Manifest
$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier: UIGukaEUJankT64rN/yrVuPKJ7z6ACtIiKO1UHAuzNM=
Subject key identifier: 1F:43:06:9A:68:D2:57:ED:15:5C:B4:B1:CA:51:4F:51:49:95:B7:AA
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer: /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial: 08AAC7D3F75C97DC4ADA0EA7ED7BA5B6F74932B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access: rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number: DC
Signing time: Wed 15 Jan 2025 21:11:07 +0000
Manifest this update: Wed 15 Jan 2025 21:06:07 +0000
Manifest next update: Thu 16 Jan 2025 21:33:07 +0000
Files and hashes: 1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: 1PaMsNMc17vHm9+S+qUC4PkKY2kvtxl09HOtd4XWPx8=)
2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:aa:c7:d3:f7:5c:97:dc:4a:da:0e:a7:ed:7b:a5:b6:f7:49:32:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Validity
Not Before: Jan 15 21:06:07 2025 GMT
Not After : Jan 16 21:33:07 2025 GMT
Subject: CN=1F43069A68D257ED155CB4B1CA514F514995B7AA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:01:4a:54:5b:b7:77:4c:bc:6b:06:78:7a:3e:
2f:53:49:4b:93:c8:cd:f4:cc:95:2f:28:6a:69:5f:
7c:de:7c:6c:02:a4:9d:7a:11:af:28:bb:d7:bc:d7:
c6:86:9a:3b:86:61:94:b7:12:6d:66:90:89:13:c2:
02:da:41:b5:8b:2f:b3:83:d0:82:f0:22:0f:0c:cc:
d9:a6:64:00:b5:3a:55:ee:af:71:4c:b0:94:3d:dd:
45:28:0b:8c:7c:32:fb:64:f8:c7:d3:6b:a9:0f:46:
51:4c:d2:ab:a6:9e:7f:49:ca:0a:16:23:de:09:d3:
63:25:44:b9:2c:fb:11:e7:8f:cd:82:9c:d2:6d:be:
b6:61:b4:95:72:99:a4:cf:ea:81:70:2c:8e:41:e9:
20:1c:d8:60:e7:fb:34:66:ab:31:f0:61:e6:34:2a:
9f:15:a9:9d:f2:64:4a:e7:42:e4:d5:22:42:b7:39:
62:44:62:8e:74:05:c3:1b:3a:db:82:c6:9b:b0:33:
97:b5:ab:13:5a:1f:97:17:b3:ae:32:a9:cf:0d:ae:
5e:9c:21:b2:a8:85:64:dd:11:e1:2c:a5:5b:39:58:
05:cf:5c:d2:2b:d0:27:bc:09:3f:9e:f3:01:cc:bd:
eb:59:f1:8b:fb:ff:05:d7:3b:88:bb:0e:c8:e1:32:
25:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:43:06:9A:68:D2:57:ED:15:5C:B4:B1:CA:51:4F:51:49:95:B7:AA
X509v3 Authority Key Identifier:
keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:9d:8e:c7:df:23:96:9c:19:73:5a:3b:73:f6:8b:3e:39:26:
b7:e1:09:a1:e8:5b:ce:ad:e7:88:4c:8f:4f:88:b0:4d:d1:42:
2e:bd:af:3f:06:04:2a:d5:23:d6:27:dd:5b:18:b8:6a:22:2a:
f7:08:bb:df:8d:df:89:0b:22:56:83:d9:a3:f6:31:2f:06:cf:
f1:27:8b:d1:98:72:9d:d6:42:11:21:34:7b:36:cd:b3:cc:a7:
9d:60:04:de:ac:00:53:07:85:1d:3e:1d:9e:14:19:a7:c5:4f:
83:4c:1b:a1:84:96:f5:f7:36:6e:f5:94:6e:49:02:43:00:7c:
cd:dd:5f:cc:df:1b:7a:7b:74:4a:26:b8:a5:fe:11:6d:b8:2a:
6a:02:43:f7:04:0a:49:7e:6f:3d:56:61:37:72:e0:77:10:b7:
cf:35:2f:8f:1f:00:bb:3b:28:40:0b:d7:ee:48:a2:c2:d6:cb:
3c:00:1e:3d:d1:4e:21:b4:ea:77:d3:1b:ac:00:e4:65:aa:59:
d0:a9:35:8f:a7:9a:77:71:d5:60:3a:b2:f8:7a:e1:9d:8b:3c:
29:5b:93:93:54:3f:af:cf:40:ab:a8:26:84:b9:0e:36:ea:c4:
89:18:ed:b7:0d:1b:48:b7:fe:56:87:28:77:5f:7c:cc:25:af:
11:b3:32:63
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUCKrH0/dcl9xK2g6n7XultvdJMrkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM2RlMGI3ODYzM2FhZjEwYTliMjJhMWU5MjVlZWJjZDFl
ZDc2YjBhZjAeFw0yNTAxMTUyMTA2MDdaFw0yNTAxMTYyMTMzMDdaMDMxMTAvBgNV
BAMTKDFGNDMwNjlBNjhEMjU3RUQxNTVDQjRCMUNBNTE0RjUxNDk5NUI3QUEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCrAUpUW7d3TLxrBnh6Pi9TSUuT
yM30zJUvKGppX3zefGwCpJ16Ea8ou9e818aGmjuGYZS3Em1mkIkTwgLaQbWLL7OD
0ILwIg8MzNmmZAC1OlXur3FMsJQ93UUoC4x8Mvtk+MfTa6kPRlFM0qumnn9JygoW
I94J02MlRLks+xHnj82CnNJtvrZhtJVymaTP6oFwLI5B6SAc2GDn+zRmqzHwYeY0
Kp8VqZ3yZErnQuTVIkK3OWJEYo50BcMbOtuCxpuwM5e1qxNaH5cXs64yqc8Nrl6c
IbKohWTdEeEspVs5WAXPXNIr0Ce8CT+e8wHMvetZ8Yv7/wXXO4i7DsjhMiVJAgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUH0MGmmjSV+0VXLSxylFPUUmVt6owHwYDVR0j
BBgwFoAUPeC3hjOq8QqbIqHpJe680e12sK8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgvMi8zREUwQjc4NjMz
QUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvUGVDM2hqT3E4UXFiSXFIcEplNjgwZTEyc0s4LmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvOGE4NDhhZGY5MTRlMGFhNjAxOTE1OWYyZmIyNzBjYTgv
Mi8zREUwQjc4NjMzQUFGMTBBOUIyMkExRTkyNUVFQkNEMUVENzZCMEFGLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAg52Ox98jlpwZc1o7c/aLPjkmt+EJoehbzq3niEyPT4iwTdFCLr2vPwYE
KtUj1ifdWxi4aiIq9wi7343fiQsiVoPZo/YxLwbP8SeL0ZhyndZCESE0ezbNs8yn
nWAE3qwAUweFHT4dnhQZp8VPg0wboYSW9fc2bvWUbkkCQwB8zd1fzN8bent0Sia4
pf4RbbgqagJD9wQKSX5vPVZhN3LgdxC3zzUvjx8AuzsoQAvX7kiiwtbLPAAePdFO
IbTqd9MbrADkZapZ0Kk1j6ead3HVYDqy+HrhnYs8KVuTk1Q/r89Aq6gmhLkONurE
iRjttw0bSLf+Vocod198zCWvEbMyYw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:36:48 2025 by rpki-client