Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
File:                     AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft (raw, json)
Hash identifier:          G1ybWsHCUOqGEyf0QODsojzwaNwKamIQtv1VCo7Ri7s=
Subject key identifier:   FC:A9:71:CA:65:D5:B2:62:56:08:6C:D5:01:2D:AE:C5:E4:46:C8:F4
Authority key identifier: AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E
Certificate issuer:       /CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
Certificate serial:       64DCCB68D439DE1662F692298E780109BBD95C96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft
Manifest number:          AE
Signing time:             Thu 27 Feb 2025 22:26:26 +0000
Manifest this update:     Thu 27 Feb 2025 22:21:26 +0000
Manifest next update:     Fri 28 Feb 2025 23:27:26 +0000
Files and hashes:         1: 323630323a663764633a323a3a2f34382d3438203d3e20343031333836.roa (hash: 9M6+ctr3/mJCzbHzYd4AMSLnCfzP1Tl4hG4urHuUJ70=)
                          2: AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl (hash: YBwu5BnAaqnNRw8viYiHh+cVT2Q+jOR6L3e2ia4TZbw=)
                          3: 323630323a663764633a313a3a2f34382d3438203d3e20343031333836.roa (hash: FRItfpZcUolUAc+I0Gu+pP6/rzXqWWy+lqKLLNkWPfk=)
                          4: 323630323a663764633a333a3a2f34382d3438203d3e20343031333836.roa (hash: go+yZl6czKsroMkjrf+dmkcZO1bOjICPg8UUO4S7jYk=)
                          5: 323630323a663764633a343a3a2f34382d3438203d3e20323135333634.roa (hash: zLvIaBNeJwLwWdChjA1DPS8lTx1qOZJUR9Fp/2uCXW8=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:dc:cb:68:d4:39:de:16:62:f6:92:29:8e:78:01:09:bb:d9:5c:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556
        Validity
            Not Before: Feb 27 22:21:26 2025 GMT
            Not After : Feb 28 23:27:26 2025 GMT
        Subject: CN=FCA971CA65D5B26256086CD5012DAEC5E446C8F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a3:e7:7f:a9:ae:1b:37:78:12:7d:42:b9:e3:
                    8f:b2:e6:32:ce:f3:38:4d:ee:62:1d:02:65:1a:b7:
                    08:72:1a:f6:87:93:38:98:6c:68:44:5c:03:a1:4f:
                    9e:63:4c:4f:85:cd:4c:7e:21:a4:38:ad:5d:ae:3a:
                    03:24:cd:7e:27:52:b6:ae:b2:c8:8f:b6:7b:09:c3:
                    3b:2a:39:a6:af:0d:e0:35:1e:34:bb:2b:95:61:9c:
                    cd:2a:46:f1:f0:97:7f:ca:bb:b5:f3:b2:fb:a5:6d:
                    1e:a2:38:e1:76:a6:97:f3:92:75:bb:da:94:56:a1:
                    f9:78:3b:db:8c:87:b0:75:80:c5:d6:5a:d5:ab:e5:
                    ed:ba:a8:d3:d1:24:9e:f5:9d:a3:9b:83:c4:b0:df:
                    4c:72:4a:6f:cd:af:c5:f7:2a:d7:89:3b:06:24:2f:
                    5f:76:53:3f:ea:e7:b6:e4:1e:f7:a7:18:89:9f:7f:
                    e7:d8:3e:9b:f9:b3:da:6d:28:fa:cf:c3:e3:a7:95:
                    45:3e:f2:d3:a3:1d:80:bf:7c:d9:bf:38:2f:36:9e:
                    4a:62:8b:26:42:2d:64:2d:e2:86:7a:69:ea:7e:aa:
                    47:a7:79:04:40:7e:30:92:fa:e8:a9:bb:92:1e:64:
                    57:5d:99:e7:63:38:74:b4:9a:a0:76:f2:bc:80:59:
                    67:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:A9:71:CA:65:D5:B2:62:56:08:6C:D5:01:2D:AE:C5:E4:46:C8:F4
            X509v3 Authority Key Identifier:
                keyid:AB:2E:F8:8F:24:74:9F:5A:12:0D:FA:DE:67:C9:18:E4:C7:10:C5:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/cd9a9dcf-4448-45ff-8ea6-d13be97d91a2/0cc857d05efbb350230520d08c8d7f45e34e3bff3cb516e556.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848ade91fb43b40192908b3e28514a/0/AB2EF88F24749F5A120DFADE67C918E4C710C53E.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e3:74:f9:0b:c5:8d:a9:26:04:e2:d0:c2:91:71:11:47:1d:
         a0:09:9f:55:0d:bd:d5:5a:57:70:d6:14:e9:74:aa:0a:ff:3a:
         7b:b9:09:38:39:8b:1e:22:5b:01:6c:df:b5:52:12:3a:f0:28:
         36:36:d0:16:89:a1:14:66:30:c3:55:89:d4:6e:04:fc:ce:f5:
         63:0c:6c:f6:54:6b:f2:b0:f5:59:97:c3:f7:9e:d8:39:cc:43:
         2a:83:c9:8b:83:43:eb:90:31:0b:c9:ce:c0:b1:9c:94:d6:2a:
         92:3b:ba:50:44:c5:03:0d:65:73:be:de:b9:25:28:20:2d:07:
         84:79:12:4a:20:0b:55:9f:c1:64:6d:8e:14:48:0e:b0:8b:3b:
         5f:5e:11:93:69:00:30:ca:9c:51:f0:01:e8:a8:b3:d3:a2:5f:
         ee:bb:70:a1:15:1d:99:e0:8a:88:76:a1:da:fb:6e:70:d6:f4:
         8a:ad:9c:45:70:50:3e:6b:0c:cd:46:c6:b5:48:54:c2:5e:57:
         49:37:62:4d:75:5e:78:70:b1:97:4d:58:ba:79:d4:11:26:cb:
         25:b7:f6:f2:1f:85:a4:bb:ac:39:c8:ae:74:81:62:90:7a:d4:
         6a:98:c7:07:80:d2:65:75:53:9a:25:16:cd:36:ff:ed:bc:da:
         32:ce:5a:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----