Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
File:                     1be7bcf5-0538-4a92-9aef-c460f15023b4.mft (raw, json)
Hash identifier:          P0vV/WwUpSgMD61GlHgyjAgqk4pbZj81YiW46S/Wo24=
Subject key identifier:   73:92:75:88:74:62:98:6B:AE:A6:A5:67:E2:21:AB:DF:18:EC:ED:10
Authority key identifier: 45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67
Certificate issuer:       /CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
Certificate serial:       010D0C9F43285849835714F16D57CD67BB96BF40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft
Manifest number:          010D0C9F43285841BF9214CDBF2A617B37A82B64
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 0bd8ae8c-926a-3326-b752-65b165f04694.roa (hash: rtCbhI1owh9Z2T69JEV/0aiAOdzXi6NDwdC5bVlhaUc=)
                          2: 1be7bcf5-0538-4a92-9aef-c460f15023b4.crl (hash: ITT6dDDWqT/hyK0R93gqZSK5s8K6l19xNbGQYuTgke4=)
                          3: 466907d0-f56d-36c2-88cd-f7f59fa888e2.roa (hash: F0KypCbUCtvCFtAaMfbSyubVFMzALhQayIXC5F5Zz1k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:14:f1:6d:57:cd:67:bb:96:bf:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1be7bcf5-0538-4a92-9aef-c460f15023b4
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=6c4ce818-e60a-4312-a224-83b9fce82fd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:65:7d:d2:ac:5b:c8:0a:c5:d9:0e:39:d7:
                    a1:66:76:4b:41:8d:51:20:d8:1a:41:95:66:d9:7c:
                    b6:73:c1:0a:b1:f1:1a:ac:05:e8:f4:ae:bb:ef:c5:
                    55:5a:b1:ab:09:31:ab:75:37:98:c5:aa:ae:e3:cc:
                    35:96:17:22:fc:8c:04:78:3a:a6:37:65:cd:6e:b9:
                    11:b2:8c:89:4d:a3:3a:19:fd:c4:ab:4e:3b:39:fd:
                    d1:06:3a:ab:27:14:dc:a4:6b:ba:f0:ff:05:8b:1c:
                    06:a8:5c:0c:94:68:86:90:42:f0:8f:96:e0:a0:04:
                    ab:71:1e:16:51:c4:6c:16:d7:e2:40:94:bf:70:25:
                    47:51:fa:c8:06:2b:93:2f:b5:24:25:8a:ab:d7:0c:
                    43:fe:42:ac:a1:ed:77:98:be:d6:3e:17:9e:ac:31:
                    1c:ec:5d:df:87:3a:ac:ae:3f:be:2d:8b:45:a7:d7:
                    c9:0c:89:c1:6a:0d:5e:d2:ab:d9:e0:2a:10:32:c0:
                    54:53:de:a8:5f:9c:13:41:ac:e5:21:e0:7c:9b:71:
                    a7:03:28:08:82:22:79:09:d4:7f:d9:42:5c:f3:01:
                    1f:cd:b0:50:63:c2:05:7d:6c:fe:e9:2a:50:1c:4f:
                    f8:1e:19:ca:29:f4:f6:5a:cb:e3:2a:4d:48:9e:4d:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:92:75:88:74:62:98:6B:AE:A6:A5:67:E2:21:AB:DF:18:EC:ED:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4/1be7bcf5-0538-4a92-9aef-c460f15023b4.crl

            X509v3 Authority Key Identifier:
                keyid:45:94:2A:B5:6A:9D:7E:36:8F:49:09:AC:A5:80:7B:74:DE:0D:B7:67

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1be7bcf5-0538-4a92-9aef-c460f15023b4.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:92:9b:f2:b9:2b:49:2e:d4:55:3d:2e:91:f4:98:be:e6:30:
         9c:c9:f0:cd:30:76:2f:99:6e:9a:83:69:9e:74:8a:83:37:a2:
         1e:4c:e6:b3:fb:7d:8a:9b:f5:cd:13:11:db:fa:c9:8f:ea:a4:
         dc:21:ca:17:49:2a:1e:0d:33:85:0b:1f:ff:fb:d3:e3:ac:0c:
         3b:1d:e1:93:08:67:0d:a3:f1:f7:1c:77:f4:a6:7a:fd:c0:00:
         7d:1f:ad:2b:eb:6a:e6:b9:34:c5:13:1e:a6:44:19:b7:df:f4:
         1b:84:94:94:30:34:16:88:a1:84:bd:3f:75:af:4c:bb:e7:b1:
         8a:f4:ae:7e:7c:3e:c4:c8:88:5f:13:1f:99:88:2b:f6:ff:94:
         a3:c8:85:06:94:91:65:af:7f:3d:ce:55:f8:d5:e3:b1:a0:6d:
         d5:d7:ce:c8:e2:81:63:ca:e5:81:b5:e6:2d:89:e3:7f:d4:61:
         bc:cb:db:85:57:61:33:8c:a8:91:91:97:2f:dc:68:24:45:1f:
         97:8c:a5:3d:4c:23:47:b2:0f:2b:b4:3e:eb:10:29:32:44:c1:
         3e:eb:b2:e8:a1:33:f6:5a:72:e5:3c:08:0e:dd:d3:47:ac:5a:
         29:fc:30:0b:17:84:d7:24:55:bb:23:c7:2d:0d:d9:53:55:ee:
         03:65:ef:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:00:59 2025 by rpki-client on console.sobornost.net