Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
File:                     42b2991f-22c7-42f7-8cf5-4f3138859732.mft (raw, json)
Hash identifier:          AiUAtePNdqmnMq20Vb207KPT8WMsg2mCxHcSe3CVYo8=
Subject key identifier:   6C:76:EC:E1:0E:2B:C5:CD:1F:42:70:55:D2:01:F6:F6:5E:E9:CB:00
Authority key identifier: 3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D
Certificate issuer:       /CN=42b2991f-22c7-42f7-8cf5-4f3138859732
Certificate serial:       010D0C9F4328584980E5BB55B6D6483F12B1ACA0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft
Manifest number:          010D0C9F4328584073A81DE97889420865AB0A3F
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: 42b2991f-22c7-42f7-8cf5-4f3138859732.crl (hash: y1r1iKE14pcQrQW8xIv/jGsQN/25DXe61Hd7iQdV0SY=)
                          2: 5d803805e21823c931987e9c9c37f04020aababf9b4dff9b64.cer (hash: W8hpfrMvT1VQ/QIuE5ijwrlvt8uj9iEwbtwKrbQqN6E=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:bb:55:b6:d6:48:3f:12:b1:ac:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42b2991f-22c7-42f7-8cf5-4f3138859732
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=91cd6e7e-4025-4f38-a5b4-240d90a13db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:7f:d1:0c:57:74:7f:39:06:ba:90:91:29:c4:
                    22:3a:9a:7f:c3:2e:0c:5d:50:ef:98:68:c2:cb:46:
                    fb:dd:0b:96:7d:e0:bb:54:0f:4d:cc:df:22:2a:d2:
                    1f:86:af:55:4f:33:f9:4a:44:89:dd:98:b3:5d:53:
                    a8:fb:c4:e0:f6:93:c9:47:9d:36:00:48:a8:9b:cf:
                    bd:ee:cf:f6:1b:81:0b:a5:e0:05:76:3e:26:12:2e:
                    9d:e8:19:54:b6:0f:a3:4f:2b:a9:be:69:8e:8f:93:
                    7f:4f:8d:df:0b:d7:a8:80:cc:9b:71:a6:d6:e9:f8:
                    a8:95:35:a6:be:50:35:65:c8:49:5e:8f:74:92:3a:
                    d3:d9:b3:1e:82:6e:6f:3f:0f:a8:c1:c0:d5:ef:e6:
                    dc:82:ba:a1:ce:99:3e:27:6c:b7:c8:6c:cf:96:71:
                    64:72:38:c0:f1:11:c3:63:ed:42:eb:36:9d:c7:e1:
                    d1:52:d3:55:de:76:cb:9f:7c:f3:85:23:0e:bc:bc:
                    2e:b6:61:76:8f:6d:08:d7:4a:ef:81:71:bb:c2:08:
                    be:f4:54:43:74:0e:81:26:6f:82:8a:b3:83:f9:34:
                    7a:b0:40:25:ed:92:83:2c:59:56:74:0e:03:19:13:
                    22:c3:78:35:a5:fd:31:e4:81:2a:eb:e9:5c:a0:c9:
                    2c:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:76:EC:E1:0E:2B:C5:CD:1F:42:70:55:D2:01:F6:F6:5E:E9:CB:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732/42b2991f-22c7-42f7-8cf5-4f3138859732.crl

            X509v3 Authority Key Identifier:
                keyid:3F:D6:7E:0F:02:D3:6F:E1:89:34:27:A7:09:EB:70:E4:4E:D3:3B:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42b2991f-22c7-42f7-8cf5-4f3138859732.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:1b:6f:c8:94:11:c6:9c:b5:67:43:58:9e:28:d0:ae:02:7f:
         4c:55:8f:b5:c8:c5:96:0a:c4:cb:07:e2:cc:91:d2:a7:39:67:
         3f:5e:4f:2c:ad:f1:2a:ba:80:46:e8:ba:de:bc:52:e9:1b:cf:
         12:56:a3:f9:b1:3d:da:7a:e7:13:f7:48:93:bb:73:7d:b1:ee:
         60:74:e4:8f:37:31:04:7a:05:ff:37:aa:86:90:8a:a8:b2:94:
         81:08:af:fb:d1:2d:f6:40:08:04:b7:72:18:ef:af:59:fc:e0:
         63:1b:54:4b:d5:f1:33:c4:ae:4c:82:98:b6:34:97:25:99:83:
         9f:48:37:13:01:bf:18:36:8b:62:26:06:a5:44:73:cd:6b:e2:
         74:0e:61:63:2f:01:79:71:3f:c9:1a:3a:fb:9e:63:06:bf:42:
         de:5e:44:53:d0:57:bf:b1:cb:45:b0:15:c6:f0:5c:e7:3f:ef:
         34:89:bf:87:2a:d2:72:7e:0b:07:00:b7:3b:75:0a:e1:22:78:
         72:df:ba:b1:3a:1d:fa:0a:ad:12:90:8e:46:e2:b4:ed:69:cb:
         83:0f:fa:1d:eb:f5:28:3f:2f:3b:7d:2b:eb:28:a8:ad:02:bf:
         fd:af:13:8a:57:f2:68:a1:28:68:1b:57:7a:f5:58:d1:6a:75:
         7e:a0:18:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----