Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft
File:                     9c74a627-7577-4f11-89e0-589500621344.mft (raw, json)
Hash identifier:          J+AjdAt8lnfwRpdg3iQFOVGwpNP41JXddMYALRLpcFo=
Subject key identifier:   9E:9A:F3:0E:03:C0:38:F5:85:21:25:CE:CC:A7:EB:6B:84:22:E3:99
Authority key identifier: D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8
Certificate issuer:       /CN=9c74a627-7577-4f11-89e0-589500621344
Certificate serial:       010D0C9F43285849828695FF07F2181FC059C500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft
Manifest number:          010D0C9F43285848CD102A17FC693DD8164C2C47
Signing time:             Sun 13 Apr 2025 07:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 07:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 07:00:00 +0000
Files and hashes:         1: 9c74a627-7577-4f11-89e0-589500621344.crl (hash: 5VmlIvFCFn28yAm86ZGR7Lp+svNBy9FgBpKSDrrM4rU=)
                          2: 9fdf1578-2d9a-3898-b19c-fb3ca0e1cf8e.roa (hash: MYJJlF3AErorR+RqejvEAU6NOMH6eza8VTul/4zfbw0=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:86:95:ff:07:f2:18:1f:c0:59:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9c74a627-7577-4f11-89e0-589500621344
        Validity
            Not Before: Apr 13 07:00:03 2025 GMT
            Not After : Apr 15 07:00:00 2025 GMT
        Subject: CN=1888cb23-c9a0-4cdf-81ef-7b114563dec1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c3:5b:d4:5c:0a:98:5e:99:3d:e0:05:8d:82:
                    c9:57:eb:b7:43:32:50:da:16:c2:2e:0e:ef:c6:26:
                    84:01:43:37:1b:72:bd:cd:bf:17:8e:c1:b7:a6:dd:
                    c9:7e:f5:1c:70:6b:1c:f2:da:fe:b9:63:3c:b7:0f:
                    6e:44:a2:0f:5d:bb:53:48:3f:d3:63:1a:41:44:70:
                    bc:79:6c:e7:02:64:24:b8:da:f2:5b:36:c1:7c:e3:
                    f3:33:59:99:a3:4a:6c:c7:05:8f:6e:4e:1f:a4:4c:
                    b8:64:0f:f8:26:22:97:24:89:dd:b0:f5:94:4e:9b:
                    27:5a:85:af:2e:93:b6:1c:e4:4f:f0:d3:ef:95:c7:
                    31:14:7f:6f:22:ef:8f:ce:c2:a8:4a:5e:35:cc:0f:
                    79:30:8e:86:cf:44:b9:80:69:22:41:aa:a0:26:01:
                    10:1a:ae:d0:f2:8a:38:9b:15:2b:21:23:5a:7b:05:
                    78:b6:aa:c2:d8:f3:49:29:25:94:38:91:67:e9:87:
                    0b:cc:1c:c8:6e:6d:b8:1f:e4:a2:03:15:1a:02:38:
                    e7:4c:d9:a8:6c:70:cf:e4:1f:87:54:a6:49:af:d6:
                    13:a8:69:87:4a:fd:7c:6b:3a:4d:d2:dc:a4:4b:f9:
                    26:59:9b:4e:eb:84:01:10:63:a5:57:6f:ea:a8:a8:
                    ce:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:9A:F3:0E:03:C0:38:F5:85:21:25:CE:CC:A7:EB:6B:84:22:E3:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344/9c74a627-7577-4f11-89e0-589500621344.crl

            X509v3 Authority Key Identifier:
                keyid:D6:44:B8:32:E0:03:37:FD:A1:6A:62:DE:AE:42:CF:56:27:4A:A1:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9c74a627-7577-4f11-89e0-589500621344.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:b8:18:7a:41:22:2e:63:71:3d:93:5e:ab:87:9a:b0:45:69:
         e3:62:ee:0d:fc:d6:83:17:08:70:d3:f3:07:44:58:4d:19:2d:
         62:38:52:1a:96:c5:9e:17:eb:c4:fc:e0:c0:51:dc:1b:cb:84:
         fd:e8:40:e8:ba:ed:ba:c8:1a:1b:75:e8:84:58:92:4e:fa:32:
         d6:45:30:dc:05:20:f7:a3:c0:c8:8d:88:d5:ae:3a:fc:c4:a5:
         42:de:ba:ae:6d:93:61:d3:ba:93:0a:ca:23:81:65:ad:3e:9a:
         73:89:53:17:9e:0b:8c:37:61:62:e8:9d:49:52:85:32:85:7b:
         d8:29:fc:7c:2b:dd:9d:f7:7e:8d:cd:5d:a5:99:1a:1e:5a:66:
         99:f6:f5:a7:38:25:c1:87:8c:71:c8:1d:02:df:77:bf:d3:19:
         8a:ba:56:51:54:0a:4a:61:6b:6c:c9:d1:7a:a1:b3:7c:1b:ff:
         70:6a:be:9c:54:26:77:28:44:ed:20:70:3e:c1:02:6c:93:6f:
         31:ee:c4:43:63:84:b8:05:4d:1c:da:04:20:66:e1:18:fa:b2:
         17:af:53:e3:3f:30:58:fb:e3:0b:5b:93:69:39:de:d6:97:41:
         51:ee:eb:f7:f0:34:97:ed:b8:50:a6:31:5f:1b:9e:9f:09:16:
         17:44:7d:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:02 2025 by rpki-client on console.sobornost.net