Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft
File:                     db131796-a27d-48da-80e5-76b8e7c0cbd3.mft (raw, json)
Hash identifier:          UrgcOYjYc+dwyosM743ZwhtCAl8TkBBanmsbOZGviRE=
Subject key identifier:   9E:56:94:CE:F2:DB:3F:3A:79:1F:9B:57:E3:51:F8:B7:B8:B1:26:6C
Authority key identifier: B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95
Certificate issuer:       /CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
Certificate serial:       010D0C9F4328584982A4693E8E8225F56D53E980
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft
Manifest number:          010D0C9F4328584073A848D9A5E552FE846C57D3
Signing time:             Sun 13 Apr 2025 08:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 08:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:00 +0000
Files and hashes:         1: 8d9eaa3c-4cf4-367d-971b-177e4bf750e5.roa (hash: Hyi8V8xBXGIWyWiiby6P0UqTVgYBYw7WGU7YVXqbwBI=)
                          2: 95720ecd-8c17-3cb1-b286-44ec240fca8c.roa (hash: 5S6BvXfq2cfM+e8A974CBK5ZCxlrEzWeoUAbEYN8cw4=)
                          3: db131796-a27d-48da-80e5-76b8e7c0cbd3.crl (hash: PVxZE6qQlnU7kCOeSCxqOEDsLgiVGM8fuQ0XaIOOkJo=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:a4:69:3e:8e:82:25:f5:6d:53:e9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db131796-a27d-48da-80e5-76b8e7c0cbd3
        Validity
            Not Before: Apr 13 08:00:07 2025 GMT
            Not After : Apr 16 08:00:00 2025 GMT
        Subject: CN=579bb691-fb70-49dd-a9bf-724de1bbcb4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:12:75:93:c4:a7:d3:7e:9a:04:b9:2f:88:fd:
                    14:34:7b:68:53:f0:db:04:30:98:97:b8:ca:76:e6:
                    c8:a2:39:24:3a:cb:99:35:67:ae:14:bf:4b:5f:88:
                    0a:b5:87:44:90:79:88:af:31:d2:f2:ea:d6:89:39:
                    6f:b8:88:9b:4a:20:a5:00:7e:67:b8:cf:51:d4:e5:
                    e4:ed:6f:67:99:2a:07:e2:c1:1c:11:42:0a:0d:4a:
                    1e:fb:00:40:29:06:85:be:39:6a:c1:60:af:65:76:
                    44:2c:27:86:dd:14:d7:10:c5:46:c3:ea:13:41:07:
                    cf:66:4e:55:bf:2c:66:2e:e6:b1:19:2e:90:f7:90:
                    6b:69:3d:81:a5:77:7c:69:c3:dc:a4:4f:8f:79:7d:
                    e3:41:ba:80:08:f0:9c:8b:a1:c8:3b:f8:00:48:dd:
                    b9:4e:82:a7:c4:91:26:05:a6:58:dc:35:fd:03:61:
                    d6:cb:1e:a6:eb:b5:ee:64:f1:f0:2e:a7:b8:52:2a:
                    64:39:a2:74:18:9c:39:43:70:7b:14:a6:b2:5f:de:
                    4b:fb:e1:5f:df:2b:f0:f3:09:e5:98:7f:13:59:0c:
                    0a:a9:7f:8e:d8:de:c9:e2:b1:f2:e7:4f:b8:02:94:
                    51:ce:85:2d:2f:fc:70:aa:98:44:55:6c:74:48:b7:
                    a2:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:56:94:CE:F2:DB:3F:3A:79:1F:9B:57:E3:51:F8:B7:B8:B1:26:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3/db131796-a27d-48da-80e5-76b8e7c0cbd3.crl

            X509v3 Authority Key Identifier:
                keyid:B9:ED:CA:DE:A9:07:52:89:55:F6:AB:E0:15:88:9E:F7:73:11:F6:95

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/db131796-a27d-48da-80e5-76b8e7c0cbd3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c6:44:fc:ff:81:b1:35:0f:83:79:15:54:72:81:46:0f:6e:20:
         46:76:13:7b:b7:94:e7:41:57:1f:08:92:d6:40:36:32:67:01:
         1f:1e:c2:f6:19:e8:8e:51:7c:ea:55:02:30:33:bb:b7:0a:c9:
         c3:48:eb:ae:c8:cd:cb:97:01:ae:71:ce:a6:58:62:11:8f:e0:
         e4:70:02:78:aa:ea:4c:35:de:7f:5e:1b:c6:02:35:8c:65:07:
         61:19:cc:8a:47:e6:af:66:48:1c:3b:93:79:90:1a:34:5b:90:
         d9:98:a9:98:71:4e:57:9e:1d:ef:d0:20:42:7b:b7:fb:7b:28:
         52:dc:45:e5:2d:e1:d2:e1:a3:7b:59:91:a5:36:c9:dc:50:6d:
         1d:d2:f8:f8:85:6c:3b:9c:52:43:02:79:33:f2:2a:65:e9:ce:
         4b:a8:33:2c:c2:2e:cf:9b:2f:5d:1b:98:53:e8:c7:db:4b:6b:
         76:8c:41:1e:44:86:0d:10:d1:60:af:14:64:f3:ee:d3:6d:bc:
         34:0c:83:86:72:8f:fc:23:10:a3:36:76:8b:68:b8:3b:03:1a:
         0d:6d:2a:02:57:d0:ba:40:14:61:59:dd:35:91:45:17:a5:a8:
         5d:fe:c3:a3:53:b9:92:be:1d:fb:bb:65:8c:9d:ab:10:12:a4:
         de:f6:d0:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 16 14:01:04 2025 by rpki-client on console.sobornost.net