Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
File:                     ac870f3e-b014-4387-bb59-63f4192b5665.mft (raw, json)
Hash identifier:          iignZVHji7WuOW2/k51p0hhzneKysOwLdSr81J/1JgE=
Subject key identifier:   C3:B0:A7:0D:A3:34:12:F6:89:D9:E5:97:1F:8C:6B:EC:80:31:C5:D8
Authority key identifier: AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6
Certificate issuer:       /CN=ac870f3e-b014-4387-bb59-63f4192b5665
Certificate serial:       010D0C9F4328584981D3F42D192B30C3352BC980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft
Manifest number:          010D0C9F43285843C5670C91ACAFC11981795A1B
Signing time:             Sun 13 Apr 2025 01:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 01:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 01:00:00 +0000
Files and hashes:         1: 5fe237b2-f5a5-3dfd-b09a-589bda76baca.roa (hash: 6aeyeQh102WgsRS4WSWktN/Gu9HbyXUHARzAZcPorHg=)
                          2: ac870f3e-b014-4387-bb59-63f4192b5665.crl (hash: whVxP3n1GnjFAKiOQpL2lU4AXNup5Wo4AtQXIn7idxM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:d3:f4:2d:19:2b:30:c3:35:2b:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac870f3e-b014-4387-bb59-63f4192b5665
        Validity
            Not Before: Apr 13 01:00:07 2025 GMT
            Not After : Apr 16 01:00:00 2025 GMT
        Subject: CN=a8be9aba-b769-4c27-9570-46ed4b676809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e5:59:f3:32:a6:a7:b0:d6:65:91:bd:df:37:
                    05:eb:a2:03:83:d8:cb:ff:3f:f9:b8:bf:bb:e0:cc:
                    95:08:35:e8:aa:44:dc:28:22:b6:15:67:08:36:a2:
                    d3:b5:74:c6:f1:35:2c:7b:f6:80:0d:cc:d9:81:f7:
                    b6:8f:4b:e9:cf:43:63:2b:91:11:83:3c:13:2c:34:
                    73:d5:46:f7:e4:1d:9b:fe:85:10:ee:00:6c:77:cd:
                    f2:26:cf:7c:bb:6c:55:01:e1:02:b8:67:5d:20:95:
                    42:78:c6:45:c9:70:7d:af:d7:ae:f0:57:1e:34:60:
                    26:07:5d:d0:c3:98:13:45:87:21:bb:e9:d8:71:dc:
                    f4:e2:1d:ee:ce:a1:8b:df:9c:d6:c8:b7:2a:27:2e:
                    f0:d3:44:3a:6f:12:f4:8f:52:00:46:7e:6f:e8:cc:
                    b3:44:76:c8:a8:a0:99:78:f1:6d:20:34:8f:c8:0d:
                    de:01:0e:f6:b0:01:71:89:25:05:76:52:37:bd:93:
                    cd:ad:f5:9d:f5:26:2c:0c:ad:20:8b:16:89:f9:68:
                    e6:9f:85:58:93:2b:fe:fd:3a:ef:99:e8:07:3a:c4:
                    d5:73:d9:4a:6c:7a:a3:93:74:95:b0:b1:8f:bc:a6:
                    99:5c:8e:4d:6f:9e:26:4c:73:ac:cd:2e:1a:bc:9a:
                    fc:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B0:A7:0D:A3:34:12:F6:89:D9:E5:97:1F:8C:6B:EC:80:31:C5:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665/ac870f3e-b014-4387-bb59-63f4192b5665.crl

            X509v3 Authority Key Identifier:
                keyid:AF:EC:1A:43:17:16:55:FD:C0:A8:F8:4B:A8:5C:40:F8:E5:1E:89:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/ac870f3e-b014-4387-bb59-63f4192b5665.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:11:51:ad:f7:37:fe:d1:fd:d0:5b:75:30:01:1c:bc:ae:2a:
         25:7d:c2:6e:95:40:e3:20:ad:74:65:ff:72:d1:f9:33:fb:92:
         c5:dd:7b:93:51:19:8a:60:57:65:c7:40:04:4a:82:8e:d3:15:
         f0:24:74:02:11:fb:6f:66:0a:b2:0f:af:92:2f:1a:e8:52:76:
         1b:6f:f6:a4:df:af:45:55:6b:e5:23:54:78:e7:7f:9c:ac:20:
         bc:ff:60:85:db:4f:97:30:af:5d:e3:64:0b:3f:51:6b:b4:ed:
         d6:be:d4:2c:0a:5b:3c:b0:11:cf:59:7c:c8:e6:04:ba:c2:18:
         7f:70:f0:4d:12:8b:14:db:b3:4b:52:c0:3d:ca:47:cf:39:d3:
         96:da:33:c2:73:94:ad:7f:09:1f:d3:12:22:03:ad:41:1d:58:
         ae:9b:09:36:a5:24:d7:91:33:a1:39:1c:f5:21:61:79:49:e1:
         40:f9:00:68:6d:a6:66:67:e1:6f:70:1a:80:1b:38:ce:13:13:
         bb:4e:c5:fe:83:f9:3b:d0:db:75:89:f0:e1:14:e3:28:f0:ab:
         ca:33:13:d4:b8:03:82:a4:1d:7f:49:b9:41:03:43:ff:63:71:
         bb:19:e2:5f:75:71:f9:f5:40:8a:b6:2c:a6:a9:0a:c5:74:59:
         a3:14:3f:37
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmB0/QtGSswwzUryYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWM4NzBmM2UtYjAxNC00Mzg3LWJiNTktNjNmNDE5MmI1
NjY1MB4XDTI1MDQxMzAxMDAwN1oXDTI1MDQxNjAxMDAwMFowLzEtMCsGA1UEAxMk
YThiZTlhYmEtYjc2OS00YzI3LTk1NzAtNDZlZDRiNjc2ODA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAheVZ8zKmp7DWZZG93zcF66IDg9jL/z/5uL+7
4MyVCDXoqkTcKCK2FWcINqLTtXTG8TUse/aADczZgfe2j0vpz0NjK5ERgzwTLDRz
1Ub35B2b/oUQ7gBsd83yJs98u2xVAeECuGddIJVCeMZFyXB9r9eu8FceNGAmB13Q
w5gTRYchu+nYcdz04h3uzqGL35zWyLcqJy7w00Q6bxL0j1IARn5v6MyzRHbIqKCZ
ePFtIDSPyA3eAQ72sAFxiSUFdlI3vZPNrfWd9SYsDK0gixaJ+Wjmn4VYkyv+/Trv
megHOsTVc9lKbHqjk3SVsLGPvKaZXI5Nb54mTHOszS4avJr8JQIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMOwpw2jNBL2idnllx+Ma+yAMcXYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3
MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0MTkyYjU2NjUvYWM4NzBmM2UtYjAxNC00
Mzg3LWJiNTktNjNmNDE5MmI1NjY1Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYWM4NzBmM2UtYjAxNC00Mzg3LWJi
NTktNjNmNDE5MmI1NjY1L2FjODcwZjNlLWIwMTQtNDM4Ny1iYjU5LTYzZjQxOTJi
NTY2NS5jcmwwHwYDVR0jBBgwFoAUr+waQxcWVf3AqPhLqFxA+OUeicYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hYzg3MGYzZS1iMDE0LTQzODctYmI1OS02M2Y0
MTkyYjU2NjUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQBhEVGt9zf+0f3QW3UwARy8
riolfcJulUDjIK10Zf9y0fkz+5LF3XuTURmKYFdlx0AESoKO0xXwJHQCEftvZgqy
D6+SLxroUnYbb/ak369FVWvlI1R453+crCC8/2CF20+XMK9d42QLP1FrtO3WvtQs
Cls8sBHPWXzI5gS6whh/cPBNEosU27NLUsA9ykfPOdOW2jPCc5Stfwkf0xIiA61B
HViumwk2pSTXkTOhORz1IWF5SeFA+QBobaZmZ+FvcBqAGzjOExO7TsX+g/k70Nt1
ifDhFOMo8KvKMxPUuAOCpB1/SblBA0P/Y3G7GeJfdXH59UCKtiymqQrFdFmjFD83
-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net