Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
File:                     E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft (raw, json)
Hash identifier:          ajccEJZEuPc9KsZT7n2uOpcz/DSLyEOX7pcZTaolq9Y=
Subject key identifier:   3A:FF:A4:33:85:04:C9:CB:FD:6D:91:75:08:67:75:A6:E7:5E:B0:5E
Authority key identifier: E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA
Certificate issuer:       /CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
Certificate serial:       47D45089B68ACB070B80C661E66A9ADC3F960410
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft
Manifest number:          0158
Signing time:             Tue 04 Nov 2025 21:10:51 +0000
Manifest this update:     Tue 04 Nov 2025 21:05:51 +0000
Manifest next update:     Wed 05 Nov 2025 23:28:51 +0000
Files and hashes:         1: 326130363a34313a633030303a3a2f34302d3438203d3e203439383637.roa (hash: 0OrEaTxbZmdTCmDhGHNSAddoccX8S5FG5gGYvhRWK7E=)
                          2: 326130363a34303a3a2f32392d3438203d3e20393435.roa (hash: G7IO5pCXePAgjcDHm8kdBu1fiidx9sSNA7PECFvEXqU=)
                          3: 326130363a34313a383030303a3a2f34302d3438203d3e20323133363034.roa (hash: IhJhFE18LKNheXNHYseDMWBZPF2yzqYAsMBxTsmvNxk=)
                          4: E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl (hash: Wsq+Qn4n2meQq6QyfGEY06CztDJhdFMFO79JSbAqzvI=)
                          5: 3139342e3131362e3232372e302f32342d3234203d3e20393435.roa (hash: 3eQZ44Pjo8cN9Cs0Xw8H3Y6cml550cmkzovicoDIItA=)
                          6: 326130363a34313a383130303a3a2f34302d3438203d3e20323033353737.roa (hash: PIa96vO192MXRH/3hsgdRrYY5QeFLK+VwxhBmPlSdyw=)
                          7: 326130363a34313a3a2f34302d3438203d3e20323133343731.roa (hash: zGw+27gWpN3i+BOpeywnju0oI0GKxlxJTmJ/f+OmUTY=)
                          8: 326130363a34313a343030303a3a2f34302d3438203d3e20313939313038.roa (hash: vTHmJdYQ4zedxSNiHVypsHE+Bmfq9aAQg7rE7ifJsUI=)
                          9: 326130363a34313a343030303a3a2f34302d3438203d3e20313532313834.roa (hash: iUQrYne5XZsyxeJjuJ/PguKksYYeR1AM8lolyzrUIv4=)
                          10: AS945.asa (hash: c54hI/uVSQ8NjtSap0PiIGhszn7BwwrapQz6hAZsfZU=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:d4:50:89:b6:8a:cb:07:0b:80:c6:61:e6:6a:9a:dc:3f:96:04:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3dcc9700181940fb31c01ea795ecfbc31492afa
        Validity
            Not Before: Nov  4 21:05:51 2025 GMT
            Not After : Nov  5 23:28:51 2025 GMT
        Subject: CN=3AFFA4338504C9CBFD6D9175086775A6E75EB05E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f7:bf:ce:07:78:74:70:17:cf:dc:9a:7d:4e:
                    70:1a:3d:ec:a4:9d:8c:d5:37:0a:f4:3c:5e:7e:c4:
                    d1:b5:f4:84:e0:81:21:c4:ca:e2:ca:58:97:43:87:
                    c0:cf:00:ed:06:5b:55:78:6f:4c:eb:5a:32:28:8c:
                    4c:42:5e:74:12:23:88:fb:21:87:b0:2b:bf:bd:68:
                    ca:ff:be:62:7d:32:b0:e9:a1:a4:50:a0:1c:30:1b:
                    cb:53:a7:bc:89:cd:72:60:48:22:68:d4:6d:a6:4f:
                    35:2c:05:76:a0:8c:be:26:23:4f:ef:0f:d6:b2:df:
                    57:a1:47:46:6c:e9:8a:b8:ca:07:32:7a:02:34:2b:
                    20:6d:e6:a8:56:eb:89:3c:f7:70:78:4c:b6:4b:8a:
                    7c:28:09:fa:23:d2:43:3d:90:5f:57:e4:23:32:99:
                    30:87:ba:4e:76:58:0a:01:5b:e6:af:32:ca:a6:a4:
                    46:0e:a1:a1:d0:77:5b:1e:37:b4:68:2f:68:cb:d5:
                    60:a0:98:07:17:72:e3:41:39:0f:ca:02:a7:44:b7:
                    ee:60:c2:aa:c4:ca:d6:bf:13:63:bd:ed:5a:6b:57:
                    2f:ee:ed:6c:27:21:4d:9f:03:c7:b0:61:d0:05:2a:
                    76:a2:15:dd:ca:e6:1a:63:d2:2c:f3:8c:22:ba:16:
                    c8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:FF:A4:33:85:04:C9:CB:FD:6D:91:75:08:67:75:A6:E7:5E:B0:5E
            X509v3 Authority Key Identifier:
                keyid:E3:DC:C9:70:01:81:94:0F:B3:1C:01:EA:79:5E:CF:BC:31:49:2A:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49zJcAGBlA-zHAHqeV7PvDFJKvo.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/6ab96e7a6130498aa9813d7ee5bbed31/8/E3DCC9700181940FB31C01EA795ECFBC31492AFA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:05:cf:a7:aa:9c:7a:64:af:4b:44:2b:fb:b7:63:a0:12:0a:
         6b:33:87:05:a6:9c:b9:10:29:62:5a:74:3d:91:1e:13:e3:67:
         37:cd:c7:f5:5c:b7:4d:a9:cb:ea:13:e9:1d:0c:dd:45:0e:f9:
         e6:25:76:da:40:7f:87:d7:25:54:da:ba:f9:ad:c7:36:4c:51:
         32:bd:34:8d:b9:a5:aa:aa:1f:4d:51:1b:6a:f9:0f:2f:02:1c:
         07:6d:5c:a8:3a:35:37:8a:a4:d9:eb:f3:de:1e:a2:cd:8f:81:
         ee:8d:66:52:9d:cd:1e:19:4f:be:1a:30:cb:d9:8a:a3:50:64:
         53:ae:48:4d:a4:b2:7f:7f:c6:9a:9b:c4:9f:97:c1:a0:12:b0:
         46:7f:d2:c8:96:48:3f:be:4d:f9:5d:ae:94:50:44:1a:eb:17:
         30:69:d7:86:18:1e:72:c2:25:f3:b5:b7:d0:5f:14:50:e0:31:
         a1:fb:c3:90:f0:15:8a:10:3f:e8:d3:fb:71:3c:50:d7:65:da:
         3f:4f:03:da:da:87:0b:b3:f5:ad:a6:9d:64:a9:66:42:f9:81:
         9c:b2:2a:aa:2d:14:a8:61:25:88:48:be:11:35:a3:01:ed:69:
         7f:d8:b9:12:3c:98:b8:5a:aa:cf:36:c5:87:46:b8:09:e5:5b:
         69:d9:6c:6e
-----BEGIN CERTIFICATE-----
MIIFIjCCBAqgAwIBAgIUR9RQibaKywcLgMZh5mqa3D+WBBAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoZTNkY2M5NzAwMTgxOTQwZmIzMWMwMWVhNzk1ZWNmYmMz
MTQ5MmFmYTAeFw0yNTExMDQyMTA1NTFaFw0yNTExMDUyMzI4NTFaMDMxMTAvBgNV
BAMTKDNBRkZBNDMzODUwNEM5Q0JGRDZEOTE3NTA4Njc3NUE2RTc1RUIwNUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd97/OB3h0cBfP3Jp9TnAaPeyk
nYzVNwr0PF5+xNG19ITggSHEyuLKWJdDh8DPAO0GW1V4b0zrWjIojExCXnQSI4j7
IYewK7+9aMr/vmJ9MrDpoaRQoBwwG8tTp7yJzXJgSCJo1G2mTzUsBXagjL4mI0/v
D9ay31ehR0Zs6Yq4ygcyegI0KyBt5qhW64k893B4TLZLinwoCfoj0kM9kF9X5CMy
mTCHuk52WAoBW+avMsqmpEYOoaHQd1seN7RoL2jL1WCgmAcXcuNBOQ/KAqdEt+5g
wqrEyta/E2O97VprVy/u7WwnIU2fA8ewYdAFKnaiFd3K5hpj0izzjCK6Fsj5AgMB
AAGjggIsMIICKDAdBgNVHQ4EFgQUOv+kM4UEycv9bZF1CGd1pudesF4wHwYDVR0j
BBgwFoAU49zJcAGBlA+zHAHqeV7PvDFJKvowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3Jwa2ktcnBzLmFyaW4ubmV0L3JlcG9zaXRv
cnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEvOC9FM0RDQzk3MDAx
ODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLmNybDBkBggrBgEFBQcBAQRY
MFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5
L0RFRkFVTFQvNDl6SmNBR0JsQS16SEFIcWVWN1B2REZKS3ZvLmNlcjCBkwYIKwYB
BQUHAQsEgYYwgYMwgYAGCCsGAQUFBzALhnRyc3luYzovL3Jwa2ktcnBzLmFyaW4u
bmV0L3JlcG9zaXRvcnkvNmFiOTZlN2E2MTMwNDk4YWE5ODEzZDdlZTViYmVkMzEv
OC9FM0RDQzk3MDAxODE5NDBGQjMxQzAxRUE3OTVFQ0ZCQzMxNDkyQUZBLm1mdDAY
BgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIA
AQUAMAYEAgACBQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsF
AAOCAQEAQwXPp6qcemSvS0Qr+7djoBIKazOHBaacuRApYlp0PZEeE+NnN83H9Vy3
TanL6hPpHQzdRQ755iV22kB/h9clVNq6+a3HNkxRMr00jbmlqqofTVEbavkPLwIc
B21cqDo1N4qk2evz3h6izY+B7o1mUp3NHhlPvhowy9mKo1BkU65ITaSyf3/GmpvE
n5fBoBKwRn/SyJZIP75N+V2ulFBEGusXMGnXhhgecsIl87W30F8UUOAxofvDkPAV
ihA/6NP7cTxQ12XaP08D2tqHC7P1raadZKlmQvmBnLIqqi0UqGEliEi+ETWjAe1p
f9i5EjyYuFqqzzbFh0a4CeVbadlsbg==
-----END CERTIFICATE-----
Generated at Wed Nov 5 06:43:56 2025 by rpki-client