Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft
File:                     aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft (raw, json)
Hash identifier:          obg2e+wYpgxya7of19qczPNELijHFGG9ykUf8gvUbD4=
Subject key identifier:   F1:75:43:08:0E:83:11:07:37:3D:8C:FE:71:D8:BE:E5:6B:A1:56:65
Authority key identifier: 76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46
Certificate issuer:       /CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
Certificate serial:       010D0C9F4328584982C23282A64761A6CC9E3500
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft
Manifest number:          010D0C9F4328584073A8497872C4F36DBFDFA6D2
Signing time:             Sun 13 Apr 2025 09:00:07 +0000
Manifest this update:     Sun 13 Apr 2025 09:00:07 +0000
Manifest next update:     Wed 16 Apr 2025 09:00:00 +0000
Files and hashes:         1: 4e7d8a90-78e9-308a-898b-13d40c2410ea.roa (hash: syhLIAJxcer5qIUojO6Tph0UB5IDlpoOdtcln8VWo/A=)
                          2: 8956d2d3-1e70-322b-bf4b-1f6845bdfd5a.roa (hash: Tgv9XVzyWTgTeQWptdvoLK58sZk6kv1W89VeDeHc1L0=)
                          3: aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl (hash: 0/TGXEdcdUg9SCVvxM85KuuwOCNxdrixcwpFDN6rjo8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:c2:32:82:a6:47:61:a6:cc:9e:35:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85
        Validity
            Not Before: Apr 13 09:00:07 2025 GMT
            Not After : Apr 16 09:00:00 2025 GMT
        Subject: CN=789b6efb-843c-4452-ad70-7fc85d4d9def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:7b:c4:7f:29:85:17:7c:6d:3f:f6:80:18:5d:
                    2f:e3:9b:74:a8:e7:58:e1:e6:9a:89:4f:e5:a8:89:
                    a2:b4:3c:ae:7c:6e:99:e1:45:6d:d2:78:b0:81:75:
                    32:09:49:d3:5e:7b:41:57:87:e7:a1:29:9c:9d:fa:
                    8a:62:f2:b7:d2:c0:dd:43:1e:96:e2:77:7a:bc:44:
                    5d:66:ab:f7:03:33:0f:af:b1:a6:7e:06:24:b4:12:
                    16:67:c8:43:d1:0d:f0:6b:2a:ea:64:d7:bb:a6:68:
                    19:c5:81:9a:e8:09:54:1a:ad:a7:7b:49:e3:10:78:
                    06:9b:87:0e:e8:17:48:4f:7f:21:28:e6:1b:ad:80:
                    5e:63:1a:dc:2d:80:8a:b0:2f:2d:2c:df:b1:7b:f1:
                    a1:a2:52:eb:bd:5e:af:d4:d0:6c:b1:ae:ed:57:1a:
                    fc:58:c2:7e:d4:10:80:39:e5:c5:ca:41:62:2a:6e:
                    ac:9f:ea:f5:00:18:81:7a:c1:75:45:43:db:31:09:
                    e5:ea:9e:fd:4b:3e:25:2b:4d:8d:bd:74:09:d3:e7:
                    1d:fd:47:b3:00:0d:65:83:e4:a8:74:a0:d3:b5:45:
                    5d:2a:c7:de:2f:b7:9c:f7:6b:9b:7c:2b:ae:d8:84:
                    88:b7:c6:ab:65:2f:70:5e:b8:fe:4f:eb:f8:ba:c0:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:75:43:08:0E:83:11:07:37:3D:8C:FE:71:D8:BE:E5:6B:A1:56:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.crl

            X509v3 Authority Key Identifier:
                keyid:76:0D:14:91:F7:E0:4E:1E:FA:F0:00:8F:64:2B:3A:8C:9E:0F:CE:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/aaf9a3fc-3a8c-47e4-91fa-d7808b06ae85.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:d6:f0:12:cf:aa:e0:06:b0:c5:22:7a:ab:0f:09:7e:bb:9e:
         d1:fc:8c:a6:42:31:1e:4c:9f:99:f6:a0:21:ce:ea:1c:f2:1b:
         77:01:9a:e6:56:8c:bc:6e:d6:74:d8:06:40:46:d0:f9:21:81:
         d1:4d:3a:89:19:17:a7:52:6d:86:8d:99:79:de:ee:c7:f1:40:
         3d:9c:0d:eb:7e:db:6c:aa:ea:fd:4f:38:d3:be:c7:96:d8:04:
         68:b1:4f:30:e8:94:50:95:b9:79:09:6d:cf:5b:0a:e4:e7:03:
         76:15:57:10:33:1b:30:1e:42:8a:33:a8:25:06:d5:b9:f5:0a:
         3b:b5:2c:f9:b9:05:92:d4:a7:2f:fd:2f:d6:e1:15:84:89:7b:
         7a:ea:41:b0:f7:3e:eb:7f:08:04:a9:6f:1f:80:d0:7d:ff:76:
         91:91:78:63:16:56:b6:0a:b3:40:61:cd:2e:ba:24:72:64:52:
         89:a3:d0:d5:39:9d:ee:e9:81:79:5d:f4:4e:0e:a0:38:16:48:
         73:b6:23:bb:bb:e4:32:cc:37:d2:c1:33:46:58:9b:a0:80:30:
         29:44:35:ee:94:c5:30:61:f7:0f:b0:e8:b4:bf:68:98:59:dc:
         6e:91:70:e4:8f:e6:5d:66:84:59:5e:6c:57:37:67:fb:e5:da:
         c0:c0:bb:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 15 22:32:20 2025 by rpki-client on console.sobornost.net