Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft
File:                     a987c446-5fc2-44b0-9a41-65296d90d0c2.mft (raw, json)
Hash identifier:          FsRPwtXhx90wBLc7aZglGhIipIkPommCE9adIOwyIWg=
Subject key identifier:   87:C3:00:47:2F:44:AB:F3:98:09:30:65:E8:1A:B6:76:87:EC:A2:F1
Authority key identifier: C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1
Certificate issuer:       /CN=a987c446-5fc2-44b0-9a41-65296d90d0c2
Certificate serial:       010D0C9F43285849817A97B6ACA9A5AC138F5500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft
Manifest number:          010D0C9F432858496598AC39FE13BB942B9EDECB
Signing time:             Sat 12 Apr 2025 22:00:03 +0000
Manifest this update:     Sat 12 Apr 2025 22:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 22:00:00 +0000
Files and hashes:         1: a9736c2d-b353-3032-be0f-62272540e0ac.roa (hash: MxYNpA8pwmkL1EOYCuIBg0LTPkS5Xr2KxeLVvMOzgxE=)
                          2: a987c446-5fc2-44b0-9a41-65296d90d0c2.crl (hash: tp21GEdZM4u8ZZauA/UR4mIEuTQWKYJpSlrHHBJKyqw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:7a:97:b6:ac:a9:a5:ac:13:8f:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a987c446-5fc2-44b0-9a41-65296d90d0c2
        Validity
            Not Before: Apr 12 22:00:03 2025 GMT
            Not After : Apr 15 22:00:00 2025 GMT
        Subject: CN=f3235fbf-192d-4dab-8b43-30b782b889a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4a:89:6e:1c:65:8a:8b:45:64:de:65:30:3a:
                    d3:b8:cc:e8:98:41:7f:2d:c6:06:b8:27:89:3d:42:
                    93:92:e4:80:28:dd:b0:2d:b5:de:d2:7a:7d:68:b1:
                    0e:e1:3b:77:ef:c4:12:a6:0f:ec:65:24:ea:e8:47:
                    37:9d:19:72:0a:38:d2:a2:89:60:38:e3:7f:a8:95:
                    eb:26:67:59:e2:2b:d3:c7:89:2c:63:6b:6e:6f:30:
                    f8:9d:e7:d4:e2:49:02:d8:99:9a:96:55:b9:28:7e:
                    8b:45:cf:59:17:73:34:b8:1e:46:79:97:86:b7:e6:
                    9d:db:b5:d3:0f:9f:71:43:14:45:6c:60:bb:95:08:
                    7a:f7:1c:7f:9a:bf:86:b2:ba:d6:b3:2a:96:21:94:
                    5a:85:c7:71:c3:b2:fd:8e:f1:ae:81:75:08:71:90:
                    c0:45:9e:e1:f7:17:6f:ac:c9:d7:0c:f6:aa:16:b4:
                    64:52:da:56:00:38:7c:0a:e5:85:93:43:02:71:f9:
                    a9:d0:be:f0:4b:5b:56:77:a3:b3:56:8d:e3:23:a7:
                    23:c4:34:a8:fb:79:09:66:36:36:7d:d4:1c:42:8c:
                    03:05:02:f8:53:64:c1:ce:eb:00:85:c6:02:e2:fb:
                    7a:a5:56:1d:be:f1:bb:aa:98:9e:8a:50:74:74:96:
                    8b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:C3:00:47:2F:44:AB:F3:98:09:30:65:E8:1A:B6:76:87:EC:A2:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2/a987c446-5fc2-44b0-9a41-65296d90d0c2.crl

            X509v3 Authority Key Identifier:
                keyid:C4:91:C7:5F:29:DA:52:AA:C5:B2:03:91:DE:44:94:44:E4:EC:34:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/a987c446-5fc2-44b0-9a41-65296d90d0c2.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:ff:8a:2c:44:57:19:68:7c:a5:34:a9:37:61:38:38:a8:af:
         79:8a:4a:b1:05:29:96:44:60:05:ef:bd:f0:55:83:27:d3:a0:
         62:80:4c:1c:b7:fb:40:58:ba:54:6e:ba:b0:75:29:66:07:4c:
         17:30:b4:a4:96:e9:e5:fc:30:8d:c2:da:dd:2e:cc:95:8f:48:
         98:15:40:5b:7c:89:a9:75:84:b6:6a:41:e3:dd:a5:87:63:91:
         ba:02:5a:af:bc:8b:88:87:d2:e2:ae:d1:a2:fa:a2:7b:6c:1c:
         6c:48:45:8c:06:d4:49:ec:66:c4:f9:45:68:1c:d9:2d:32:9f:
         11:a9:b8:c4:6b:ae:a9:95:4c:e4:ee:aa:18:c0:29:cb:30:8a:
         89:31:b0:e2:86:94:ec:e4:0a:0e:5b:82:1d:0f:26:56:5a:67:
         fc:8c:7d:c9:ed:38:80:a8:4f:0d:b9:fd:d6:31:69:ed:0b:93:
         55:a7:39:60:c1:e7:0d:15:50:a1:e6:e0:81:39:e2:12:5c:f8:
         b0:d2:5d:45:54:3a:5a:13:40:95:68:9c:32:21:7e:86:9d:15:
         29:cc:24:5e:ed:ad:8f:04:31:4f:5d:e4:1f:57:28:12:50:9b:
         41:da:5e:5f:e0:11:d1:bd:04:64:e4:3b:ac:02:c7:9e:ca:1b:
         33:ab:8e:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net