Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft
File:                     2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft (raw, json)
Hash identifier:          bTo09uiE/t1ZM8Rp4B5Ilw5t07BmZM06f6Jvujf8knQ=
Subject key identifier:   98:B5:C6:C5:21:22:2A:6A:17:89:51:58:44:1E:AD:A2:35:FA:1E:99
Authority key identifier: 2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62
Certificate issuer:       /CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
Certificate serial:       010D0C9F432858498286985BFF9BAEE90F558AA8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft
Manifest number:          010D0C9F432858496F11AC5DAA98339370060587
Signing time:             Sun 13 Apr 2025 07:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 07:00:00 +0000
Files and hashes:         1: 1e1be535-508c-330e-a6e2-85aa2a913569.roa (hash: +SOLk0RtR4b1jdX1nxR/dJqT780U4pQmldlvhmhHFSM=)
                          2: 2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl (hash: ct4fYEM2eV1UdbUaTnvhwWRt6ruEMG7LvGIRYF0N4/M=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:86:98:5b:ff:9b:ae:e9:0f:55:8a:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc648c2-2f95-48f5-acb7-9e8a2f9123a7
        Validity
            Not Before: Apr 13 07:00:03 2025 GMT
            Not After : Apr 15 07:00:00 2025 GMT
        Subject: CN=da4eddbd-c7ab-497e-843f-9413b5032771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:22:2a:57:c0:98:e5:8d:d2:52:4d:82:c7:f5:
                    d9:91:bc:23:2d:98:e2:98:fe:b3:7f:97:54:b9:ac:
                    73:9c:3f:59:8d:07:93:26:b5:b6:e0:fa:38:0f:d4:
                    86:2e:a7:5f:6f:63:9f:80:d8:43:c7:d0:b9:c0:37:
                    ac:81:d0:e8:2f:d9:de:a9:70:ce:40:d4:17:62:6d:
                    c0:92:5c:96:e3:9f:1d:9c:22:67:04:5b:7a:7a:26:
                    3f:53:9d:ac:10:2e:3f:52:11:73:10:80:54:bb:91:
                    78:ce:3d:d9:82:4d:7b:84:ec:4b:d8:fb:a0:f6:a5:
                    9b:6a:e2:8b:9b:57:78:5c:bb:9c:59:d1:42:94:d4:
                    d4:e5:7b:cb:87:19:40:f3:97:a7:9c:ce:ba:85:16:
                    e9:e7:8f:52:2d:3d:14:66:59:cd:8f:48:d4:42:4a:
                    01:ef:aa:55:fd:cf:f2:72:99:4a:40:b0:09:84:24:
                    d4:1a:14:90:f3:ae:eb:c9:65:67:4d:c4:b6:dd:61:
                    35:90:97:19:8b:6e:90:c9:ec:49:64:84:77:c0:ca:
                    4d:80:58:cd:41:40:73:48:62:82:db:72:55:3c:e1:
                    2e:2d:5d:f5:9e:bd:35:1f:b6:23:11:8f:f4:6c:b0:
                    de:96:80:65:e2:1c:b1:6d:59:76:ec:4c:dc:0e:be:
                    8f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B5:C6:C5:21:22:2A:6A:17:89:51:58:44:1E:AD:A2:35:FA:1E:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.crl

            X509v3 Authority Key Identifier:
                keyid:2B:89:09:2B:FF:EC:8F:78:27:D8:87:D9:14:DA:8E:24:E7:4C:1C:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2bc648c2-2f95-48f5-acb7-9e8a2f9123a7.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:c9:97:61:c8:92:6c:c6:a5:ce:c4:2f:40:21:be:71:5d:59:
         7c:e3:55:9a:d8:27:17:ff:9b:f1:1c:47:10:0c:eb:70:20:12:
         c4:38:be:5b:af:99:fd:be:22:d8:b1:8d:9d:05:3d:08:8f:4b:
         70:be:36:f3:d2:89:eb:08:d2:3e:19:0f:87:50:d6:50:ea:76:
         d9:fc:0b:44:82:60:d9:ba:c4:43:54:43:0c:bc:ec:43:dd:68:
         04:d5:62:e8:d6:f1:01:2f:88:4b:47:1e:37:c7:0b:da:f7:5b:
         e8:cd:bd:2d:2c:bb:5e:d7:e9:a7:a5:63:7c:03:09:5f:51:67:
         5a:2b:00:47:ad:a8:10:df:da:bc:b0:2e:36:e3:ee:e9:80:33:
         52:3e:bf:7a:17:67:07:d4:89:cd:9d:19:e8:1c:2a:95:ad:12:
         5a:60:76:6e:1d:3f:f6:6f:c5:2a:16:4e:a5:4d:58:02:b7:9c:
         0e:f3:1f:62:32:db:11:80:f3:0f:29:12:33:d6:36:23:f1:07:
         7e:05:2c:d5:0d:bf:6b:1e:50:0e:a0:55:4c:9a:b2:8d:dd:99:
         f9:6f:bd:49:6b:3e:fe:34:18:a2:20:46:97:bc:68:34:52:61:
         11:10:dd:d2:a3:66:bd:1b:18:74:31:90:44:67:ed:4c:8a:43:
         16:ea:9a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:17 2025 by rpki-client on console.sobornost.net