Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft
File:                     9d295acd-c538-4740-8f21-9eca736b29d5.mft (raw, json)
Hash identifier:          9PJu+9z2eooER/7dGcDa8Ncs0J8WXz8xouZhhrtM7tw=
Subject key identifier:   C4:D3:ED:47:EA:79:15:CD:47:A2:86:9E:6B:60:B4:5B:27:98:B6:07
Authority key identifier: 42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9
Certificate issuer:       /CN=9d295acd-c538-4740-8f21-9eca736b29d5
Certificate serial:       010D0C9F43285849813F1262845FC210A10B8140
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft
Manifest number:          010D0C9F432858492AB8D0A4293292F4656B0463
Signing time:             Sat 12 Apr 2025 20:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 20:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 20:00:00 +0000
Files and hashes:         1: 7b0ac27c-3a94-3e0d-b88e-c8fada10fb83.roa (hash: kzG+tzKmxzOqd+9jbs78JIvAO2mXNa6h+3zwNbcFcus=)
                          2: 9d295acd-c538-4740-8f21-9eca736b29d5.crl (hash: 71T+Gq9KvgRCdhyxgQ+71Wabub6vs50vBJiJ4PHCJ2I=)
                          3: fd4c00b7-96e4-37b1-999c-f48fdf2b836b.roa (hash: Ohani+JutuGrx7NcOcz2LBIQg3F09s6k4Kp3gKqCyFQ=)
                          4: fde6a4c4-7399-3879-b40c-270da587b12a.roa (hash: BfyBLMB8RAc/ScFgD+8uhXyafW4l34g4FoefVZ09U0w=)
                          5: feb4fec0-897c-378b-9c38-ab144c9a32cd.roa (hash: APweRDFbFqcsF+cAfkvTL2niDPpMfORjAye23id5k5c=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:3f:12:62:84:5f:c2:10:a1:0b:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9d295acd-c538-4740-8f21-9eca736b29d5
        Validity
            Not Before: Apr 12 20:00:07 2025 GMT
            Not After : Apr 14 20:00:00 2025 GMT
        Subject: CN=cb3ec3f9-c7ea-425e-a94f-e37e50ba6b1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:55:e0:e3:66:88:69:64:c2:3d:2e:01:91:d4:
                    c6:f9:5f:2c:2f:82:85:61:43:89:e0:ff:6d:09:f1:
                    2b:e6:34:71:68:52:5c:19:79:26:4f:3a:c3:59:0b:
                    af:a0:63:5d:90:61:c7:8e:79:f5:29:6f:67:6a:ce:
                    88:9c:69:7e:d7:95:f0:da:d8:6a:d0:84:4e:90:7e:
                    99:72:e6:e2:92:13:9b:b6:07:02:cb:90:fe:f9:b1:
                    31:23:07:1c:14:14:3b:21:c2:45:27:84:fb:c2:d2:
                    16:74:52:0f:d8:4e:dc:21:dc:4d:90:72:17:7c:e7:
                    5b:50:97:e7:9c:59:13:33:96:9d:86:84:b4:f3:ea:
                    24:bb:e4:2c:53:04:d2:83:3f:f8:ab:cc:06:4e:a5:
                    c3:b8:91:8e:c3:f5:5f:4a:03:64:36:0c:2b:02:50:
                    87:aa:42:dd:cd:e9:be:d0:fe:19:7e:c2:76:80:7e:
                    2b:e6:73:19:4a:d5:64:b7:53:4a:d4:62:85:41:ad:
                    10:8c:d9:ea:3b:cd:bd:ec:99:17:cf:49:53:bd:c3:
                    dc:fb:fc:c3:34:b6:7a:a1:3a:32:51:c0:e1:51:34:
                    03:eb:8e:be:a0:23:64:43:0d:56:24:01:0b:98:55:
                    68:84:94:8b:55:f6:91:55:f0:cd:ff:14:02:43:34:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D3:ED:47:EA:79:15:CD:47:A2:86:9E:6B:60:B4:5B:27:98:B6:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5/9d295acd-c538-4740-8f21-9eca736b29d5.crl

            X509v3 Authority Key Identifier:
                keyid:42:03:5D:B9:00:BA:0A:9F:E5:9B:F0:A7:55:C0:87:D8:26:02:C2:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9d295acd-c538-4740-8f21-9eca736b29d5.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:d4:8a:ff:3e:1b:f1:67:d7:e5:fe:4b:f3:13:d3:6f:a8:d7:
         7b:f7:16:5f:e7:2a:85:9a:72:13:ba:7c:4e:08:f5:ad:1e:4f:
         27:8f:52:67:f4:ac:12:e0:52:bd:8d:4e:54:fd:db:41:a0:25:
         be:6f:94:e0:b6:ea:89:c2:cf:f4:b9:a9:c9:ac:0c:9e:56:d9:
         ae:27:ef:90:0f:44:b6:b9:1f:5d:c6:56:1d:87:ca:66:80:cc:
         90:2f:df:48:97:7f:04:b1:38:b8:fa:bb:d8:29:18:14:2c:82:
         ac:62:47:8d:d7:76:55:e2:76:bf:ae:ad:a7:bb:82:fb:20:00:
         5a:50:67:6f:21:7c:49:bb:82:4e:92:fa:15:24:f9:b6:28:4a:
         4b:5e:e8:69:8e:9b:54:a8:7f:37:e5:76:52:60:e6:6f:df:5b:
         f9:b1:1a:c2:dc:92:c0:af:81:c1:2d:32:a3:6e:59:2f:49:5f:
         8a:29:10:0b:9f:df:a0:a4:a2:7e:b4:d1:06:5c:df:21:23:82:
         f3:0b:4b:78:c6:89:b5:e5:db:95:6e:ee:dc:06:f9:1a:5d:c2:
         e7:98:9f:68:26:c1:91:16:d2:36:0e:0e:72:15:bc:2d:91:52:
         3f:6e:d9:18:d1:bb:1e:38:6a:8c:6c:f1:5c:f5:c8:3b:ed:eb:
         4b:49:0c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:02 2025 by rpki-client on console.sobornost.net