Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft
File:                     f471d673-d293-405b-9549-4421d0436152.mft (raw, json)
Hash identifier:          F6ymTm+E0AwKNaTZDiIqZbo9HBf+8Jr6LwFyjcqDSe0=
Subject key identifier:   8B:36:17:18:52:27:AF:2D:58:38:7F:49:20:8F:F7:B9:BE:71:B8:EE
Authority key identifier: 30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B
Certificate issuer:       /CN=f471d673-d293-405b-9549-4421d0436152
Certificate serial:       010D0C9F4328584982FDB340095FA261F7B99D00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft
Manifest number:          010D0C9F4328584961818006EF0695468BAF1F8D
Signing time:             Sun 13 Apr 2025 11:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 11:00:03 +0000
Manifest next update:     Wed 16 Apr 2025 11:00:00 +0000
Files and hashes:         1: 5d22fed2-523a-322d-a47d-2db5b0e1e874.roa (hash: 3C9FewueWziYOL2GM0WB+/VxE4DUwWOvjpP8XPR4O+A=)
                          2: f471d673-d293-405b-9549-4421d0436152.crl (hash: 6gqstF/COwwkF/rGw/YhmesFUTCp00e1l3YEDMcFwko=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:fd:b3:40:09:5f:a2:61:f7:b9:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f471d673-d293-405b-9549-4421d0436152
        Validity
            Not Before: Apr 13 11:00:03 2025 GMT
            Not After : Apr 16 11:00:00 2025 GMT
        Subject: CN=e0e24472-3156-40fb-95a0-12a83bf3d335
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:31:dd:8f:7c:8a:5e:37:af:82:68:7d:11:5a:
                    db:e2:ad:82:b7:30:7e:c3:e4:7b:ea:ce:c6:95:54:
                    71:27:42:8e:2f:5d:0f:a3:c9:a6:89:9a:0c:90:74:
                    34:63:d5:71:60:ae:57:a9:39:1c:d7:5c:58:dd:62:
                    aa:52:5f:73:5b:f3:7c:56:75:36:fa:30:af:0f:fc:
                    be:d6:c7:c3:82:5e:d2:e0:a5:34:ff:e3:df:bb:e3:
                    8d:3c:e9:f7:9b:cd:99:a3:2e:96:c4:21:eb:02:c5:
                    66:76:b9:2a:8d:18:6c:79:95:97:10:db:cb:72:43:
                    15:8c:5e:2a:ed:e6:e1:59:62:a8:f5:66:19:8d:8d:
                    c0:29:07:ad:f7:8c:30:f5:c8:06:b4:80:ea:8f:d8:
                    cf:af:b3:66:ba:49:20:81:19:02:4a:f5:42:4f:ff:
                    0d:53:95:2e:c9:60:e3:da:af:7f:17:53:21:08:06:
                    7c:ca:d5:7b:79:40:4b:ab:91:d5:26:f7:ab:f8:60:
                    29:bd:33:70:58:e4:71:4a:56:a0:2c:1a:0f:c1:c0:
                    d2:d4:c3:e7:8c:ff:28:f6:2a:e9:2b:0a:43:90:f5:
                    9f:01:bc:2f:7c:ae:2c:9d:ed:ce:11:16:27:9e:7d:
                    25:89:61:e8:61:ff:38:cd:dd:63:6b:e2:db:c0:ff:
                    be:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:36:17:18:52:27:AF:2D:58:38:7F:49:20:8F:F7:B9:BE:71:B8:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152/f471d673-d293-405b-9549-4421d0436152.crl

            X509v3 Authority Key Identifier:
                keyid:30:A0:26:0A:E6:B5:9F:36:6B:1C:77:3F:5A:31:D7:FB:EF:B1:24:0B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f471d673-d293-405b-9549-4421d0436152.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:2e:93:6e:86:0b:a4:b9:72:4c:30:e8:ce:3b:d9:67:0e:26:
         51:95:f6:c6:8b:81:c9:9a:41:d8:6b:8c:74:ba:96:65:74:c4:
         b2:5e:19:e8:8a:6a:bc:b9:d4:87:ff:ba:34:52:f6:78:5b:2b:
         6e:1d:cf:2f:a0:e4:86:f4:6a:39:c0:e6:a2:3d:53:a8:87:4a:
         15:00:2d:c6:a6:71:f9:a9:36:7d:af:e6:87:96:21:0d:b9:33:
         f5:5f:ee:23:b5:2d:73:7f:1d:37:d1:79:47:d8:6d:13:ad:8b:
         11:dc:f3:eb:31:2f:71:44:1b:b3:f8:7d:f5:1c:c8:42:7b:7d:
         75:76:89:61:64:79:14:79:a0:25:64:ac:4a:b8:c6:de:c8:0f:
         29:58:26:03:eb:49:ba:1f:24:94:76:59:1a:a3:72:1b:ce:54:
         b2:c5:15:56:30:aa:cc:62:65:bc:29:28:84:1f:20:db:bd:4a:
         2f:bb:1b:4f:92:c7:38:b9:96:50:a5:4b:62:53:1e:7b:3e:02:
         92:5e:e2:8e:c3:a8:22:a5:9f:fd:2e:dd:9e:00:aa:a9:13:a9:
         16:e6:0c:6d:df:aa:1b:7e:42:88:2c:e4:55:25:da:a5:3f:e5:
         29:b7:6a:e8:76:e3:80:e1:bc:0c:d7:3a:3d:4d:1c:9e:89:08:
         c6:5a:c4:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:18 2025 by rpki-client on console.sobornost.net