Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
File:                     a31515c0-c04f-41e6-958d-172bcd0e21de.mft (raw, json)
Hash identifier:          xpmVw4UqcoYX456gBbJ4nfsidFWAt1UnQ9m540pTfg4=
Subject key identifier:   04:AF:3A:94:A0:CF:43:28:4D:D5:9C:D7:1F:52:10:1C:4A:AA:BC:9F
Authority key identifier: 34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95
Certificate issuer:       /CN=a31515c0-c04f-41e6-958d-172bcd0e21de
Certificate serial:       010D0C9F432858498374DA65B3B24EF45E348100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft
Manifest number:          010D0C9F43285843EB60BCA30CDA070F95EFC44E
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 15:00:00 +0000
Files and hashes:         1: 2906bf3c-c87c-3977-af6b-e43e53f00b4a.roa (hash: 5hTVDKcySGZUt0kpSqmqcvPVf0YGK2/VF9ZhuMZtSlI=)
                          2: a31515c0-c04f-41e6-958d-172bcd0e21de.crl (hash: 45yuJZSezxAOE5eeWY7kTnE0ugytxMjBmBrsw7eUgq0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:da:65:b3:b2:4e:f4:5e:34:81:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a31515c0-c04f-41e6-958d-172bcd0e21de
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 15 15:00:00 2025 GMT
        Subject: CN=8015bd96-212b-4080-852e-f48dca579ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:42:b3:7c:0d:4e:8e:5b:14:6d:dd:1e:99:02:
                    c2:d2:4d:ce:99:33:a5:7e:11:12:bd:dd:04:48:95:
                    24:f4:33:2a:8b:3c:a0:02:40:d0:8f:2f:1c:36:f0:
                    bb:c6:bf:02:61:ae:4d:0a:07:21:f1:46:b6:53:51:
                    a7:2a:5c:25:65:08:e4:59:cc:70:c4:3a:27:16:cc:
                    44:84:30:f0:df:50:9e:c3:92:ab:8e:5d:4f:7a:e0:
                    e6:46:58:9d:6f:ec:c2:34:dd:46:5c:15:16:c2:ee:
                    79:48:c9:d6:2e:11:bb:8b:d3:49:14:41:72:63:c7:
                    7b:ea:6e:0f:24:24:16:54:d2:63:a9:a7:c4:d6:ec:
                    5f:3e:f5:d0:ed:30:92:e4:af:00:3d:3a:76:b0:bf:
                    31:1f:99:35:96:dc:e4:0b:8f:e3:7b:cd:b7:2b:64:
                    0a:7a:20:f7:63:89:43:62:32:b3:1d:b5:bb:02:f9:
                    7a:aa:c3:dd:b1:d8:0e:2d:54:1a:a7:29:40:e3:5b:
                    16:72:f4:18:25:c3:eb:00:9c:03:8e:21:62:0d:af:
                    b8:ef:9a:71:06:11:d3:00:a1:d4:6f:90:1d:91:dc:
                    aa:23:39:14:d8:b1:90:ed:c9:f6:59:70:91:a6:1d:
                    ce:e5:d2:e6:8c:f0:7b:85:f6:f8:16:ea:d8:c7:f3:
                    c3:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:AF:3A:94:A0:CF:43:28:4D:D5:9C:D7:1F:52:10:1C:4A:AA:BC:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de/a31515c0-c04f-41e6-958d-172bcd0e21de.crl

            X509v3 Authority Key Identifier:
                keyid:34:10:05:DB:51:42:AA:4B:B7:E9:54:56:8D:D2:82:82:15:5C:F0:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a31515c0-c04f-41e6-958d-172bcd0e21de.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:1d:42:08:2d:cd:95:4f:31:0f:88:1d:f7:72:10:bc:de:6b:
         ac:ea:d3:fc:3a:af:ba:b6:5c:db:36:ea:b1:a8:eb:d1:28:08:
         4c:20:a2:16:f3:f2:77:75:5b:79:4c:91:fb:06:db:e8:f4:ee:
         57:00:b6:18:54:da:74:8a:94:b2:13:74:ce:cd:ba:78:57:79:
         ee:ed:ed:ff:bb:94:92:d7:cc:c5:f8:68:3d:ab:c8:d9:0b:9b:
         c8:45:47:87:3d:51:42:f9:f1:66:22:8b:c1:18:2d:d8:83:8d:
         cf:53:a0:07:11:b4:17:67:ad:91:55:c9:ce:cc:dd:12:91:c2:
         87:0c:29:71:57:ab:52:d0:2c:2c:28:d7:ec:34:08:59:11:b6:
         95:ef:70:f3:90:00:a9:6a:70:6c:42:05:ce:b5:2f:e9:a9:7f:
         3b:76:53:f8:dd:34:3a:ef:0a:15:b6:c4:39:a5:24:a2:ce:04:
         12:2e:48:5c:af:57:56:2d:30:ca:50:7a:aa:48:99:05:8c:a7:
         4c:66:41:00:38:d1:d2:b7:dc:43:03:0a:37:fc:9c:95:c4:72:
         e9:36:67:a9:52:da:50:86:43:c7:c8:da:b3:ea:2b:af:c2:b7:
         ad:33:f2:f6:ba:7e:51:9c:0e:27:4b:92:09:63:6f:4e:82:93:
         67:98:ee:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net