Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft
File:                     647c9192-235d-4283-a432-fa5f0508c594.mft (raw, json)
Hash identifier:          QNsfJhxKwEJrUM5lnMV7LtjtbTF968BZgTIcf3UVqYM=
Subject key identifier:   36:DD:38:7E:37:94:89:64:83:D0:30:1A:84:4C:A7:24:27:C2:FC:E0
Authority key identifier: CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01
Certificate issuer:       /CN=647c9192-235d-4283-a432-fa5f0508c594
Certificate serial:       010D0C9F4328584982A468AEEE674678B332BF00
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft
Manifest number:          010D0C9F432858490245D6A74E9CF153401FC5AF
Signing time:             Sun 13 Apr 2025 08:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 08:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 08:00:00 +0000
Files and hashes:         1: 647c9192-235d-4283-a432-fa5f0508c594.crl (hash: tTz9h669sjGcm8VGFmZ77C9hOdjQK1CpA+GUBWVPaNo=)
                          2: 81beadc7-93c0-3ae4-8756-e5e33989dadb.roa (hash: Mr9DRP86yNpF+ratxnFcRBdYpTsRqJIPbU/XgKNroJE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:a4:68:ae:ee:67:46:78:b3:32:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=647c9192-235d-4283-a432-fa5f0508c594
        Validity
            Not Before: Apr 13 08:00:07 2025 GMT
            Not After : Apr 16 08:00:00 2025 GMT
        Subject: CN=4e4d0c80-bdfa-4ea5-9d43-3c508b862f79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:26:c0:2c:3b:88:cc:af:0b:a1:5d:6d:fc:22:
                    19:2c:e5:54:62:fe:0c:36:7d:9f:09:ec:27:b9:f2:
                    49:b9:ad:45:9d:a3:ab:9b:51:cf:74:3a:02:32:88:
                    6d:c1:b2:95:b0:2b:34:cc:0c:bb:ad:a0:5f:c5:12:
                    73:ab:75:09:33:d4:b0:c5:2a:3a:f5:3e:4f:08:46:
                    f8:98:67:b9:b6:72:96:fd:32:b6:f4:3f:58:b9:d4:
                    22:0f:0d:4d:f3:bc:d1:e5:6b:4b:a4:ee:7c:e8:5d:
                    2d:a1:19:11:60:bd:a3:63:7b:5d:b1:3d:55:b6:5a:
                    9d:8d:7e:ec:86:2f:04:ac:e8:df:5c:44:f5:cf:0c:
                    e1:ab:01:ef:e9:9a:34:26:9e:e9:f9:da:db:9e:06:
                    3e:c5:47:ef:93:99:d3:88:d5:70:63:c2:6e:a2:a1:
                    eb:9f:47:96:e1:c1:81:b0:b1:7a:d7:4b:d0:60:56:
                    86:45:e4:34:34:7d:55:b2:28:26:85:58:66:d4:89:
                    c1:db:16:ae:ad:5f:d1:19:78:c7:97:af:40:c9:45:
                    3f:4d:c8:ad:14:6d:c6:d3:fe:23:72:9f:59:ae:75:
                    1d:69:60:bd:c1:30:6f:fb:16:a3:1c:f1:a9:97:6c:
                    33:10:b6:7a:61:13:b1:3b:ff:8f:ec:3a:4a:7c:44:
                    b0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DD:38:7E:37:94:89:64:83:D0:30:1A:84:4C:A7:24:27:C2:FC:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594/647c9192-235d-4283-a432-fa5f0508c594.crl

            X509v3 Authority Key Identifier:
                keyid:CD:31:1F:76:73:F4:98:53:AF:4F:D3:25:5F:53:B4:BA:4F:47:C9:01

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/647c9192-235d-4283-a432-fa5f0508c594.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:29:5e:b3:d5:80:c8:84:d4:c3:7a:fe:eb:62:48:7e:f5:82:
         8a:bb:73:a6:73:1e:f2:32:59:c0:b1:51:04:02:90:45:d6:6a:
         28:6c:d1:97:af:8c:8f:7f:8e:0d:75:48:29:5c:5a:57:50:29:
         ad:57:27:0c:ec:99:47:73:46:de:71:39:30:12:e3:2c:cd:e8:
         cc:36:b2:bf:86:c9:e1:bf:65:b6:08:c5:aa:85:a3:8a:e3:2a:
         8a:41:d4:8e:9b:9f:ba:e7:a8:13:15:5b:0c:1a:d6:67:43:19:
         9e:4e:8a:45:9d:ea:0c:7b:d9:71:b3:62:39:1c:d2:a9:db:a1:
         4c:3b:90:f8:1b:41:fc:26:d3:46:31:b1:91:0b:60:da:e8:1e:
         36:89:6f:3a:a4:63:af:09:af:13:0c:66:59:5c:36:62:ab:bb:
         9b:36:55:34:ab:9a:72:76:d9:a3:df:46:66:91:0a:0b:61:ac:
         87:65:5a:ff:08:eb:ed:e5:7d:a4:b7:cd:ad:7a:85:17:d5:00:
         3c:de:cc:44:ae:be:30:91:1b:0e:d1:cc:cd:45:27:34:fa:7e:
         6f:9f:83:e0:8d:d4:78:01:43:67:43:fe:a0:f9:77:84:ce:64:
         0e:a6:5b:4f:88:5c:bc:4c:df:e5:1c:c2:83:d7:33:e2:17:98:
         f6:44:01:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:00 2025 by rpki-client on console.sobornost.net