d5:f7:3a:1b:c3:e1:2c:c5:cc:84:b9:de:eb:26:
                    14:e0:cc:12:5a:be:ea:5e:9a:79:87:90:dd:ed:9d:
                    30:09:cc:5f:1a:6e:42:c9:3c:88:65:b3:08:ca:a5:
                    81:42:f0:78:4f:ef:5c:90:46:bd:ae:cf:8e:31:99:
                    71:a6:ee:46:d2:e8:d9:98:87:4c:1f:6a:65:90:0f:
                    f3:e5:dd:f4:f4:2c:44:14:b7:9d:a8:20:07:db:7c:
                    fb:8b:9b:14:6c:5c:7f:88:d2:3a:a4:97:f2:33:23:
                    ee:e0:b0:33:f8:6f:50:9f:bf:71:ce:03:67:d3:5a:
                    f3:a5:50:96:ee:a8:f9:68:9e:18:52:96:bf:63:23:
                    a5:ec:70:42:6a:f9:f2:4c:bf:93:ba:f0:ee:61:16:
                    3b:03:84:e6:0b:87:d0:78:a5:9f:58:2a:9d:26:3d:
                    c8:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:4C:D3:32:6F:C2:ED:5F:F2:ED:EB:F5:F3:83:1F:C0:AD:AF:DE:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408/a04b5188-7d31-4ad3-8474-090b809c8408.crl

            X509v3 Authority Key Identifier:
                keyid:B0:18:60:2E:01:71:DA:52:1B:53:D3:C1:02:21:0A:C9:43:3C:F8:B0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a04b5188-7d31-4ad3-8474-090b809c8408.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a9:af:6f:2a:4b:13:98:62:c2:82:22:98:5f:b3:c8:f7:f6:
         ba:28:5a:ee:5b:ca:43:c8:25:d9:4a:8a:ad:1f:6c:27:0b:d3:
         2e:b8:5a:85:c9:0f:68:0a:d3:32:d2:c4:93:47:cb:06:4f:9b:
         d3:4c:e4:a4:5d:d7:1e:45:f3:04:47:39:da:a2:17:ff:ca:f1:
         1d:90:72:af:50:93:c4:a4:b1:7e:d2:25:25:1d:7c:7e:32:27:
         74:7b:9f:b5:08:2d:b4:c1:7a:ec:f0:7f:3b:94:5a:2c:3b:9a:
         64:fa:34:31:f8:1f:fd:7b:78:08:a3:1e:4e:47:9f:43:94:26:
         b9:6e:25:cb:f0:b3:4d:15:e2:fa:9f:3b:17:2f:19:10:2a:79:
         44:f1:9b:db:d4:38:2a:48:8c:d8:0b:e5:29:81:8d:45:e7:de:
         87:66:10:7c:70:b0:3a:80:4a:25:94:53:8a:2a:29:57:91:20:
         de:88:25:e4:83:01:51:92:ca:9b:8a:56:37:84:60:90:26:84:
         3f:7b:a0:d4:e6:65:d9:8a:c5:a9:15:0f:d8:b7:03:e9:5a:5f:
         98:2c:b3:b0:e3:4e:f0:ec:4b:44:ab:f4:d8:83:da:4e:f1:e8:
         16:9a:13:01:4a:9d:7f:67:ff:e3:2b:00:95:25:69:bd:cc:8f:
         f1:f2:86:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net