Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
File:                     3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft (raw, json)
Hash identifier:          CnR4PO9y5f1GzR5oiO7UMLqqUpl2S/nJYKibANULdwo=
Subject key identifier:   B0:A7:BA:4F:C5:C6:A3:70:E0:21:14:B1:F9:5B:D2:29:07:60:83:6D
Authority key identifier: 1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F
Certificate issuer:       /CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
Certificate serial:       010D0C9F43285849831B890E6F7EF27043672500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft
Manifest number:          010D0C9F432858480A52F9CC8E966E7AFF5A79CD
Signing time:             Sun 13 Apr 2025 12:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 12:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 12:00:00 +0000
Files and hashes:         1: 3742509e-2411-38d0-abe6-6cdf13605db9.roa (hash: Ye6TjK0CpGuc43cMrt0NL6W+tjS5e3LtF3Hhv5FE5eI=)
                          2: 3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl (hash: 6Q+IKE37WTNMIIvQL8t4OMhG7EFjLklrTfRxmKESV3U=)
                          3: e85ea07b-ef0a-3456-a37d-a23ec2a26257.roa (hash: nKRzbV3NYyeOmHXwny5EsbgS+PcjDKlTci+0kTyGgyc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:1b:89:0e:6f:7e:f2:70:43:67:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0
        Validity
            Not Before: Apr 13 12:00:07 2025 GMT
            Not After : Apr 15 12:00:00 2025 GMT
        Subject: CN=ebdb7ce9-f053-43e2-9b9f-41dc9dcf716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a8:d5:9a:2b:e4:47:e8:d0:35:eb:88:70:58:
                    74:71:d6:54:8b:51:e8:1f:49:5e:6c:38:a2:ee:83:
                    1a:47:a9:e5:d1:90:92:74:7d:cf:3e:83:a0:7d:d0:
                    0a:cb:66:21:dc:b2:cc:2f:f0:8f:99:27:be:c6:e0:
                    78:07:56:06:4e:99:b4:a5:1d:27:20:cd:55:60:28:
                    49:67:38:f6:ca:93:49:bb:00:85:9f:cf:ee:5b:98:
                    a6:70:fd:48:dc:9b:ad:8f:fe:96:ac:3c:04:b4:01:
                    84:9f:3d:37:16:cf:13:f6:e0:4a:db:0a:cd:c1:f3:
                    0f:1f:8c:7a:1c:a5:16:67:84:0e:6d:7f:21:f7:53:
                    77:40:f6:61:67:9b:5c:28:76:2e:21:08:12:d5:2a:
                    1a:53:30:05:42:09:ab:eb:3d:9f:1a:dd:33:52:38:
                    2b:e0:45:9b:15:bd:ed:45:d3:2b:cd:d5:d7:64:40:
                    44:85:6b:f4:84:a0:3a:b6:d5:3a:0d:e6:79:97:08:
                    b1:ca:b9:d6:08:86:5c:7a:cb:0f:85:f6:f8:4c:39:
                    19:bb:96:88:58:e4:be:6c:fe:e8:3a:02:5f:2f:1a:
                    10:00:2c:36:b2:3a:5b:bf:d4:14:0a:12:60:e1:ea:
                    95:3a:75:12:5e:c0:53:2f:53:2e:af:d0:46:bd:9f:
                    a4:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:BA:4F:C5:C6:A3:70:E0:21:14:B1:F9:5B:D2:29:07:60:83:6D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.crl

            X509v3 Authority Key Identifier:
                keyid:1A:1F:5A:6A:94:5D:B3:85:0A:41:53:82:34:5C:94:0A:54:F4:3A:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/3a959aba-ef69-4a56-aa6b-1ca1fa5af3a0.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:9e:14:28:de:77:fe:ef:de:d8:03:db:4b:ed:e7:d5:c9:4f:
         31:ad:3b:30:72:38:39:9f:58:33:84:17:5f:69:99:21:32:55:
         e7:14:78:3a:3f:b9:b5:be:09:ab:4e:00:fc:65:55:84:07:c4:
         e2:66:61:94:54:47:8f:87:a0:c2:d2:ad:5f:d3:6b:2e:e1:c5:
         d7:bb:4f:9d:8e:f1:9d:93:2c:77:14:01:43:72:ef:27:09:7d:
         58:af:39:b3:a4:9d:5d:f6:92:1a:cb:f7:da:28:e0:8e:c9:e6:
         f3:0f:32:57:64:93:ec:f8:ce:35:a2:b4:c6:e3:5c:d3:b2:da:
         30:71:e5:b0:d9:4f:e6:d4:ae:c3:f6:4e:5e:c6:44:09:03:3f:
         a5:2f:d0:ba:5d:11:3b:78:ae:a8:b3:2c:ae:5a:cb:c0:d3:e9:
         0e:a7:58:e3:d3:44:70:9d:77:03:0d:d3:df:90:1c:c3:55:e7:
         f9:30:05:f6:2f:61:8e:47:f1:86:bc:99:47:b8:92:ff:a3:50:
         63:cb:5f:87:89:3a:33:69:5f:12:04:75:4c:b4:2f:0e:91:ea:
         2f:73:ba:53:cc:9b:a8:d3:23:93:85:af:86:2b:33:8a:5f:a3:
         27:03:7f:a2:59:93:a1:ba:df:79:de:c8:8f:4b:f1:59:00:ba:
         d5:50:06:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:00 2025 by rpki-client on console.sobornost.net