Manifest

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
File:                     3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft (raw, json)
Hash identifier:          HCUXA5MzIaKuh9MJ8i6CQjI8Qc2hmbvFrFm+vpAvQzw=
Subject key identifier:   6B:90:EE:A9:19:90:B4:A1:92:B8:47:36:4B:E1:78:4E:28:C5:A1:9E
Authority key identifier: 3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF
Certificate issuer:       /CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
Certificate serial:       09D1802A6300BEF8F373CAC98328441379F27BD4
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft
Manifest number:          E3
Signing time:             Sun 13 Apr 2025 10:46:47 +0000
Manifest this update:     Sun 13 Apr 2025 10:41:47 +0000
Manifest next update:     Mon 14 Apr 2025 11:02:47 +0000
Files and hashes:         1: 3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl (hash: Ewd4O5tU9z0bTkRf8XME/IiQlh6ISFZBqs/thJhaPRo=)
                          2: 38382e3133352e37342e302f32342d3234203d3e20393833.roa (hash: y9YmktivJBbKPHh8hEM7zR9L9cZ6v0kH5w91NUKXhuA=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d1:80:2a:63:00:be:f8:f3:73:ca:c9:83:28:44:13:79:f2:7b:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3de0b78633aaf10a9b22a1e925eebcd1ed76b0af
        Validity
            Not Before: Apr 13 10:41:47 2025 GMT
            Not After : Apr 14 11:02:47 2025 GMT
        Subject: CN=6B90EEA91990B4A192B847364BE1784E28C5A19E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:11:28:9c:68:ab:e0:d6:69:d7:0d:91:e6:44:
                    56:de:32:5c:e2:5f:ea:fc:4c:a4:27:de:d3:1c:ca:
                    1f:26:8e:63:44:b0:f7:af:e1:a9:8a:58:3f:72:0c:
                    26:48:bb:64:03:d5:ac:ad:ae:6b:88:f5:4e:d3:9f:
                    03:b3:6b:45:3e:cc:ef:09:7c:64:3e:71:57:95:30:
                    3a:2f:8c:00:a3:b1:5b:73:26:75:07:a0:60:4f:69:
                    c8:ac:ff:f0:7d:5c:a7:13:4f:bd:5b:f4:78:67:94:
                    2f:09:2f:89:b4:c6:ac:4c:2c:00:54:a6:3f:1c:a5:
                    7d:16:0c:3e:ad:ee:56:0e:d0:06:db:28:f7:c6:cb:
                    40:06:c3:90:ab:f1:62:58:1a:b1:0d:f3:5f:e9:95:
                    29:33:5b:4e:81:4a:60:3b:5b:59:e0:c2:59:62:84:
                    38:38:31:ae:5d:a7:d5:4e:7a:2d:3c:69:ca:fe:2f:
                    5f:f3:d2:c3:5e:f8:29:8c:96:37:6f:66:52:ca:35:
                    f7:56:1e:f0:84:86:c8:bd:c4:b6:89:6d:56:d3:81:
                    99:1a:57:bc:0a:d7:c2:7b:76:29:0e:8e:a8:fd:b0:
                    10:a3:cb:17:ec:2d:5e:fb:a1:e1:d2:84:42:20:c4:
                    dd:34:d1:18:47:70:93:20:c9:3a:d1:81:ca:f2:44:
                    e4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:90:EE:A9:19:90:B4:A1:92:B8:47:36:4B:E1:78:4E:28:C5:A1:9E
            X509v3 Authority Key Identifier:
                keyid:3D:E0:B7:86:33:AA:F1:0A:9B:22:A1:E9:25:EE:BC:D1:ED:76:B0:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PeC3hjOq8QqbIqHpJe680e12sK8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf914e0aa6019159f2fb270ca8/2/3DE0B78633AAF10A9B22A1E925EEBCD1ED76B0AF.mft

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:44:5d:63:bc:16:2b:5b:b9:59:d6:39:04:96:42:a5:c9:e9:
         47:d7:b6:15:91:2a:62:03:25:c6:a0:31:49:be:93:8b:7d:33:
         1c:03:02:d7:b2:81:7e:3d:77:9c:34:4e:e3:18:2a:63:fb:78:
         77:75:9d:41:14:8e:0c:9b:d4:14:3e:cd:e3:5a:7e:9e:30:e3:
         3b:e1:4d:61:ed:bf:22:4d:1c:c3:4f:13:d4:37:70:7f:2e:68:
         68:e6:64:c8:bb:da:47:2b:9c:43:52:f0:79:5f:87:1d:b2:c2:
         ad:c1:20:be:27:ab:7a:81:c9:6b:d9:72:de:6d:df:02:83:33:
         46:e4:5c:f6:a6:e7:ea:2f:b0:b8:26:69:cd:a4:02:a3:c8:bc:
         22:12:94:cf:85:78:b0:5f:8b:b3:26:cd:87:c3:39:5e:a0:67:
         4c:55:f8:f9:15:4b:99:38:5b:89:aa:94:7c:cb:6a:39:36:8f:
         a8:98:ba:1d:3f:ab:06:cd:4d:ce:d6:f7:04:8a:7b:69:31:17:
         d0:f9:f3:6f:0c:e6:93:8d:b7:d2:19:d9:1d:4f:46:9c:3e:00:
         de:a7:8d:76:18:37:50:0e:da:ba:ab:3d:cf:06:ef:b0:d5:17:
         70:04:a5:8b:bd:6f:e4:56:77:ec:a5:69:e0:f4:3a:10:27:89:
         4d:e1:cb:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----