Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft
File:                     a4aa20f3-940b-4178-8460-6af30ac20ab8.mft (raw, json)
Hash identifier:          nGkkdQBRQzZSv9PsSHMX3ECr6hVE0hOPuDW8Pgxju1o=
Subject key identifier:   69:9F:1D:AB:7B:D5:75:80:DC:3C:9D:58:3D:46:C4:40:05:19:33:58
Authority key identifier: 8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68
Certificate issuer:       /CN=a4aa20f3-940b-4178-8460-6af30ac20ab8
Certificate serial:       010D0C9F4328584981F1B387902B50D11E15D840
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft
Manifest number:          010D0C9F43285848E2E19D0431924C981F3ABA7A
Signing time:             Sun 13 Apr 2025 02:00:03 +0000
Manifest this update:     Sun 13 Apr 2025 02:00:03 +0000
Manifest next update:     Tue 15 Apr 2025 02:00:00 +0000
Files and hashes:         1: 814dcbf2-1251-3d71-a3fe-4f3347764cb0.roa (hash: Q1q8Nd+PY7eLtoZw+dzjkbYiiTYLm+u+62zGCzeiKoY=)
                          2: a4aa20f3-940b-4178-8460-6af30ac20ab8.crl (hash: YkRy9BP86RxNhVRYmHOl+QcKPtJ98yV3Clt44NEzFeQ=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:f1:b3:87:90:2b:50:d1:1e:15:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4aa20f3-940b-4178-8460-6af30ac20ab8
        Validity
            Not Before: Apr 13 02:00:03 2025 GMT
            Not After : Apr 15 02:00:00 2025 GMT
        Subject: CN=e76125cc-41f3-4dbc-9fe4-a897fec80146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:42:f5:5e:3e:b7:d5:73:6d:f7:ed:4e:ab:23:
                    76:c2:56:c4:1f:56:f9:39:a5:c1:5a:ab:c3:1f:0b:
                    3f:f8:2c:d1:2a:6d:dc:95:49:9e:c0:c2:d1:22:e4:
                    74:6d:17:9c:8a:ad:6c:37:41:b1:eb:7d:71:2e:2f:
                    10:c2:a3:e9:ba:a8:1c:cf:36:14:86:75:13:40:49:
                    8f:f5:8e:42:b2:63:84:73:99:65:68:2d:10:e7:92:
                    90:01:a5:7f:4d:0f:1d:c6:56:71:fb:a8:9a:ac:77:
                    9a:23:a5:81:d9:1a:c4:8b:ea:10:1f:31:c5:d2:69:
                    b0:58:8a:ce:6a:bd:4c:89:d2:76:a8:d1:f5:eb:6e:
                    c5:c3:6f:f5:44:06:f8:39:af:16:b3:f2:5b:3b:72:
                    ef:fa:95:bc:46:d9:8a:5b:eb:cb:bb:0b:60:3b:0f:
                    6a:c6:29:d8:bc:ce:6c:1d:57:1f:a1:44:6a:19:f6:
                    c6:c9:97:c3:2a:70:4d:5f:10:3e:67:d8:66:36:39:
                    0d:3b:f2:78:53:f5:cf:d6:ae:fe:0f:44:35:45:8b:
                    fb:1e:2a:0d:12:fe:4d:10:d3:e7:48:94:97:3e:96:
                    2e:8b:b0:7a:a7:44:30:ad:65:92:12:17:e5:b8:e7:
                    be:33:7e:65:33:f7:74:bb:a8:95:50:1a:af:3b:d6:
                    10:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:9F:1D:AB:7B:D5:75:80:DC:3C:9D:58:3D:46:C4:40:05:19:33:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8/a4aa20f3-940b-4178-8460-6af30ac20ab8.crl

            X509v3 Authority Key Identifier:
                keyid:8A:E9:AF:DA:7E:22:90:8A:D4:D0:93:36:7D:8F:CD:98:4A:AF:C2:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a4aa20f3-940b-4178-8460-6af30ac20ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:cf:9f:5e:94:e9:3c:42:16:1c:85:ca:66:e2:09:aa:67:df:
         ce:61:1f:38:aa:4e:10:4b:c5:01:f7:68:df:5e:72:e2:9e:41:
         ea:cd:ac:96:47:3b:0b:4f:35:e8:fa:63:d6:cb:fc:e2:e3:bf:
         d3:79:8b:7c:0a:e1:c5:33:c7:d5:f1:26:11:a8:b1:31:50:eb:
         22:57:ef:29:3c:82:64:ea:e7:1c:42:04:28:8c:b4:bb:4e:69:
         8a:63:5e:0e:a9:6a:4c:07:b2:86:7f:ef:45:bd:40:c1:65:8c:
         f6:13:1e:e8:d6:96:03:c6:4e:b9:f9:70:32:68:45:10:c2:48:
         68:ea:d0:d6:59:73:59:f4:9e:ec:48:ad:77:32:ef:1c:ad:ad:
         ae:72:31:f4:5f:9a:9c:1a:47:05:4a:61:b4:da:3f:c6:31:b8:
         f0:77:ff:96:54:3e:87:73:b2:33:6d:39:2c:c5:e7:47:3c:9a:
         eb:9a:69:a9:87:89:a3:8b:9a:74:02:db:ce:b6:9a:e8:80:96:
         d1:55:5d:73:2b:18:34:77:b7:1a:55:78:9a:c1:d3:b6:15:f9:
         d4:7e:9a:e4:47:e0:ca:70:cc:60:52:5c:42:2c:c5:a9:c0:ed:
         6e:ab:cd:cf:7f:bf:ce:8a:50:b9:ae:bc:d3:28:24:c8:ce:7d:
         99:2a:dc:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----