Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft
File:                     a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft (raw, json)
Hash identifier:          WDI9Lj4PX3mTWMbqCEfpMlyg5b2CtnbSVwyKdfvvEOs=
Subject key identifier:   CB:11:DA:38:0D:31:EA:C3:FF:29:8E:CE:71:42:35:BC:9C:5F:95:2C
Authority key identifier: EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2
Certificate issuer:       /CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
Certificate serial:       010D0C9F432858498374E0D274336CAE0C0D5500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft
Manifest number:          010D0C9F43285848B4E93025F73C4C0DDA1BB58C
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 15:00:00 +0000
Files and hashes:         1: 3fe8f075-bd7a-3a38-ac88-4927e92f276b.roa (hash: 0aI3J+vNU1WHu7ahYeJ8aA3F3QjyQKcrmodoSEJRqvc=)
                          2: a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl (hash: ruoozzEMntB6XEwCs5+8lC2b0N4CfZJ7J7w4bA35P4s=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:e0:d2:74:33:6c:ae:0c:0d:55:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a1db5c09-4590-44b5-8023-fa4bdd8d5bac
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 16 15:00:00 2025 GMT
        Subject: CN=55b5a098-d741-4394-a60b-c3f6af6e8f16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:28:9c:17:0e:87:4b:71:e9:ad:13:61:3a:60:
                    dc:a6:51:23:5d:e8:4b:d8:5b:cf:0c:43:d8:51:7a:
                    51:45:83:72:0e:6c:4d:d5:9f:26:8a:68:b0:28:a1:
                    df:48:4a:ce:70:b3:f1:36:fe:63:ee:15:29:a1:c7:
                    37:1c:be:3e:91:1f:a4:16:5e:38:ca:ff:14:e3:10:
                    19:1a:f8:14:2e:e0:65:9b:a4:9b:9b:92:0d:99:c5:
                    38:7f:77:1a:8a:c0:b7:77:ff:de:8a:02:c0:82:b4:
                    7d:fa:a9:ed:6d:96:df:06:cd:64:9a:ea:ed:70:4f:
                    b4:65:8d:9a:b6:c9:bc:b8:8a:bf:2c:6c:f3:d2:4c:
                    5a:33:4c:bb:63:fd:97:79:7b:82:05:7b:da:e4:a2:
                    89:be:e3:b0:28:21:2e:8f:e2:26:06:65:b0:e0:ed:
                    44:21:51:a2:ba:58:4f:c4:5c:d5:ee:bf:7f:99:3d:
                    ed:fd:ec:ca:a3:f2:d9:73:f6:c5:5f:53:2d:c1:90:
                    35:04:cf:3d:b7:9c:0f:9d:25:21:7a:9a:7c:a4:e4:
                    67:f8:41:d2:05:3e:80:09:75:65:53:5b:40:b7:ad:
                    66:f2:fc:b9:c5:9e:be:8d:43:f8:9c:82:f1:be:e8:
                    d9:7e:3e:d8:7f:9c:ea:3d:12:80:3a:4e:de:01:96:
                    c4:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:11:DA:38:0D:31:EA:C3:FF:29:8E:CE:71:42:35:BC:9C:5F:95:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.crl

            X509v3 Authority Key Identifier:
                keyid:EE:BC:02:B2:23:67:F2:6A:51:5A:16:7F:5E:72:23:BC:96:0D:40:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a1db5c09-4590-44b5-8023-fa4bdd8d5bac.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:a6:8f:70:ae:33:2f:83:3d:0b:01:03:de:97:b4:71:14:75:
         b4:b6:99:b7:48:93:e2:7b:a1:97:d9:6d:84:8f:37:ca:c7:24:
         b7:b5:20:4b:5e:b1:a8:1e:d2:e7:6b:66:e1:5b:c1:cc:3c:05:
         a8:7c:a6:d3:1a:47:2e:bb:68:be:fb:ef:fb:dc:71:4e:14:ab:
         a5:d6:00:76:be:93:c7:72:ad:37:01:17:84:b8:5c:37:a3:c6:
         f6:58:e0:a2:1b:a7:d9:db:03:fb:fa:20:9d:ef:72:c0:5f:25:
         42:c6:76:b0:ee:d7:3a:fb:64:11:17:db:fe:6f:7a:2a:a8:63:
         36:8b:8d:9e:89:22:bc:d7:d6:70:f7:36:f8:94:ed:ab:90:03:
         e3:07:1e:bd:78:9b:57:82:40:f3:55:a2:36:3a:a1:e7:bb:e7:
         b0:69:05:7c:85:45:94:53:95:a1:71:c2:76:35:41:a5:0c:13:
         18:55:04:fc:90:ed:f0:cb:5e:98:c2:8a:84:a9:a2:77:5b:62:
         00:d1:b4:ec:1d:75:f3:bf:5c:f0:26:2d:68:18:80:ec:8b:a7:
         0a:2f:8c:f5:91:be:8e:f4:a1:65:e7:f6:55:74:e6:ae:53:07:
         64:e1:f9:a5:dc:be:a4:8b:ed:fa:0a:29:0d:61:c3:98:50:c5:
         a9:31:0b:bf
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmDdODSdDNsrgwNVQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTFkYjVjMDktNDU5MC00NGI1LTgwMjMtZmE0YmRkOGQ1
YmFjMB4XDTI1MDQxMzE1MDAwN1oXDTI1MDQxNjE1MDAwMFowLzEtMCsGA1UEAxMk
NTViNWEwOTgtZDc0MS00Mzk0LWE2MGItYzNmNmFmNmU4ZjE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCicFw6HS3HprRNhOmDcplEjXehL2FvPDEPY
UXpRRYNyDmxN1Z8mimiwKKHfSErOcLPxNv5j7hUpocc3HL4+kR+kFl44yv8U4xAZ
GvgULuBlm6Sbm5INmcU4f3caisC3d//eigLAgrR9+qntbZbfBs1kmurtcE+0ZY2a
tsm8uIq/LGzz0kxaM0y7Y/2XeXuCBXva5KKJvuOwKCEuj+ImBmWw4O1EIVGiulhP
xFzV7r9/mT3t/ezKo/LZc/bFX1MtwZA1BM89t5wPnSUhepp8pORn+EHSBT6ACXVl
U1tAt61m8vy5xZ6+jUP4nILxvujZfj7Yf5zqPRKAOk7eAZbEZwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFMsR2jgNMerD/ymOznFCNbycX5UsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hMWRi
NWMwOS00NTkwLTQ0YjUtODAyMy1mYTRiZGQ4ZDViYWMvYTFkYjVjMDktNDU5MC00
NGI1LTgwMjMtZmE0YmRkOGQ1YmFjLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTFkYjVjMDktNDU5MC00NGI1LTgw
MjMtZmE0YmRkOGQ1YmFjL2ExZGI1YzA5LTQ1OTAtNDRiNS04MDIzLWZhNGJkZDhk
NWJhYy5jcmwwHwYDVR0jBBgwFoAU7rwCsiNn8mpRWhZ/XnIjvJYNQKIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hMWRiNWMwOS00NTkwLTQ0YjUtODAyMy1mYTRi
ZGQ4ZDViYWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQADpo9wrjMvgz0LAQPel7Rx
FHW0tpm3SJPie6GX2W2EjzfKxyS3tSBLXrGoHtLna2bhW8HMPAWofKbTGkcuu2i+
++/73HFOFKul1gB2vpPHcq03AReEuFw3o8b2WOCiG6fZ2wP7+iCd73LAXyVCxnaw
7tc6+2QRF9v+b3oqqGM2i42eiSK819Zw9zb4lO2rkAPjBx69eJtXgkDzVaI2OqHn
u+ewaQV8hUWUU5WhccJ2NUGlDBMYVQT8kO3wy16YwoqEqaJ3W2IA0bTsHXXzv1zw
Ji1oGIDsi6cKL4z1kb6O9KFl5/ZVdOauUwdk4fml3L6ki+36CikNYcOYUMWpMQu/
-----END CERTIFICATE-----