Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft
File:                     f3280fa0-3649-4902-978e-e7711edc5a33.mft (raw, json)
Hash identifier:          5X0Cb1WekqCDDJlAxXP4H+PHv+d7OoPsWRH44bXS4/E=
Subject key identifier:   9D:C0:66:65:88:32:39:3B:23:C1:47:37:EE:F1:73:07:06:4A:3A:FD
Authority key identifier: 2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26
Certificate issuer:       /CN=f3280fa0-3649-4902-978e-e7711edc5a33
Certificate serial:       010D0C9F432858498103865F83E66E9006FB1EA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft
Manifest number:          010D0C9F432858447FB44DEA14A23356D9E998D8
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 18:00:00 +0000
Files and hashes:         1: 91a7be32-bce2-39d0-bcf0-6b212251eea4.roa (hash: ogxn9yYxAi6oCmTfKEWFgYP46/VyJLnfTprJ4HHaLlg=)
                          2: f3280fa0-3649-4902-978e-e7711edc5a33.crl (hash: X568V3zjAZyuYo9nxB7nic7XWfpH+qldZOmyaIY8i5E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:86:5f:83:e6:6e:90:06:fb:1e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3280fa0-3649-4902-978e-e7711edc5a33
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 14 18:00:00 2025 GMT
        Subject: CN=043f3030-c788-44dc-a8db-984637588daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1a:0c:c4:21:9b:b3:46:f6:71:dc:5f:db:e9:
                    c6:4d:70:8d:87:f5:46:2d:32:f8:39:fa:5d:78:3a:
                    b5:6a:6a:1d:47:db:20:26:10:08:63:d8:c0:9f:7f:
                    50:6f:50:74:06:a3:c4:f7:23:d0:90:0d:56:3a:7a:
                    e9:d0:ad:73:83:a0:f6:70:2b:a3:ec:67:f8:36:58:
                    72:ee:e8:cb:b8:5d:a3:e6:c4:d4:ca:3b:b7:a8:3e:
                    d0:15:cc:2a:83:0b:2c:15:b2:46:c4:b3:08:ee:36:
                    f5:dc:7e:3d:ed:db:14:b5:eb:27:65:a6:05:8a:62:
                    6f:03:24:de:1c:f2:d2:67:71:0d:74:9e:54:d3:bb:
                    32:cc:87:ba:f7:a0:fa:cd:fd:1a:6e:a8:fc:13:fd:
                    67:4d:53:e0:d9:f7:51:43:b7:2b:90:bf:a8:f7:32:
                    66:8c:9e:8f:16:70:9e:b9:53:b9:c2:2c:e3:42:39:
                    a6:e2:d1:c7:af:dd:76:18:e5:27:31:c4:78:65:0f:
                    61:6e:7f:1a:57:5a:ae:fe:ce:77:c3:c2:f2:21:b7:
                    1e:b3:da:99:6f:ec:4c:eb:50:d0:6a:62:0a:f4:aa:
                    2e:a6:93:d4:7d:38:f3:7d:0c:00:8c:c5:1b:d5:1a:
                    6e:71:eb:3c:7f:34:bf:ba:20:39:c5:a5:e6:6a:60:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C0:66:65:88:32:39:3B:23:C1:47:37:EE:F1:73:07:06:4A:3A:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33/f3280fa0-3649-4902-978e-e7711edc5a33.crl

            X509v3 Authority Key Identifier:
                keyid:2A:80:58:FA:DD:8F:82:3B:72:AA:03:08:B1:0B:6A:BD:4F:D2:73:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/f3280fa0-3649-4902-978e-e7711edc5a33.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:cd:50:ea:e5:bc:29:25:20:4f:14:3e:34:ee:83:24:f0:6a:
         54:71:1a:fe:9a:1c:30:16:a0:61:f5:2e:cd:3a:3a:3d:71:60:
         cc:60:80:f3:69:90:29:21:c5:23:91:6c:fc:f5:da:12:6a:d4:
         4a:1b:d6:af:8d:c4:46:bf:bf:e3:73:62:22:eb:bf:ac:52:a2:
         46:ad:5b:21:3d:00:86:b1:d3:ec:7d:0f:01:1a:45:fe:7d:60:
         87:46:c8:d0:69:ad:fe:c9:1c:ca:07:e6:f2:71:53:cc:09:42:
         2d:2c:c6:51:78:65:ef:f0:c4:10:34:10:5a:6a:93:e5:e1:22:
         ad:07:56:7a:0d:22:a3:88:e8:3f:f0:3d:54:2f:15:a4:31:f3:
         c0:f1:dc:cb:70:ef:8e:6e:e1:f0:df:e0:3c:cb:2e:bd:e1:3a:
         0b:10:86:a1:da:67:fc:4c:94:39:36:7a:9a:2d:8f:75:1d:7e:
         e4:e0:77:36:2f:aa:60:af:80:c3:e3:4f:8b:6a:fb:03:cc:d8:
         e7:86:b7:91:74:1d:4e:98:99:29:2f:ce:11:86:d2:af:6a:88:
         c2:da:87:b4:22:ea:c3:cf:01:45:69:b3:40:eb:da:6b:a5:75:
         1c:2a:12:e2:43:fa:8f:88:fc:7a:ac:f4:b9:6a:9f:28:ab:90:
         3e:f4:17:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net