Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft
File:                     af8fc859-9134-44b2-9e4c-267a8d2386da.mft (raw, json)
Hash identifier:          av6/gb263cucIrqntXao0FIbkTtuiXpzJbKhQEdgb3o=
Subject key identifier:   03:A3:CF:ED:9E:E3:9B:24:51:02:42:EF:BB:49:E2:5F:B4:81:D6:1D
Authority key identifier: E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60
Certificate issuer:       /CN=af8fc859-9134-44b2-9e4c-267a8d2386da
Certificate serial:       010D0C9F4328584980C7F294DFD67BFC24409480
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft
Manifest number:          010D0C9F43285841A12CF5D49033CD73DC699BDE
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 16:00:00 +0000
Files and hashes:         1: 70eb2d09-bf51-3793-8af3-831217b8a04e.roa (hash: V1u1KIXNzDu0NeN4y4bleHwm9v0joj2ooy4vdoob3dY=)
                          2: af8fc859-9134-44b2-9e4c-267a8d2386da.crl (hash: CAEjS/l3Ti3x3wo9CeTO/8xrWDt+VGBMibhYD2+GN2c=)
                          3: dede31bf-e82b-3380-8794-1fc710158b40.roa (hash: SXe7ijPH6FPXoXdb18YFAVXDWUQeArHqI6TQJvtsTTc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f2:94:df:d6:7b:fc:24:40:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af8fc859-9134-44b2-9e4c-267a8d2386da
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 15 16:00:00 2025 GMT
        Subject: CN=74462a25-8dc1-4d2b-b216-81020e33d57c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:31:00:b5:34:8b:ee:b3:29:f3:0b:65:de:80:
                    fb:3e:05:ab:29:95:95:02:78:53:eb:21:7c:6d:b0:
                    67:5c:69:7f:43:0d:55:4c:23:81:09:9a:bd:16:a3:
                    2d:5a:b6:42:1f:b1:11:7f:ff:e5:ba:75:4d:c6:15:
                    6e:a8:58:3a:e2:1c:43:f2:a7:b0:57:42:32:f1:8f:
                    e7:1e:7a:46:eb:04:eb:41:6f:c1:42:e0:2b:c8:6d:
                    e8:86:64:ac:14:6f:0b:5a:82:df:bc:e8:6c:a2:eb:
                    38:29:40:55:7f:04:ce:96:b3:67:7e:c2:c9:b9:a5:
                    f1:47:3e:08:a4:76:7c:53:ba:0a:44:92:f0:9e:06:
                    7a:5d:e8:00:7a:59:c5:fd:19:41:7e:7d:22:2a:b4:
                    d8:5d:89:3b:41:22:d2:75:ae:62:20:84:b0:ea:fb:
                    63:c5:f3:c1:0a:5d:8e:2e:c5:70:65:80:27:33:32:
                    eb:01:6d:f1:f5:1a:41:9b:e3:4d:cb:9d:5a:4f:6e:
                    07:2b:4b:b9:78:1c:bc:d0:c5:0a:b2:ed:92:ad:79:
                    ed:f4:35:29:3b:b3:ba:ad:8e:25:0f:d3:01:dd:d9:
                    46:4f:54:b0:5e:94:08:b5:b3:d9:d0:af:f9:df:e1:
                    e7:7d:21:65:6e:41:0f:82:e0:b4:d4:8b:24:c0:50:
                    fd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A3:CF:ED:9E:E3:9B:24:51:02:42:EF:BB:49:E2:5F:B4:81:D6:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da/af8fc859-9134-44b2-9e4c-267a8d2386da.crl

            X509v3 Authority Key Identifier:
                keyid:E5:BA:56:A9:8D:07:88:84:D2:E8:65:31:8B:56:B7:BC:F8:8B:EB:60

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/af8fc859-9134-44b2-9e4c-267a8d2386da.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:b0:1e:22:16:18:ec:34:e4:c4:5e:3d:67:c8:e5:f6:2b:76:
         89:0c:47:3e:e0:4d:ec:0a:a2:a3:3b:9e:fd:d6:63:81:b7:01:
         d7:e3:b5:ed:08:b8:fe:1b:ee:69:5f:41:65:c3:97:9c:ec:2a:
         dd:32:6b:df:ca:1f:a2:6a:97:48:d4:d7:f5:55:6a:9b:59:d4:
         e9:cd:e8:28:bc:c4:d1:0a:41:7b:bf:ae:d5:f0:49:11:ca:89:
         66:fb:22:63:17:e6:ba:21:18:3a:db:2a:71:59:44:76:26:da:
         91:58:51:13:4f:9e:49:6d:d7:07:f7:fe:56:14:69:e2:ee:7f:
         54:f1:43:be:82:c8:82:94:ee:eb:75:20:2e:c9:5b:d9:14:98:
         3c:4c:ce:ab:82:72:04:5d:a1:ad:d6:f6:3a:10:d5:43:39:dc:
         3b:6d:e2:a7:d0:8a:f1:bc:b3:e7:5f:4c:78:4a:26:e5:c5:90:
         9d:ba:57:31:0a:dc:69:6b:33:b2:c8:27:55:db:61:ee:75:65:
         0f:39:79:e0:de:97:8e:c3:84:e5:0a:b5:17:3a:9b:df:c2:cc:
         3a:c7:f2:8d:7e:08:5c:0e:46:01:d9:78:4f:14:1e:66:09:ef:
         32:94:5e:4b:94:6c:a3:d1:ca:56:70:0d:54:f5:ef:06:4c:2a:
         e4:ef:61:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:02 2025 by rpki-client on console.sobornost.net