Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
File:                     3EE8725ABAB4B822156C9E328C7A188A6681E749.mft (raw, json)
Hash identifier:          hUBQ07EvBsKk7P4AVGsOYhaRNn05lY6aT0cJzApYyUM=
Subject key identifier:   B1:76:EA:1D:D3:7C:EF:01:5C:05:EA:DB:87:C3:4F:AD:EA:4C:6D:79
Authority key identifier: 3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49
Certificate issuer:       /CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
Certificate serial:       380D02E26FD86CC68337E7773D7A0E2C94237C75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft
Manifest number:          0368
Signing time:             Mon 14 Apr 2025 20:20:31 +0000
Manifest this update:     Mon 14 Apr 2025 20:15:31 +0000
Manifest next update:     Tue 15 Apr 2025 20:39:31 +0000
Files and hashes:         1: 3139392e34382e3234342e302f32342d3234203d3e20313531383732.roa (hash: 50CNKkpWYP15PG/0dyOOxnbkG9Y5WjF4rd9DmsSC78E=)
                          2: 3139392e34382e3234322e302f32342d3234203d3e203630313137.roa (hash: AJrieBjtoFCUzoRygnrUTpKphMCSiJhhz0plHTFmiLc=)
                          3: 3139392e34382e3234372e302f32342d3234203d3e20313939373037.roa (hash: F9Gsdmmfk/WkkRg+aQ27rbAtnAITLUdx51qHrCfwsxs=)
                          4: 3EE8725ABAB4B822156C9E328C7A188A6681E749.crl (hash: kKqK3pq+UWzyXmeEEjIIzDoH0so6XBjaLx/RZ/LYc4w=)
                          5: 3139392e34382e3234332e302f32342d3234203d3e203130313033.roa (hash: ar+1QPI0ytQe9vpJqTTwhTWwtFGjtRUIKCsnONCwWzU=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:0d:02:e2:6f:d8:6c:c6:83:37:e7:77:3d:7a:0e:2c:94:23:7c:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5
        Validity
            Not Before: Apr 14 20:15:31 2025 GMT
            Not After : Apr 15 20:39:31 2025 GMT
        Subject: CN=B176EA1DD37CEF015C05EADB87C34FADEA4C6D79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b6:68:5e:9e:ad:01:52:1d:0e:a1:23:3b:f2:
                    fe:70:c4:cb:f4:b3:34:3b:4a:38:b7:47:91:f8:ae:
                    da:55:4c:76:7d:3f:fa:bd:16:95:48:a9:b9:e0:53:
                    44:39:b5:a4:77:51:0c:f8:af:1b:63:cc:7d:45:18:
                    81:15:22:5f:19:e2:c1:b6:f7:bd:c0:7e:f6:50:1c:
                    3a:3c:32:0e:44:2b:30:a1:27:db:ac:4a:0f:42:6d:
                    3e:e8:25:c4:83:7f:39:29:2a:d1:3c:27:1e:36:fd:
                    80:3a:a9:52:32:16:e0:f3:74:de:a9:be:ca:f1:e1:
                    f8:89:a0:eb:d7:8c:02:b7:e4:3d:09:f9:78:7e:81:
                    f5:3e:15:65:af:83:73:b9:ac:05:b1:46:6f:2b:5c:
                    c2:98:b4:50:2f:90:85:2e:4f:6e:98:7e:9b:dc:48:
                    08:7e:ca:10:dc:7c:81:c2:ce:43:52:77:3e:e3:26:
                    22:d6:70:bc:cd:d6:3d:b8:1c:04:ec:01:6f:18:8b:
                    41:54:58:19:a2:ae:7f:e4:79:8c:2f:cf:42:01:5f:
                    59:a7:e3:4d:de:55:5a:87:da:a0:9a:c2:f3:f5:19:
                    79:1d:27:64:05:83:f7:14:08:e1:15:c8:09:17:e5:
                    5b:81:25:75:2b:d0:9e:d6:00:dd:b3:e7:1f:02:86:
                    e3:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:76:EA:1D:D3:7C:EF:01:5C:05:EA:DB:87:C3:4F:AD:EA:4C:6D:79
            X509v3 Authority Key Identifier:
                keyid:3E:E8:72:5A:BA:B4:B8:22:15:6C:9E:32:8C:7A:18:8A:66:81:E7:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b4586964-3c8b-4441-8b8a-b2d07721f346/600202b188e351fc29506275795bb89ce77c000f6e5b9b8fa5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf88e8b90701892c2e50863c3e/0/3EE8725ABAB4B822156C9E328C7A188A6681E749.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:6f:30:6a:b9:b5:19:81:65:57:71:f0:92:17:a6:e2:02:3a:
         ce:78:57:71:53:0b:53:d4:43:fd:9e:72:17:23:e0:59:fc:83:
         d6:5f:a1:e8:bd:94:8b:f4:40:ea:ae:57:b5:e9:10:e7:65:e8:
         13:eb:9a:09:3e:e0:45:72:8c:4d:11:b4:7f:43:43:85:96:9c:
         4e:41:1e:98:34:eb:50:d7:79:57:12:b9:ed:5e:db:5d:25:09:
         6e:06:c6:b0:61:80:b6:50:8a:1b:44:ee:35:b8:e7:dd:9a:f9:
         d0:64:38:68:d7:d1:f8:11:e4:40:7d:d2:c4:51:b9:18:92:6f:
         cb:a0:47:24:e9:ca:28:8b:52:c6:f4:e8:2c:1d:53:7c:ce:46:
         c9:a2:2e:53:df:c8:83:e9:e9:e4:b1:1e:93:9e:52:2a:3d:46:
         11:14:ff:be:bb:78:ce:d6:5f:90:dc:54:99:38:e2:c4:ad:29:
         8f:ec:09:62:ce:e5:02:b6:f5:39:54:e2:6b:51:e5:dd:1e:af:
         9a:10:aa:60:a2:c2:d8:28:82:2b:7e:41:f4:0d:2f:86:2f:88:
         0c:2f:5f:a1:69:02:34:78:d9:54:3d:27:6b:bb:6f:42:b4:92:
         11:c6:cb:e3:7b:d3:20:f3:3a:d8:c5:02:06:9b:bc:14:f3:6d:
         85:34:e7:2f
-----BEGIN CERTIFICATE-----
MIIFvDCCBKSgAwIBAgIUOA0C4m/YbMaDN+d3PXoOLJQjfHUwDQYJKoZIhvcNAQEL
BQAwPTE7MDkGA1UEAxMyNjAwMjAyYjE4OGUzNTFmYzI5NTA2Mjc1Nzk1YmI4OWNl
NzdjMDAwZjZlNWI5YjhmYTUwHhcNMjUwNDE0MjAxNTMxWhcNMjUwNDE1MjAzOTMx
WjAzMTEwLwYDVQQDEyhCMTc2RUExREQzN0NFRjAxNUMwNUVBREI4N0MzNEZBREVB
NEM2RDc5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmrZoXp6tAVId
DqEjO/L+cMTL9LM0O0o4t0eR+K7aVUx2fT/6vRaVSKm54FNEObWkd1EM+K8bY8x9
RRiBFSJfGeLBtve9wH72UBw6PDIORCswoSfbrEoPQm0+6CXEg385KSrRPCceNv2A
OqlSMhbg83Teqb7K8eH4iaDr14wCt+Q9Cfl4foH1PhVlr4NzuawFsUZvK1zCmLRQ
L5CFLk9umH6b3EgIfsoQ3HyBws5DUnc+4yYi1nC8zdY9uBwE7AFvGItBVFgZoq5/
5HmML89CAV9Zp+NN3lVah9qgmsLz9Rl5HSdkBYP3FAjhFcgJF+VbgSV1K9Ce1gDd
s+cfAobj1wIDAQABo4ICvDCCArgwHQYDVR0OBBYEFLF26h3TfO8BXAXq24fDT63q
TG15MB8GA1UdIwQYMBaAFD7oclq6tLgiFWyeMox6GIpmgedJMA4GA1UdDwEB/wQE
AwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6Ly9ycGtpLXJwcy5hcmluLm5l
dC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5MmMyZTUwODYzYzNlLzAv
M0VFODcyNUFCQUI0QjgyMjE1NkM5RTMyOEM3QTE4OEE2NjgxRTc0OS5jcmwwgfMG
CCsGAQUFBwEBBIHmMIHjMIHgBggrBgEFBQcwAoaB03JzeW5jOi8vcnBraS5hcmlu
Lm5ldC9yZXBvc2l0b3J5L2FyaW4tcnBraS10YS81ZTRhMjNlYS1lODBhLTQwM2Ut
YjA4Yy0yMTcxZGEyMTU3ZDMvNWI3ZmIxMjItZGZkZi00YzBjLWI5MGQtM2JjN2E1
ZmViODJiL2I0NTg2OTY0LTNjOGItNDQ0MS04YjhhLWIyZDA3NzIxZjM0Ni82MDAy
MDJiMTg4ZTM1MWZjMjk1MDYyNzU3OTViYjg5Y2U3N2MwMDBmNmU1YjliOGZhNS5j
ZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6Ly9ycGtp
LXJwcy5hcmluLm5ldC9yZXBvc2l0b3J5LzhhODQ4YWRmODhlOGI5MDcwMTg5MmMy
ZTUwODYzYzNlLzAvM0VFODcyNUFCQUI0QjgyMjE1NkM5RTMyOEM3QTE4OEE2Njgx
RTc0OS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEFBQcBBwEB
/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwDQYJ
KoZIhvcNAQELBQADggEBAJpvMGq5tRmBZVdx8JIXpuICOs54V3FTC1PUQ/2echcj
4Fn8g9Zfoei9lIv0QOquV7XpEOdl6BPrmgk+4EVyjE0RtH9DQ4WWnE5BHpg061DX
eVcSue1e210lCW4GxrBhgLZQihtE7jW4592a+dBkOGjX0fgR5EB90sRRuRiSb8ug
RyTpyiiLUsb06CwdU3zORsmiLlPfyIPp6eSxHpOeUio9RhEU/767eM7WX5DcVJk4
4sStKY/sCWLO5QK29TlU4mtR5d0er5oQqmCiwtgogit+QfQNL4YviAwvX6FpAjR4
2VQ9J2u7b0K0khHGy+N70yDzOtjFAgabvBTzbYU05y8=
-----END CERTIFICATE-----