Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
File:                     aa31a4a0-7b77-4f56-8f89-01525b506129.mft (raw, json)
Hash identifier:          4LQhGLlNKMm0NcC5UZn5aQWHaqim9/wuOh3pKhj+wVY=
Subject key identifier:   4A:65:4F:18:0C:24:B6:E2:1C:AB:DA:FB:9D:D0:38:29:F3:50:77:21
Authority key identifier: 58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D
Certificate issuer:       /CN=aa31a4a0-7b77-4f56-8f89-01525b506129
Certificate serial:       010D0C9F4328584980C7F3BA2002242E912DEEC0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft
Manifest number:          010D0C9F43285848025535B12A6F9EF4C012B4D2
Signing time:             Sat 12 Apr 2025 16:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 16:00:07 +0000
Manifest next update:     Mon 14 Apr 2025 16:00:00 +0000
Files and hashes:         1: 08ad9252-a414-3b87-84d9-259b7e5e27cf.roa (hash: McxZhXh2+nicWWRYTyfL4CaQclWrfj/xPXK/M2M46iI=)
                          2: 2219a5dd-d685-3e5f-ada3-a3e7a05f2835.roa (hash: tIKGld3jdYdE+YTKjRXpLw/vG5+PlAXjGIFmHtzODTo=)
                          3: 3b70ef49-61e8-3c1d-a33a-51d194acff5e.roa (hash: gzvqSOJDRr25gilGVQRWs/wtHieCwCqGxXO+UrRlAew=)
                          4: 5a7572ff-0c1a-36e1-a553-3bbd80d6ecd7.roa (hash: AoxX92gVxPs0Es4kui857wGcknkGWYl+N4v9JL0wtT8=)
                          5: 5c4f117d-45b9-3f38-be81-53b231ffe933.roa (hash: bkzsTiRzquf45BIeWU+JWbfsFnpuOgviGcPj3AoBDgw=)
                          6: 918523ba-c151-3f99-b377-2e0bfbd7897c.roa (hash: CZIIA+MaPH6ydlJ3iQjxp+MD8LHMp8ntRFw4zhq9Dmk=)
                          7: a64bbfaa-a147-39f9-bf1f-dbae9971d903.roa (hash: lKyjSB3hQXaJtxpHuW8usYSviCg95oVe9JgjGwyBSPI=)
                          8: aa31a4a0-7b77-4f56-8f89-01525b506129.crl (hash: pVm/nmtJXVJ+cZfMtedrjxQiMA5jXaU5CT6hTZlVws4=)
                          9: ab1044a8-9b01-3c1f-837b-39cbd2d6b914.roa (hash: 4gl3ib7W0ZYYfntZtkcwfYiyNEp/zeCyVrFUWPpryxk=)
                          10: c1337ef0-f7e6-384f-a349-52b7ab3af9de.roa (hash: htSVEJXYRY3FZG1BPQ+oFWOb5gfB6G2KM4ATtQMCziw=)
                          11: d2cdcd77-ae31-369b-9f63-ce2a46cc8f62.roa (hash: FxlsOnnIZhIKPWKDf9lmJ4mupymQ77pY7inS2J8C8vY=)
                          12: d76cf084-a2b1-3413-8b31-b784dc8faa6f.roa (hash: uwnL7k6ubZzka2jL2Njx0aluObQvTLmEGMJJVPFafsc=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:c7:f3:ba:20:02:24:2e:91:2d:ee:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aa31a4a0-7b77-4f56-8f89-01525b506129
        Validity
            Not Before: Apr 12 16:00:07 2025 GMT
            Not After : Apr 14 16:00:00 2025 GMT
        Subject: CN=01794aef-6fab-4163-90c3-5aac52f252e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:3d:48:b9:f0:98:a1:24:1c:19:83:f3:03:67:
                    6d:05:ef:01:eb:37:fe:cf:47:d1:f1:7e:84:98:a7:
                    b4:9a:92:dc:ef:15:20:7a:a3:b1:12:ff:46:68:da:
                    bb:e5:4f:ae:86:93:47:05:1c:83:06:d0:4b:fa:bc:
                    78:4c:47:09:19:f7:49:fb:b1:81:93:7e:41:c0:24:
                    7a:62:9e:3c:84:36:47:a2:05:ad:b6:11:c3:15:2d:
                    8c:12:57:64:c3:46:7b:d3:1a:b0:7c:01:1d:ca:f5:
                    42:08:12:cd:c6:59:17:f8:1e:e0:9c:c2:a3:7e:c0:
                    81:ff:b2:64:c1:19:4d:dd:e6:0f:72:59:86:3a:d4:
                    fc:cb:da:36:06:cc:72:35:91:97:bf:ae:fb:1d:f1:
                    0a:ad:9c:fc:b2:b8:b7:9e:37:8f:99:6d:e1:f3:50:
                    ec:62:16:2e:90:e3:a4:f3:48:7c:b1:f9:04:77:bc:
                    af:74:c3:49:63:42:10:97:21:6d:31:d8:85:f7:c5:
                    08:5a:55:85:08:88:91:9f:76:21:b3:50:e2:0d:d9:
                    0f:79:9c:7f:2a:c1:be:23:f0:08:63:03:48:89:e7:
                    a4:8c:1b:56:df:e0:55:38:9a:ca:10:98:4e:9f:cb:
                    10:52:75:97:45:90:c2:41:8d:4a:3e:3d:33:03:48:
                    27:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:65:4F:18:0C:24:B6:E2:1C:AB:DA:FB:9D:D0:38:29:F3:50:77:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129/aa31a4a0-7b77-4f56-8f89-01525b506129.crl

            X509v3 Authority Key Identifier:
                keyid:58:89:4D:59:3D:A0:9D:73:D6:96:20:6E:85:EB:9B:B1:BA:9B:66:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/aa31a4a0-7b77-4f56-8f89-01525b506129.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:c3:e0:e7:0e:38:ed:91:d4:a6:51:b3:ef:e4:71:2c:1f:8c:
         20:d4:bf:ed:98:8c:8b:e2:77:56:b1:3d:8d:e4:16:9d:90:97:
         24:82:af:9e:a3:bd:20:f4:e0:20:ca:8c:10:7a:fb:2f:50:f4:
         fb:61:fe:23:48:df:24:76:51:71:c3:11:c6:46:ef:bc:6d:b2:
         99:2d:8f:0a:7f:13:92:67:d8:e6:1a:d9:e2:4c:99:a2:36:43:
         94:2a:02:6e:37:2e:e0:86:3d:9d:a9:bc:a2:a4:fc:6b:9a:7b:
         51:a5:8d:f1:e2:be:f6:17:48:cf:3e:60:5f:3b:ef:9a:cf:36:
         71:05:3f:d2:4b:87:2f:68:4f:71:2f:19:f0:9d:88:42:c7:d3:
         8b:85:78:09:fb:6d:68:22:93:4b:df:89:67:60:4e:cd:7b:9d:
         86:80:65:9b:13:00:e2:6c:b3:59:fb:da:b2:e4:e5:3b:0d:80:
         9f:f3:34:04:01:af:8a:69:1c:7c:05:50:8e:cb:be:60:00:a4:
         55:74:60:de:d1:ac:4e:02:3d:82:09:ad:d4:77:43:68:15:7d:
         e4:75:dd:2f:b2:d1:23:62:46:3f:b3:24:0e:52:ff:34:cb:d1:
         5e:34:20:05:4c:dc:58:37:d7:dc:26:81:83:31:d8:dc:b5:e0:
         84:41:c5:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:02 2025 by rpki-client on console.sobornost.net