Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
File:                     CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft (raw, json)
Hash identifier:          zBMD1t6VNxBteFyWIzLgcYjgfPA9Bb64SiAIMovY+HU=
Subject key identifier:   F5:51:0F:3D:DC:9F:8F:18:4D:26:12:77:52:C2:41:39:6E:C9:DC:B4
Authority key identifier: CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20
Certificate issuer:       /CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
Certificate serial:       2A356D3CFD9439E856943D40D154A84A986CE95D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft
Manifest number:          07FC
Signing time:             Mon 14 Apr 2025 10:28:35 +0000
Manifest this update:     Mon 14 Apr 2025 10:23:35 +0000
Manifest next update:     Tue 15 Apr 2025 11:23:35 +0000
Files and hashes:         1: AS21696.roa (hash: N1fE2LW+G2pJnIOf60Wakt1Hgea/kp01wsfU0BHgB6A=)
                          2: CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl (hash: I0f6Va0ExmtajScfcbtRV2niJhS9mTXVOt+2PmvpvOY=)
                          3: AS5650.roa (hash: 3n3OF4DdUqT5NvAHlh+/gNuWVZDO612XPwcBM0XyGgI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:35:6d:3c:fd:94:39:e8:56:94:3d:40:d1:54:a8:4a:98:6c:e9:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77
        Validity
            Not Before: Apr 14 10:23:35 2025 GMT
            Not After : Apr 15 11:23:35 2025 GMT
        Subject: CN=F5510F3DDC9F8F184D26127752C241396EC9DCB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:39:ba:34:01:c2:11:d2:6f:d7:29:59:7e:b2:
                    75:02:e4:ca:e1:0f:e9:15:f0:34:5a:55:1c:c1:c4:
                    3a:ed:05:e5:4f:ff:5c:3d:51:2f:ce:87:eb:40:a3:
                    90:96:ea:55:10:e6:62:34:91:1e:d6:81:36:62:50:
                    fc:fb:aa:f7:6d:c3:8b:c7:f6:41:16:4f:4b:44:0d:
                    a4:14:e3:e0:9a:63:29:fa:b4:22:ae:04:da:45:43:
                    79:3d:82:0c:bc:9d:6d:58:e4:25:26:69:81:1c:f2:
                    a8:4a:04:e4:f0:20:9d:b0:c8:fc:8f:57:c1:d7:df:
                    af:ef:67:e9:52:f8:b6:83:52:ce:9b:19:af:ab:5e:
                    fe:f2:e9:46:ce:fb:ba:73:8f:99:75:f1:4f:1d:4e:
                    8f:dd:26:ad:99:23:7f:ab:b7:3f:72:3a:a8:11:34:
                    be:e3:5c:f6:38:de:df:9f:d7:df:95:02:11:e3:00:
                    bd:dd:e8:45:6d:16:52:b6:ba:67:09:cb:6b:bc:64:
                    cd:e5:6b:d7:81:af:37:c8:c7:96:99:93:ae:f4:ca:
                    c9:d7:d9:8f:52:54:1c:7f:83:a5:16:51:85:9e:2c:
                    1a:48:1c:49:7d:9a:63:dd:6b:03:ff:9a:1c:1a:bc:
                    b7:be:82:25:26:1a:46:6b:4d:15:16:f5:2b:47:28:
                    6b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:51:0F:3D:DC:9F:8F:18:4D:26:12:77:52:C2:41:39:6E:C9:DC:B4
            X509v3 Authority Key Identifier:
                keyid:CB:08:86:D2:04:48:A6:63:C7:CF:5C:4E:19:79:AC:6F:79:DB:05:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/46bf1f03-2ebd-405e-a5b7-62bdf3d7dbe6/bc0d672ae9dbe88135893e3dc19a885a067859fdae668d5a77.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade87289578018732a90a2f097f/2/CB0886D20448A663C7CF5C4E1979AC6F79DB0520.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:08:be:e1:cd:3e:6f:bb:3a:14:0b:71:0f:8b:24:01:fe:f1:
         e7:07:ad:06:1e:44:51:2d:76:0c:ad:7c:95:23:71:49:e7:55:
         a9:13:37:67:cf:77:46:9f:26:4e:b2:f6:bf:15:ee:c8:b7:e8:
         2d:d6:df:c7:fd:ac:2d:ee:a4:2e:d3:0b:2c:d7:e2:22:6a:fa:
         82:62:a2:c3:ee:fe:af:30:de:31:35:a0:fa:52:b9:c7:60:8b:
         0c:84:85:d6:89:9a:5d:22:bc:6a:03:4f:eb:23:73:42:db:49:
         22:17:ca:23:a3:23:7b:a0:e7:1f:17:24:56:22:43:ca:5a:da:
         32:37:76:bd:a3:c9:1e:34:52:37:eb:2d:03:77:ab:7c:8a:2a:
         c8:d3:f1:b7:42:cc:a8:9b:8c:6d:bd:65:13:42:f2:58:d9:d6:
         6c:d1:cd:04:51:5c:ab:1f:d7:95:b0:b9:e1:b6:eb:52:06:f4:
         ea:3b:a3:32:62:d5:fb:8b:a8:a6:0e:7f:bf:77:6f:a6:48:e7:
         69:ae:c4:56:33:2e:59:97:66:49:87:fd:7e:b5:bf:33:3b:34:
         92:cd:8d:4e:c0:06:41:5a:c0:a3:03:4e:95:c4:fd:4a:91:1c:
         eb:05:fa:4d:54:b8:bf:ee:ad:21:19:52:d9:51:e3:4d:4b:3f:
         20:71:1a:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----