Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
File:                     fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft (raw, json)
Hash identifier:          rsgsO7++XPooiZZnmdWfmAkjLw0l7RP4lAhkKSJPQbM=
Subject key identifier:   D8:6B:72:B1:3B:48:7D:23:C8:89:CC:CD:7B:8D:E5:19:48:6C:12:8D
Authority key identifier: D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85
Certificate issuer:       /CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
Certificate serial:       010D0C9F432858498103808E63E390B9574FB780
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft
Manifest number:          010D0C9F43285843FC792FF696D3C4E6A23E94E7
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 18:00:00 +0000
Files and hashes:         1: b95d006f-bb0b-314c-8fcf-dca8aaf0b1ab.roa (hash: G5puISdsoWx3r3gDhNrMxlE4Ulv0MRNGl0rPNGo9d5Q=)
                          2: fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl (hash: XkzE3HAkxZeEPPnyRoNijVxhtSEhEOIS5yoT1ufg5nM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:80:8e:63:e3:90:b9:57:4f:b7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc3e43f1-7036-46e1-946a-c9e7a67efa67
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 15 18:00:00 2025 GMT
        Subject: CN=6439f9fc-ade2-4f89-8ceb-75fc5012d318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:57:7e:4c:53:5a:44:60:92:4c:9a:24:75:8f:
                    3a:81:62:ef:8f:bb:71:ff:1a:f5:fe:2b:09:aa:2b:
                    65:c4:cf:7c:d7:fc:99:32:54:10:d3:3a:ff:5d:57:
                    d4:b8:f5:24:83:f6:4a:b7:d4:8c:d7:e5:8f:bc:47:
                    26:39:38:71:14:b9:b2:15:89:3c:78:00:66:9a:b2:
                    05:4e:ba:39:4a:0d:f3:81:a9:d4:7c:ad:b0:55:86:
                    fa:37:e2:a9:f8:01:66:3b:9e:f1:ff:50:9a:13:7c:
                    e2:ec:89:60:09:d5:3f:b4:0c:71:f2:13:f4:97:24:
                    44:4c:fb:d6:22:01:86:15:86:ef:d7:b9:bf:cd:5c:
                    51:32:7d:e8:2b:1f:a8:9f:57:18:c2:ab:99:3d:83:
                    98:4d:7b:f6:86:48:6f:93:e3:61:fb:3e:e0:20:6f:
                    ef:6e:12:2b:90:c6:6f:d7:0f:68:dc:3f:85:a4:9c:
                    ae:d6:5b:99:83:85:cd:56:1f:0c:2e:fb:bd:50:04:
                    21:4e:f0:04:d3:b7:22:e2:db:4c:ca:c9:6f:1f:4c:
                    e2:d0:5b:e7:eb:8e:f0:f9:66:34:59:50:be:35:da:
                    b6:57:12:66:5d:e0:09:54:77:c3:64:10:a3:d3:61:
                    0e:32:07:b1:4c:b7:28:f5:05:b5:84:f6:f2:4e:07:
                    1c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:6B:72:B1:3B:48:7D:23:C8:89:CC:CD:7B:8D:E5:19:48:6C:12:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67/fc3e43f1-7036-46e1-946a-c9e7a67efa67.crl

            X509v3 Authority Key Identifier:
                keyid:D0:62:53:48:F7:DB:E4:10:64:33:BE:C3:2B:02:93:C1:6C:53:B4:85

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fc3e43f1-7036-46e1-946a-c9e7a67efa67.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:bf:d1:f9:ef:fc:30:12:68:cd:4c:f4:db:02:ef:69:49:53:
         c1:ad:24:3c:f2:2c:7b:4e:36:95:cb:b3:98:03:f9:da:e2:0b:
         48:5e:18:13:6c:3a:62:c3:f4:86:cc:f8:60:f6:a9:22:06:4d:
         93:5f:8d:f7:02:4b:7e:79:be:f6:73:db:ac:de:93:22:67:7c:
         52:aa:fc:86:f0:9e:41:98:35:bb:16:cb:b8:26:95:e9:04:fc:
         3f:fc:62:e0:f9:c1:85:52:ff:f0:6f:d5:02:d0:39:62:bf:59:
         53:50:69:bd:7b:15:4e:09:6c:b5:f7:ef:8e:9c:63:4e:58:6c:
         18:b3:88:8d:b2:87:e9:3e:d8:fa:67:27:d4:38:a9:8a:9b:69:
         7c:be:d9:aa:21:31:c0:ff:d0:78:04:23:c1:91:83:aa:51:88:
         17:d8:df:75:0d:45:13:c4:1e:f5:57:25:a0:4a:59:0f:59:f1:
         f6:fa:12:e8:a7:25:0c:01:2b:a6:49:ce:f7:7a:e5:f3:3d:97:
         a7:06:62:81:b4:3d:f7:e0:98:0d:52:6f:95:e3:39:bb:e6:87:
         9f:18:76:c2:f0:0f:f0:17:70:51:4d:76:50:f2:18:49:58:9b:
         46:6b:38:e3:4d:4c:87:91:10:05:58:c6:7b:8c:a5:c2:9b:ec:
         ee:ea:b2:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 16:31:40 2025 by rpki-client on console.sobornost.net