Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft
File:                     a99f9d36-f970-481f-ae52-e74a6f8a7541.mft (raw, json)
Hash identifier:          3OBcljnP826db0ZM8VredbQbcEcxOKXpqo/l/SD3QrI=
Subject key identifier:   D9:D1:10:B8:EC:99:F1:31:45:69:44:85:50:6D:A5:8B:B5:60:13:98
Authority key identifier: BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B
Certificate issuer:       /CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
Certificate serial:       010D0C9F43285849824B145A2E154D79F250E400
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft
Manifest number:          010D0C9F43285844359F5DE769DB6B9B4EDE3CC4
Signing time:             Sun 13 Apr 2025 05:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 05:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 05:00:00 +0000
Files and hashes:         1: a99f9d36-f970-481f-ae52-e74a6f8a7541.crl (hash: q85CGwJpceAPgfko0vsCbeX0ji/J7VYO2z2NmGxDwDg=)
                          2: d03b1cff-ba5d-3add-8781-7211493b24dd.roa (hash: JVSF4aj86ZK2/l3YaAHDanpdUfd2ww7wSKwnhF9PMhs=)
                          3: ddd19d33-ef02-34c1-abd1-aef2904b7c52.roa (hash: we55nnEzae8A7u1wA9MU2gl9B+hjOEwemhx3daxEsiE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:4b:14:5a:2e:15:4d:79:f2:50:e4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a99f9d36-f970-481f-ae52-e74a6f8a7541
        Validity
            Not Before: Apr 13 05:00:07 2025 GMT
            Not After : Apr 16 05:00:00 2025 GMT
        Subject: CN=88739b9d-1622-42b7-b884-a03d70958673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:47:11:fe:f4:5e:2a:e8:97:5e:bc:f2:7e:52:
                    39:86:03:b9:15:e4:57:95:94:f8:2e:3b:34:7a:f5:
                    e6:ee:83:f4:f3:c5:d2:e8:00:05:65:b7:ee:49:54:
                    b4:cc:8f:41:c7:39:37:ec:76:00:cd:ba:8e:d2:57:
                    48:5e:57:31:6a:e6:9c:cf:bd:97:7c:d1:fe:6e:13:
                    70:be:57:00:0f:e5:fb:43:2b:08:4a:26:30:0b:b4:
                    e6:9e:9d:b6:da:a2:94:ff:a8:10:d3:be:0a:bb:9f:
                    ef:40:27:a9:7b:79:2d:2b:e9:b8:f1:d7:1a:54:da:
                    9a:71:1c:bd:d5:e1:86:ba:e7:1a:f2:b2:17:c5:ab:
                    09:92:58:5d:ba:0d:c3:66:e5:20:8d:8d:d1:18:ed:
                    30:54:eb:3f:96:65:b0:97:c7:ed:62:cc:3f:87:b7:
                    2d:18:a3:d5:b5:b4:67:93:f6:d9:19:5f:83:7e:d7:
                    aa:ae:95:c0:53:5a:6f:f4:70:47:4e:9b:7f:7d:2d:
                    5a:75:0c:e7:40:45:87:ea:f5:be:c4:e9:e6:ed:7b:
                    85:9b:8e:3f:eb:3d:3c:04:a5:4e:63:62:d3:41:ec:
                    79:d8:34:29:67:7e:78:bf:7e:ff:30:34:90:6e:f9:
                    40:ff:1a:57:4e:34:d8:35:f2:57:83:58:b2:4a:27:
                    c8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:D1:10:B8:EC:99:F1:31:45:69:44:85:50:6D:A5:8B:B5:60:13:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541/a99f9d36-f970-481f-ae52-e74a6f8a7541.crl

            X509v3 Authority Key Identifier:
                keyid:BC:C4:55:41:5B:83:B3:D0:6D:B9:F0:71:80:93:5B:B4:21:99:D3:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a99f9d36-f970-481f-ae52-e74a6f8a7541.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:8c:87:f0:45:98:97:0b:91:6f:1f:18:eb:61:1c:93:f0:6d:
         6e:30:d4:bd:45:0a:84:49:fb:9d:92:19:11:ad:33:0b:9c:01:
         a5:04:61:97:af:c8:d9:7a:d4:5b:df:ee:59:8e:98:8b:67:4f:
         2a:6d:b8:95:77:84:ca:54:43:15:56:34:ed:76:a9:51:64:25:
         af:7d:55:e5:29:f4:42:29:2b:8d:8c:04:a3:f0:30:c5:36:6c:
         bb:55:66:73:c6:19:4d:37:d2:3f:5e:5d:d1:32:01:31:5d:92:
         36:06:04:bd:93:51:45:9f:b5:4b:82:e5:eb:11:8d:da:2b:11:
         67:cf:fa:bf:90:37:29:fa:fe:a7:34:a9:b6:31:ed:56:a9:07:
         76:c8:0f:ff:ce:0f:1d:38:39:a4:3f:90:30:74:30:f3:bd:19:
         32:b4:ce:d9:b9:29:0c:6f:ee:54:c2:f6:4a:bf:a0:f6:f0:92:
         04:31:e7:fa:7f:b2:e1:fc:8b:1c:7b:5f:4e:44:f0:4a:bd:41:
         e2:f7:1c:65:d2:cb:d5:da:b6:47:a6:e0:91:ef:87:fe:14:43:
         bd:f2:b6:eb:95:2c:5e:1e:93:15:ed:de:95:b3:6a:8d:2b:f8:
         b3:b3:a9:43:fd:46:a9:95:b2:ba:2e:a8:f7:3d:e7:24:1f:6f:
         c3:7e:08:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:37 2025 by rpki-client on console.sobornost.net