Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
File:                     86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft (raw, json)
Hash identifier:          AITZPC7IGZTX4aNUNWWcSDWHVa5x+dYc+QibbOklv6k=
Subject key identifier:   68:47:8C:57:59:B5:66:C1:B9:94:D6:FE:3F:B8:BE:01:21:CC:AE:00
Authority key identifier: 35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D
Certificate issuer:       /CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce
Certificate serial:       010D0C9F43285849817A95E958797EE53DEDE500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft
Manifest number:          010D0C9F4328584161B0D75F8C87591AD370CD6C
Signing time:             Sat 12 Apr 2025 22:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 22:00:03 +0000
Manifest next update:     Mon 14 Apr 2025 22:00:00 +0000
Files and hashes:         1: 86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl (hash: CO3lYRG/FCY6LcJ0kaXkUjTJndav/hSOQ5m3XRvasho=)
                          2: 9cb00234359fcb78eee51e200b0e1e0a17b72696203dc83a90.cer (hash: 5HRaynZPj8aqd+tOW72nc7snSFRnmvilb32uzed0Nl8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:7a:95:e9:58:79:7e:e5:3d:ed:e5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86e0b138-bef4-49fe-9dd1-fa51383dbfce
        Validity
            Not Before: Apr 12 22:00:03 2025 GMT
            Not After : Apr 14 22:00:00 2025 GMT
        Subject: CN=c961ff9f-fee1-4f01-b171-8c3a85fa626b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:86:0d:42:56:29:1b:8f:0d:02:09:ed:8f:fe:
                    fc:3d:64:69:09:07:66:2f:94:e0:e6:74:28:1c:64:
                    2a:54:4e:c5:43:57:d2:5a:89:da:98:fe:48:60:8d:
                    b9:4c:5e:10:f4:44:ea:92:c8:0d:3b:d7:ad:ea:b5:
                    2b:c3:e7:86:f8:5d:1c:43:27:76:8b:19:3c:c0:fb:
                    32:8c:8c:82:e5:e7:6a:69:60:95:9f:25:9f:d1:73:
                    f6:c7:fa:70:88:62:2c:d4:bf:05:72:2c:0a:35:37:
                    07:e6:c0:14:62:fb:83:96:78:f2:e5:ca:6d:ce:20:
                    17:bf:39:88:c1:22:ae:02:d2:c1:91:83:c3:fa:40:
                    92:4a:5f:fb:30:bc:6f:44:c0:03:e5:36:56:5f:da:
                    61:c5:3c:04:8e:4d:f7:51:74:d8:9f:3c:8b:c5:73:
                    bb:ac:ae:4f:1d:b3:7b:4d:5a:cb:d4:dc:b4:e2:d7:
                    45:f0:56:fd:32:96:e8:05:5d:ab:9f:d5:28:65:29:
                    10:0a:6f:eb:86:4f:95:10:2f:25:58:df:76:2e:35:
                    b5:f9:74:30:86:9a:ee:d7:8b:c0:90:16:e9:3a:6a:
                    87:2e:1a:11:eb:d0:b0:58:17:60:2e:84:3d:29:5a:
                    a9:e1:4f:44:6c:9d:7c:20:6e:20:68:b1:7f:13:72:
                    5f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:47:8C:57:59:B5:66:C1:B9:94:D6:FE:3F:B8:BE:01:21:CC:AE:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce/86e0b138-bef4-49fe-9dd1-fa51383dbfce.crl

            X509v3 Authority Key Identifier:
                keyid:35:6B:14:F4:C3:17:5F:96:FE:99:21:45:7B:6A:B1:60:69:FE:46:2D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/86e0b138-bef4-49fe-9dd1-fa51383dbfce.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:13:40:c4:35:f4:27:58:11:48:c5:5c:40:75:d1:eb:f4:b1:
         6f:6a:54:33:ad:f2:56:c3:ac:9b:e5:94:31:23:a7:04:39:5a:
         da:d4:d0:6e:d7:d3:90:fc:d4:da:7b:b5:70:42:f6:c2:e7:c4:
         4b:cd:6b:6f:1a:a5:f8:52:0b:41:72:e1:40:44:14:71:22:f5:
         16:96:e0:7a:5d:17:58:92:c2:6a:c1:0d:00:2d:2b:f5:49:17:
         d5:e7:19:7e:2f:ca:83:11:d4:65:d9:3a:ac:15:8e:3c:93:a4:
         8c:e1:b2:7f:43:20:62:36:aa:20:4e:4b:fd:9e:f1:ea:75:66:
         fb:e6:3b:4d:d6:ef:ef:dc:a2:86:88:31:9c:b1:c3:80:66:6a:
         f3:c0:b4:9b:57:ba:65:44:69:bd:c3:fc:32:2c:d6:31:a3:d2:
         f1:6a:47:25:74:5c:6b:58:15:71:54:f7:e5:f2:ee:c1:64:45:
         73:8d:b0:a6:c2:b7:2c:5d:16:91:a2:d7:58:13:03:3a:f9:5a:
         e1:e8:34:28:a3:6d:83:f2:90:7f:2c:e5:a5:8b:04:bb:b5:31:
         c0:80:36:33:61:8d:d4:d9:04:69:54:a9:14:87:f0:32:39:f8:
         75:1c:ca:f0:7a:a3:41:cd:07:37:29:19:59:2c:33:20:11:65:
         45:21:a9:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:01 2025 by rpki-client on console.sobornost.net