Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16/f3476fd4-2830-4e69-8eaf-10dc6791ea16.mft
File:                     f3476fd4-2830-4e69-8eaf-10dc6791ea16.mft (raw, json)
Hash identifier:          GDroh+vv0wczUuqxKS2VeqFQmVTUmkfBdC571x1YyTA=
Subject key identifier:   2E:B0:23:91:DC:EB:D3:67:E5:6B:C0:B5:DA:97:68:75:61:81:F7:9E
Authority key identifier: 18:73:C6:CC:41:43:20:D0:F7:FF:19:58:F9:CE:4E:B5:05:7B:96:37
Certificate issuer:       /CN=f3476fd4-2830-4e69-8eaf-10dc6791ea16
Certificate serial:       010D0C9F4328584430DB6FEC2A9760DC0A9BF540
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16/f3476fd4-2830-4e69-8eaf-10dc6791ea16.mft
Manifest number:          010D0C9F4328584073A855177EF585F0E5AE5665
Signing time:             Tue 12 Dec 2023 13:00:04 +0000
Manifest this update:     Tue 12 Dec 2023 13:00:04 +0000
Manifest next update:     Fri 15 Dec 2023 13:00:00 +0000
Files and hashes:         1: b7373137-90e2-328e-842f-2e1e1fc4a27e.roa (hash: gLQkE11N0yFM002f73mG6j18WPzSZufI1cCLoyb+qWw=)
                          2: f3476fd4-2830-4e69-8eaf-10dc6791ea16.crl (hash: fNYtKgbMlTAHPDOJ9rXvbzSZtgJp4RdgQylAO8CW5RY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:44:30:db:6f:ec:2a:97:60:dc:0a:9b:f5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f3476fd4-2830-4e69-8eaf-10dc6791ea16
        Validity
            Not Before: Dec 12 13:00:04 2023 GMT
            Not After : Dec 15 13:00:00 2023 GMT
        Subject: CN=de8585f5-2c7b-4ffa-9e7f-7a1c71a1a43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ef:8a:ad:e2:be:7d:a2:6e:e3:e6:0d:99:71:
                    5d:fe:c5:2a:72:4b:ca:81:98:73:2d:be:db:79:90:
                    3d:01:72:73:46:01:57:f9:1f:a0:eb:95:8e:d8:e4:
                    8f:0e:95:92:9e:fc:24:78:bc:d6:2a:84:4a:11:01:
                    6d:45:7a:dc:cb:0e:ec:31:a5:c0:6b:eb:04:c5:6f:
                    8a:6f:fa:9c:cf:a4:2f:85:c8:a1:06:f6:74:2f:83:
                    7a:a4:11:4d:97:7a:6d:d6:40:1d:65:50:c7:89:29:
                    b1:32:04:d8:d5:c4:5e:23:4f:3b:47:8c:42:70:cd:
                    1c:f2:6b:9c:a0:aa:f3:4b:ee:8b:8e:2a:7c:ca:3c:
                    db:f9:48:b8:f8:59:de:34:cd:db:ed:13:51:84:86:
                    da:dd:c5:4f:7d:77:b7:69:7b:7f:90:6a:74:85:33:
                    58:b7:c7:db:a1:f7:05:1e:a6:35:dd:41:9f:5f:6b:
                    ca:3f:ab:31:7e:70:81:1a:2e:0d:35:b6:53:b9:4c:
                    47:43:fa:c3:a8:00:99:aa:d5:d0:e5:7e:64:40:bb:
                    b4:11:c0:4b:98:67:c5:93:85:9d:5d:35:7b:34:6e:
                    80:42:9a:ea:1d:aa:ee:72:99:ba:a0:e1:ff:1a:45:
                    e0:f5:9b:83:a4:cb:0c:2d:19:d4:7b:ad:63:62:fe:
                    94:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:B0:23:91:DC:EB:D3:67:E5:6B:C0:B5:DA:97:68:75:61:81:F7:9E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16/f3476fd4-2830-4e69-8eaf-10dc6791ea16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16/f3476fd4-2830-4e69-8eaf-10dc6791ea16.crl

            X509v3 Authority Key Identifier:
                keyid:18:73:C6:CC:41:43:20:D0:F7:FF:19:58:F9:CE:4E:B5:05:7B:96:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f3476fd4-2830-4e69-8eaf-10dc6791ea16.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:83:ce:78:ad:7b:7e:e8:f4:88:b5:b5:1e:12:24:75:dc:d7:
         07:4d:49:df:e6:17:48:bb:5e:81:23:25:d2:58:8b:3f:16:b0:
         b2:bc:72:10:48:88:2e:f9:a9:c8:52:b2:ae:21:d8:4b:41:8e:
         8f:69:09:11:8d:e0:2f:09:cd:5e:1c:9d:4d:2a:41:1b:70:69:
         af:07:07:e8:79:29:a5:2d:0e:0d:1c:c0:38:c8:a2:e0:a6:59:
         54:e8:79:60:80:80:ca:42:df:84:98:c2:bb:26:83:97:6d:2f:
         1f:0c:98:e2:27:a1:7a:e6:fd:13:1f:d3:94:60:19:16:be:45:
         11:3d:8b:27:09:ea:52:f8:8f:5f:1d:b0:10:a5:a5:42:ad:da:
         18:33:52:2a:6b:df:e2:be:b8:a6:3c:55:20:84:09:8b:d7:db:
         07:58:c0:e8:7d:2a:ae:a0:15:d8:8b:34:96:ea:64:e1:fb:60:
         08:ab:f5:3a:24:73:2d:35:39:7e:48:7e:40:be:45:40:e0:f4:
         fa:ab:10:fe:95:5e:f6:f2:3e:c8:9c:c9:1f:7b:80:f2:ec:d6:
         e4:2f:69:9d:79:1f:d4:02:ff:a7:20:ac:68:fe:0b:56:52:10:
         bf:dc:be:83:a2:5b:2e:1a:d3:0a:a2:8a:0c:58:65:76:04:5f:
         7a:54:52:7f
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEQw22/sKpdg3Aqb9UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM0NzZmZDQtMjgzMC00ZTY5LThlYWYtMTBkYzY3OTFl
YTE2MB4XDTIzMTIxMjEzMDAwNFoXDTIzMTIxNTEzMDAwMFowLzEtMCsGA1UEAxMk
ZGU4NTg1ZjUtMmM3Yi00ZmZhLTllN2YtN2ExYzcxYTFhNDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAre+KreK+faJu4+YNmXFd/sUqckvKgZhzLb7b
eZA9AXJzRgFX+R+g65WO2OSPDpWSnvwkeLzWKoRKEQFtRXrcyw7sMaXAa+sExW+K
b/qcz6QvhcihBvZ0L4N6pBFNl3pt1kAdZVDHiSmxMgTY1cReI087R4xCcM0c8muc
oKrzS+6Ljip8yjzb+Ui4+FneNM3b7RNRhIba3cVPfXe3aXt/kGp0hTNYt8fbofcF
HqY13UGfX2vKP6sxfnCBGi4NNbZTuUxHQ/rDqACZqtXQ5X5kQLu0EcBLmGfFk4Wd
XTV7NG6AQprqHarucpm6oOH/GkXg9ZuDpMsMLRnUe61jYv6UPwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFC6wI5Hc69Nn5WvAtdqXaHVhgfeeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mMzQ3
NmZkNC0yODMwLTRlNjktOGVhZi0xMGRjNjc5MWVhMTYvZjM0NzZmZDQtMjgzMC00
ZTY5LThlYWYtMTBkYzY3OTFlYTE2Lm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjM0NzZmZDQtMjgzMC00ZTY5LThl
YWYtMTBkYzY3OTFlYTE2L2YzNDc2ZmQ0LTI4MzAtNGU2OS04ZWFmLTEwZGM2Nzkx
ZWExNi5jcmwwHwYDVR0jBBgwFoAUGHPGzEFDIND3/xlY+c5OtQV7ljcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mMzQ3NmZkNC0yODMwLTRlNjktOGVhZi0xMGRj
Njc5MWVhMTYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA7g854rXt+6PSItbUeEiR1
3NcHTUnf5hdIu16BIyXSWIs/FrCyvHIQSIgu+anIUrKuIdhLQY6PaQkRjeAvCc1e
HJ1NKkEbcGmvBwfoeSmlLQ4NHMA4yKLgpllU6HlggIDKQt+EmMK7JoOXbS8fDJji
J6F65v0TH9OUYBkWvkURPYsnCepS+I9fHbAQpaVCrdoYM1Iqa9/ivrimPFUghAmL
19sHWMDofSquoBXYizSW6mTh+2AIq/U6JHMtNTl+SH5AvkVA4PT6qxD+lV728j7I
nMkfe4Dy7NbkL2mdeR/UAv+nIKxo/gtWUhC/3L6DolsuGtMKoooMWGV2BF96VFJ/
-----END CERTIFICATE-----