Manifest

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.mft
File:                     c2f44330-33cb-4ee6-abe3-ad99521d4d4b.mft (raw, json)
Hash identifier:          1npAh/wvxLiHCRClVZnR8Z1O40S9alqH2oDWzDo3kvc=
Subject key identifier:   61:6B:F9:CE:E5:06:10:33:28:65:11:06:47:FA:E5:E0:B1:99:D8:34
Authority key identifier: ED:E4:42:F4:9A:DA:A6:B6:A6:B0:1B:61:CD:09:70:96:A8:E2:23:AC
Certificate issuer:       /CN=c2f44330-33cb-4ee6-abe3-ad99521d4d4b
Certificate serial:       010D0C9F4328584980E5BB1DEB02A4E268167180
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.mft
Manifest number:          010D0C9F4328584073A81B6D926C38F589D7A7D2
Signing time:             Sat 12 Apr 2025 17:00:07 +0000
Manifest this update:     Sat 12 Apr 2025 17:00:07 +0000
Manifest next update:     Tue 15 Apr 2025 17:00:00 +0000
Files and hashes:         1: c2f44330-33cb-4ee6-abe3-ad99521d4d4b.crl (hash: HQvp7HGRZ5nl2OdcTQ6IKPrJ/vOqcpHRQIp5CtYg3Jc=)
                          2: f92c539b-0df0-358a-b03e-3e58f93e8c06.roa (hash: cgraLQomz8R8n8HpIii4Q3bPLebun52lYBUOCNEqdfY=)

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:e5:bb:1d:eb:02:a4:e2:68:16:71:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c2f44330-33cb-4ee6-abe3-ad99521d4d4b
        Validity
            Not Before: Apr 12 17:00:07 2025 GMT
            Not After : Apr 15 17:00:00 2025 GMT
        Subject: CN=38c03177-f634-4c07-84b1-d892053eb865
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:dc:9f:f4:ce:08:63:c5:71:b6:8e:fd:cd:
                    5a:61:ae:67:41:2b:8e:50:eb:8e:d8:e5:d2:d1:a9:
                    1d:f4:67:67:3f:d3:5f:76:b8:31:b5:e9:d1:ec:67:
                    11:a1:d1:36:bf:ea:ed:1f:a6:46:ae:bd:b0:b5:04:
                    60:36:a1:10:79:55:83:81:41:88:8e:8d:b3:da:33:
                    79:0c:80:22:84:1f:7d:30:b4:dc:77:1f:72:66:fb:
                    63:e2:87:a7:da:e9:72:7f:e3:37:b5:ba:cd:88:34:
                    7c:aa:9d:d0:60:56:28:58:7f:cb:c2:b4:8f:b7:ae:
                    d4:4b:3c:e2:76:9b:8c:6a:8a:69:64:ce:bb:78:03:
                    d1:d7:ac:a0:4a:d8:53:95:7a:cb:fc:7f:0e:66:20:
                    45:04:b8:89:5c:83:47:3d:05:57:0d:0f:fe:56:2c:
                    c3:93:5f:32:8f:71:36:56:3f:95:60:68:8a:b3:f7:
                    f4:8d:51:4a:c7:5d:54:8a:ba:7e:f9:23:f6:53:b5:
                    e1:d7:46:fd:87:57:7d:a6:36:dd:8c:12:fc:1c:af:
                    ef:31:4a:f4:87:2f:01:b8:16:38:df:43:4d:8a:02:
                    cf:f8:7b:1d:de:93:3a:b7:76:b9:b8:a7:61:8d:38:
                    06:a7:46:33:80:63:a0:14:0c:40:72:24:d3:9f:6f:
                    f0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:6B:F9:CE:E5:06:10:33:28:65:11:06:47:FA:E5:E0:B1:99:D8:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.crl

            X509v3 Authority Key Identifier:
                keyid:ED:E4:42:F4:9A:DA:A6:B6:A6:B0:1B:61:CD:09:70:96:A8:E2:23:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c2f44330-33cb-4ee6-abe3-ad99521d4d4b.cer

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:73:47:52:15:6e:7d:75:39:d9:97:ae:1f:5d:c1:58:12:ae:
         98:72:59:3e:a4:05:a4:c3:07:82:7c:71:87:95:50:0c:a2:0d:
         3b:22:21:91:d0:8f:e4:49:d3:11:ea:97:64:00:7d:ce:16:0d:
         8a:3f:f9:a2:05:36:45:8b:1a:e8:ea:00:87:07:83:ee:59:93:
         42:bc:e0:e7:5c:04:b6:33:e3:c7:87:76:2c:08:cc:7c:2b:d5:
         e3:cf:3c:af:9b:c1:27:84:9a:2c:8c:3e:9f:2d:92:3f:68:53:
         5f:70:d4:64:17:51:8e:a6:79:53:f0:4d:44:32:aa:21:19:33:
         81:53:7f:44:18:b1:69:3e:0e:59:b3:11:83:4b:c4:5e:64:b5:
         75:7f:29:01:a0:ec:f3:97:01:5b:24:50:79:4b:64:e0:0d:57:
         a5:eb:71:b5:cf:d7:07:18:6d:56:c6:b6:df:fa:38:bc:12:6d:
         df:b2:46:9b:8f:ce:dd:5a:dc:15:a0:80:38:c1:0e:1f:a5:79:
         89:e2:04:32:4f:d5:5f:a6:af:6a:1a:d3:a6:db:dd:26:e8:6f:
         6d:4c:a4:3c:23:e6:b0:53:bb:cd:6f:fa:93:2a:a4:aa:a9:2c:
         86:4c:3a:75:0c:f2:ab:82:74:d0:79:fe:55:d8:79:d5:1e:47:
         87:48:a5:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----