Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
File: 4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft (raw, json)
Hash identifier: ToKHhdk3tukP5ciMmnDkeUZuB9+/0KXaDat6bRvK1dQ=
Subject key identifier: B5:F8:33:09:F8:59:1F:C2:FA:78:7D:44:D0:49:A5:65:F7:F9:A6:F7
Authority key identifier: 4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
Certificate issuer: /CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Certificate serial: 66A7597DA5C37A15CCE08A34FAB2499234CAE6AD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
Manifest number: 02B1
Signing time: Fri 28 Mar 2025 17:54:20 +0000
Manifest this update: Fri 28 Mar 2025 17:49:20 +0000
Manifest next update: Sat 29 Mar 2025 19:50:20 +0000
Files and hashes: 1: 3137322e39392e32322e302f32342d3234203d3e20383334.roa (hash: +NSqloT2n9KgO/z11q1eB6GEWVUHYATGBM7/Um3IKJ8=)
2: 3137322e39392e32312e302f32342d3234203d3e20323132323338.roa (hash: in3k9Yjh/u6Cnf6pJYpB9oQyE6mX5nQXZMj4XcEYDSM=)
3: 3137322e39392e32332e302f32342d3234203d3e203133333335.roa (hash: WMfSPmscTjAWHCtt7x5OSTOr+zwCohtmTttHIDRvqk4=)
4: 3137322e39392e32332e302f32342d3234203d3e20333938393632.roa (hash: XhU7zeL8Ak1sCKa4D9V/awpSG7HpVrFlnjYtaxei47U=)
5: 4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl (hash: 7+eetQaKEYhdwPu70ssLcqozJyGr9ifgRJoRIf/gDR4=)
6: 3137322e39392e32302e302f32342d3234203d3e2035303635.roa (hash: 3TbcUm89logVDWAur+FJNbAwfm9fPrMzH1XeHnyCb1Q=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
66:a7:59:7d:a5:c3:7a:15:cc:e0:8a:34:fa:b2:49:92:34:ca:e6:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe
Validity
Not Before: Mar 28 17:49:20 2025 GMT
Not After : Mar 29 19:50:20 2025 GMT
Subject: CN=B5F83309F8591FC2FA787D44D049A565F7F9A6F7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:d1:65:36:8e:5e:f4:ab:7e:35:eb:e0:17:57:
0a:8c:1a:e5:c4:af:b2:1f:eb:1f:24:19:5e:49:b4:
03:b1:9b:8c:38:82:73:bb:25:9f:e3:27:84:5f:77:
20:7b:cd:62:c2:cb:21:99:ae:70:51:da:0e:3e:05:
14:22:6f:76:d5:46:34:27:86:3c:a4:cc:1f:26:43:
bd:3b:72:c5:38:23:8d:1e:95:de:1a:01:93:46:67:
f7:82:7c:7c:f8:f2:43:10:cc:29:70:d2:a9:cb:e1:
9e:b8:0f:c7:3d:45:9b:b4:ff:99:bf:77:df:72:19:
23:fa:ac:10:a6:aa:40:05:46:5b:9a:91:56:0a:bd:
f1:2d:67:e7:f1:e2:ee:82:f0:e5:b8:2a:f1:b8:f4:
c2:17:d7:4f:3c:3c:93:65:ec:46:fb:4c:1d:7e:cc:
8a:11:0d:af:a9:9b:a3:39:d1:6e:2f:e8:12:8e:bb:
cc:38:8b:e2:06:fb:27:e2:15:a6:15:b7:c2:43:ee:
b5:b3:3a:cc:f4:ea:83:92:77:91:81:e8:90:66:9a:
1d:e3:44:b8:49:e1:38:cb:9d:bf:a4:65:33:6a:23:
a0:18:99:ae:a7:5e:e5:36:47:08:7b:02:cb:05:9c:
b9:b2:ef:40:71:31:aa:f1:39:44:6a:83:d1:ec:cd:
d3:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:F8:33:09:F8:59:1F:C2:FA:78:7D:44:D0:49:A5:65:F7:F9:A6:F7
X509v3 Authority Key Identifier:
keyid:4A:65:9D:2B:D2:0D:70:6E:89:F0:E9:C8:A1:E8:22:F2:DD:AE:BE:1F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/946afd34-6971-423f-b22a-575e2c73ab27/8aa800a814af0deb066a95f7996f83cd729a48d075b0952fbe.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8baa64a8018bae05840d043b/0/4A659D2BD20D706E89F0E9C8A1E822F2DDAEBE1F.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:c8:98:59:8f:d9:51:ec:1f:f2:6d:db:ba:2e:42:60:ba:60:
fe:46:9a:b5:5e:b7:d0:e3:ed:f2:49:53:6c:29:84:0c:39:e8:
9b:8c:9d:22:28:4c:4f:27:8a:56:f3:e0:e7:48:c5:2a:d0:a8:
74:88:4a:ce:12:64:f2:4a:25:7f:7c:72:85:7c:cb:b9:33:f3:
80:f2:bc:74:83:dc:42:22:98:db:be:79:5e:bf:62:0c:3a:cc:
07:dc:85:87:c5:70:c1:9e:17:19:5d:1a:10:56:47:79:89:d6:
47:be:53:8e:b3:f5:6a:12:9f:76:7e:83:a2:77:21:59:1e:66:
58:e8:d9:36:76:eb:02:43:4d:7d:f3:72:fa:09:67:b5:b4:ed:
42:e0:9d:d3:83:d1:69:d9:88:fd:d8:ba:0d:18:de:31:41:c3:
79:5c:66:5e:03:f0:70:8b:f0:ac:b7:9f:1f:6d:67:e6:4b:a4:
b1:31:e3:f3:69:87:ea:b6:fb:96:b5:e0:a7:d1:69:e6:07:2f:
c2:fe:72:30:e9:b9:d3:45:a7:24:58:c8:54:02:19:3a:cf:4f:
53:fe:c5:45:54:2e:bd:73:e3:63:8a:cd:29:3a:6b:5d:c5:a6:
b7:24:cb:db:76:70:7a:2d:50:05:15:1b:1c:9b:a6:32:4b:32:
1b:f3:1f:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 09:42:22 2025 by rpki-client