Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
File:                     3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft (raw, json)
Hash identifier:          9dkk0tcqQzgsBtao+fWJy4YYmFFNAw01zeDmXlF48fU=
Subject key identifier:   A4:34:52:12:12:AC:E3:2F:32:6D:88:CA:1F:08:C7:FC:3E:AA:EF:0B
Authority key identifier: 78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75
Certificate issuer:       /CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
Certificate serial:       010D0C9F4328584983571429EBDC5F8A2B544940
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft
Manifest number:          010D0C9F4328584073A858BEA5A35ED25C3440D1
Signing time:             Sun 13 Apr 2025 14:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 14:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 14:00:00 +0000
Files and hashes:         1: 3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl (hash: t3vkWcVJrsD+ZImc+V/o7hKUYIT/AkH3MFYHga6bLdU=)
                          2: 617c09a2-b74a-348a-bb1b-065e2212399f.roa (hash: TfQ0GMtJk8Gj8kIT+zZuwxk2mSDNqTcTvsAaDvt7Isw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:83:57:14:29:eb:dc:5f:8a:2b:54:49:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3fcccdf8-e770-4c4c-abd1-c8b63238594b
        Validity
            Not Before: Apr 13 14:00:07 2025 GMT
            Not After : Apr 16 14:00:00 2025 GMT
        Subject: CN=2f21f854-51de-481a-83f9-fc81eb1f38c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:4a:58:4a:1a:e5:60:aa:79:30:7d:a1:96:4d:
                    50:8a:6f:64:5f:33:e7:8c:23:6c:3e:77:d4:69:f6:
                    ab:dd:63:82:70:82:b1:e5:21:1d:7b:fb:cb:8e:1f:
                    96:29:9f:94:a8:5a:3b:8c:a9:d4:d2:08:f5:32:ea:
                    6a:0e:fa:70:7f:09:a1:d7:10:66:f1:49:aa:4e:d1:
                    a7:68:fc:0b:20:13:87:51:21:fd:c1:1b:35:b5:8c:
                    3b:3d:03:19:6e:da:2f:72:02:c6:49:b9:29:66:40:
                    27:ad:9b:83:80:d8:28:96:6c:37:b7:8e:e3:0b:69:
                    33:14:c5:f6:8e:00:34:78:e0:d4:93:9f:5d:d6:e8:
                    31:c3:62:6f:20:9c:2b:78:f0:a9:33:1b:0e:2f:6e:
                    06:1d:95:0f:f8:ef:6f:a6:56:3d:3d:14:b8:4d:06:
                    bc:71:a0:3c:a9:7a:74:4f:0c:7c:6b:b4:1c:8a:66:
                    bc:c0:da:7f:3b:9c:3a:eb:07:20:c0:12:44:3d:e2:
                    bc:12:8d:ab:85:9d:6e:d2:c7:64:6a:9d:62:70:a1:
                    d8:ff:58:83:09:d2:5c:76:fd:12:79:df:e1:02:3a:
                    bf:6f:eb:b3:13:d5:1d:71:0a:9e:d1:7c:3b:40:4e:
                    23:8b:47:d1:b0:28:c7:e4:35:bc:1f:3d:c5:31:94:
                    77:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:34:52:12:12:AC:E3:2F:32:6D:88:CA:1F:08:C7:FC:3E:AA:EF:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b/3fcccdf8-e770-4c4c-abd1-c8b63238594b.crl

            X509v3 Authority Key Identifier:
                keyid:78:94:5F:4E:F8:F5:A3:42:58:B9:55:C3:C3:39:0E:17:70:D1:13:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fcccdf8-e770-4c4c-abd1-c8b63238594b.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:fb:10:a2:48:7b:51:51:f0:c6:8f:e1:30:b0:e8:bb:00:b4:
         af:58:62:84:61:41:78:60:5c:8f:34:03:34:07:81:c2:95:c5:
         28:5f:0d:2d:4f:72:2e:fa:2b:54:16:74:dc:a3:77:49:ee:e4:
         3a:a4:d3:3f:ff:8e:39:58:ea:fb:3b:4a:ba:79:1b:ae:86:73:
         a3:bf:f3:01:dd:6f:fa:2a:97:84:e7:e7:9c:3c:f5:12:8d:e9:
         c1:a2:bd:bd:80:3e:f7:6d:71:d4:6a:07:50:0d:a1:cf:38:ee:
         33:71:74:83:72:bb:f2:9d:0e:da:de:58:db:94:1a:34:ca:20:
         ae:b8:a0:3e:7d:3d:43:62:ae:06:98:a5:4f:e7:3f:f7:b9:5a:
         19:e9:40:88:77:d6:cf:8a:31:59:31:9e:8c:eb:de:3b:9a:57:
         61:37:44:05:c1:ff:ac:51:f9:2f:32:83:1e:6d:15:49:a1:35:
         db:7f:a4:d5:a3:39:c8:b5:f1:21:8a:88:2d:4b:c4:9e:6c:58:
         dd:a7:67:fb:39:b5:4f:ff:77:1b:fa:4f:5e:c5:c1:9a:5e:cf:
         02:b6:6d:b9:9a:48:ab:da:4b:cb:8a:0b:e1:33:58:4e:d3:22:
         d0:1c:d9:94:59:a2:c0:71:8e:e0:d0:f5:e4:11:9c:77:7f:c5:
         5f:e0:5c:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:28:30 2025 by rpki-client on console.sobornost.net