Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.mft
File:                     db91d16a-b30d-47f9-ad78-f468da19daa9.mft (raw, json)
Hash identifier:          lVruOoI2THJGhskohHL92ezsWct8OJZxouk4a0Wx+fg=
Subject key identifier:   30:99:06:0C:8F:51:EC:37:34:D7:CA:42:AC:D5:68:9B:33:68:5E:CE
Authority key identifier: 3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA
Certificate issuer:       /CN=db91d16a-b30d-47f9-ad78-f468da19daa9
Certificate serial:       010D0C9F432858428A9B76CDD8C59886F97BD600
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.mft
Manifest number:          010D0C9F4328584073A844E1B80EE435C15B7F04
Signing time:             Fri 14 Jul 2023 07:00:02 +0000
Manifest this update:     Fri 14 Jul 2023 07:00:02 +0000
Manifest next update:     Sun 16 Jul 2023 07:00:00 +0000
Files and hashes:         1: 399e96bf-fc6f-3070-90a1-5587c7835fb2.roa (hash: H4bHnVyBC9Fh/JWis6YrZptapSVhVQ8wOmAy9e3bJ5g=)
                          2: db91d16a-b30d-47f9-ad78-f468da19daa9.crl (hash: dScjbfgeib1AJUkPISNC3tMNft+UiTXLi6I/BNKGSHw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:42:8a:9b:76:cd:d8:c5:98:86:f9:7b:d6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db91d16a-b30d-47f9-ad78-f468da19daa9
        Validity
            Not Before: Jul 14 07:00:02 2023 GMT
            Not After : Jul 16 07:00:00 2023 GMT
        Subject: CN=459018c7-76ac-4664-9ffe-4537a144c39e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b8:86:a9:9f:5c:2c:8a:76:7e:16:e1:94:08:
                    4b:40:ec:a9:d8:9d:0f:43:48:fe:de:d0:d8:53:44:
                    70:c8:bd:50:21:fb:18:90:b7:e4:ea:7b:9a:85:2e:
                    67:c6:ca:fa:81:46:53:29:09:e0:dd:93:0c:df:ff:
                    a5:3e:24:59:b2:3a:63:8c:19:72:e0:b5:8f:7c:92:
                    11:cc:99:88:7b:0b:97:e1:0f:b9:53:7b:92:f1:d6:
                    0e:33:0f:d2:0a:7e:64:bc:44:a6:03:cd:75:af:61:
                    21:7f:ca:c8:93:c9:1f:48:65:3f:38:87:e7:7c:24:
                    00:2c:52:62:9c:ba:d0:ce:f2:14:08:23:e8:4f:c2:
                    94:41:39:2b:4c:3c:f1:30:36:40:93:d0:84:c6:6a:
                    c4:22:5c:5b:77:b1:96:67:f1:63:bb:9e:c9:d7:a2:
                    e8:0c:4e:6a:58:32:68:88:3c:79:ae:93:d0:c3:2f:
                    c6:ab:00:c2:19:94:97:ec:6b:68:75:50:82:ec:a5:
                    a7:65:8e:29:ae:4a:e1:22:ca:1a:ab:d3:56:e1:19:
                    eb:c6:71:7a:b3:5a:c7:0e:9e:33:84:5f:b4:c8:3c:
                    6e:80:28:e2:55:51:7b:b8:5d:45:03:2e:b5:89:be:
                    26:56:a5:57:c1:78:8e:e2:32:ca:2a:c6:ff:a5:2b:
                    42:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:99:06:0C:8F:51:EC:37:34:D7:CA:42:AC:D5:68:9B:33:68:5E:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9/db91d16a-b30d-47f9-ad78-f468da19daa9.crl

            X509v3 Authority Key Identifier:
                keyid:3E:79:12:4D:84:1A:40:DD:FE:0E:C0:15:41:55:0B:D6:A2:64:CF:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/db91d16a-b30d-47f9-ad78-f468da19daa9.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:0c:38:43:77:5d:10:13:50:e6:25:5b:a4:a1:67:34:6b:73:
         dd:96:fa:d8:22:da:dc:75:19:69:89:a3:b7:f2:2e:58:15:38:
         fd:08:d2:98:39:56:35:60:b4:b8:da:15:5f:43:79:2f:0e:33:
         95:2d:0d:d4:2f:53:a0:1d:48:25:07:b5:29:19:24:88:4f:26:
         93:d2:e4:ce:4f:89:99:ce:fc:ec:1e:5f:73:59:e7:a7:e5:cd:
         f2:2c:72:b3:c6:6c:ee:5e:25:6b:58:1a:56:d7:c4:6d:18:4b:
         4c:6c:2f:a5:9d:94:3d:f0:5e:3a:b2:4a:e7:dc:36:52:ed:e5:
         88:bf:5a:aa:bb:7b:de:76:b2:61:4c:0c:72:62:bd:00:c8:ba:
         09:4d:b8:56:10:56:ea:eb:21:a7:54:80:e1:19:3e:de:f2:9b:
         d1:ef:7d:ff:e9:ca:36:8c:c5:9a:80:3b:fa:e0:93:cb:6c:29:
         b2:5b:68:01:57:f0:09:32:7f:d6:eb:47:a3:70:cb:f5:58:15:
         2b:6b:af:8a:29:26:76:e6:bb:f5:36:26:72:81:be:01:8e:69:
         72:54:ac:db:a2:cd:eb:1f:a7:91:2c:15:23:26:75:14:5f:89:
         3b:f8:e4:8f:67:51:f5:4b:d7:08:8d:3a:cb:f9:e5:af:99:69:
         8c:31:29:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:38:48 2023 by rpki-client on console-fra.rpki-client.org