Manifest
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
File: HwZxfSr2LjgJByCEw6-PSJSOQOI.mft (raw, json)
Hash identifier: ff9eKps/IAoL7FIPYRS9n2u+Izui7Nh75POnfjchst8=
Subject key identifier: A6:B9:1C:53:B1:B8:54:17:F3:AE:B0:0E:84:28:52:06:2F:BE:6D:7E
Authority key identifier: 1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
Certificate issuer: /CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Certificate serial: 1E4442DDFB33868E7A7F64902991EC8265765FFF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
Manifest number: 03A9
Signing time: Fri 31 Jan 2025 00:10:16 +0000
Manifest this update: Fri 31 Jan 2025 00:10:16 +0000
Manifest next update: Tue 04 Feb 2025 00:10:16 +0000
Files and hashes: 1: 0c492edd-c347-4b97-a816-01566f9d097b.roa (hash: gCFJg4FnzqejnweuuQf2kzarRN7+98LW1WRYDPol8Ys=)
2: 4aef75f4-87ef-46d3-96d7-dc53be178ebe.roa (hash: VyjH3f/uBsBMNnlQ2zT7zGejKHfAxv3KseV+RAyzm5Y=)
3: 59031a63-ea1a-4943-86ab-19221a23ca42.roa (hash: lNwwgOlXahcsMcYftEmtWIHiT0q5qagcci9OblV09eM=)
4: 6ba0c1f3-2b2e-4d8a-bef1-52e07a4a5a4e.roa (hash: 5TAu0MBUjgiQbTCC1EzJHMvAW58yqHXdgOnQneci4pU=)
5: 91a27594-a038-483a-a558-a5377f4d266f.roa (hash: m0ggZwxLzVTUAbaJmqsX31JFH7p3QNDYkAfV7Z9i0h4=)
6: 943694fe-e278-4d76-b786-7df26f151dd9.roa (hash: pBfjk50wGxkwbOHi6/35p1T2ZS9HfPLlPDOTe1f98RE=)
7: HwZxfSr2LjgJByCEw6-PSJSOQOI.crl (hash: rM9py3H/A+aSEHYOQr50gy2KQo3KXXdnK90Kgyr2sIA=)
8: a86c8ffa-34ab-4a01-8f63-86207fe44159.roa (hash: YWlOE+/RU5STZyTsmOe/jQlEA5foPNtjDHsrI6Ok8So=)
9: c686f937-000a-490a-846c-e2773b637b26.roa (hash: nznqDWZ08KHtj5r5C1tCoskNX8zOVMfgAasDIvn6teg=)
10: d904f993-5ca9-4bad-8c47-2d2c6ef58b2e.roa (hash: nZT2O24B4zX9+pFIWTqAJGOhg/xbWnPx1OKV8Qr+lak=)
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1e:44:42:dd:fb:33:86:8e:7a:7f:64:90:29:91:ec:82:65:76:5f:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2
Validity
Not Before: Jan 31 00:10:16 2025 GMT
Not After : Feb 4 00:10:16 2025 GMT
Subject: serialNumber=f00c70363a27f2422e9d008d90078a847ced25fc461bce0a34514aec0c62a976, CN=8f95e4d1-f14f-4d61-ae00-67e047d2f102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:78:aa:a1:36:bb:d8:6e:fe:14:a3:fc:c1:ef:
fd:3e:f3:a7:69:dc:2d:f5:97:c6:d2:37:f2:0d:b2:
6c:dc:8f:63:1e:fa:82:59:d9:69:b8:25:8b:59:9a:
fd:c8:e8:62:df:63:ca:c6:37:36:22:7f:32:92:8d:
24:52:a4:8f:9f:68:17:0c:98:29:17:df:a4:55:a3:
56:6a:3e:69:92:51:9e:24:d6:04:41:65:38:6b:03:
35:b5:12:26:f2:16:13:4b:d4:21:70:14:4d:07:c8:
f4:58:86:b0:6e:f3:3f:3b:df:03:0f:7a:c0:68:e1:
8f:9c:c9:13:71:12:87:5d:27:7a:88:ee:cd:17:48:
b6:19:67:7c:f5:02:a3:f7:99:87:a9:3a:7c:d2:7f:
19:4c:41:ef:66:50:85:5e:a6:44:e5:82:14:dd:f7:
af:7c:33:a9:ab:58:54:d2:f8:94:3a:a9:1b:82:a2:
28:9b:ab:18:01:7e:9f:58:0b:20:d3:a7:a5:57:2b:
4e:c6:09:2e:23:f5:3a:fb:62:6f:a5:d9:c5:b9:74:
9f:aa:93:ce:be:c5:ef:63:8c:cc:83:4d:6a:2c:fe:
0d:05:d2:86:ef:bd:a3:e1:9c:64:de:14:c4:7a:7a:
46:65:f9:fd:8b:85:67:7f:f0:0e:01:06:d6:20:ec:
3e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:B9:1C:53:B1:B8:54:17:F3:AE:B0:0E:84:28:52:06:2F:BE:6D:7E
X509v3 Authority Key Identifier:
keyid:1E:5F:2D:62:F8:5A:D2:84:D4:D1:89:25:6B:88:69:E8:E9:11:28:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0a3db4ff-9cd8-4d02-a027-6fa90494a3a1/c167a8b3a01f06717d2af62e3809072084c3af8f48948e40e2.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/2f059a21-d41b-4846-b7ae-7ea38c32fd4c/HwZxfSr2LjgJByCEw6-PSJSOQOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:9a:05:fd:9b:f2:50:40:6b:33:53:40:c5:e6:2c:80:0e:62:
1b:26:6b:ca:37:c5:f0:97:a1:3c:f9:59:20:9a:6e:cd:9c:02:
e4:53:5e:b8:da:5e:89:5a:43:d8:97:3a:86:8f:c0:18:33:d2:
76:5c:e9:46:73:8d:cd:a1:fe:18:8e:ef:82:1f:69:a7:00:83:
c3:38:bb:c2:40:79:af:c9:13:e0:79:84:22:da:8f:f6:e7:59:
e5:e1:5f:8c:5e:79:a1:b5:24:74:12:9c:8d:f1:78:2a:0a:cf:
ab:3f:8d:58:12:a0:1b:b4:22:e6:35:13:b2:7f:52:2d:31:52:
26:ff:63:6a:c3:9b:f8:33:ad:33:77:25:d0:25:fb:ee:b3:16:
8a:bc:ca:46:58:1a:30:d2:4d:85:d4:5a:24:47:d7:40:a4:b3:
78:6e:99:2f:24:12:0c:a0:2d:e8:e9:c5:0d:c2:a1:7b:0f:f7:
b2:78:bb:62:26:57:cb:91:09:73:6b:2a:3b:fc:37:7c:12:f6:
b5:46:23:7d:d5:19:09:a8:00:61:37:aa:7b:e4:ca:8d:a4:ce:
fc:b6:6c:63:dc:22:22:c1:f2:3e:95:ae:df:48:3d:de:be:cc:
9b:9d:12:7b:20:90:7f:51:73:48:22:2b:00:c1:f8:f2:fe:c0:
6c:ec:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 23:43:23 2025 by rpki-client