Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
File:                     5d7wm5lPjPYLrYyQKcAGV3ULImc.mft (raw, json)
Hash identifier:          USkwMt3WbyLDuNd1ZRb6VUwYyRSEA9p1deRAXxdgvI0=
Subject key identifier:   65:C0:0D:D8:69:96:1C:F1:53:EB:0A:74:C3:5C:C2:1E:EA:5C:3E:58
Authority key identifier: 6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E
Certificate issuer:       /CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
Certificate serial:       79285F3DE6DBE73805DB1E8273CB9F7B4EBB74D2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft
Manifest number:          037A
Signing time:             Tue 15 Apr 2025 18:36:04 +0000
Manifest this update:     Tue 15 Apr 2025 18:36:04 +0000
Manifest next update:     Sat 19 Apr 2025 18:36:04 +0000
Files and hashes:         1: 2592ade6-505a-4e24-928b-9a1e71b309ae.roa (hash: 74plVZscH1xrlwGb0fPwz524ybYyBngZftFzTj2PlNw=)
                          2: 5d7wm5lPjPYLrYyQKcAGV3ULImc.crl (hash: oOP1LFiMEgqULDhlFdPnDUpXE/D8vDdP2eQ3+5EUjUg=)
                          3: a8ff9337-21d8-4d5e-b988-d1a983d73aea.roa (hash: 1RH3nvj4oaoG8qkIz97LqeezzVp4WRPKLR4ZkWVUdWw=)
                          4: c518c762-ddbf-4352-b9b9-1484318adaa8.roa (hash: B0+y+DQgkdy5Y9Yi145gCgPZK9CGoI/oWrpue1Q2afw=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:5f:3d:e6:db:e7:38:05:db:1e:82:73:cb:9f:7b:4e:bb:74:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267
        Validity
            Not Before: Apr 15 18:36:04 2025 GMT
            Not After : Apr 19 18:36:04 2025 GMT
        Subject: serialNumber=e9409510f5828a4441189e3bba4614ce119197647489e9799e701447b360eabb, CN=15f1683a-c0c2-4266-9a96-ecf9eba3239c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:af:a7:4f:03:86:7c:b8:c1:0f:78:21:81:e4:
                    8e:bc:a3:c5:b6:94:d6:6f:6c:0a:4c:73:96:81:1c:
                    cb:5d:29:0f:30:d6:21:aa:eb:86:7b:31:cc:8c:21:
                    b8:d3:67:67:7b:7f:2c:ca:08:32:69:95:bd:f6:da:
                    4c:25:da:bd:76:cb:e4:fa:2f:62:46:dc:be:27:cb:
                    23:3a:13:ba:bb:98:01:33:90:55:54:b4:9a:82:13:
                    1f:e1:9c:9f:1e:b1:ed:ef:b1:1b:9f:0a:8b:80:71:
                    a1:fa:a1:89:fc:50:75:52:a5:7c:72:c5:a5:80:0d:
                    68:f1:d8:3b:47:69:8f:e4:9e:c0:14:6c:03:8b:77:
                    82:10:cd:bd:17:15:c1:99:31:f9:f6:d3:cf:99:7c:
                    76:e1:4f:91:ab:ee:96:7c:0e:b3:63:be:10:65:51:
                    ce:0c:bd:79:b1:7a:79:40:b3:da:67:77:32:3c:64:
                    da:41:d6:fc:cf:93:d2:bb:d3:17:3a:f8:eb:f1:1d:
                    64:8f:1c:79:a3:b6:c8:eb:87:26:f2:2a:e1:c0:42:
                    28:2e:f6:9d:6c:60:75:cd:24:0a:28:54:9f:21:3d:
                    e8:5b:b8:05:24:93:e4:86:53:52:76:7b:16:38:c2:
                    32:11:c4:25:3d:f4:33:f4:ff:f0:b4:1e:0b:bb:e7:
                    76:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:C0:0D:D8:69:96:1C:F1:53:EB:0A:74:C3:5C:C2:1E:EA:5C:3E:58
            X509v3 Authority Key Identifier:
                keyid:6D:CA:65:D0:71:4D:7E:F2:56:90:BC:09:13:D3:54:DB:AC:89:2A:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7276b2fa-548d-4970-8314-8d73945c34d8/6f9b985b0fe5def09b994f8cf60bad8c9029c00657750b2267.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/b3f6b688-cff4-402f-97d5-02f6f1886b7e/5d7wm5lPjPYLrYyQKcAGV3ULImc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:91:ab:66:ed:62:7a:c4:33:cd:81:f8:7e:54:b0:20:5d:11:
         93:90:f7:8b:19:f3:ee:7e:9e:bb:1a:37:a0:91:72:9c:20:65:
         7f:45:f2:e8:3f:9e:2e:2c:ce:e1:40:25:8a:f3:e2:25:95:21:
         f0:e8:eb:8d:a7:e5:d3:ad:95:55:e3:ac:88:66:e6:b3:97:84:
         28:ac:4d:4f:0b:f3:df:c3:43:b2:2f:eb:42:89:1a:a8:27:f1:
         26:da:31:48:9a:46:72:2a:54:f7:e9:14:a1:0a:aa:f6:70:08:
         44:e9:3f:de:ad:76:2e:d6:1d:f6:0c:a4:fe:af:38:19:02:6b:
         a7:6e:47:20:a0:79:34:75:8a:18:7d:27:6e:cf:f8:80:8b:b5:
         20:e5:5a:17:c1:2f:a5:0c:66:b3:d3:4f:ec:e4:c9:bf:cf:96:
         64:82:1a:e4:6a:23:5c:48:63:1a:4f:0d:fa:16:0d:8c:5d:5f:
         42:a1:bf:0f:20:91:82:64:ac:95:00:62:8b:f9:5d:b9:a1:75:
         21:b8:08:87:32:bf:d5:8f:d9:b5:79:9f:2f:dd:82:8e:0d:c5:
         68:82:1c:b6:70:a7:58:62:33:98:86:9d:95:0d:04:f4:05:8d:
         f7:2b:60:2a:fc:85:70:30:f2:66:a9:e8:16:cb:92:16:e9:bc:
         04:98:87:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----