Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
File:                     CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft (raw, json)
Hash identifier:          PnYf87QyNyE+8MyphpeXmlrw2wKDGC4QnGoxrmwIu6o=
Subject key identifier:   76:22:B4:09:8B:68:C6:98:E0:2D:B4:BA:C7:82:7C:8D:14:87:44:CB
Authority key identifier: CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A
Certificate issuer:       /CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
Certificate serial:       4C43566A72468CEEC169B3AE32B1618CA1F843F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft
Manifest number:          026A
Signing time:             Sun 13 Apr 2025 21:00:30 +0000
Manifest this update:     Sun 13 Apr 2025 20:55:30 +0000
Manifest next update:     Mon 14 Apr 2025 21:11:30 +0000
Files and hashes:         1: CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl (hash: urbZ6l8YdvuIC+8AZFA52LUypHse/DcK1OZ5CY4Bals=)
                          2: 3139392e3138382e3233362e302f32342d3234203d3e203533333536.roa (hash: IgUw8z/AmvLTj+RS/RzHdFn0Pi0Hy/pmsyWI+vZtRF4=)
                          3: 3139392e3138382e3233382e302f32342d3234203d3e203332373830.roa (hash: DyHCVW6mXrCtLSQix2b9EGFllBxlLZCNoTSXloWqsDY=)
                          4: 3139392e3138382e3233372e302f32342d3234203d3e20333936333536.roa (hash: H3h/beCGfbI78EuSWUvFbAYeBfvMe5H8q/5d7uEP/zw=)
                          5: 3139392e3138382e3233392e302f32342d3234203d3e203631333137.roa (hash: OsxDDS3dZf0CGHzSMXOau5qPbsqlQX/Z1yAI375Ol8k=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:43:56:6a:72:46:8c:ee:c1:69:b3:ae:32:b1:61:8c:a1:f8:43:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0
        Validity
            Not Before: Apr 13 20:55:30 2025 GMT
            Not After : Apr 14 21:11:30 2025 GMT
        Subject: CN=7622B4098B68C698E02DB4BAC7827C8D148744CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0b:3f:d1:1e:d7:90:e7:83:ae:29:11:5b:b5:
                    dc:01:2b:f0:95:1f:13:85:b9:11:ea:2b:16:c5:da:
                    c5:9c:03:88:84:38:97:11:cc:6e:6c:0f:2d:2d:0b:
                    62:f8:2a:8b:c7:02:80:09:6a:11:f5:5a:41:20:c0:
                    cf:7a:39:59:a1:dd:de:cf:b2:c2:48:fd:5a:f8:8f:
                    5e:36:77:a0:e1:e9:85:bc:a1:4c:16:96:6a:ba:2b:
                    c4:e4:d9:be:4a:86:6a:da:ea:51:d5:6a:c7:79:a0:
                    30:62:67:5d:ea:f7:8c:c0:c8:e4:a6:99:81:0c:55:
                    b0:c9:7d:7c:30:34:2e:8d:1c:45:1c:4d:45:67:01:
                    5a:f5:c2:2d:97:63:90:0e:c0:6e:75:02:05:4f:08:
                    bc:57:0d:30:fa:50:67:cb:8d:c7:05:a7:09:fb:4e:
                    4a:53:8f:72:58:69:0a:97:30:90:2d:15:c4:5d:2b:
                    5c:b2:b8:fa:7c:a9:63:08:d7:bc:9f:b9:0a:d0:84:
                    b9:06:41:45:9f:eb:b1:35:9c:15:ae:08:d5:55:a5:
                    d2:4b:51:d2:d5:20:1a:7b:43:7b:3f:d2:83:97:fd:
                    ba:29:10:dd:f2:ad:76:0e:f3:7a:8e:38:ad:17:13:
                    07:6e:b3:40:65:a7:b7:f8:48:e4:74:9c:77:04:24:
                    43:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:22:B4:09:8B:68:C6:98:E0:2D:B4:BA:C7:82:7C:8D:14:87:44:CB
            X509v3 Authority Key Identifier:
                keyid:CB:A7:78:B7:41:5B:D4:D1:E6:EF:0E:80:0E:25:8B:46:DF:A5:4D:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/cbfc84cd-39fb-4efb-a65d-dca73adfa9ac/c3a7a2fa9fdf7a6f5087b840b66c4fc34120d5ce7114b878d0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8cea2ac6018cfa0a16bf19f4/0/CBA778B7415BD4D1E6EF0E800E258B46DFA54D8A.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:64:77:79:dd:80:5c:45:3b:58:87:32:73:68:c4:25:63:8a:
         fc:9e:ce:15:10:11:26:d2:dc:b5:73:06:95:e1:81:af:7d:84:
         57:e3:59:ef:3c:c6:cf:78:f1:95:a6:78:8a:16:b8:48:74:62:
         56:58:3a:5e:9d:a7:aa:db:56:fb:59:ea:4a:48:7b:8d:5b:6d:
         8c:8b:1a:02:4f:ed:f6:a1:60:d4:72:a9:0f:1e:e7:49:79:85:
         04:97:42:8e:11:19:bd:65:6f:47:a8:d3:82:a6:08:71:5a:bf:
         c6:82:b0:c6:a0:3d:0f:38:6f:22:50:ca:d3:d0:8e:a0:ed:9b:
         df:45:a2:0b:1b:87:64:c1:28:21:c3:35:d2:4b:f5:67:86:7e:
         e7:10:88:43:04:60:c9:b6:7c:c8:71:90:02:bc:94:d2:b9:b1:
         f7:0b:26:6f:f2:5b:be:65:30:b3:58:f2:54:82:b7:7a:ad:fc:
         16:36:4a:0b:fd:45:c7:b6:b3:f4:1e:13:af:7f:12:e8:25:6a:
         04:2b:5b:ae:77:7c:e5:2b:9b:60:a6:ba:0d:e4:a2:aa:01:d9:
         2a:da:49:8a:4f:46:b6:bc:00:16:bc:2c:d0:f7:0f:96:7c:b7:
         e3:be:d0:c9:30:89:80:68:1e:c3:49:96:38:ab:56:a6:7e:50:
         8a:f0:0c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----