Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft
File:                     a81b6111-6888-4c67-a629-e33c0db56e34.mft (raw, json)
Hash identifier:          5OTOnUjl03JTau7yrlL7ERX0A8/718VqPl9IlU8tjRs=
Subject key identifier:   32:B9:E9:84:C8:B2:8A:68:CF:3D:81:63:4C:95:0E:D2:4F:F2:68:16
Authority key identifier: A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4
Certificate issuer:       /CN=a81b6111-6888-4c67-a629-e33c0db56e34
Certificate serial:       010D0C9F43285849810382741B2D0229740CD100
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft
Manifest number:          010D0C9F43285848D6BBBE8772AE98C7CF2C98BE
Signing time:             Sat 12 Apr 2025 18:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 18:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 18:00:00 +0000
Files and hashes:         1: 4aee1210-b151-378c-ae0c-1307a8461813.roa (hash: UtuDU1VW0Nl1PJ9ZsFHrdSQGtqr5bd0XrpKlCmuLWqU=)
                          2: a81b6111-6888-4c67-a629-e33c0db56e34.crl (hash: XUJuc9LICNUtf6mbJgLcVrEMyWJHcKN2VB7j5mwOXoU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:81:03:82:74:1b:2d:02:29:74:0c:d1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a81b6111-6888-4c67-a629-e33c0db56e34
        Validity
            Not Before: Apr 12 18:00:07 2025 GMT
            Not After : Apr 14 18:00:00 2025 GMT
        Subject: CN=57d52bb1-b1f4-49d2-bcd9-31629f340896
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:85:e7:c2:a9:7f:19:c9:59:64:a5:fb:cf:d2:
                    63:53:ba:1d:98:9a:cf:aa:f0:10:d0:90:ab:1d:7f:
                    ff:e7:51:12:cc:50:b0:e5:7c:d8:e7:64:5e:cf:95:
                    8d:fd:eb:e1:92:6f:8f:65:58:6d:89:71:57:81:f8:
                    ca:d3:58:4f:74:3f:54:1d:8a:08:13:f2:c6:e7:2c:
                    f7:2f:9b:25:ea:2b:0b:30:69:a1:94:4d:9a:ba:b1:
                    20:7c:0d:a8:da:09:e4:35:3b:44:f8:ed:cd:0f:34:
                    77:c4:ce:79:9d:db:de:fb:d6:b4:22:a2:c9:e4:dd:
                    8e:57:fe:5d:a7:eb:bc:8f:86:3e:88:ea:0a:36:2e:
                    a5:3c:e0:d0:27:7d:3f:71:60:0c:f9:1f:1f:15:04:
                    c7:d4:6f:a9:4a:eb:2f:1f:07:df:91:18:62:ba:f1:
                    39:b2:4d:f8:4f:9e:c5:c1:f9:83:8e:7d:e4:fc:32:
                    bf:6d:cb:fe:20:0a:58:9e:92:1e:37:be:e2:a1:d8:
                    d0:40:a2:1d:0e:f0:bd:93:1a:0e:1a:e4:00:f4:34:
                    ff:dc:1d:a2:10:df:3a:9a:b3:85:25:fe:0d:a3:74:
                    1d:c4:9f:e0:bd:91:99:53:9e:d6:cb:47:ab:a0:fb:
                    d2:4d:9a:8d:dd:a7:61:0f:4d:5a:f3:77:06:6e:fa:
                    d5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:B9:E9:84:C8:B2:8A:68:CF:3D:81:63:4C:95:0E:D2:4F:F2:68:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34/a81b6111-6888-4c67-a629-e33c0db56e34.crl

            X509v3 Authority Key Identifier:
                keyid:A5:CA:AE:8D:5B:6B:21:66:52:B0:09:10:B3:04:98:BD:4B:65:11:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/a81b6111-6888-4c67-a629-e33c0db56e34.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:39:a6:bb:ff:42:9b:0a:49:1d:dc:4e:8c:df:6f:64:e7:15:
         f3:05:7e:de:3d:dc:d2:76:c6:ef:71:12:ff:84:2d:e4:64:eb:
         30:3e:ce:ed:1b:ab:1e:01:45:2f:b1:b1:b2:d0:cb:27:a1:59:
         bd:37:d5:71:df:6a:3a:66:b8:28:b6:82:f5:0e:d2:cd:80:b9:
         ad:27:c4:94:fe:0e:71:07:93:c9:06:77:be:4a:40:3f:92:f1:
         49:cf:b1:37:e2:d1:9c:c5:97:f6:11:09:ab:76:17:60:91:bc:
         55:ea:f0:7c:33:2b:1b:00:8c:4a:18:9c:d1:d7:5f:f9:08:4a:
         b0:6d:0b:b0:75:79:21:ee:9b:c3:d8:d6:05:b7:7f:2d:b6:99:
         fe:9f:8e:4d:c9:8e:4d:f3:40:d8:e6:8c:cf:93:e1:7b:cc:d6:
         6f:ae:46:00:f3:37:a5:18:96:5f:09:14:0c:f3:9f:6a:d2:27:
         6e:d8:8f:2f:54:ff:d3:99:29:69:9b:0b:6f:b5:05:78:13:97:
         01:9c:0b:bd:2d:f3:cc:fe:54:8f:93:34:8b:0e:7d:cf:e1:d0:
         ac:5e:e3:43:18:17:f8:14:dc:6d:79:ec:1a:65:9d:a4:f9:48:
         6b:cc:e1:8a:d6:c2:c9:5a:4d:61:02:71:e8:57:33:2a:f1:b9:
         a1:54:99:a8
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmBA4J0Gy0CKXQM0QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTgxYjYxMTEtNjg4OC00YzY3LWE2MjktZTMzYzBkYjU2
ZTM0MB4XDTI1MDQxMjE4MDAwN1oXDTI1MDQxNDE4MDAwMFowLzEtMCsGA1UEAxMk
NTdkNTJiYjEtYjFmNC00OWQyLWJjZDktMzE2MjlmMzQwODk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYXnwql/GclZZKX7z9JjU7odmJrPqvAQ0JCr
HX//51ESzFCw5XzY52Rez5WN/evhkm+PZVhtiXFXgfjK01hPdD9UHYoIE/LG5yz3
L5sl6isLMGmhlE2aurEgfA2o2gnkNTtE+O3NDzR3xM55ndve+9a0IqLJ5N2OV/5d
p+u8j4Y+iOoKNi6lPODQJ30/cWAM+R8fFQTH1G+pSusvHwffkRhiuvE5sk34T57F
wfmDjn3k/DK/bcv+IApYnpIeN77iodjQQKIdDvC9kxoOGuQA9DT/3B2iEN86mrOF
Jf4No3QdxJ/gvZGZU57Wy0eroPvSTZqN3adhD01a83cGbvrV0QIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFDK56YTIsopozz2BY0yVDtJP8mgWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hODFi
NjExMS02ODg4LTRjNjctYTYyOS1lMzNjMGRiNTZlMzQvYTgxYjYxMTEtNjg4OC00
YzY3LWE2MjktZTMzYzBkYjU2ZTM0Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYTgxYjYxMTEtNjg4OC00YzY3LWE2
MjktZTMzYzBkYjU2ZTM0L2E4MWI2MTExLTY4ODgtNGM2Ny1hNjI5LWUzM2MwZGI1
NmUzNC5jcmwwHwYDVR0jBBgwFoAUpcqujVtrIWZSsAkQswSYvUtlEbQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hODFiNjExMS02ODg4LTRjNjctYTYyOS1lMzNj
MGRiNTZlMzQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQANOaa7/0KbCkkd3E6M329k
5xXzBX7ePdzSdsbvcRL/hC3kZOswPs7tG6seAUUvsbGy0MsnoVm9N9Vx32o6Zrgo
toL1DtLNgLmtJ8SU/g5xB5PJBne+SkA/kvFJz7E34tGcxZf2EQmrdhdgkbxV6vB8
MysbAIxKGJzR11/5CEqwbQuwdXkh7pvD2NYFt38ttpn+n45NyY5N80DY5ozPk+F7
zNZvrkYA8zelGJZfCRQM859q0idu2I8vVP/TmSlpmwtvtQV4E5cBnAu9LfPM/lSP
kzSLDn3P4dCsXuNDGBf4FNxteewaZZ2k+UhrzOGK1sLJWk1hAnHoVzMq8bmhVJmo
-----END CERTIFICATE-----