Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft
File:                     da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft (raw, json)
Hash identifier:          wYdyALOEC3+pfkDaxzjlvQMvehjm02Zma3VLSGsB6ig=
Subject key identifier:   46:B2:07:46:EC:47:96:99:39:B0:21:58:5F:86:BD:62:9A:79:BA:89
Authority key identifier: C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02
Certificate issuer:       /CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de
Certificate serial:       010D0C9F432858498374DB8618DC00AD0D8F8A00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft
Manifest number:          010D0C9F4328584195A8E2F0CF67A566DC45B3E8
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 15:00:00 +0000
Files and hashes:         1: ce91baa4-4505-349d-a0fb-18653fe49913.roa (hash: S9HLO45nxR5Tk7fEnM9A4Ar+fXbvkL5uz/N+miotbZQ=)
                          2: da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl (hash: bRqD+UJeZFyZwawRI5WIo4ifDV1ypFPHoCSop8kSlOM=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:db:86:18:dc:00:ad:0d:8f:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da839ff9-2f32-4c6b-ad01-c0b5bda9b0de
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 15 15:00:00 2025 GMT
        Subject: CN=24470b32-0280-4789-a830-12e67649df74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2e:23:cf:e6:be:3c:08:34:07:43:1d:2d:54:
                    84:c0:04:c3:2e:a5:21:c2:8d:dc:9c:e3:2b:28:2e:
                    8e:95:b1:3d:ce:ca:7e:37:6a:1c:a7:f3:22:4a:3f:
                    98:4a:3e:56:3b:1e:37:26:2a:98:65:31:a9:e4:46:
                    f4:21:69:62:07:37:82:4f:0c:31:f9:c7:97:57:02:
                    8e:9c:58:38:87:2f:04:4b:2d:36:da:14:45:dd:09:
                    40:7f:c9:40:7d:f4:1b:5d:7c:b1:e2:73:5e:c5:52:
                    11:df:91:5e:b4:64:90:c5:6b:cf:56:f0:34:c9:f3:
                    e5:06:1e:85:7a:3d:30:d0:ba:ed:91:1b:2d:e2:ea:
                    19:46:c8:b7:7e:0f:06:e3:d9:de:15:d9:4a:ee:8f:
                    68:c6:74:bd:15:71:75:67:9a:7e:33:34:e9:c9:44:
                    1c:5a:91:21:e7:de:9d:f1:01:9c:dd:21:a2:42:d1:
                    85:5d:45:38:41:0a:7d:e8:d0:ab:e6:fc:c0:bb:09:
                    23:e8:22:2b:cc:55:f6:8b:04:56:95:f4:76:9b:83:
                    6c:a8:d7:6c:2a:ca:7c:b6:cb:3e:25:a5:94:a4:02:
                    b8:d2:b3:49:51:c2:b0:67:a3:23:50:d2:75:9b:bd:
                    b0:49:99:60:26:05:92:35:a9:d9:fc:78:dc:0d:5d:
                    b7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:B2:07:46:EC:47:96:99:39:B0:21:58:5F:86:BD:62:9A:79:BA:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.crl

            X509v3 Authority Key Identifier:
                keyid:C6:C9:37:5C:37:E0:05:0F:93:5E:4B:9B:61:92:67:4D:EA:FD:75:02

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/da839ff9-2f32-4c6b-ad01-c0b5bda9b0de.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:18:78:74:03:01:6c:78:c6:67:5d:ef:08:6a:eb:5f:97:a9:
         52:30:60:c5:7e:80:e8:2e:5f:4a:4e:07:da:a0:9e:9f:bf:28:
         23:7a:ed:ce:2d:fe:67:f5:0c:ba:f6:f2:9f:64:e4:41:04:f0:
         ab:08:6a:cc:5a:5d:c9:57:58:94:dc:41:96:43:f2:c0:18:db:
         1e:8a:90:b2:aa:ad:26:c5:d7:f1:cb:1c:89:1e:6d:07:29:b7:
         ea:e1:a5:8c:09:88:22:6a:30:36:f4:b6:0d:72:e7:bb:c8:6c:
         6f:dd:9b:e7:0d:a4:34:9d:4b:1e:48:fe:db:00:16:15:b8:7c:
         72:1e:f2:df:c4:22:4f:63:bb:57:30:04:e1:41:c8:88:fa:67:
         3a:f7:9f:36:b1:73:88:97:de:e2:37:de:20:8f:9f:2c:7b:30:
         64:2d:83:c4:85:44:04:5f:11:11:9e:1d:45:08:42:c2:f6:fa:
         ac:59:51:ea:41:1e:16:45:69:8b:e8:0c:d2:08:64:fb:a6:4d:
         ad:c6:30:b6:af:32:fa:d8:ab:99:f6:6c:f4:ef:50:d5:8f:2e:
         3f:c4:78:f4:d0:c2:c3:34:4a:84:53:14:6b:5e:29:54:c7:bd:
         44:ec:ff:9c:2a:78:72:2c:ae:91:8d:d8:7f:e8:01:19:28:44:
         97:15:44:bf
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmDdNuGGNwArQ2PigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGE4MzlmZjktMmYzMi00YzZiLWFkMDEtYzBiNWJkYTli
MGRlMB4XDTI1MDQxMzE1MDAwN1oXDTI1MDQxNTE1MDAwMFowLzEtMCsGA1UEAxMk
MjQ0NzBiMzItMDI4MC00Nzg5LWE4MzAtMTJlNjc2NDlkZjc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0S4jz+a+PAg0B0MdLVSEwATDLqUhwo3cnOMr
KC6OlbE9zsp+N2ocp/MiSj+YSj5WOx43JiqYZTGp5Eb0IWliBzeCTwwx+ceXVwKO
nFg4hy8ESy022hRF3QlAf8lAffQbXXyx4nNexVIR35FetGSQxWvPVvA0yfPlBh6F
ej0w0LrtkRst4uoZRsi3fg8G49neFdlK7o9oxnS9FXF1Z5p+MzTpyUQcWpEh596d
8QGc3SGiQtGFXUU4QQp96NCr5vzAuwkj6CIrzFX2iwRWlfR2m4NsqNdsKsp8tss+
JaWUpAK40rNJUcKwZ6MjUNJ1m72wSZlgJgWSNanZ/HjcDV23/QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFEayB0bsR5aZObAhWF+GvWKaebqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kYTgz
OWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1YmRhOWIwZGUvZGE4MzlmZjktMmYzMi00
YzZiLWFkMDEtYzBiNWJkYTliMGRlLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGE4MzlmZjktMmYzMi00YzZiLWFk
MDEtYzBiNWJkYTliMGRlL2RhODM5ZmY5LTJmMzItNGM2Yi1hZDAxLWMwYjViZGE5
YjBkZS5jcmwwHwYDVR0jBBgwFoAUxsk3XDfgBQ+TXkubYZJnTer9dQIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kYTgzOWZmOS0yZjMyLTRjNmItYWQwMS1jMGI1
YmRhOWIwZGUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA8GHh0AwFseMZnXe8Iautf
l6lSMGDFfoDoLl9KTgfaoJ6fvygjeu3OLf5n9Qy69vKfZORBBPCrCGrMWl3JV1iU
3EGWQ/LAGNseipCyqq0mxdfxyxyJHm0HKbfq4aWMCYgiajA29LYNcue7yGxv3Zvn
DaQ0nUseSP7bABYVuHxyHvLfxCJPY7tXMAThQciI+mc69582sXOIl97iN94gj58s
ezBkLYPEhUQEXxERnh1FCELC9vqsWVHqQR4WRWmL6AzSCGT7pk2txjC2rzL62KuZ
9mz071DVjy4/xHj00MLDNEqEUxRrXilUx71E7P+cKnhyLK6Rjdh/6AEZKESXFUS/
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:04 2025 by rpki-client on console.sobornost.net