Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft
File:                     a28c0165-b200-4b04-831e-e344861ac9ad.mft (raw, json)
Hash identifier:          P3+JhRByx2ASeYgsuKUNIiKN+drGr2sa6D6w0dwpPX8=
Subject key identifier:   69:CF:11:3B:8E:04:B3:5A:44:86:1E:F6:9D:53:14:87:E0:A9:AB:BB
Authority key identifier: C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45
Certificate issuer:       /CN=a28c0165-b200-4b04-831e-e344861ac9ad
Certificate serial:       010D0C9F4328584980E5BE110560A5D715F3B3E0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft
Manifest number:          010D0C9F43285848EF5ED492FF3F21CDF52955B6
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 4c48782e-20ed-30a1-ad77-09b465628a99.roa (hash: 67EYRn6bZuzPZsk75ScG5Vtl0LqNWdmXpKkKuU7Oaa8=)
                          2: 71bd6d72-11b5-3d92-bcff-0f3a77d5cd58.roa (hash: sVa0vY0rG4aZGjuE9u2VHsiYS5csxyFnoXjqryfvixk=)
                          3: a28c0165-b200-4b04-831e-e344861ac9ad.crl (hash: XJ9MPX0JGe3gMzOJawzY5B0bZsJu3RMeOJ99v+QX1iY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:be:11:05:60:a5:d7:15:f3:b3:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a28c0165-b200-4b04-831e-e344861ac9ad
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=890aa967-6adc-4df4-81b1-02939c88d50c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:34:d9:a4:cf:e2:b0:17:49:f6:90:52:ea:4b:
                    0e:80:fc:00:f8:67:c8:ae:78:dd:59:30:37:7e:c2:
                    e2:1e:64:77:f4:bb:26:e9:83:b1:32:33:1e:4e:00:
                    dd:5b:22:06:83:e3:f0:09:07:0d:c7:dc:59:3f:4c:
                    57:51:9d:52:ae:08:15:a9:ac:86:5c:a1:8b:d9:e1:
                    60:b7:53:93:32:12:68:c9:38:b2:d5:a7:d9:f1:05:
                    44:c2:7c:8e:eb:3a:60:98:85:96:b2:50:12:fb:e3:
                    01:60:fe:51:de:21:0a:7f:6c:6a:6f:bf:ea:2c:63:
                    f5:68:eb:eb:82:35:e1:1b:19:c8:59:f3:30:73:d2:
                    c4:f6:9c:79:35:81:e5:8f:86:48:28:e8:d9:57:39:
                    47:dc:55:36:c4:92:9e:e7:71:57:3d:a5:05:9b:25:
                    1a:57:12:c4:2e:88:12:5f:2a:fe:a8:7d:2d:13:6a:
                    79:68:e3:9f:97:e8:b2:72:00:ba:64:aa:4c:ec:ce:
                    ff:c8:73:f3:86:2d:a0:04:ce:2e:4b:b3:c0:98:1c:
                    14:c2:d1:3f:73:26:2f:59:93:9a:35:ef:db:ac:6c:
                    77:fc:6a:82:7c:cb:8b:95:9a:d3:c5:b0:b5:97:92:
                    28:63:51:c0:fc:70:2d:3c:da:25:44:a6:a2:ae:2e:
                    9f:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:CF:11:3B:8E:04:B3:5A:44:86:1E:F6:9D:53:14:87:E0:A9:AB:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad/a28c0165-b200-4b04-831e-e344861ac9ad.crl

            X509v3 Authority Key Identifier:
                keyid:C5:7C:50:07:6B:A9:29:35:F4:91:4A:17:DA:4F:1E:24:83:ED:79:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a28c0165-b200-4b04-831e-e344861ac9ad.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:34:11:13:aa:3b:f6:9b:84:cd:7c:86:5a:d5:e5:d5:7e:f9:
         a9:19:5d:59:6e:03:cd:62:07:ba:af:6c:4e:09:7e:92:9e:25:
         6f:4f:69:07:eb:01:c6:80:dd:71:c7:d2:17:59:d9:d3:10:8e:
         f3:35:5f:1c:94:6f:40:1a:b3:47:13:48:d9:14:15:6d:1c:c5:
         51:39:08:1b:07:8b:e7:01:b4:ff:a6:4d:2d:63:e2:b4:3d:a0:
         40:98:e2:24:3e:31:21:6b:0e:e5:9d:a4:ec:91:22:03:d8:57:
         cc:37:75:55:95:1d:ce:63:a0:38:24:23:dd:b4:2b:10:93:80:
         f8:f8:2a:40:be:7a:ba:9e:c1:10:22:20:a0:50:21:ec:90:a8:
         0a:c6:2f:47:1c:83:8b:e6:89:42:28:c3:de:6d:ae:04:ad:ef:
         4b:c3:11:69:27:5d:6b:bd:9a:c2:2e:e6:fb:f9:1a:75:de:e4:
         21:9b:f3:00:85:13:c8:84:5d:d0:b9:26:56:b0:c9:42:01:9c:
         79:97:ed:88:ce:c5:2e:86:e9:a6:cd:1a:3a:6f:57:0a:f7:09:
         03:38:17:f9:5e:e5:02:6e:09:ed:92:13:26:83:3c:ea:02:bb:
         5b:ed:15:0f:cc:e9:af:16:0a:b3:e5:ef:10:69:ef:16:f3:ac:
         69:6e:86:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:02 2025 by rpki-client on console.sobornost.net