Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft
File:                     D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft (raw, json)
Hash identifier:          93R7bQe1Jjvps3PPsYsq3y4AR26RlzRqeLWW0xyIw1U=
Subject key identifier:   A2:C2:49:CA:5F:1D:15:C0:8B:EC:1B:AB:F7:1F:05:16:D7:A6:33:DB
Authority key identifier: D8:38:B7:15:8B:11:DF:B6:B6:5B:9A:68:DE:B2:5B:46:E4:F5:7E:68
Certificate issuer:       /CN=D838B7158B11DFB6B65B9A68DEB25B46E4F57E68
Certificate serial:       0A5CABA5A4A8B9CA48F736DC3D37322A04365492
Authority info access:    rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft
Manifest number:          F9
Signing time:             Tue 09 Jan 2024 12:01:32 +0000
Manifest this update:     Tue 09 Jan 2024 11:56:32 +0000
Manifest next update:     Wed 10 Jan 2024 15:45:32 +0000
Files and hashes:         1: 326130613a363034303a346234623a3a2f34382d3438203d3e20313939353435.roa (hash: 9KM6UshSvaOvta5aCy+NNdSt0QMjzPBG8ruq6lJt8nA=)
                          2: 326130353a646663313a313030303a3a2f34302d3430203d3e203438363036.roa (hash: PRDvwlM6YopNHMw4aI0YQcTtbLDatx0ROEtoQgqNmLM=)
                          3: D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.crl (hash: tvP0Pt3EiF4WMVUmSqJKeZ2H/UK24/lxcBcMkk4kgPQ=)
                          4: 326130353a646663313a313030303a3a2f34302d3430203d3e203539363738.roa (hash: J2uWKNYHuBHjuYg8tW35/Ywi2v321x3/VMOka7YzTys=)
                          5: 326130613a363034303a346230303a3a2f34302d3430203d3e203539363738.roa (hash: oHh60M/+D0AkdbWcyjzhqOKVjDS21Mi3tc2CognyTDE=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:5c:ab:a5:a4:a8:b9:ca:48:f7:36:dc:3d:37:32:2a:04:36:54:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D838B7158B11DFB6B65B9A68DEB25B46E4F57E68
        Validity
            Not Before: Jan  9 11:56:32 2024 GMT
            Not After : Jan 10 15:45:32 2024 GMT
        Subject: CN=A2C249CA5F1D15C08BEC1BABF71F0516D7A633DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c8:84:23:72:c9:cf:36:01:6b:80:14:14:77:
                    70:5c:c9:2c:92:20:60:b1:28:65:fa:ab:1c:9b:2f:
                    90:a8:fa:ec:e9:84:a2:2d:7d:4b:a9:a6:54:27:eb:
                    ff:b1:d6:c1:fc:e4:d0:97:bb:42:99:43:4d:f8:a8:
                    dd:b4:9c:ac:e3:96:ad:c6:50:95:cf:ea:5f:17:3b:
                    89:78:a5:e7:9f:ae:81:65:c0:e0:a2:df:9f:07:04:
                    c9:bb:8f:23:26:38:90:4e:04:28:5e:de:0b:3b:36:
                    f7:73:eb:f0:dd:b6:11:35:b1:14:d5:19:27:44:f5:
                    d8:86:91:b5:cb:ca:75:c9:70:f7:0e:38:71:f2:32:
                    43:de:39:c1:d8:3c:d4:84:f6:77:83:37:5e:71:6c:
                    f1:2e:0d:57:6f:f7:cf:c6:bc:e1:d0:85:98:9e:3f:
                    93:93:e9:77:6b:66:0c:07:bb:18:66:b1:7c:66:04:
                    7e:6a:e0:28:f8:a4:14:1f:7f:5f:93:41:76:0c:5e:
                    2d:92:42:20:54:74:ec:64:61:67:e7:bd:2c:b1:aa:
                    31:0d:22:be:ed:05:70:64:9c:ac:7a:16:9d:15:d1:
                    b1:7c:17:cc:7c:4e:03:7f:cd:e6:74:17:6b:a2:dc:
                    b2:0d:8d:16:ce:fb:cc:82:26:a0:52:9c:49:b4:0c:
                    4a:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C2:49:CA:5F:1D:15:C0:8B:EC:1B:AB:F7:1F:05:16:D7:A6:33:DB
            X509v3 Authority Key Identifier:
                keyid:D8:38:B7:15:8B:11:DF:B6:B6:5B:9A:68:DE:B2:5B:46:E4:F5:7E:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.crl

            Authority Information Access:
                CA Issuers - URI:rsync://cloudie-repo.rpki.app/repo/CLOUDIE-RPKI/0/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade88e39bfa01890c9feec1249e/3/D838B7158B11DFB6B65B9A68DEB25B46E4F57E68.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:72:9d:5c:92:1b:07:b8:fd:a7:fb:ae:c0:ea:b5:92:54:77:
         2a:94:42:36:0f:44:d5:18:f6:04:9d:e4:a2:8e:d4:60:e1:0e:
         1b:3f:5d:fe:dd:bc:9d:43:17:09:be:3c:27:e5:28:a4:a9:a4:
         f9:0d:9d:24:bd:47:d0:c9:3b:ef:8d:3a:71:68:fa:3c:72:d0:
         3c:36:93:ca:4a:87:60:f2:da:d8:21:96:02:37:69:5e:b4:03:
         6e:c1:fb:dc:cf:be:92:e5:54:2b:be:91:1a:20:ac:af:a9:a7:
         4e:35:bd:7f:26:83:a3:09:9f:87:34:01:ed:84:cd:e1:41:b5:
         65:27:ca:05:39:b6:c8:c9:12:4a:7e:57:f1:88:d0:69:85:d1:
         32:92:f7:64:48:b8:1b:83:c6:81:dc:4f:51:72:a3:56:f4:3a:
         a5:4e:3f:e5:0b:98:b5:63:50:2e:82:68:a6:60:8f:4e:d5:9b:
         6d:76:6a:4f:ea:1b:d2:a0:9b:40:01:39:2c:81:98:b4:72:d1:
         91:0b:e1:40:86:7a:3c:b4:6e:80:06:69:0d:ce:0c:b7:59:85:
         40:63:59:83:23:a7:a5:d2:c7:9b:f6:18:da:1a:0e:2e:81:62:
         7f:46:06:18:2f:fb:54:20:02:eb:4b:b0:05:77:e9:9b:1b:c2:
         ac:83:99:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----