Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft
File:                     be7d7ab4-136a-4b57-94de-4d26121783f3.mft (raw, json)
Hash identifier:          ivZmz4Ha8EEEDAdBqLmJqh1QOH5QqF3crrVNFgEtnRg=
Subject key identifier:   C5:F3:E1:31:B8:4B:8C:63:3F:59:C1:D0:05:D8:CD:8E:31:EB:E2:8E
Authority key identifier: AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65
Certificate issuer:       /CN=be7d7ab4-136a-4b57-94de-4d26121783f3
Certificate serial:       010D0C9F43285849810382257985E5C11F291B50
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft
Manifest number:          010D0C9F432858442E89DBBF38A1D9FE5E632054
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: be7d7ab4-136a-4b57-94de-4d26121783f3.crl (hash: TaXrj8i9iO7x+fv7lonUfdT1RX0OT97R4kGtuhuy7dQ=)
                          2: e6928b91-ec45-395d-bbfe-e24a6348592f.roa (hash: gP28M8J20aL5hdBq2oy1h7g7a+ratX3kLI1apZWxzaM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:82:25:79:85:e5:c1:1f:29:1b:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=be7d7ab4-136a-4b57-94de-4d26121783f3
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=8850362c-9bb2-4f5d-8d1b-818064b70e41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:12:fd:af:dd:bb:24:c5:c9:77:e6:ee:f4:
                    61:cc:75:81:40:70:79:69:3f:1c:f1:08:4f:bc:b7:
                    27:b7:60:59:d0:fa:4d:be:58:32:10:5a:67:fb:7e:
                    b3:07:03:02:8e:17:9e:87:c3:7c:89:ca:be:94:ba:
                    77:1f:7f:2a:ef:c7:88:3d:c0:da:cf:a2:29:09:74:
                    3a:19:21:a3:a9:07:da:80:cd:b6:9e:7b:99:68:71:
                    c5:14:80:bf:60:86:4e:36:5a:6d:7b:f7:ed:a9:a8:
                    9e:03:b2:64:65:59:45:5b:cb:d5:ee:ab:44:6f:20:
                    aa:1c:38:3c:e5:b4:86:ba:fb:9a:3d:ba:95:b4:90:
                    22:95:e9:3b:e1:11:08:ac:80:b8:aa:40:6b:87:f7:
                    2d:ba:03:9c:17:08:96:c3:e6:bf:94:c1:21:31:cd:
                    ad:d8:df:41:d2:dc:dd:45:25:54:b3:4e:0e:02:c9:
                    c3:14:aa:30:43:cf:fc:b9:6f:91:81:f0:68:c3:5d:
                    d4:8a:72:8f:c4:b2:1b:1e:94:d8:50:11:0d:1f:a6:
                    17:d0:f7:4f:7a:b1:25:e6:ec:bc:fb:2c:9e:da:a1:
                    c2:68:48:d3:c3:9f:bc:31:7a:82:8b:c1:7f:7b:d5:
                    bb:17:6c:18:3e:b9:41:be:de:bf:8a:33:04:9d:98:
                    8b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:F3:E1:31:B8:4B:8C:63:3F:59:C1:D0:05:D8:CD:8E:31:EB:E2:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3/be7d7ab4-136a-4b57-94de-4d26121783f3.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:AA:9B:68:F3:00:6B:A6:83:5A:D3:93:07:D5:25:AA:84:6C:65

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/be7d7ab4-136a-4b57-94de-4d26121783f3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:0b:b0:17:6e:1a:4d:ad:78:26:0d:ab:05:00:2d:4c:5d:b1:
         05:b2:31:b7:23:a8:eb:17:1d:ef:6f:6a:cf:93:ee:52:33:10:
         89:b2:75:0d:5b:f8:6a:42:02:7f:de:cd:3d:11:3e:3b:8d:67:
         0b:1a:75:6f:91:a2:85:8f:cb:e2:42:e5:42:bc:5c:14:2b:fd:
         73:ab:78:5b:03:f4:cf:27:a3:34:c9:ea:a5:e4:8d:62:ec:a4:
         07:a6:10:89:b0:0d:26:09:15:99:3d:8a:9a:03:4f:d1:c2:5f:
         00:f4:e1:c7:f1:20:51:67:30:81:48:e6:fa:6c:bc:c8:41:9a:
         09:99:9b:6a:eb:8d:74:f4:5d:36:00:d7:20:97:03:e7:e9:14:
         6c:80:bc:67:b0:58:bd:3f:c4:77:e5:26:06:1a:cd:35:3a:b8:
         16:92:58:b1:bc:29:e7:de:fe:af:70:16:6f:35:a3:a6:62:6f:
         a0:f9:62:a8:2d:f3:1f:f0:bf:ff:37:74:18:37:8b:1a:e4:d5:
         a8:38:14:86:4c:1b:f1:65:e4:cd:26:2c:34:45:1f:92:81:44:
         26:f9:3f:af:ed:92:7b:e1:84:50:68:c9:23:5e:97:02:74:f3:
         39:67:77:40:af:55:0b:06:b3:5a:e5:e8:93:75:9f:dc:cb:52:
         cc:70:ab:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:38 2025 by rpki-client on console.sobornost.net