Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
File:                     3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft (raw, json)
Hash identifier:          o7U4AcplgOqPupzyfzLY8jCpmjP+TskX/BlPJzUd28Y=
Subject key identifier:   45:25:6D:39:08:17:42:59:58:2E:FE:FE:4A:9D:D3:0B:FD:85:54:F8
Authority key identifier: 3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA
Certificate issuer:       /CN=3C8C1B29CC37837A2E3BECC50D55C362B62804DA
Certificate serial:       3400974B14E001071F520D27DAA88235C3552FE4
Authority info access:    rsync://dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft
Manifest number:          FB
Signing time:             Fri 27 Sep 2024 06:36:22 +0000
Manifest this update:     Fri 27 Sep 2024 06:31:22 +0000
Manifest next update:     Sat 28 Sep 2024 08:34:22 +0000
Files and hashes:         1: 3C8C1B29CC37837A2E3BECC50D55C362B62804DA.crl (hash: LwY/FQ1R19ofZoeN75jpM5wzi4G7dXsPt1GJWExYHQA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:00:97:4b:14:e0:01:07:1f:52:0d:27:da:a8:82:35:c3:55:2f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8C1B29CC37837A2E3BECC50D55C362B62804DA
        Validity
            Not Before: Sep 27 06:31:22 2024 GMT
            Not After : Sep 28 08:34:22 2024 GMT
        Subject: CN=45256D3908174259582EFEFE4A9DD30BFD8554F8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:65:f6:0b:f8:62:53:02:c9:5d:2c:ba:46:30:
                    26:56:08:19:17:9c:3d:e4:ec:8d:82:e2:16:b9:59:
                    1e:1d:cb:c4:29:b6:d9:17:f5:14:12:cc:e2:6a:3b:
                    ab:f2:e3:80:06:14:b8:72:13:05:a0:57:a5:ab:b6:
                    26:24:e4:db:93:d9:22:72:a7:6f:72:3b:e7:0c:0e:
                    9d:1e:05:0c:6b:58:48:f3:32:43:d4:3a:92:d1:a4:
                    cd:fa:20:0e:db:39:a9:63:83:5f:0e:cb:2d:9d:00:
                    cd:e3:4b:65:33:40:97:11:0b:d2:93:cd:f9:50:80:
                    45:35:ad:ef:9d:0c:94:57:d6:54:7b:46:7c:5b:28:
                    53:8b:5c:4b:2d:48:f4:2e:10:90:d5:3f:10:71:5c:
                    71:4f:2f:c8:5f:86:f3:44:fe:76:30:d3:ed:64:c8:
                    b3:37:a8:65:13:70:0e:6c:6a:7d:cf:30:68:17:9a:
                    6f:71:7b:99:bf:92:b7:94:24:92:25:82:de:1c:8d:
                    18:60:a7:af:9c:b4:64:9a:9a:ad:5d:ef:2f:e2:a2:
                    37:3e:c0:84:1e:a1:3a:f7:54:68:b7:9e:92:3f:34:
                    70:e6:c4:af:ba:a2:8f:44:62:0c:65:dc:b6:fd:ba:
                    73:ac:98:2b:bd:6f:9c:7b:d2:47:23:1f:79:a8:e1:
                    16:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:25:6D:39:08:17:42:59:58:2E:FE:FE:4A:9D:D3:0B:FD:85:54:F8
            X509v3 Authority Key Identifier:
                keyid:3C:8C:1B:29:CC:37:83:7A:2E:3B:EC:C5:0D:55:C3:62:B6:28:04:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://dev.tw/rpki/August/10/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf8fdeec0c019033dbdecc4fa4/4/3C8C1B29CC37837A2E3BECC50D55C362B62804DA.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:e6:d1:1c:83:ce:ba:b0:37:1b:ae:4c:90:3b:f5:51:e6:9d:
         ad:36:da:98:75:c4:50:ca:0a:5a:e8:6a:13:d5:d5:ee:d7:bb:
         dc:86:62:11:a9:c0:96:e0:e6:45:b0:9b:4e:3f:58:8e:cc:ba:
         f7:72:f9:d9:98:37:05:8a:34:42:ee:16:80:7a:cc:d8:4a:c0:
         a3:c7:b8:2b:42:dc:09:78:10:5c:8e:d3:c2:59:6f:68:29:31:
         71:30:01:0b:35:9f:a1:1e:83:c2:79:79:af:bb:ea:84:5c:83:
         65:a6:7d:86:f0:aa:83:4e:4d:de:78:17:84:02:d9:a6:57:b1:
         98:4a:91:30:8a:32:cd:61:81:f0:e5:2a:ad:5d:ad:b7:26:3c:
         74:57:5e:d1:05:87:8f:cf:d7:bb:d9:ca:75:07:8a:30:ab:5b:
         25:24:4a:6e:b4:53:d1:6d:8b:55:c5:ce:57:b1:e3:e3:b9:73:
         36:fa:3d:81:c1:01:e4:80:56:04:48:7d:97:68:ca:b3:c4:1d:
         46:bd:0e:fd:31:04:f7:eb:f1:bf:80:67:aa:83:22:b1:c2:79:
         6e:b6:12:12:f5:fd:88:ec:c8:e2:bc:24:d3:2c:a7:28:d6:09:
         28:6e:8c:ff:78:0e:08:73:c3:58:52:90:aa:29:36:83:a5:6b:
         29:f5:05:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----