Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft
File:                     ffb931d1-3206-47c9-b23b-ac8485700ccd.mft (raw, json)
Hash identifier:          x/F8izvzY1Oizh9VypoFF2hl9gZx541CE6ROAGU/0Sk=
Subject key identifier:   D8:47:2B:CC:8B:20:16:61:AF:89:4B:D3:C9:D5:DE:E6:E6:05:DA:90
Authority key identifier: BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E
Certificate issuer:       /CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
Certificate serial:       010D0C9F432858498374DF3559F0AD130B19E300
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft
Manifest number:          010D0C9F43285848CE08520EDFCA435465A396C3
Signing time:             Sun 13 Apr 2025 15:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 15:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 15:00:00 +0000
Files and hashes:         1: 326f43f8-c776-3bac-9c88-f6d427ac34b4.roa (hash: 1Bp4ik5Gt7E01FRWWFxzLjWRFi9A0EgO8EzVnH85uvY=)
                          2: e9c97ec2-94e0-3ed9-83ec-eec7c7e397ce.roa (hash: mwMs5kAzOR/jt6xxiW0z74L40nqyR5lchIolN1sh1eI=)
                          3: ffb931d1-3206-47c9-b23b-ac8485700ccd.crl (hash: V00DVmMASjEYJBDfZlCw5CETB+vsHslg50q11sFLSbk=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:74:df:35:59:f0:ad:13:0b:19:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ffb931d1-3206-47c9-b23b-ac8485700ccd
        Validity
            Not Before: Apr 13 15:00:07 2025 GMT
            Not After : Apr 15 15:00:00 2025 GMT
        Subject: CN=342c3acc-99f3-44b9-91ac-2e7051ff5723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:71:8c:8b:95:b7:ad:ba:bb:bc:71:fa:14:18:
                    26:bb:4e:01:ea:8c:cc:04:9c:34:10:06:ce:3b:77:
                    95:47:ba:1b:74:3a:40:ef:75:f2:9f:49:9f:64:13:
                    ea:95:e7:1e:3e:98:27:4e:9b:09:25:d5:d8:46:29:
                    db:c3:96:d3:9a:b7:0b:5f:db:3d:77:9e:1b:bd:50:
                    be:a6:de:be:58:5a:35:44:67:8f:0d:35:11:39:1f:
                    01:f8:27:a7:9f:e8:e2:6f:5b:fb:5e:fa:c2:39:a5:
                    3d:b6:14:96:70:80:38:f3:2f:99:af:50:2c:f4:85:
                    6e:3a:b2:78:e7:9a:e8:f0:66:db:5d:56:32:6e:03:
                    97:7a:9a:e6:0c:4b:7d:48:1d:de:8f:d7:8b:84:48:
                    f7:39:5f:58:33:bf:7c:3e:f5:d3:ee:83:2e:a0:36:
                    a1:3c:8e:92:83:c0:83:24:f3:3b:37:99:ba:38:31:
                    6b:28:40:5f:41:cd:ac:6e:4d:46:56:23:95:06:23:
                    63:20:34:f5:04:9f:41:52:fa:5d:95:b3:12:be:9b:
                    cc:d7:2a:52:86:0a:bb:45:4d:6e:91:ea:a1:bd:3e:
                    65:71:83:e8:e4:93:68:2f:52:12:14:4f:10:0e:4f:
                    cc:47:a4:d3:e0:24:bc:0f:2c:ea:ef:44:85:2a:05:
                    2a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:47:2B:CC:8B:20:16:61:AF:89:4B:D3:C9:D5:DE:E6:E6:05:DA:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd/ffb931d1-3206-47c9-b23b-ac8485700ccd.crl

            X509v3 Authority Key Identifier:
                keyid:BB:BA:C2:27:E7:63:0A:77:45:54:06:07:25:8D:46:FE:83:C2:4B:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ffb931d1-3206-47c9-b23b-ac8485700ccd.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:f6:da:c5:15:9b:e2:86:f2:53:11:d6:e0:e3:d4:ae:eb:0f:
         be:31:45:f7:96:c2:3c:1e:ec:98:c3:51:59:08:af:12:ba:1c:
         91:a3:c4:11:85:c3:29:20:da:07:59:87:9e:b8:25:1f:46:1a:
         bd:1e:cb:c1:eb:dc:14:32:cb:72:37:49:cf:1d:70:88:e2:ad:
         1b:55:b8:c2:a4:58:6a:5b:62:bc:c9:a2:3e:c9:74:bb:26:6f:
         ba:e3:38:9d:ed:e9:5c:9a:81:25:02:f2:d0:c6:8d:72:08:e4:
         d8:14:5f:fd:95:dc:93:cf:fe:ab:2d:b9:80:fb:46:b7:77:ce:
         d6:9e:cd:a6:d5:e7:4c:51:89:2d:81:5f:36:aa:d3:8b:a9:c9:
         cb:9c:bb:ec:9e:e2:25:9d:e6:7a:3b:00:40:0f:a0:2b:15:37:
         37:59:fa:0b:9c:25:1f:78:0a:93:7e:60:f2:10:24:ea:42:b0:
         ca:7a:1e:1c:41:71:f1:6a:ac:73:3a:39:c4:dc:d2:6c:90:f6:
         15:27:0c:38:71:de:7c:29:ec:f6:29:2c:9c:d6:7a:17:15:e4:
         89:23:e0:3e:a3:a6:05:8f:3f:5a:41:32:4a:39:45:47:65:66:
         0b:84:ed:14:f2:6d:dc:15:de:82:d0:87:9a:de:dc:f6:70:b9:
         2e:c2:6f:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 13:45:05 2025 by rpki-client on console.sobornost.net