Manifest

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
File:                     2bTwgky4C6j8EkC0eUtRUHHpdR0.mft (raw, json)
Hash identifier:          EGXOd8dAz1vAt/lJFueSMObiMGCe6NnZ73ZWN7pOMr4=
Subject key identifier:   A2:C4:AF:43:57:F7:79:57:59:A7:12:5E:86:57:40:09:0A:CF:13:48
Authority key identifier: 7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE
Certificate issuer:       /CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
Certificate serial:       0ED43B641410AF7D9CB02BD37507205D79D2300C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft
Manifest number:          036C
Signing time:             Tue 15 Apr 2025 00:15:58 +0000
Manifest this update:     Tue 15 Apr 2025 00:15:58 +0000
Manifest next update:     Sat 19 Apr 2025 00:15:58 +0000
Files and hashes:         1: 2bTwgky4C6j8EkC0eUtRUHHpdR0.crl (hash: pinVMkuYUSZkh/uqfgTB6z2d7S2QAJnVdL7eW13sywk=)
                          2: 35dd8080-5375-4755-bea9-982f40526ea4.roa (hash: Qcch/Ib1a7CuDguCVGykLsURcz4hE2pIW8cgz2FberQ=)
                          3: 66edf542-bd09-43ab-8640-a67a7cbe5a17.roa (hash: mSB3EHCk2gRmwGVnNHJLmuOkYsySLNuDbcXAfjsBNz4=)
                          4: 7e5e4204-8bcf-499a-999a-8f190e991cc4.roa (hash: 6PW0UDzetC62OeR/GXwr2Bhq0PM7zpdg83oYm6j09n8=)
                          5: 8bae045f-365b-43cf-99fc-12cbcbce5f67.roa (hash: RyhDowMr7pGxTy90TeUulvNcsjqpJS33s29blBoXLo0=)
                          6: 9318efc3-4d3a-413f-86c6-169a71d2eccb.roa (hash: EdAJEwGHfOQTuIBIbNPmAVGsWznFbpGgWEgDuuz+iEo=)
                          7: db0b227f-9958-4ebb-9f23-65cc24c5c799.roa (hash: uTUK+R0HiN2g+MARec2BzbAGYFsArY1oUj2WTc/JdKc=)
                          8: ef566134-dc37-415a-a1e3-05f23305a92b.roa (hash: d10EYnEIKeLmeW++sHu7Pf8qDH4euPSGuF8FQJ+hgR4=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:d4:3b:64:14:10:af:7d:9c:b0:2b:d3:75:07:20:5d:79:d2:30:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d
        Validity
            Not Before: Apr 15 00:15:58 2025 GMT
            Not After : Apr 19 00:15:58 2025 GMT
        Subject: serialNumber=863a95a702f70793b1fb430ddfb8b603518441ef838ffe69bb6fb9416a32eef5, CN=b0dbbb6a-5472-4b68-ae4d-401518603039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:47:d1:9e:b3:d8:ba:52:51:f3:58:6f:1b:
                    7f:77:ef:b7:98:01:83:8f:8a:14:a9:68:fb:83:7d:
                    81:2c:ba:0b:bb:f8:f1:32:2f:b3:bc:c4:da:16:ae:
                    53:64:33:5f:31:1e:a4:36:2a:fa:ac:6f:82:e4:5f:
                    39:78:f9:73:85:c2:8e:b2:31:67:a8:56:15:6c:87:
                    37:bf:c4:92:05:1a:32:f6:0b:e8:61:55:0a:49:e2:
                    28:6c:ca:3b:23:02:99:6b:24:a4:24:71:64:6b:cb:
                    6a:f6:ab:e5:bc:f9:83:0a:81:92:b0:82:31:c7:1c:
                    45:5c:7b:ba:3c:ef:19:0d:9f:56:45:1a:4b:b1:6a:
                    74:f7:95:c5:c0:13:2e:c4:a8:2d:5b:97:d4:2e:5b:
                    39:7b:55:88:26:c9:1e:e4:38:3c:22:6c:1a:00:a1:
                    69:cc:f1:7a:19:94:02:e2:77:c1:51:80:d9:61:d5:
                    ca:4e:0d:09:39:2e:92:0f:e9:1b:88:95:da:d3:b4:
                    52:ec:d3:29:c2:5b:30:48:e4:a8:4a:f1:bf:98:be:
                    67:35:47:e3:24:f5:4d:23:26:cd:f6:87:cf:79:a3:
                    b9:2b:04:5f:2b:91:2f:4d:c3:27:72:a0:57:e9:09:
                    22:4b:97:61:da:5c:52:19:3a:f9:ab:e9:41:4c:cd:
                    74:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C4:AF:43:57:F7:79:57:59:A7:12:5E:86:57:40:09:0A:CF:13:48
            X509v3 Authority Key Identifier:
                keyid:7D:84:47:C4:97:8A:0B:4C:73:9B:EB:F6:92:E2:4C:75:DD:3F:BC:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b4e4fec5-3510-4017-90ef-8391412ecd6c/0ee4583d84d9b4f0824cb80ba8fc1240b4794b515071e9751d.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dfd7f6d3-e6e9-4987-9ae7-d052c5353898/2bTwgky4C6j8EkC0eUtRUHHpdR0.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:c4:8d:63:97:6e:f6:5a:2b:c8:82:82:5c:ae:5a:69:f4:e4:
         d8:8f:27:3f:4a:a8:9c:13:8a:e1:16:d2:ec:41:c2:e0:be:7a:
         a5:b7:17:55:37:5d:2e:fd:36:e3:d0:ed:85:32:b9:5b:0d:de:
         b7:fc:74:4a:f0:a8:81:39:a1:14:61:71:2a:cc:30:05:d4:51:
         0d:e9:8b:0d:1a:9f:81:21:1a:da:44:ce:f6:fd:e3:bf:06:b4:
         fc:38:52:7d:1b:0e:03:a4:e4:ee:75:ff:84:b3:bf:43:d4:e3:
         d3:34:db:ef:86:8e:cd:d7:9c:de:0c:20:90:23:fa:05:de:61:
         62:6a:8d:c8:3d:e7:4f:0f:f9:fd:33:86:63:8f:b1:8d:55:3d:
         74:9f:e4:49:9c:93:58:4d:26:e7:5b:41:a3:b9:93:f1:c8:c3:
         32:87:40:a9:bb:19:b6:b1:18:69:e7:07:7d:33:9c:3f:a1:03:
         43:8b:17:2d:73:de:60:eb:6a:46:aa:e2:eb:fc:26:a3:a2:21:
         bb:c1:6e:f5:53:1f:59:5f:50:b6:e2:82:7a:f2:a2:a0:95:f7:
         7c:af:93:1f:39:4a:75:00:ec:b8:49:c0:5f:e9:34:29:d0:8d:
         ba:f8:3e:42:a6:79:c9:2c:ec:4a:11:79:ef:b7:09:9a:f3:11:
         c3:4a:a1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----