Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft
File:                     9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft (raw, json)
Hash identifier:          Uh8q6eGDkHp2Fz+4m2j7n/uWVXuMlyCSf3G6NbHHIgc=
Subject key identifier:   96:69:35:5F:73:B5:1D:17:8F:94:A6:F0:96:31:96:24:FE:E3:BA:18
Authority key identifier: 17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9
Certificate issuer:       /CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
Certificate serial:       010D0C9F4328584982DFF92199E273EC71DB96C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft
Manifest number:          010D0C9F4328584073A84E6B5EF1D29B56146FDB
Signing time:             Sun 13 Apr 2025 10:00:08 +0000
Manifest this update:     Sun 13 Apr 2025 10:00:08 +0000
Manifest next update:     Wed 16 Apr 2025 10:00:00 +0000
Files and hashes:         1: 1e5a4ada-db5b-31a4-8492-720d5e5c918c.roa (hash: 8LPI6f5CtU6/luzM4RGybaTWpBdZobpZasWx+jv5YhU=)
                          2: 9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl (hash: pgZpH9S5EQruuwieNoMcuTQYB6hbqEHxZSR0C00bfTI=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:82:df:f9:21:99:e2:73:ec:71:db:96:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9309498e-8bee-4db3-b4ef-5fd6f3576eb3
        Validity
            Not Before: Apr 13 10:00:08 2025 GMT
            Not After : Apr 16 10:00:00 2025 GMT
        Subject: CN=c5639302-02a2-4582-9312-3d38b5713ca8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:8b:83:bc:d5:9a:ab:d9:1f:53:50:a1:70:17:
                    b3:e9:ed:c3:f9:db:ae:50:ff:97:03:ee:87:30:d7:
                    31:d0:c2:5a:cf:64:14:dc:41:ce:39:95:bb:69:22:
                    da:fd:a3:88:76:72:59:7c:c0:dc:71:09:22:6f:41:
                    17:56:55:47:1c:ef:b6:e3:0c:33:65:aa:a6:b6:ab:
                    d0:4f:29:6f:f0:13:9c:32:c1:ed:0d:0b:4c:23:23:
                    3a:1a:1a:6b:e4:c1:66:ba:3d:df:93:93:5d:cf:6e:
                    c3:be:1e:fa:9d:d9:a9:05:22:cf:ff:a3:2c:e7:b6:
                    14:0d:ae:49:3d:72:e4:51:7e:88:48:cb:64:2f:32:
                    b4:3a:67:0c:4c:9f:02:26:ff:4a:52:9f:43:da:68:
                    3a:86:3b:31:d5:72:31:6c:fd:9f:56:f3:23:9e:bb:
                    6d:26:d7:46:39:91:40:ff:d5:9a:c2:03:0a:a4:68:
                    29:11:7d:3e:7e:db:f0:66:71:f0:14:56:ac:41:f3:
                    6c:fd:bc:97:c5:f9:b9:d9:0c:07:c3:d8:bd:ea:36:
                    53:34:94:8f:23:18:93:43:ed:b5:d1:25:b0:7f:97:
                    00:1a:a7:bf:c5:52:d8:d8:27:36:69:b1:1a:d8:34:
                    1c:3d:69:6c:69:44:63:9b:d1:e1:f1:d4:02:80:dc:
                    2a:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:35:5F:73:B5:1D:17:8F:94:A6:F0:96:31:96:24:FE:E3:BA:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.crl

            X509v3 Authority Key Identifier:
                keyid:17:A1:2C:2F:D3:E3:EA:3B:E7:9F:FD:38:65:EF:F9:35:A5:D8:61:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9309498e-8bee-4db3-b4ef-5fd6f3576eb3.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         33:9b:be:be:b8:58:35:8f:e7:98:70:d6:9a:10:f9:11:89:b7:
         33:c6:ca:06:fa:59:c9:e6:9b:da:c7:9e:66:f5:fe:e5:a0:5e:
         99:4e:d7:df:cb:33:90:5a:77:cd:d3:68:f3:5d:d3:a2:b2:c0:
         80:96:f8:04:c0:be:a5:9a:2b:3d:6a:64:e3:50:cb:c0:23:a5:
         8d:e3:bc:a4:ab:25:9d:02:a8:59:5e:af:70:3e:48:c4:5b:53:
         d2:ca:93:c2:b0:10:69:cb:9e:33:5c:f2:c9:2d:38:ec:ed:51:
         78:37:ce:67:7d:69:bf:29:64:b7:b7:7c:5f:36:87:6b:25:81:
         e7:48:9a:33:5c:4c:d2:25:ba:c4:41:00:72:e0:f1:fc:43:8e:
         60:9c:6b:d3:9b:b1:f7:79:be:44:a7:e0:53:2b:65:2f:f4:c2:
         37:3e:98:a5:08:eb:35:67:fe:66:e3:28:ce:86:a6:f5:5f:24:
         69:9f:b4:67:13:c0:33:df:e3:6d:4a:c9:8b:84:cf:f5:71:3d:
         ae:d5:52:5c:7b:78:0d:43:1e:8e:c9:0d:b3:93:5f:0b:a9:5a:
         0d:17:21:29:c8:da:35:f0:1b:a1:67:d4:cb:23:f3:24:45:a2:
         bc:44:50:8a:f9:a5:f5:27:98:99:dd:f5:f9:80:93:d2:17:6c:
         54:c9:7b:cc
-----BEGIN CERTIFICATE-----
MIIGXDCCBUSgAwIBAgIUAQ0Mn0MoWEmC3/khmeJz7HHblsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTMwOTQ5OGUtOGJlZS00ZGIzLWI0ZWYtNWZkNmYzNTc2
ZWIzMB4XDTI1MDQxMzEwMDAwOFoXDTI1MDQxNjEwMDAwMFowLzEtMCsGA1UEAxMk
YzU2MzkzMDItMDJhMi00NTgyLTkzMTItM2QzOGI1NzEzY2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4uDvNWaq9kfU1ChcBez6e3D+duuUP+XA+6H
MNcx0MJaz2QU3EHOOZW7aSLa/aOIdnJZfMDccQkib0EXVlVHHO+24wwzZaqmtqvQ
Tylv8BOcMsHtDQtMIyM6Ghpr5MFmuj3fk5Ndz27Dvh76ndmpBSLP/6Ms57YUDa5J
PXLkUX6ISMtkLzK0OmcMTJ8CJv9KUp9D2mg6hjsx1XIxbP2fVvMjnrttJtdGOZFA
/9WawgMKpGgpEX0+ftvwZnHwFFasQfNs/byXxfm52QwHw9i96jZTNJSPIxiTQ+21
0SWwf5cAGqe/xVLY2Cc2abEa2DQcPWlsaURjm9Hh8dQCgNwqdwIDAQABo4IDbjCC
A2owHQYDVR0OBBYEFJZpNV9ztR0Xj5Sm8JYxliT+47oYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5
NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2ZjM1NzZlYjMvOTMwOTQ5OGUtOGJlZS00
ZGIzLWI0ZWYtNWZkNmYzNTc2ZWIzLm1mdDCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTMwOTQ5OGUtOGJlZS00ZGIzLWI0
ZWYtNWZkNmYzNTc2ZWIzLzkzMDk0OThlLThiZWUtNGRiMy1iNGVmLTVmZDZmMzU3
NmViMy5jcmwwHwYDVR0jBBgwFoAUF6EsL9Pj6jvnn/04Ze/5NaXYYakwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MzA5NDk4ZS04YmVlLTRkYjMtYjRlZi01ZmQ2
ZjM1NzZlYjMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4C
MDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9y
cGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAzm76+uFg1j+eYcNaaEPkR
ibczxsoG+lnJ5pvax55m9f7loF6ZTtffyzOQWnfN02jzXdOissCAlvgEwL6lmis9
amTjUMvAI6WN47ykqyWdAqhZXq9wPkjEW1PSypPCsBBpy54zXPLJLTjs7VF4N85n
fWm/KWS3t3xfNodrJYHnSJozXEzSJbrEQQBy4PH8Q45gnGvTm7H3eb5Ep+BTK2Uv
9MI3PpilCOs1Z/5m4yjOhqb1XyRpn7RnE8Az3+NtSsmLhM/1cT2u1VJce3gNQx6O
yQ2zk18LqVoNFyEpyNo18BuhZ9TLI/MkRaK8RFCK+aX1J5iZ3fX5gJPSF2xUyXvM
-----END CERTIFICATE-----