Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft
File:                     42b354ac-9561-4685-881b-1a696a6082f3.mft (raw, json)
Hash identifier:          d/77jSQBMFIF+5qmfK+AUdROmEmNqfHc7v7RfcYglCU=
Subject key identifier:   83:A9:67:D8:62:8F:67:B1:15:1D:8E:F0:25:27:BA:27:C5:40:E1:E8
Authority key identifier: 36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96
Certificate issuer:       /CN=42b354ac-9561-4685-881b-1a696a6082f3
Certificate serial:       010D0C9F432858498374DB9202415679B737C53E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft
Manifest number:          010D0C9F4328584198BD05E46ADB497A865B20E8
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 42b354ac-9561-4685-881b-1a696a6082f3.crl (hash: KOelESJ9cT+2bvPF16WYNuzk52HO+W+6J6gov7J5eng=)
                          2: cf9f0201-6d49-3c2a-b07c-eefbedc66226.roa (hash: BthQ/mhxFf+juR0XnHyQEjtH0266k1A6xuDrX/nUvdE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:db:92:02:41:56:79:b7:37:c5:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b354ac-9561-4685-881b-1a696a6082f3
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=1dce00b7-46c2-445e-9f85-6ba5c3e7243d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:12:70:09:ea:54:5a:b9:a2:04:62:a7:07:d6:
                    64:54:6a:a2:a7:d3:22:e5:e1:a0:6f:8c:ea:5c:62:
                    11:8f:5c:7a:cc:9f:27:4a:7b:6f:28:03:54:71:1a:
                    57:9a:1b:fa:c6:58:4f:bd:53:e4:5d:e4:f3:69:3e:
                    32:4a:5b:69:4a:58:05:9b:6d:83:57:e9:5e:43:b4:
                    ee:37:ef:9e:fd:01:b0:0c:cd:8a:68:13:f0:5e:8e:
                    d0:ea:6a:72:86:dd:1a:8d:e1:f6:e2:e1:a8:2c:37:
                    75:69:e3:3a:de:c1:22:47:55:ad:08:4e:6e:d1:9f:
                    65:e2:1d:5e:84:f1:6d:18:f8:72:b8:16:f3:d2:2d:
                    93:d4:14:97:ce:89:88:94:95:a6:94:df:81:07:81:
                    61:1c:9b:d3:89:4f:4e:fd:6f:05:f4:b7:49:f3:94:
                    cd:6b:11:a8:09:37:cc:1b:83:e7:0a:75:11:ad:fa:
                    31:3f:69:32:b7:c1:7c:4c:51:4f:6c:50:92:64:34:
                    b2:e7:17:14:bc:34:bc:18:1c:4a:eb:6d:3e:f4:ed:
                    97:fa:82:8b:66:c1:d5:d4:42:7d:e9:de:75:d6:e2:
                    7a:79:5f:b4:f4:b1:62:3f:ff:d5:c6:31:b7:03:d7:
                    39:db:75:f0:a1:3d:66:90:3e:76:83:6a:85:e5:13:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A9:67:D8:62:8F:67:B1:15:1D:8E:F0:25:27:BA:27:C5:40:E1:E8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3/42b354ac-9561-4685-881b-1a696a6082f3.crl

            X509v3 Authority Key Identifier:
                keyid:36:60:47:C9:09:DD:99:F8:16:4D:D7:6B:A7:83:D6:9C:8C:3C:8B:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/42b354ac-9561-4685-881b-1a696a6082f3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:b5:79:f0:3c:3d:83:17:24:5c:44:52:69:d5:75:d2:cb:c6:
         a1:83:40:c4:1e:64:a9:99:f5:8e:39:ce:ea:93:15:bc:af:e3:
         cf:0d:30:f3:84:43:c7:84:39:e2:2f:e3:1a:13:15:ec:23:4b:
         45:5c:1e:77:ab:55:52:35:09:48:a9:4b:fd:5a:f2:cf:0b:b6:
         78:be:3e:35:70:b4:df:6f:86:7a:14:6d:e5:1e:94:4c:e1:13:
         48:6a:73:8d:6b:b8:ae:7c:90:9c:05:b0:7e:6f:2e:d7:6d:fb:
         f6:e1:28:11:10:e5:98:e7:6e:76:9a:79:a9:04:15:48:f7:fc:
         d0:4b:5d:98:d4:d8:30:63:dc:09:15:f0:9e:45:f5:18:98:02:
         e9:b2:68:3b:b2:52:97:a4:40:5e:d8:10:74:3a:dc:73:56:03:
         da:49:4d:0a:af:cd:55:3a:6d:7e:72:5d:26:64:31:33:eb:be:
         cd:ea:91:a4:87:aa:22:f0:88:fa:a7:64:9f:82:d3:84:db:0e:
         45:f8:f8:66:dc:21:62:9f:b7:0c:52:00:57:77:e1:a5:d4:0d:
         4c:40:34:4a:08:a0:e0:7a:70:bf:6d:11:75:a4:25:09:b3:43:
         07:03:f8:b7:8a:ec:58:00:a8:dd:91:a8:0a:3f:01:91:ef:fb:
         d9:09:70:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:00 2025 by rpki-client on console.sobornost.net